Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.mft
File: JmOMLLe4YM02lnnE0F1Q9wXgRik.mft (raw, json)
Hash identifier: Ck71WNakyZJrBRrFrgxLFu7uOJswBy6WTjtEBF5Wm9Y=
Subject key identifier: 85:51:37:B0:01:87:7E:21:55:4C:CA:57:D6:40:18:BB:21:BA:FB:28
Authority key identifier: 26:63:8C:2C:B7:B8:60:CD:36:96:79:C4:D0:5D:50:F7:05:E0:46:29
Certificate issuer: /CN=26638c2cb7b860cd369679c4d05d50f705e04629
Certificate serial: 01993191D4E14DF62A72D34DE5117BAF1FE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmOMLLe4YM02lnnE0F1Q9wXgRik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.mft
Manifest number: 0EE8
Signing time: Wed 10 Sep 2025 03:01:04 +0000
Manifest this update: Wed 10 Sep 2025 03:01:04 +0000
Manifest next update: Thu 11 Sep 2025 03:01:04 +0000
Files and hashes: 1: HRbR_khGq9xBOHLyUMt_H0_ZMOg.roa (hash: sAAGeZp9KGc0mAVbloa7q59m7jUPjTaroGNIZ50YXxw=)
2: JmOMLLe4YM02lnnE0F1Q9wXgRik.crl (hash: 1DayIBzL/ehuA+P26h3Ky2NEN37EbBmSqKrdTvNrI0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmOMLLe4YM02lnnE0F1Q9wXgRik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:91:d4:e1:4d:f6:2a:72:d3:4d:e5:11:7b:af:1f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26638c2cb7b860cd369679c4d05d50f705e04629
Validity
Not Before: Sep 10 03:01:04 2025 GMT
Not After : Sep 11 03:01:04 2025 GMT
Subject: CN=855137b001877e21554cca57d64018bb21bafb28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:81:26:33:2e:4e:5b:fd:96:f1:16:0e:2f:a5:
67:b1:3f:ff:35:80:45:ea:41:64:50:9c:67:52:b8:
fc:d0:37:bb:a9:ae:a0:ec:e1:1f:5c:bd:95:3c:9c:
7a:31:d8:90:a9:23:82:e1:ee:23:4a:2c:85:ef:28:
9f:f2:23:49:62:3d:90:72:b2:2f:62:0b:65:8a:9c:
ea:bf:f7:39:82:f8:4a:b9:c9:9a:30:0a:e0:5e:bd:
99:ee:7b:cf:37:94:1c:1f:48:d0:b7:aa:93:e6:9c:
be:54:bd:c9:47:e0:8c:90:c6:d6:a7:67:39:c0:52:
81:7e:3e:f3:7a:4f:c4:49:84:6e:c1:5b:ec:bb:74:
fb:4e:16:08:0e:c6:3d:bd:ae:67:5d:ac:45:77:ec:
75:da:8c:72:9e:f8:94:bd:f2:48:aa:9e:dc:88:6e:
72:b3:68:4a:44:54:fb:1a:65:e9:12:2e:b7:a4:cd:
24:dd:30:87:d6:aa:77:9f:34:2b:d5:64:77:58:e2:
57:bc:dd:a4:92:f6:44:b8:63:e2:65:16:bb:ad:8a:
9f:e4:f8:25:f3:6c:14:48:5f:c5:08:ec:d3:69:4d:
45:2c:a8:81:06:ae:fc:a3:f9:7f:e9:16:0c:25:73:
36:71:e7:96:2b:ee:2f:85:9f:65:1d:88:f8:59:83:
d9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:51:37:B0:01:87:7E:21:55:4C:CA:57:D6:40:18:BB:21:BA:FB:28
X509v3 Authority Key Identifier:
keyid:26:63:8C:2C:B7:B8:60:CD:36:96:79:C4:D0:5D:50:F7:05:E0:46:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmOMLLe4YM02lnnE0F1Q9wXgRik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d96f69-ef14-4227-8898-3e57cc52c84e/1/JmOMLLe4YM02lnnE0F1Q9wXgRik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:4f:ff:65:4d:d1:5c:ae:b5:82:c0:b9:18:2b:c3:78:65:6f:
99:6f:6e:57:f6:13:49:f2:ed:0c:bf:3f:37:9b:bd:c9:fd:0f:
7d:97:aa:e1:24:ff:eb:a7:10:85:b6:51:7f:9b:11:a6:ab:ab:
8b:39:28:fe:8a:fd:06:65:40:54:9f:bf:01:27:6e:a5:f5:dc:
7e:53:1c:13:60:9a:5d:e2:2f:2a:2d:b1:ac:01:aa:cf:a4:9e:
84:8b:e6:b2:fe:bc:ba:79:2c:67:69:b7:2a:98:03:6f:cf:b5:
c6:3f:69:26:44:f4:e7:d8:a0:c5:f3:43:a4:bb:b0:88:91:de:
90:87:13:56:66:57:29:a8:29:d3:58:97:43:84:32:49:6d:57:
78:8f:90:aa:9f:62:46:f3:60:f8:86:86:e0:81:f6:1b:93:cf:
10:28:42:30:eb:5a:82:9f:7c:21:90:e7:4d:93:58:a7:37:79:
43:5a:43:90:d3:d3:22:48:3f:71:8a:73:39:40:52:ba:67:dd:
4a:6b:27:c8:88:71:96:2e:ce:00:4e:f2:54:b2:17:b2:22:a6:
77:d5:b9:47:7d:fc:c4:71:7f:4b:e5:23:31:ee:cd:6e:55:de:
79:17:07:38:ff:85:00:a5:0b:4e:ba:a5:c6:1e:25:6c:71:65:
17:7a:7d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 12:01:36 2025 by rpki-client