Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft
File: JmKrPF2xRXuy9RleI4_kvcjyFes.mft (raw, json)
Hash identifier: MzxKr7suXAzl0YKE7BflQFGDDN3vLYtXYkVbdBN7oHw=
Subject key identifier: F9:25:AF:5D:2B:56:BF:37:B4:86:04:28:7E:DE:88:08:EB:D7:73:12
Authority key identifier: 26:62:AB:3C:5D:B1:45:7B:B2:F5:19:5E:23:8F:E4:BD:C8:F2:15:EB
Certificate issuer: /CN=2662ab3c5db1457bb2f5195e238fe4bdc8f215eb
Certificate serial: 019A72267395A62B49B20EC833DA6A695CDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmKrPF2xRXuy9RleI4_kvcjyFes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft
Manifest number: 0ECA
Signing time: Tue 11 Nov 2025 09:01:53 +0000
Manifest this update: Tue 11 Nov 2025 09:01:53 +0000
Manifest next update: Wed 12 Nov 2025 09:01:53 +0000
Files and hashes: 1: JmKrPF2xRXuy9RleI4_kvcjyFes.crl (hash: yYfw6dz0UJ+26Lm3Ww5ScoqWrcPqZzss4g4HBnHDaDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmKrPF2xRXuy9RleI4_kvcjyFes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:73:95:a6:2b:49:b2:0e:c8:33:da:6a:69:5c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2662ab3c5db1457bb2f5195e238fe4bdc8f215eb
Validity
Not Before: Nov 11 09:01:53 2025 GMT
Not After : Nov 12 09:01:53 2025 GMT
Subject: CN=f925af5d2b56bf37b48604287ede8808ebd77312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:62:df:c8:62:12:c4:df:2f:e2:df:fa:f9:ad:
1e:05:21:8f:4a:28:89:b3:e8:11:24:ea:01:2e:32:
ed:b3:87:84:b4:83:dd:5c:a6:c1:12:27:51:5a:58:
45:c0:ee:54:9e:b4:4e:48:87:24:e8:9b:e6:ef:eb:
25:21:27:e5:8e:8c:8b:2f:b9:fd:51:6d:94:48:02:
ab:4b:77:b8:ad:5c:6c:8b:17:2e:5f:f4:14:c2:1d:
37:8b:6f:9d:4b:31:a3:f3:27:2e:93:eb:85:15:e8:
46:20:de:f9:54:1d:96:48:06:81:2a:da:8b:b1:0b:
d4:94:3b:7a:8a:b8:98:f7:6d:96:2b:df:e2:d1:b5:
53:7b:b3:7b:2d:da:52:bc:21:78:8a:f6:66:65:8d:
94:53:49:42:e1:20:e0:2a:b0:6c:d7:03:91:31:60:
66:7f:fa:f6:da:01:55:6c:60:96:f3:71:0c:40:50:
1a:44:c6:4a:88:38:3c:27:ba:a6:f7:98:21:f8:d4:
52:a5:90:b8:0c:d4:94:45:ec:fb:b1:ee:2f:c6:3f:
bb:7c:f7:d5:9b:51:b2:ef:84:99:f3:28:18:5f:59:
e2:c9:1a:cc:92:52:7f:e0:eb:74:53:2c:4c:74:95:
2f:6d:2c:07:91:93:7e:58:61:1a:ea:08:a3:bb:17:
3e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:25:AF:5D:2B:56:BF:37:B4:86:04:28:7E:DE:88:08:EB:D7:73:12
X509v3 Authority Key Identifier:
keyid:26:62:AB:3C:5D:B1:45:7B:B2:F5:19:5E:23:8F:E4:BD:C8:F2:15:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmKrPF2xRXuy9RleI4_kvcjyFes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f0a918-9335-4bcc-becd-4ea73083aec6/1/JmKrPF2xRXuy9RleI4_kvcjyFes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e8:b0:cb:72:ab:cf:08:b0:cd:10:c7:43:cd:d0:cb:b0:6b:
