Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
File: JqmLYSX1JD4-2DUBWWfN25cUjfE.mft (raw, json)
Hash identifier: cns/feeomltj0m2zAXzkxUvczfp8rRMfCU2muQAt9Uw=
Subject key identifier: 95:DA:8A:CB:6F:8F:42:9C:13:1C:24:FD:71:8A:87:C8:65:E4:4D:17
Authority key identifier: 26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1
Certificate issuer: /CN=26a98b6125f5243e3ed835015967cddb97148df1
Certificate serial: 019A7293811E197ABCBE4E98550C30185617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
Manifest number: 12DA
Signing time: Tue 11 Nov 2025 11:01:00 +0000
Manifest this update: Tue 11 Nov 2025 11:01:00 +0000
Manifest next update: Wed 12 Nov 2025 11:01:00 +0000
Files and hashes: 1: 1HlDDcU_awP0Jg600b5QOV5zFyw.roa (hash: DII6lgfGgmt/XXzdShUFtsjKk90R+1ZgqPhGOseU9bY=)
2: JqmLYSX1JD4-2DUBWWfN25cUjfE.crl (hash: r/NzA6nAyNPokkBQVzkDSmiuxtflUr2TY80l6YHRzS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:81:1e:19:7a:bc:be:4e:98:55:0c:30:18:56:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a98b6125f5243e3ed835015967cddb97148df1
Validity
Not Before: Nov 11 11:01:00 2025 GMT
Not After : Nov 12 11:01:00 2025 GMT
Subject: CN=95da8acb6f8f429c131c24fd718a87c865e44d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:96:d6:48:30:d4:19:3d:c5:12:e9:42:2f:26:
3a:dc:eb:1a:22:6e:04:b4:a4:ee:61:49:ca:9e:28:
57:75:db:53:1a:d4:dc:83:3c:66:2f:d1:46:64:c1:
54:1e:28:b7:76:b5:4e:78:e3:76:8a:5f:28:40:d5:
41:d4:88:e8:6c:20:42:08:f8:e8:b9:3f:47:b9:76:
a2:fe:48:6f:62:5a:b3:3d:ac:3b:f6:6e:65:45:4a:
69:dd:fc:22:5c:c9:80:92:16:58:fb:10:2a:4c:0b:
d6:a3:fc:e3:4f:0b:9e:86:bc:cd:d1:86:2d:81:ef:
d8:b8:98:96:12:68:c3:50:5c:48:d0:13:60:52:08:
42:b0:d3:8a:f4:10:b2:ce:e7:58:a2:63:7e:91:ca:
8d:4f:f8:88:19:0a:3e:7c:72:7c:ce:42:19:23:54:
4b:11:01:1b:5a:14:e4:5a:8f:aa:9f:60:bb:57:61:
74:53:69:d7:80:9f:65:f5:08:ed:ef:7a:ac:a5:57:
e3:bc:6d:b2:d5:a0:0a:2f:a1:ce:52:82:48:46:69:
d6:90:15:69:3e:19:18:07:c8:4f:b6:bc:88:2d:c8:
9e:8a:af:90:f8:2e:be:8e:4d:3f:2b:5f:69:1d:6a:
d5:18:ce:3d:6f:63:2d:63:b6:6c:52:71:de:34:51:
0a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DA:8A:CB:6F:8F:42:9C:13:1C:24:FD:71:8A:87:C8:65:E4:4D:17
X509v3 Authority Key Identifier:
keyid:26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ab:68:3c:1a:58:09:2a:60:44:6d:1a:bd:7b:da:a3:d5:96:
36:48:6e:ac:54:7e:44:0d:dd:6f:57:67:60:88:c8:47:0e:05:
5c:0c:09:bd:4a:1b:51:7f:e3:67:88:0f:8b:bf:0b:16:90:2e:
d9:2c:95:ec:97:fc:ce:64:7d:a0:7b:50:1e:aa:57:ba:c1:7d:
48:49:07:b3:96:dd:eb:7d:0e:4a:86:b2:72:10:ec:0a:d4:ee:
33:77:2a:34:55:68:3b:20:c3:fd:ab:df:08:96:f5:ea:ed:69:
9e:e3:6f:8f:db:83:c2:42:59:28:ad:1c:0d:e8:5b:1b:df:5b:
a2:c4:19:1a:bd:47:97:b2:83:0c:28:88:d4:2b:fe:e2:1f:51:
bc:5d:16:ae:86:b1:50:54:11:54:65:e4:52:32:ea:43:7d:82:
e1:66:17:bf:c3:5a:d3:a9:6a:0c:35:3f:ca:78:f7:d9:bf:5a:
a1:03:ed:9c:15:bb:e2:3a:c6:ca:f1:ef:a5:76:4f:18:61:63:
a0:1c:b1:93:54:66:fc:b7:3f:f9:14:d8:0f:11:75:e0:9d:7a:
9d:ca:3f:38:39:c3:a1:fd:58:29:31:f0:86:ee:db:1c:62:96:
dd:3e:43:2f:33:ef:21:d3:5d:d9:14:86:08:7b:e6:19:11:db:
b2:1e:12:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 19:45:30 2025 by rpki-client