Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
File: jmOEMlhq5gL_Datn0JsZUVJOggU.mft (raw, json)
Hash identifier: c3t/aSgfpu7Avpt3xkg9fMaWjtibb/FJgaTEAOf7BCs=
Subject key identifier: DB:76:C4:66:E4:37:A7:4C:00:95:32:4F:F9:AF:A2:76:78:DA:85:71
Authority key identifier: 8E:63:84:32:58:6A:E6:02:FF:0D:AB:67:D0:9B:19:51:52:4E:82:05
Certificate issuer: /CN=8e638432586ae602ff0dab67d09b1951524e8205
Certificate serial: 019A23D2BADC1202BD447C97B72E77BFAF1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
Manifest number: 0119
Signing time: Mon 27 Oct 2025 04:00:04 +0000
Manifest this update: Mon 27 Oct 2025 04:00:04 +0000
Manifest next update: Tue 28 Oct 2025 04:00:04 +0000
Files and hashes: 1: jmOEMlhq5gL_Datn0JsZUVJOggU.crl (hash: WRfd7NsRTM+0o6FDiTGFPy6Ad9x2eX0bZv5rc7u5RgU=)
2: lRoCCR7d7sV8zan-pzAzhXIb0yk.roa (hash: zsjWkEr7wbMEPevuos7iGWcpCUsff/MP3ODrwkUVgTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d2:ba:dc:12:02:bd:44:7c:97:b7:2e:77:bf:af:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e638432586ae602ff0dab67d09b1951524e8205
Validity
Not Before: Oct 27 04:00:04 2025 GMT
Not After : Oct 28 04:00:04 2025 GMT
Subject: CN=db76c466e437a74c0095324ff9afa27678da8571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:31:f4:31:c9:0f:20:ab:ee:d6:ed:59:d7:ec:
cd:52:0d:ac:1b:21:b3:8e:96:95:55:4d:af:50:61:
43:fb:d1:26:4d:6d:d2:48:12:e7:d9:2b:c7:44:bb:
18:e2:6c:ba:76:4d:02:0e:45:67:d2:9d:fb:be:21:
bc:b9:ee:bb:cb:53:e9:71:8a:1e:f8:13:fa:3a:29:
de:cb:98:f0:dc:c6:34:17:c3:b4:a1:a7:5d:cf:88:
4c:f7:4b:3f:98:d5:15:80:52:83:af:5e:95:ad:c1:
b6:bf:94:f2:1a:4c:73:a4:bc:cc:96:a5:7e:96:e9:
a7:2d:ab:5d:e5:33:b2:a3:10:22:ec:7e:4e:6b:c9:
89:89:b6:5d:81:c3:9c:77:f1:e4:e8:75:9e:ca:33:
ba:bc:d8:ee:89:06:5b:18:69:c3:14:89:a3:38:76:
bd:90:d8:3a:84:e2:3b:c1:b2:0a:c2:84:b1:8a:3e:
bf:83:1d:95:6b:c6:0b:18:32:38:2e:a8:67:09:30:
04:5d:51:12:2f:64:4f:8f:68:5b:7c:24:5b:47:6b:
7a:6f:2c:8d:20:42:b2:95:c2:67:c0:04:37:7c:b3:
63:43:e1:06:49:6f:4e:b6:7f:57:4c:d3:d3:a2:54:
da:3c:e8:57:61:97:54:08:56:b5:f3:38:66:c2:41:
11:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:76:C4:66:E4:37:A7:4C:00:95:32:4F:F9:AF:A2:76:78:DA:85:71
X509v3 Authority Key Identifier:
keyid:8E:63:84:32:58:6A:E6:02:FF:0D:AB:67:D0:9B:19:51:52:4E:82:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a4:0e:7d:da:bc:ac:6b:6e:b6:40:08:c0:cd:f0:4e:d3:ff:
54:5b:fc:1f:30:2f:e9:90:08:f4:17:f3:3d:4c:0d:d1:f7:ba:
4b:27:73:ba:f4:ef:3e:70:03:13:71:7b:36:ab:41:e0:7f:24:
25:d1:ff:15:96:8e:4d:7f:44:b8:e6:97:f2:72:14:42:4d:a4:
24:31:6b:49:b9:40:66:d5:03:b0:0a:be:0a:2c:ef:e1:0c:7a:
83:85:66:14:e8:21:27:d4:f5:42:1b:4d:da:bf:71:da:76:07:
b5:b1:da:24:3d:da:0a:06:4e:a5:57:e4:12:d8:45:40:a4:7c:
6a:dd:d6:77:ba:95:85:f4:10:d8:0f:e7:23:57:0c:a0:e5:a4:
11:e4:5e:40:91:3e:0e:ce:d6:af:e4:c3:95:87:f1:d0:c8:47:
8b:f5:e8:84:92:1b:a3:59:fe:ed:08:01:09:47:6e:5b:47:91:
c1:da:e1:11:5f:5e:c0:ca:c6:e9:49:88:0c:75:a2:05:32:9f:
a7:28:20:ab:ff:9b:ea:77:a7:7f:dc:1f:34:c0:7d:4c:de:cf:
4f:21:77:c3:a6:c3:71:c0:7b:ca:a4:63:99:d1:c1:17:53:50:
f5:47:43:6f:22:fb:0b:bf:f0:fd:fa:c1:5c:76:0f:ce:ec:c3:
41:a2:0f:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoj0rrcEgK9RHyXty53v68aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNjM4NDMyNTg2YWU2MDJmZjBkYWI2N2QwOWIxOTUxNTI0
ZTgyMDUwHhcNMjUxMDI3MDQwMDA0WhcNMjUxMDI4MDQwMDA0WjAzMTEwLwYDVQQD
EyhkYjc2YzQ2NmU0MzdhNzRjMDA5NTMyNGZmOWFmYTI3Njc4ZGE4NTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7TH0MckPIKvu1u1Z1+zNUg2sGyGz
jpaVVU2vUGFD+9EmTW3SSBLn2SvHRLsY4my6dk0CDkVn0p37viG8ue67y1PpcYoe
+BP6Oiney5jw3MY0F8O0oaddz4hM90s/mNUVgFKDr16VrcG2v5TyGkxzpLzMlqV+
lumnLatd5TOyoxAi7H5Oa8mJibZdgcOcd/Hk6HWeyjO6vNjuiQZbGGnDFImjOHa9
kNg6hOI7wbIKwoSxij6/gx2Va8YLGDI4LqhnCTAEXVESL2RPj2hbfCRbR2t6byyN
IEKylcJnwAQ3fLNjQ+EGSW9Otn9XTNPTolTaPOhXYZdUCFa18zhmwkER4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNt2xGbkN6dMAJUyT/mvonZ42oVxMB8GA1UdIwQY
MBaAFI5jhDJYauYC/w2rZ9CbGVFSToIFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam1PRU1saHE1Z0xfRGF0bjBKc1pVVkpPZ2dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wM2M5OWQtOTNjNS00NTA4LWI1NGEt
ZWQzOGM0N2ZiYWM2LzEvam1PRU1saHE1Z0xfRGF0bjBKc1pVVkpPZ2dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8wM2M5OWQtOTNjNS00NTA4LWI1NGEtZWQzOGM0N2ZiYWM2
LzEvam1PRU1saHE1Z0xfRGF0bjBKc1pVVkpPZ2dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGqQOfdq8
rGtutkAIwM3wTtP/VFv8HzAv6ZAI9BfzPUwN0fe6SydzuvTvPnADE3F7NqtB4H8k
JdH/FZaOTX9EuOaX8nIUQk2kJDFrSblAZtUDsAq+Cizv4Qx6g4VmFOghJ9T1QhtN
2r9x2nYHtbHaJD3aCgZOpVfkEthFQKR8at3Wd7qVhfQQ2A/nI1cMoOWkEeReQJE+
Ds7Wr+TDlYfx0MhHi/XohJIbo1n+7QgBCUduW0eRwdrhEV9ewMrG6UmIDHWiBTKf
pyggq/+b6nenf9wfNMB9TN7PTyF3w6bDccB7yqRjmdHBF1NQ9UdDbyL7C7/w/frB
XHYPzuzDQaIPqg==
-----END CERTIFICATE-----
Generated at Mon Oct 27 07:15:50 2025 by rpki-client