Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
File: JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft (raw, json)
Hash identifier: pBXMdlQdcQId57hQCyOUyHeOiYg0HH41ylG59gppqPY=
Subject key identifier: 8C:7E:A7:5E:22:DB:D6:56:FD:E9:1B:B7:55:5C:F7:81:71:B6:40:C7
Authority key identifier: 26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F
Certificate issuer: /CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f
Certificate serial: 019A71B824B5FB82FF96E5DB473925356850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
Manifest number: 05E5
Signing time: Tue 11 Nov 2025 07:01:24 +0000
Manifest this update: Tue 11 Nov 2025 07:01:24 +0000
Manifest next update: Wed 12 Nov 2025 07:01:24 +0000
Files and hashes: 1: JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl (hash: x2jV0DVhkgO3zOGOJZGl/wEj4OZp6E6GbqH1Dlmos6I=)
2: hRPI0iSGl2IzeA7QH3Szt11HLAA.roa (hash: PPwH27Sg7uIDGa5QbdK7/mYmLXCSL9d4CnlOhCXOspw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:24:b5:fb:82:ff:96:e5:db:47:39:25:35:68:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f
Validity
Not Before: Nov 11 07:01:24 2025 GMT
Not After : Nov 12 07:01:24 2025 GMT
Subject: CN=8c7ea75e22dbd656fde91bb7555cf78171b640c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f6:c4:4d:95:d4:87:d4:ae:90:da:fc:15:46:
62:ca:cf:93:19:3a:77:e4:9c:02:69:dc:e1:d9:3b:
33:f6:0c:b2:b6:33:69:90:0c:88:49:fb:95:84:71:
c3:69:eb:87:75:c0:61:06:03:13:d6:d9:10:cf:09:
9e:e1:54:72:bf:4d:08:e6:14:46:73:76:fa:df:eb:
c8:f1:ca:b5:78:b7:1f:ce:b0:7b:05:03:3e:b2:61:
79:df:4c:d1:83:55:2a:30:22:9f:a1:47:52:03:7f:
ae:d7:45:10:43:66:22:2d:1c:37:11:3c:ae:18:cf:
60:13:9f:14:6b:48:2b:58:c4:81:4c:f6:f0:f2:5e:
7e:a9:bd:3a:38:8d:e7:f9:df:45:85:73:8a:1e:c1:
f2:80:1f:3e:72:d6:5f:8f:66:f3:a1:eb:a3:55:68:
cf:76:9e:25:fb:da:b5:4c:2f:d9:15:38:61:07:ab:
4a:94:80:36:ef:a1:08:97:f1:40:9c:b4:4c:0e:0a:
fc:79:da:68:9c:0b:b3:61:eb:65:d8:11:b1:9c:9b:
b7:ec:7b:21:0b:a0:ff:70:4a:60:e0:4f:c5:95:91:
7f:13:d7:33:cb:f3:b8:39:1d:83:70:5d:e2:b1:77:
e4:a6:d4:96:54:68:5a:04:a0:fe:45:ff:f2:0a:a8:
c5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7E:A7:5E:22:DB:D6:56:FD:E9:1B:B7:55:5C:F7:81:71:B6:40:C7
X509v3 Authority Key Identifier:
keyid:26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b5:9f:44:a6:6d:a6:ea:db:f1:a2:ac:b0:3b:7f:ae:45:86:
36:61:13:37:70:2a:c3:ab:ca:ad:39:30:5b:69:1d:50:46:02:
ff:f0:88:3d:31:3a:15:ed:f3:68:83:14:3a:61:8c:51:cc:f2:
64:1f:22:d1:04:76:db:3a:6b:56:ad:d7:7b:e2:40:e1:ab:f9:
29:94:5c:46:c5:df:30:2c:36:a7:aa:e3:49:b3:25:3a:e5:55:
d6:11:df:9f:7d:41:fb:3b:cd:67:2c:22:ee:04:e1:75:2a:8c:
3e:e2:7c:b8:e9:73:d1:35:d5:28:5c:72:8b:5a:d8:b8:ba:70:
e2:37:58:d7:38:fc:aa:2c:3d:d4:de:3f:7b:38:28:06:82:bc:
56:7e:33:ba:55:b3:a6:ea:db:15:4f:92:c7:36:61:de:6e:b2:
e8:79:5b:0b:8c:66:94:1e:5e:0e:38:52:d6:59:ad:25:e9:be:
aa:95:33:ad:23:37:67:be:1c:d4:79:25:2d:93:2f:7d:86:a5:
8d:f5:f3:17:cd:3c:25:2e:60:3f:04:33:b7:98:be:20:c1:92:
5d:81:5c:11:4f:5a:fc:a5:ea:ae:93:7a:58:fd:af:a2:49:d6:
bd:e8:55:a0:e9:b5:e0:fb:a5:43:10:3b:3a:b6:21:8c:bb:c3:
ea:8c:6e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:10 2025 by rpki-client