Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
File: JMxrnDf6oNo7QSAHwLELLFvyz04.mft (raw, json)
Hash identifier: tHMe7cx3IwOrL8v036KQSUWxsnguampy1ddphQL8r+0=
Subject key identifier: 2B:1C:74:8F:AE:93:70:80:70:9C:09:1A:8B:2D:D5:6A:99:61:64:71
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial: 019A2EFBD8070DEC5A4D6CF2DB3A00479A8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
Manifest number: 15D0
Signing time: Wed 29 Oct 2025 08:00:48 +0000
Manifest this update: Wed 29 Oct 2025 08:00:48 +0000
Manifest next update: Thu 30 Oct 2025 08:00:48 +0000
Files and hashes: 1: 1-B2R-GqYD9hP7s0C3NBoCj-VNkE.roa (hash: ZOT8fcQn6mXuR7Nt7wxqiMRNnXCqSmMF7Ydjm3uUWkE=)
2: DlH0jnwMimmMsx3r3wdXB1L3uS8.roa (hash: dTJziSClbSkXGUrxk9IsoOjUfN1QvzrBS3O8it2Lahs=)
3: DwPSTi5dIPTLM8ktf-sdtoXF7qI.roa (hash: P8iiPec0Zpi09SNtPrSeFAi8fwt9MnKZ4qvy9bGC1D0=)
4: JMxrnDf6oNo7QSAHwLELLFvyz04.crl (hash: gXza+cMVYF5HlSw4GzXURla7ldnncCmIWcftEUIiYKo=)
5: Sm7KljT28nCCkzLjXfGLskb7xnI.roa (hash: PKXDulVUvF0IFsIfDdOX5/JgTZVweSiGQLFrJDINIfQ=)
6: arnRM2lSkUGUCk_xO-cIc8RCuRY.roa (hash: boEE4wT0kwQUB6JKZ1jq/E9huR7syRrDn9qtNkdgQ1o=)
7: fhDfnd1sxahgjYhOPaMH-zbPHNE.roa (hash: wgRkLUPLN9uGcU27XvQbCXpbgOex5MpWJQYXuSKlkNQ=)
8: lSVWT0vnWde53ZJnRkRtUAOgYzI.roa (hash: 4vpddIjkhrNsny6PNDuu90eXheVk6yuthDXnIN9HyQ8=)
9: vtn2byVE40E1nEcxeXOJMFebIWw.roa (hash: L8ZFpgK4r93r2+kxWOZe2fsD0svISGaqZvph05OQf9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:fb:d8:07:0d:ec:5a:4d:6c:f2:db:3a:00:47:9a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Validity
Not Before: Oct 29 08:00:48 2025 GMT
Not After : Oct 30 08:00:48 2025 GMT
Subject: CN=2b1c748fae937080709c091a8b2dd56a99616471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d5:7b:84:2a:81:4f:6d:8b:8e:5b:98:eb:90:
a9:20:b2:a2:46:83:50:d6:e4:a9:fa:ec:d5:69:59:
9b:6b:7c:93:e6:c8:73:1e:54:3c:68:1a:f9:ae:24:
8c:c6:88:6e:f5:69:da:a3:d9:18:61:d8:12:c9:2b:
5b:04:ad:0c:55:a4:32:49:2f:91:ab:68:26:87:30:
b9:68:fc:b7:27:08:d6:d4:41:ea:ae:f4:4a:95:e0:
62:cc:15:7f:36:c3:4c:00:61:a8:f5:02:70:20:45:
4b:f8:39:e2:ca:db:d4:73:a3:d0:43:af:14:6f:74:
16:da:35:9d:65:37:78:6c:10:e6:6a:f4:a2:78:37:
25:bf:ff:cc:37:1c:52:71:80:2f:3e:96:51:7b:01:
c5:88:8d:04:df:de:71:b7:84:28:80:66:cb:17:be:
85:92:6a:0e:63:c9:32:56:50:cc:94:bb:52:38:26:
bb:da:d5:d3:48:d3:56:7b:43:1b:54:5a:e7:f4:59:
0c:b8:d5:1c:f0:d3:4d:f3:5e:b1:78:8e:06:03:82:
0e:c1:42:21:0c:52:2f:27:c1:af:a5:05:a4:7c:7a:
a4:43:c7:df:85:42:ff:cb:8c:99:69:6c:08:85:d7:
39:3f:41:e8:f4:aa:d0:1c:14:65:15:b1:e5:72:76:
2d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:1C:74:8F:AE:93:70:80:70:9C:09:1A:8B:2D:D5:6A:99:61:64:71
X509v3 Authority Key Identifier:
keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:b3:c2:9e:5c:ee:98:cc:8f:14:17:2f:62:6b:b6:89:91:b2:
5e:6c:3d:7e:a7:e6:7d:c7:ee:86:4b:3a:83:ab:9c:3a:3b:e5:
9b:81:db:53:0f:56:56:81:65:72:f0:66:99:e3:44:06:cc:e1:
c0:8a:4d:34:f7:2f:c3:b8:9f:43:33:45:64:ee:80:ef:94:6f:
3f:54:5e:91:53:0b:cd:ed:d4:2b:cb:0f:51:04:82:8c:24:fb:
20:52:f2:0d:87:20:43:30:50:63:52:04:b0:cf:11:3f:7c:ba:
fd:ae:c5:c5:f1:69:e8:f4:7c:ac:94:25:11:08:72:eb:e3:d9:
23:dd:b1:e1:76:7e:26:99:0a:21:03:7b:65:1a:cb:63:1a:73:
f9:51:8b:81:33:fd:23:ba:cd:3d:36:9b:34:a7:b5:54:ed:e1:
60:93:0a:dc:1d:97:52:a5:50:7d:fc:31:03:bd:75:38:f7:54:
55:4a:45:1c:3e:ce:5b:b1:83:a5:ef:d0:1a:5e:1e:09:32:06:
2f:f1:75:db:97:20:25:b2:07:08:66:3d:e7:4b:58:06:05:f2:
2e:6c:e6:7e:5f:77:1b:05:e6:04:01:56:4d:8b:d4:1c:0e:41:
7b:1e:cb:15:a7:56:b1:2b:a3:62:c0:d3:bf:e1:82:70:82:b6:
68:13:40:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 15:48:23 2025 by rpki-client