ab:f8:42:77:c6:3d:c1:ff:cf:f2:7c:92:85:a1:c0:65:8e:b5:
0d:99:55:80:26:5a:48:90:12:0c:ea:03:ff:ec:49:0e:1a:36:
c9:f1:ac:d0:c7:c2:3b:69:ad:6f:db:a9:9e:50:32:ac:4a:9a:
54:67:80:5c:75:80:2b:b3:5e:e2:3c:9c:96:04:f1:b5:8b:5f:
e9:a1:ad:a2:8f:5a:d6:7f:0f:3f:a4:b0:cd:fc:69:19:77:fd:
d6:3a:27:1d:f6:e5:30:02:c3:f0:39:00:da:69:b1:a9:d5:87:
6d:f2:2e:22:9e:e1:6c:58:87:cf:04:0a:bd:0c:df:d9:82:cb:
29:ac:87:c6:a9:c2:3d:f1:55:6c:0a:89:71:9b:8f:a7:58:dd:
e6:00:cb:9e:cb:c2:d3:f3:fc:ad:c6:6e:d2:10:d7:ee:54:37:
fb:ee:30:72:06:6a:90:d4:71:0a:f0:1e:31:28:40:ae:1c:ea:
1d:ae:a7:60:8d:23:d9:90:f4:ff:1c:0c:2b:f0:ae:38:87:52:
ef:f4:d2:99:34:c7:0a:42:b8:47:e1:61:c0:b5:8f:85:d1:ac:
4d:3d:18:25:ca:67:4e:ac:5e:53:d4:1e:23:f6:e8:2b:d2:02:
6f:2e:72:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJnOVpitJsg7IM9pqaVzfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NjJhYjNjNWRiMTQ1N2JiMmY1MTk1ZTIzOGZlNGJkYzhm
MjE1ZWIwHhcNMjUxMTExMDkwMTUzWhcNMjUxMTEyMDkwMTUzWjAzMTEwLwYDVQQD
EyhmOTI1YWY1ZDJiNTZiZjM3YjQ4NjA0Mjg3ZWRlODgwOGViZDc3MzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2LfyGISxN8v4t/6+a0eBSGPSiiJ
s+gRJOoBLjLts4eEtIPdXKbBEidRWlhFwO5UnrROSIck6Jvm7+slISfljoyLL7n9
UW2USAKrS3e4rVxsixcuX/QUwh03i2+dSzGj8ycuk+uFFehGIN75VB2WSAaBKtqL
sQvUlDt6iriY922WK9/i0bVTe7N7LdpSvCF4ivZmZY2UU0lC4SDgKrBs1wORMWBm
f/r22gFVbGCW83EMQFAaRMZKiDg8J7qm95gh+NRSpZC4DNSURez7se4vxj+7fPfV
m1Gy74SZ8ygYX1niyRrMklJ/4Ot0UyxMdJUvbSwHkZN+WGEa6gijuxc+bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPklr10rVr83tIYEKH7eiAjr13MSMB8GA1UdIwQY
MBaAFCZiqzxdsUV7svUZXiOP5L3I8hXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm1LclBGMnhSWHV5OVJsZUk0X2t2Y2p5RmVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mMGE5MTgtOTMzNS00YmNjLWJlY2Qt
NGVhNzMwODNhZWM2LzEvSm1LclBGMnhSWHV5OVJsZUk0X2t2Y2p5RmVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9mMGE5MTgtOTMzNS00YmNjLWJlY2QtNGVhNzMwODNhZWM2
LzEvSm1LclBGMnhSWHV5OVJsZUk0X2t2Y2p5RmVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKOiwy3Kr
zwiwzRDHQ83Qy7Brq/hCd8Y9wf/P8nyShaHAZY61DZlVgCZaSJASDOoD/+xJDho2
yfGs0MfCO2mtb9upnlAyrEqaVGeAXHWAK7Ne4jyclgTxtYtf6aGtoo9a1n8PP6Sw
zfxpGXf91jonHfblMALD8DkA2mmxqdWHbfIuIp7hbFiHzwQKvQzf2YLLKayHxqnC
PfFVbAqJcZuPp1jd5gDLnsvC0/P8rcZu0hDX7lQ3++4wcgZqkNRxCvAeMShArhzq
Ha6nYI0j2ZD0/xwMK/CuOIdS7/TSmTTHCkK4R+FhwLWPhdGsTT0YJcpnTqxeU9Qe
I/boK9ICby5ymQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:40 2025 by rpki-client