Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft
File: jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft (raw, json)
Hash identifier: u+xO2PJAb4NaHOXLIvO6l0xP8qvJTcxwIEf6lZ5ZPX8=
Subject key identifier: 90:73:91:06:26:D9:D5:E6:31:FE:02:B1:57:CC:53:EC:13:5D:80:55
Authority key identifier: 8E:61:5E:51:BF:61:AA:74:BF:39:72:55:19:97:59:CF:EC:7C:C9:BB
Certificate issuer: /CN=8e615e51bf61aa74bf397255199759cfec7cc9bb
Certificate serial: 019A2477CAEC280B5C6A73147C428F6BED6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft
Manifest number: 0539
Signing time: Mon 27 Oct 2025 07:00:21 +0000
Manifest this update: Mon 27 Oct 2025 07:00:21 +0000
Manifest next update: Tue 28 Oct 2025 07:00:21 +0000
Files and hashes: 1: VCruuJKpBEqYRmO1DijMiFDvfUg.roa (hash: 7eO2Zsxc+ifKLBaQAWYNaRvbWk6+lGNPQlm3ncwwgpg=)
2: jmFeUb9hqnS_OXJVGZdZz-x8ybs.crl (hash: cLDCVGTnItUXZMcUBbIDNZmtYIUTMW+u7SzoH3C1TZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:77:ca:ec:28:0b:5c:6a:73:14:7c:42:8f:6b:ed:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e615e51bf61aa74bf397255199759cfec7cc9bb
Validity
Not Before: Oct 27 07:00:21 2025 GMT
Not After : Oct 28 07:00:21 2025 GMT
Subject: CN=9073910626d9d5e631fe02b157cc53ec135d8055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:55:ec:a0:0c:90:54:f5:7d:9c:11:b8:ea:72:
c8:76:8b:5b:c0:b8:90:57:13:d4:c2:a7:be:69:40:
00:0f:76:68:d0:4e:46:6d:56:49:51:f6:de:d3:64:
7a:ca:71:52:79:0e:23:cf:69:1b:ee:40:12:45:b3:
16:f0:61:4f:49:84:ef:7d:06:f5:ef:7a:08:32:b6:
95:dd:f2:7a:16:5d:c0:e0:77:ce:15:86:a6:4b:d4:
6d:ef:21:16:0b:bc:af:48:fd:94:21:63:a2:06:18:
5e:13:02:e7:70:47:3d:22:4d:13:7b:7b:4c:5f:61:
9e:77:1c:64:92:e9:9a:8a:c0:4a:4f:05:8f:07:14:
1a:66:c9:2d:de:fb:be:e5:7f:be:71:be:4f:2d:d3:
f3:8e:71:4c:6c:6a:24:2c:1d:0d:8e:1e:30:b3:a8:
36:f2:41:f0:5e:4b:dd:58:05:9e:78:cc:b7:bd:63:
b1:62:e6:ff:64:fb:44:86:b3:ef:e0:39:09:3f:90:
e4:5c:d8:83:4f:e8:dc:ef:06:63:a9:da:a2:9b:46:
6a:97:f0:a0:1a:60:fb:72:fb:78:21:5c:ad:0b:66:
a0:95:54:36:07:01:85:f7:47:95:52:5c:fe:2c:a5:
4b:00:bb:b6:14:f1:80:e9:44:55:64:f0:50:32:25:
88:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:73:91:06:26:D9:D5:E6:31:FE:02:B1:57:CC:53:EC:13:5D:80:55
X509v3 Authority Key Identifier:
keyid:8E:61:5E:51:BF:61:AA:74:BF:39:72:55:19:97:59:CF:EC:7C:C9:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:d5:d5:25:6c:95:7d:e6:9c:d8:b4:42:b5:66:23:33:2c:21:
bf:c7:af:6c:27:ae:81:0a:a9:b1:de:f1:4a:2d:8c:86:9a:5c:
8b:4e:41:73:ed:0d:5f:e8:05:94:16:7c:bc:ff:36:71:d6:bb:
29:c3:e1:9b:31:bc:0a:83:bd:ac:25:b9:2a:fa:c2:0b:1e:db:
d0:43:49:74:c4:b7:6c:6f:01:85:c2:f2:22:ea:ff:38:8c:e7:
3d:3d:15:f5:17:93:fd:13:a5:18:c3:0c:62:b0:51:c7:48:0c:
db:39:ec:8a:58:bd:04:74:8e:e9:e3:26:19:df:00:af:f2:6a:
ef:14:b0:a9:46:37:80:c3:03:78:ab:69:23:b3:27:47:3c:b1:
f4:db:a4:2e:95:a1:bc:e5:81:7d:37:fe:02:f6:0d:9b:12:b5:
93:74:5c:98:57:48:7a:e7:a3:fb:9a:10:8a:c9:ea:f4:fd:27:
1b:40:fe:86:27:7f:91:65:93:28:1d:5a:aa:cf:66:8c:58:c7:
ed:d8:12:33:fe:49:4f:9d:68:02:81:19:c7:ae:61:aa:34:bf:
b3:50:a7:34:ba:60:1a:c5:d7:68:8e:63:c0:d5:c9:b1:ff:96:
c8:f0:f1:2a:ae:8f:8d:19:3e:c6:29:49:9e:48:32:35:4d:cd:
cb:80:0b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 13:45:21 2025 by rpki-client