Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
File: jmvT1UXusL5A8oOJnSGM9IaOlJA.mft (raw, json)
Hash identifier: pfVkv5GB5m1uhcPaz5ROHt7YmPhiZd8+binS3ZXlg9o=
Subject key identifier: 84:6E:08:BD:0B:37:7D:EC:82:09:C4:ED:B9:EB:5D:7C:54:AB:F7:DD
Authority key identifier: 8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
Certificate issuer: /CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Certificate serial: 019A221B647A66DE9EBFB9EED8D7B0409FCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
Manifest number: 143D
Signing time: Sun 26 Oct 2025 20:00:11 +0000
Manifest this update: Sun 26 Oct 2025 20:00:11 +0000
Manifest next update: Mon 27 Oct 2025 20:00:11 +0000
Files and hashes: 1: jmvT1UXusL5A8oOJnSGM9IaOlJA.crl (hash: x4BTjqSHkd5AoAMQXRC/XoIOSeM1IWb1iBb7JILJtLE=)
2: vrnSzJ3-FK5XpOn1vPG5WY7ZAxw.roa (hash: mmQc628tPl3bs34ALUnwk7MYS2YDfpoBWJfmEYCNwMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:1b:64:7a:66:de:9e:bf:b9:ee:d8:d7:b0:40:9f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Validity
Not Before: Oct 26 20:00:11 2025 GMT
Not After : Oct 27 20:00:11 2025 GMT
Subject: CN=846e08bd0b377dec8209c4edb9eb5d7c54abf7dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e6:b8:4c:85:f9:98:ef:23:78:ac:89:0b:76:
47:05:b1:1a:3f:ee:86:f5:c5:0f:44:15:af:3f:fd:
89:95:a0:5f:31:fb:68:a2:88:e7:07:46:f7:a1:59:
0b:0f:d5:42:c1:8c:c2:2b:29:05:bd:e3:eb:3e:d7:
c1:a4:6e:60:c6:3a:21:10:d1:41:71:60:7e:5a:ac:
01:27:e7:a5:ea:c8:4f:95:22:a2:e4:de:35:0e:1c:
bc:5b:cb:49:04:85:a2:32:0d:13:3b:44:75:9f:00:
61:56:b9:b0:5c:bd:f3:d7:19:68:98:cd:db:de:5f:
39:45:4f:5e:a6:76:d0:c1:41:aa:ca:f2:cb:3d:a7:
31:3e:13:f9:95:f0:05:00:ef:c8:ba:f3:97:73:47:
bb:fa:30:5d:b5:48:7f:99:ee:68:d5:3b:52:ec:e7:
6b:28:0d:64:40:00:b3:9f:40:59:83:8e:82:ed:be:
bf:98:e0:eb:60:ec:61:e9:19:2b:a4:21:6d:6f:6f:
4d:e9:2d:d7:7d:3b:49:5a:41:56:57:f4:47:b4:0d:
79:43:94:0c:60:f3:0f:07:71:1a:31:c7:b3:1a:02:
60:f2:00:fa:38:be:79:f1:d5:fa:cf:3c:b3:03:25:
69:3a:3a:4e:3b:61:0a:7a:ca:7c:7f:c0:fe:64:6c:
6e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:6E:08:BD:0B:37:7D:EC:82:09:C4:ED:B9:EB:5D:7C:54:AB:F7:DD
X509v3 Authority Key Identifier:
keyid:8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:7e:7d:48:0e:af:e0:01:e7:10:4b:7e:04:27:6c:e9:df:1a:
10:aa:23:eb:3c:b1:ee:8b:37:96:b6:cb:05:dd:eb:da:60:04:
66:3e:07:5b:a4:ad:1e:5d:70:07:27:09:73:a1:8c:fc:e7:c4:
a4:9d:18:0f:b2:5f:f3:d7:fe:24:7d:10:24:9b:2e:d8:91:2a:
dd:09:f3:32:5f:a8:d1:24:89:4d:d9:f0:7b:a6:9a:f4:d4:0f:
9e:cd:83:05:90:f2:b1:6e:49:0f:01:85:1f:46:2e:64:cb:d9:
c6:15:57:88:d9:ce:1f:ef:e2:b9:31:10:48:0b:b8:5c:da:88:
ed:28:93:b8:fb:a6:ca:9f:1a:73:64:06:01:7c:e5:ef:ce:7d:
06:b7:9b:45:78:ec:a5:de:a8:4f:40:ba:a1:e1:e6:48:3a:10:
24:39:fa:4e:73:da:ae:8e:16:ae:20:4b:07:24:89:b4:d0:6b:
a7:c9:29:c9:08:37:c4:44:40:97:6b:d5:a3:62:ed:54:b0:6d:
dc:93:54:ff:9c:c3:c0:36:4a:a4:1c:5a:92:3b:d4:96:d5:88:
71:64:87:f9:5d:96:48:44:cc:35:b3:31:fd:3a:95:0d:dc:a9:
aa:32:9b:b2:b7:00:de:5e:51:cb:9f:4d:d6:a6:63:bd:94:cf:
45:0e:f0:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoiG2R6Zt6ev7nu2NewQJ/LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNmJkM2Q1NDVlZWIwYmU0MGYyODM4OTlkMjE4Y2Y0ODY4
ZTk0OTAwHhcNMjUxMDI2MjAwMDExWhcNMjUxMDI3MjAwMDExWjAzMTEwLwYDVQQD
Eyg4NDZlMDhiZDBiMzc3ZGVjODIwOWM0ZWRiOWViNWQ3YzU0YWJmN2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyua4TIX5mO8jeKyJC3ZHBbEaP+6G
9cUPRBWvP/2JlaBfMftooojnB0b3oVkLD9VCwYzCKykFvePrPtfBpG5gxjohENFB
cWB+WqwBJ+el6shPlSKi5N41Dhy8W8tJBIWiMg0TO0R1nwBhVrmwXL3z1xlomM3b
3l85RU9epnbQwUGqyvLLPacxPhP5lfAFAO/IuvOXc0e7+jBdtUh/me5o1TtS7Odr
KA1kQACzn0BZg46C7b6/mODrYOxh6RkrpCFtb29N6S3XfTtJWkFWV/RHtA15Q5QM
YPMPB3EaMcezGgJg8gD6OL558dX6zzyzAyVpOjpOO2EKesp8f8D+ZGxusQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRuCL0LN33sggnE7bnrXXxUq/fdMB8GA1UdIwQY
MBaAFI5r09VF7rC+QPKDiZ0hjPSGjpSQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam12VDFVWHVzTDVBOG9PSm5TR005SWFPbEpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8xZDcwNDYtZGNmNS00NTJlLTg4NDkt
YjEwYTIyZDBhNDc2LzEvam12VDFVWHVzTDVBOG9PSm5TR005SWFPbEpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8xZDcwNDYtZGNmNS00NTJlLTg4NDktYjEwYTIyZDBhNDc2
LzEvam12VDFVWHVzTDVBOG9PSm5TR005SWFPbEpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOX59SA6v
4AHnEEt+BCds6d8aEKoj6zyx7os3lrbLBd3r2mAEZj4HW6StHl1wBycJc6GM/OfE
pJ0YD7Jf89f+JH0QJJsu2JEq3QnzMl+o0SSJTdnwe6aa9NQPns2DBZDysW5JDwGF
H0YuZMvZxhVXiNnOH+/iuTEQSAu4XNqI7SiTuPumyp8ac2QGAXzl7859BrebRXjs
pd6oT0C6oeHmSDoQJDn6TnParo4WriBLBySJtNBrp8kpyQg3xERAl2vVo2LtVLBt
3JNU/5zDwDZKpBxakjvUltWIcWSH+V2WSETMNbMx/TqVDdypqjKbsrcA3l5Ry59N
1qZjvZTPRQ7wHg==
-----END CERTIFICATE-----
Generated at Mon Oct 27 04:15:58 2025 by rpki-client