Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
File: Jo9QG7-eE83S64mdlxIfZpqikTU.mft (raw, json)
Hash identifier: /F1GvYHvs/oaZcf+7HKwDwE0rRO27O7CA4GkKz0KpHE=
Subject key identifier: 64:55:A8:89:75:5E:00:16:73:71:0E:25:7C:E0:8E:DD:1D:9B:DD:E1
Authority key identifier: 26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35
Certificate issuer: /CN=268f501bbf9e13cdd2eb899d97121f669aa29135
Certificate serial: 019A71EE84D64C5162EA1DD1C72E3EA7C242
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
Manifest number: 1646
Signing time: Tue 11 Nov 2025 08:00:48 +0000
Manifest this update: Tue 11 Nov 2025 08:00:48 +0000
Manifest next update: Wed 12 Nov 2025 08:00:48 +0000
Files and hashes: 1: 4XFlits89wxyHX1vn5VHIsNuyKg.roa (hash: BT2LxZu3wA5VCThqQPlS1bE8oOkqeH9p+4dqdYk4cGk=)
2: Jo9QG7-eE83S64mdlxIfZpqikTU.crl (hash: oWtUAousuRSdFIIuYmEx5t5uKglo/7UJ7DrhV6RPpeg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:84:d6:4c:51:62:ea:1d:d1:c7:2e:3e:a7:c2:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268f501bbf9e13cdd2eb899d97121f669aa29135
Validity
Not Before: Nov 11 08:00:48 2025 GMT
Not After : Nov 12 08:00:48 2025 GMT
Subject: CN=6455a889755e001673710e257ce08edd1d9bdde1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fc:1c:48:43:60:71:2a:5a:1b:40:bb:11:56:
18:18:6f:a6:d2:bd:a4:03:f4:93:b0:34:bb:26:36:
20:1b:ea:1e:4d:fe:78:70:68:62:b2:b0:04:8c:14:
c5:18:7a:98:26:fa:8a:73:3f:34:28:4e:ee:a3:cd:
08:c8:47:a2:3a:7f:75:9a:bc:1c:86:d1:66:54:55:
cc:e1:1b:72:d7:d9:fe:01:e4:17:c3:95:d2:77:a5:
9a:a1:75:6b:8d:49:c5:ef:1f:3e:81:4b:79:63:a0:
14:ca:bd:b4:06:f7:2c:72:86:56:df:c9:0c:f3:af:
64:74:74:ee:44:65:61:1a:30:c9:09:b6:07:50:ed:
d7:b7:c3:6d:be:7f:8a:c2:c6:84:71:7c:41:6e:a9:
38:e5:1a:ed:b9:27:c9:3c:44:cd:31:9b:df:b0:cb:
54:8c:39:d8:be:8b:40:33:de:a6:fa:0c:3f:4a:84:
8e:db:c0:67:04:34:2b:ea:d2:5d:c4:ac:ab:3b:84:
47:ce:ed:50:23:06:6f:4c:07:9b:23:ac:76:9b:87:
44:ca:c8:68:a8:72:b1:6b:40:e6:ba:a0:a0:28:ab:
96:b8:fd:3e:75:e3:5a:b1:73:20:20:be:c0:7a:ef:
a2:5b:e3:ab:d6:1e:82:04:f8:83:13:82:93:f5:b8:
65:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:55:A8:89:75:5E:00:16:73:71:0E:25:7C:E0:8E:DD:1D:9B:DD:E1
X509v3 Authority Key Identifier:
keyid:26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:6a:ee:2d:fc:5e:61:71:d3:c0:72:2a:47:e8:60:da:23:36:
38:d4:a1:38:f4:99:b8:10:16:de:86:5d:e1:c5:1a:fe:3f:ce:
