Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
File: jNzyb3SGBYjKxrrhf5neItvEmuY.mft (raw, json)
Hash identifier: bIJ03MAudiIidLLCOslxLrz5Tihpf+zr/DZFvFSrhvg=
Subject key identifier: B5:DF:C9:DF:6C:1D:5F:E8:EF:9C:3F:5D:3A:78:B0:7E:76:0E:6B:21
Authority key identifier: 8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
Certificate issuer: /CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Certificate serial: 0199FEB4C3BCAB378E3C611848B9F2EB3307
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 23:01:23 +0000
Manifest this update: Sun 19 Oct 2025 23:01:23 +0000
Manifest next update: Mon 20 Oct 2025 23:01:23 +0000
Files and hashes: 1: jNzyb3SGBYjKxrrhf5neItvEmuY.crl (hash: ECfIYFXP+CdLxDKVqikVD00FXHCZr1iTvMzTDuJ/E4g=)
2: nE8Xo_fpUw6ElJP9CBp37mVdbvg.roa (hash: dylbw9FFNOC/9ham5DxR+U09aH9ubZH/opQ+2bz68ow=)
3: nMDCAx4S7BvyRseCP1AtruhoXlQ.roa (hash: MzKXqieiYhEALeqU1AUv5CMaIkFtOJxEDtJDUquvAg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:c3:bc:ab:37:8e:3c:61:18:48:b9:f2:eb:33:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Validity
Not Before: Oct 19 23:01:23 2025 GMT
Not After : Oct 20 23:01:23 2025 GMT
Subject: CN=b5dfc9df6c1d5fe8ef9c3f5d3a78b07e760e6b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:90:21:31:74:af:3a:95:54:37:ec:6f:89:ef:
bc:52:b3:1e:27:43:ed:1d:03:53:85:00:be:e9:e4:
ae:e6:02:93:e4:a4:7f:ba:61:c7:6f:84:9e:bd:83:
37:12:7d:39:b1:f8:08:dd:80:85:45:91:20:1e:f8:
f9:bd:83:23:06:04:db:c5:75:1c:16:5f:8d:1f:d7:
f7:e4:81:d1:db:bb:ed:5c:fb:fd:24:13:38:c4:37:
52:9f:73:34:18:3d:a3:ee:b0:d5:2d:7a:96:6c:6f:
83:df:68:76:9f:b4:bd:b9:04:8c:00:af:e3:09:ec:
37:88:95:9f:f9:52:ba:51:36:53:21:c7:8d:ff:eb:
68:d5:a4:2a:ff:8d:0c:b4:96:8c:59:7a:41:33:dd:
e2:8a:a4:bc:f4:d9:a2:3a:03:df:2c:c8:93:f0:72:
e1:9b:32:fa:74:ad:3d:a3:42:0e:a5:77:04:97:7d:
09:80:2d:e7:a0:9e:21:ad:bb:20:b8:32:33:b8:d5:
6a:08:05:55:31:67:6b:40:a5:03:66:cb:2a:6c:20:
cb:f6:cf:96:e6:91:67:3e:34:3a:6b:fa:e7:f9:2e:
ed:30:ee:79:c0:ca:57:68:ec:22:55:b1:64:68:7e:
92:53:02:21:2f:9d:9b:31:97:04:20:fe:49:95:73:
80:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DF:C9:DF:6C:1D:5F:E8:EF:9C:3F:5D:3A:78:B0:7E:76:0E:6B:21
X509v3 Authority Key Identifier:
keyid:8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:12:fc:7e:cb:bc:28:d3:91:5c:09:9a:be:d7:e9:70:13:13:
02:ef:90:7d:7d:f5:9a:1e:47:c0:06:27:6b:29:c8:b4:70:5b:
