
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
File: Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft (raw, json)
Hash identifier: l+RaKqZ+VhiNowBemKHgu4Hpd7gtGOWIZr+cIWzYvZA=
Subject key identifier: 25:66:40:93:5E:FA:2D:14:60:63:3C:ED:5C:D0:EC:DD:46:51:B8:53
Authority key identifier: 26:6E:0C:40:E4:E9:37:0D:B9:9A:D2:7A:97:29:8D:7D:05:59:8F:73
Certificate issuer: /CN=266e0c40e4e9370db99ad27a97298d7d05598f73
Certificate serial: 019A0DB8FE967F987214F33A813D49F12D60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
Manifest number: 16ED
Signing time: Wed 22 Oct 2025 21:00:18 +0000
Manifest this update: Wed 22 Oct 2025 21:00:18 +0000
Manifest next update: Thu 23 Oct 2025 21:00:18 +0000
Files and hashes: 1: 8uqjL1Q7jgFdAvMEecW_AW4apnU.roa (hash: IZPA4o1k55p7lULIvDMGq6iadu+UZEquYpH4pdM728U=)
2: Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl (hash: xls1nr+u64rxMZVJdU8eV7/q8tQs5mxN1h+M3qhUxBk=)
3: LrkB9dXr22HFK0At5t4rrNYD7PQ.roa (hash: pK+9flLjEvjRYAQ3vaW216H5wdCjdNXzoh5ryOe38KA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0d:b8:fe:96:7f:98:72:14:f3:3a:81:3d:49:f1:2d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=266e0c40e4e9370db99ad27a97298d7d05598f73
Validity
Not Before: Oct 22 21:00:18 2025 GMT
Not After : Oct 23 21:00:18 2025 GMT
Subject: CN=256640935efa2d1460633ced5cd0ecdd4651b853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:17:22:43:94:bf:cd:30:d8:f4:bb:59:10:96:
02:5c:46:e3:74:d7:08:8a:b5:bd:99:15:05:62:7d:
b6:cf:e2:00:b6:f5:de:aa:52:aa:2b:20:ad:64:48:
1c:b6:6b:46:d1:da:72:05:b4:43:19:17:a0:d4:4f:
66:84:98:f3:8b:1d:84:27:59:55:d5:18:1d:80:97:
a3:42:e7:98:51:b3:53:ea:a2:0b:9f:96:a3:c5:12:
85:71:08:99:e5:21:1b:15:eb:19:03:65:e6:f6:16:
65:89:3d:3a:a1:ab:a3:11:1a:5d:bc:20:83:0e:55:
8d:12:bf:86:42:2a:48:0b:99:ed:42:d8:c9:73:27:
d7:33:3c:3a:c9:98:3c:ac:4c:b4:6f:f2:21:30:05:
e5:13:42:3c:6e:20:ac:02:a3:53:88:19:43:83:18:
45:c8:37:2d:1c:f1:5f:c6:97:fe:41:0c:98:71:fd:
0c:21:93:48:02:4b:d1:e3:c7:e9:17:ae:a2:44:ce:
ef:ec:d5:4b:98:b4:29:ae:f9:5f:0a:f2:bd:1b:8a:
51:0b:2b:58:71:69:5a:e8:2b:78:5a:f3:47:76:d2:
d3:92:f1:94:d2:0e:51:fa:b8:71:be:6d:5a:c3:cd:
7b:63:50:b0:28:f4:ce:be:25:00:a0:ec:0f:89:3a:
a4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:66:40:93:5E:FA:2D:14:60:63:3C:ED:5C:D0:EC:DD:46:51:B8:53
X509v3 Authority Key Identifier:
keyid:26:6E:0C:40:E4:E9:37:0D:B9:9A:D2:7A:97:29:8D:7D:05:59:8F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jm4MQOTpNw25mtJ6lymNfQVZj3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/Jm4MQOTpNw25mtJ6lymNfQVZj3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:36:38:c2:2e:0c:16:74:b1:4f:60:eb:bc:ac:5a:73:55:f0:
25:24:45:ad:b4:7a:68:b3:b0:91:7b:01:b2:6f:ec:1d:e9:c9:
0a:98:bc:b7:95:c6:b1:39:b2:1f:78:b5:72:12:a8:2f:21:1c:
74:20:53:66:91:79:f7:02:32:be:62:8a:05:43:3a:d7:6f:fc:
b6:f1:3c:c0:8e:47:b7:8b:bf:df:a2:c9:31:98:02:bf:2c:6e:
6e:92:89:f0:f5:b8:c0:d2:6c:f0:c2:bc:57:79:b1:46:26:c6:
db:23:f6:b8:08:16:ea:10:0e:7c:67:fa:c8:44:3e:cc:73:29:
12:af:bd:22:4d:10:f6:61:d7:6f:f8:ba:de:64:85:dd:8e:88:
a5:ae:37:82:77:56:8e:9a:21:02:5a:90:f8:02:be:b8:83:f3:
62:85:4a:36:7a:80:c4:4d:2e:50:94:65:78:f4:53:b0:1a:62:
84:b9:03:be:64:c6:0d:27:0e:4d:1b:55:63:1e:2e:68:bf:87:
e6:48:20:af:b3:96:5b:6c:63:c1:77:56:d9:63:c1:98:c4:28:
ef:59:b8:ea:a8:1a:87:5b:cd:3d:5d:9a:e0:42:e1:43:2b:09:
d4:12:0e:fc:29:a1:2d:a8:86:30:1a:44:b3:54:4a:5b:a1:3e:
74:c4:00:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 23:17:37 2025 by rpki-client