0f:16:c3:50:55:5b:73:5d:17:87:b3:77:1b:55:09:71:e2:bf:
85:3a:22:b9:39:06:ea:25:aa:31:b3:9a:9b:d3:53:f1:c5:cf:
65:74:4e:14:74:23:98:c4:f9:6e:c7:87:50:a1:0c:37:4b:b7:
78:df:cf:08:84:d6:70:56:17:6e:fb:58:40:70:b4:71:e5:04:
4f:f0:96:52:2d:7d:15:2e:f0:02:60:81:34:b0:6b:77:df:80:
48:bd:65:81:90:c2:0c:ea:58:45:48:2a:f4:16:40:ab:72:65:
41:17:4d:7a:5b:1f:5b:63:02:bd:85:45:65:7b:db:a6:ef:9b:
4b:52:c0:f9:36:27:10:66:69:8e:72:39:83:8b:d5:e1:f7:78:
6e:94:e6:66:b0:4c:ae:b5:d9:ca:41:c0:16:58:bd:97:a8:2a:
d6:f7:20:60:d3:e8:83:4d:2e:91:21:9e:c8:c6:d7:d5:71:65:
66:ce:b6:65:ac:ef:0b:a0:f4:77:10:a5:21:40:29:4c:fb:4c:
2f:55:13:12:9e:55:81:ea:d9:23:bd:da:da:b7:57:07:18:96:
08:a5:b7:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7oTWTFFi6h3Rxy4+p8JCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2OGY1MDFiYmY5ZTEzY2RkMmViODk5ZDk3MTIxZjY2OWFh
MjkxMzUwHhcNMjUxMTExMDgwMDQ4WhcNMjUxMTEyMDgwMDQ4WjAzMTEwLwYDVQQD
Eyg2NDU1YTg4OTc1NWUwMDE2NzM3MTBlMjU3Y2UwOGVkZDFkOWJkZGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/wcSENgcSpaG0C7EVYYGG+m0r2k
A/STsDS7JjYgG+oeTf54cGhisrAEjBTFGHqYJvqKcz80KE7uo80IyEeiOn91mrwc
htFmVFXM4Rty19n+AeQXw5XSd6WaoXVrjUnF7x8+gUt5Y6AUyr20BvcscoZW38kM
869kdHTuRGVhGjDJCbYHUO3Xt8Ntvn+KwsaEcXxBbqk45RrtuSfJPETNMZvfsMtU
jDnYvotAM96m+gw/SoSO28BnBDQr6tJdxKyrO4RHzu1QIwZvTAebI6x2m4dEysho
qHKxa0DmuqCgKKuWuP0+deNasXMgIL7Aeu+iW+Or1h6CBPiDE4KT9bhlCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGRVqIl1XgAWc3EOJXzgjt0dm93hMB8GA1UdIwQY
MBaAFCaPUBu/nhPN0uuJnZcSH2aaopE1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm85UUc3LWVFODNTNjRtZGx4SWZacHFpa1RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82ZDdmMGQtN2U0ZS00N2Q2LWI5ZGIt
Y2EwYzc3MmI3MjlmLzEvSm85UUc3LWVFODNTNjRtZGx4SWZacHFpa1RVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82ZDdmMGQtN2U0ZS00N2Q2LWI5ZGItY2EwYzc3MmI3Mjlm
LzEvSm85UUc3LWVFODNTNjRtZGx4SWZacHFpa1RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOGruLfxe
YXHTwHIqR+hg2iM2ONShOPSZuBAW3oZd4cUa/j/ODxbDUFVbc10Xh7N3G1UJceK/
hToiuTkG6iWqMbOam9NT8cXPZXROFHQjmMT5bseHUKEMN0u3eN/PCITWcFYXbvtY
QHC0ceUET/CWUi19FS7wAmCBNLBrd9+ASL1lgZDCDOpYRUgq9BZAq3JlQRdNelsf
W2MCvYVFZXvbpu+bS1LA+TYnEGZpjnI5g4vV4fd4bpTmZrBMrrXZykHAFli9l6gq
1vcgYNPog00ukSGeyMbX1XFlZs62ZazvC6D0dxClIUApTPtML1UTEp5VgerZI73a
2rdXBxiWCKW3wA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:50 2025 by rpki-client