c0:56:ad:3a:21:46:d8:14:6f:53:83:ed:ce:f8:2a:2b:f8:48:
3d:aa:9c:1a:0c:80:d4:75:91:1a:e0:f5:d9:27:57:c9:b8:be:
71:fe:6a:76:85:a9:bc:a8:9d:c7:9c:77:5d:c7:af:fd:a5:1e:
cb:f8:70:51:af:f8:e9:4c:e9:03:f1:25:86:06:b2:3a:f6:8a:
99:ee:0a:61:0b:3a:3b:9e:ac:f0:e8:ce:bd:6c:0a:35:fe:c9:
38:2a:47:10:a6:bb:08:95:d9:cf:59:09:80:70:73:35:2a:f7:
d1:7c:eb:a5:fe:75:69:96:9b:14:21:66:48:79:5d:b2:d7:bb:
a0:e9:d3:0e:eb:50:53:13:e4:1d:ff:1e:51:3d:37:e5:fd:c5:
eb:53:c5:08:59:d3:99:97:cf:ad:7e:f4:4c:7f:f3:7c:8a:f3:
89:73:35:7e:e9:a3:c0:25:5f:cd:01:e3:40:5c:44:cf:a7:bc:
3b:1e:70:d0:c7:9f:a8:b9:65:fa:ac:be:de:6f:fc:df:15:9a:
63:a8:76:5e:ec:90:07:52:34:00:e4:24:d2:9a:29:ef:e1:7f:
33:86:08:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+tMO8qzeOPGEYSLny6zMHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZGNmMjZmNzQ4NjA1ODhjYWM2YmFlMTdmOTlkZTIyZGJj
NDlhZTYwHhcNMjUxMDE5MjMwMTIzWhcNMjUxMDIwMjMwMTIzWjAzMTEwLwYDVQQD
EyhiNWRmYzlkZjZjMWQ1ZmU4ZWY5YzNmNWQzYTc4YjA3ZTc2MGU2YjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25AhMXSvOpVUN+xvie+8UrMeJ0Pt
HQNThQC+6eSu5gKT5KR/umHHb4SevYM3En05sfgI3YCFRZEgHvj5vYMjBgTbxXUc
Fl+NH9f35IHR27vtXPv9JBM4xDdSn3M0GD2j7rDVLXqWbG+D32h2n7S9uQSMAK/j
Cew3iJWf+VK6UTZTIceN/+to1aQq/40MtJaMWXpBM93iiqS89NmiOgPfLMiT8HLh
mzL6dK09o0IOpXcEl30JgC3noJ4hrbsguDIzuNVqCAVVMWdrQKUDZssqbCDL9s+W
5pFnPjQ6a/rn+S7tMO55wMpXaOwiVbFkaH6SUwIhL52bMZcEIP5JlXOAEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXfyd9sHV/o75w/XTp4sH52DmshMB8GA1UdIwQY
MBaAFIzc8m90hgWIysa64X+Z3iLbxJrmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak56eWIzU0dCWWpLeHJyaGY1bmVJdHZFbXVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9kNWIxYTctNDY2ZC00NzFjLWE3MGMt
MmZiMjVhYmZkYzUzLzEvak56eWIzU0dCWWpLeHJyaGY1bmVJdHZFbXVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9kNWIxYTctNDY2ZC00NzFjLWE3MGMtMmZiMjVhYmZkYzUz
LzEvak56eWIzU0dCWWpLeHJyaGY1bmVJdHZFbXVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbhL8fsu8
KNORXAmavtfpcBMTAu+QfX31mh5HwAYnaynItHBbwFatOiFG2BRvU4PtzvgqK/hI
PaqcGgyA1HWRGuD12SdXybi+cf5qdoWpvKidx5x3Xcev/aUey/hwUa/46UzpA/El
hgayOvaKme4KYQs6O56s8OjOvWwKNf7JOCpHEKa7CJXZz1kJgHBzNSr30Xzrpf51
aZabFCFmSHldste7oOnTDutQUxPkHf8eUT035f3F61PFCFnTmZfPrX70TH/zfIrz
iXM1fumjwCVfzQHjQFxEz6e8Ox5w0MefqLll+qy+3m/83xWaY6h2XuyQB1I0AOQk
0pop7+F/M4YIbA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:23:46 2025 by rpki-client