Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.mft
File: Jl6F-CYoiLVKhJvc9M7FAxaRGgg.mft (raw, json)
Hash identifier: EEIRLaydcwwHni+awRtFZb5i46Jv7/wIAGGlp0LgkaM=
Subject key identifier: 95:66:52:43:22:25:3C:CA:72:16:74:D5:18:4A:30:3F:CC:C5:4F:C0
Authority key identifier: 26:5E:85:F8:26:28:88:B5:4A:84:9B:DC:F4:CE:C5:03:16:91:1A:08
Certificate issuer: /CN=265e85f8262888b54a849bdcf4cec50316911a08
Certificate serial: 019A71B7C20EB9CC495221B3B71E4F0BF440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.mft
Manifest number: 05B1
Signing time: Tue 11 Nov 2025 07:00:59 +0000
Manifest this update: Tue 11 Nov 2025 07:00:59 +0000
Manifest next update: Wed 12 Nov 2025 07:00:59 +0000
Files and hashes: 1: JLn2-fTGyC2xpSevRCFHgEEXDMM.roa (hash: FRV3MQqTud+Qm1Qqb2d3CxKErVFv6q4kbbzR6kYGMOc=)
2: Jl6F-CYoiLVKhJvc9M7FAxaRGgg.crl (hash: feeanN3JlcTCCKqQxVx5SDRRtJ5/mpiRUTeKNkqLKg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:c2:0e:b9:cc:49:52:21:b3:b7:1e:4f:0b:f4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=265e85f8262888b54a849bdcf4cec50316911a08
Validity
Not Before: Nov 11 07:00:59 2025 GMT
Not After : Nov 12 07:00:59 2025 GMT
Subject: CN=9566524322253cca721674d5184a303fccc54fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d7:ab:d2:6d:99:49:c7:88:fc:3c:de:26:68:
99:8b:90:ee:f6:49:87:01:e9:82:d0:ef:7b:7d:e9:
10:d2:6d:8c:a0:2c:8e:b7:11:2f:6b:08:7c:d1:0e:
58:99:b4:c4:03:03:53:51:b9:d5:fb:3b:d1:45:e0:
e5:c8:59:0d:c2:dd:ee:fc:30:51:2a:af:f8:90:bf:
b3:1f:93:03:6d:a5:9b:3c:23:ff:a2:ca:2d:a6:d1:
13:c0:3c:ea:82:f0:b2:b6:57:84:ce:7f:12:29:27:
91:52:11:a9:ca:da:02:15:ba:7e:ff:51:ff:c1:99:
77:cb:c2:c9:be:ec:4c:bb:3b:85:a4:6a:b3:9d:ef:
3f:f3:42:0a:05:fb:ed:58:33:13:e7:08:fa:e3:4f:
87:27:7f:0d:6c:b2:b6:1d:77:e8:ae:62:3b:54:ed:
45:90:ae:17:bf:ac:ec:21:c2:d5:67:2d:33:a5:54:
2d:08:e2:12:81:aa:6d:0d:8e:d7:6b:8a:99:8d:de:
0b:97:c0:4c:4a:c2:a0:ee:70:fd:7c:1e:ba:33:d3:
f3:67:dc:8b:d0:af:bb:ee:07:2e:dd:14:d9:89:ce:
08:72:a4:b5:be:d2:c2:a5:ae:78:d9:1f:e8:e6:f6:
83:23:f7:e5:25:6d:11:f1:08:e6:f5:1a:85:2d:9a:
0a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:66:52:43:22:25:3C:CA:72:16:74:D5:18:4A:30:3F:CC:C5:4F:C0
X509v3 Authority Key Identifier:
keyid:26:5E:85:F8:26:28:88:B5:4A:84:9B:DC:F4:CE:C5:03:16:91:1A:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:09:4a:60:71:9c:4f:6d:34:9c:ef:7f:be:cc:43:68:9a:f6:
ca:ad:47:64:8c:53:18:0f:67:b0:04:3a:7f:83:d4:b0:71:36:
25:f1:3e:84:b2:28:dc:fe:cd:2a:2a:0f:99:ba:26:1e:1b:f7:
dd:7f:d3:b0:8e:72:76:c1:89:ee:91:5c:65:cd:b0:dd:05:8f:
60:af:b4:9f:10:90:f8:82:9c:1e:31:bb:cb:5f:34:31:3e:6c:
4c:f0:01:a0:0c:b0:26:0c:4b:36:b4:f7:22:5c:24:7a:33:aa:
13:0b:75:59:9b:4c:4f:2b:51:88:6f:92:d4:69:8a:18:1f:a1:
d5:c6:4f:11:89:9b:f3:3d:7d:bb:1a:e3:80:ad:db:d9:05:a1:
84:9c:73:36:1d:77:43:a0:f1:73:3e:f3:e4:ab:3a:32:ee:8e:
47:fd:e5:6d:29:24:39:30:ac:03:34:88:c7:8a:25:8f:ac:59:
c0:26:66:d3:3e:ad:1e:58:32:61:dc:72:e4:bb:47:a9:08:fb:
9b:8e:e9:c8:d0:38:80:fc:07:3b:d9:7e:74:93:b9:07:31:f7:
7f:16:67:f2:14:25:f2:c6:06:f5:71:eb:31:3b:4c:2c:c7:6a:
98:2f:2c:7e:96:ce:67:88:64:ba:a7:5c:a5:98:2b:ff:e8:f2:
ba:8d:6b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:38 2025 by rpki-client