Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
File: jBPrj9nY20toqWnI_91IRoAqsKs.mft (raw, json)
Hash identifier: TRqkfCNfbJU5U7CoE1E1mxqhazcBAyKubvOEoSJjWYw=
Subject key identifier: AB:15:11:0F:6A:18:93:B1:16:33:91:8A:DA:13:47:50:CB:A0:1A:9E
Authority key identifier: 8C:13:EB:8F:D9:D8:DB:4B:68:A9:69:C8:FF:DD:48:46:80:2A:B0:AB
Certificate issuer: /CN=8c13eb8fd9d8db4b68a969c8ffdd4846802ab0ab
Certificate serial: 0199FE1003D03EE2823614D814AE846043DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
Manifest number: 0A66
Signing time: Sun 19 Oct 2025 20:01:26 +0000
Manifest this update: Sun 19 Oct 2025 20:01:26 +0000
Manifest next update: Mon 20 Oct 2025 20:01:26 +0000
Files and hashes: 1: djq23V4eA0hrtL3JjtzZq_jD0sw.roa (hash: u2ZEUIKDADE8gsgv3Z8cy40l1mRaFT3X8dzep8zrVh8=)
2: jBPrj9nY20toqWnI_91IRoAqsKs.crl (hash: iVH6okAQdM9Q8pPBZrjD/TsUghvRZAatXSqwDPRg7xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:03:d0:3e:e2:82:36:14:d8:14:ae:84:60:43:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c13eb8fd9d8db4b68a969c8ffdd4846802ab0ab
Validity
Not Before: Oct 19 20:01:26 2025 GMT
Not After : Oct 20 20:01:26 2025 GMT
Subject: CN=ab15110f6a1893b11633918ada134750cba01a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a1:df:1c:04:a5:92:38:58:89:ba:82:a7:c0:
e4:9c:57:4d:92:75:37:3b:a3:ef:ef:8b:c1:25:62:
9b:ae:75:d3:9f:b0:91:be:2b:9b:42:20:ae:a0:04:
f0:70:4b:fa:db:c7:87:29:02:e9:6e:a7:cb:46:70:
37:ab:bc:55:57:e0:6e:df:a4:c5:12:d7:a6:67:e1:
f3:7f:7d:01:9d:26:04:b4:f2:d8:67:d2:33:70:0b:
9c:d9:97:f2:02:ff:d7:4c:02:c7:90:f6:8c:76:9b:
2a:e0:72:93:39:d1:e0:77:b9:b2:e7:15:e0:e1:04:
70:e3:ae:61:67:8a:63:6a:58:3b:be:95:04:8f:fd:
aa:b8:6b:e4:e3:fe:68:c9:c7:5c:21:9a:14:89:6f:
eb:8b:c4:f0:f1:ee:d6:d0:91:82:6f:73:77:04:75:
82:b3:f7:21:c1:6d:e1:99:c1:9d:47:c5:d3:6f:40:
bd:e5:76:c9:85:f5:ec:3e:91:ac:8c:88:2d:f6:16:
ab:ed:09:c2:f6:fe:a8:13:a8:e9:fa:5e:4c:d7:57:
50:5e:1f:d3:d3:7d:01:95:a4:38:45:f0:2b:a9:44:
2d:bd:cf:a1:37:ab:64:ac:ee:4f:a2:d9:b1:7a:01:
24:51:c2:03:c5:59:0b:9a:8f:68:e8:06:0c:96:af:
8c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:15:11:0F:6A:18:93:B1:16:33:91:8A:DA:13:47:50:CB:A0:1A:9E
X509v3 Authority Key Identifier:
keyid:8C:13:EB:8F:D9:D8:DB:4B:68:A9:69:C8:FF:DD:48:46:80:2A:B0:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:0a:bf:fc:6d:97:f2:9e:00:e3:f6:72:76:ad:96:ea:2b:84:
9e:6c:14:10:0e:15:e8:c2:c1:0c:68:82:8b:c1:23:0e:b9:3c:
80:9d:70:87:54:60:c9:2a:f8:cc:a6:b5:be:e9:3e:26:45:e9:
07:0b:b8:75:b1:9e:c3:45:0d:d2:d8:88:17:e0:57:bc:77:52:
75:a1:5d:fb:0f:14:f8:18:b0:33:64:5d:52:9d:d2:e3:4b:0e:
61:02:6e:67:ab:f8:3c:7c:9b:50:96:bb:20:de:d2:79:42:67:
bf:b4:4a:fa:9b:73:ea:97:47:d1:56:2e:31:2f:0b:98:9c:92:
6c:c7:6b:53:03:5b:85:2b:46:49:14:c8:99:9f:7b:2d:01:41:
59:3a:fd:0e:eb:8d:43:4b:46:a2:38:76:be:a5:92:17:da:75:
b1:36:62:68:7c:69:8c:d4:33:a8:80:c6:a4:52:7c:b8:f4:7f:
a4:44:15:d6:e9:25:9a:1f:ba:f8:dc:f2:35:73:be:3f:1d:d5:
1a:96:08:9e:4a:e0:06:b5:34:eb:ab:7d:ee:3c:06:ca:7b:6f:
c8:26:8d:51:7f:7c:0c:f2:97:36:4c:30:5e:b1:77:b4:c0:fc:
26:e3:c1:2e:cd:46:be:05:fa:8e:0c:a0:fe:b9:83:b1:b4:c3:
0f:30:bf:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+EAPQPuKCNhTYFK6EYEPbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMTNlYjhmZDlkOGRiNGI2OGE5NjljOGZmZGQ0ODQ2ODAy
YWIwYWIwHhcNMjUxMDE5MjAwMTI2WhcNMjUxMDIwMjAwMTI2WjAzMTEwLwYDVQQD
EyhhYjE1MTEwZjZhMTg5M2IxMTYzMzkxOGFkYTEzNDc1MGNiYTAxYTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16HfHASlkjhYibqCp8DknFdNknU3
O6Pv74vBJWKbrnXTn7CRviubQiCuoATwcEv628eHKQLpbqfLRnA3q7xVV+Bu36TF
EtemZ+Hzf30BnSYEtPLYZ9IzcAuc2ZfyAv/XTALHkPaMdpsq4HKTOdHgd7my5xXg
4QRw465hZ4pjalg7vpUEj/2quGvk4/5oycdcIZoUiW/ri8Tw8e7W0JGCb3N3BHWC
s/chwW3hmcGdR8XTb0C95XbJhfXsPpGsjIgt9har7QnC9v6oE6jp+l5M11dQXh/T
030BlaQ4RfArqUQtvc+hN6tkrO5PotmxegEkUcIDxVkLmo9o6AYMlq+MewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsVEQ9qGJOxFjORitoTR1DLoBqeMB8GA1UdIwQY
MBaAFIwT64/Z2NtLaKlpyP/dSEaAKrCrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakJQcmo5blkyMHRvcVduSV85MUlSb0Fxc0tzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC84YWRmN2UtMmRlZC00MjRkLTg5NTEt
ZTY4MmJjYjlhNjNhLzEvakJQcmo5blkyMHRvcVduSV85MUlSb0Fxc0tzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC84YWRmN2UtMmRlZC00MjRkLTg5NTEtZTY4MmJjYjlhNjNh
LzEvakJQcmo5blkyMHRvcVduSV85MUlSb0Fxc0tzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAewq//G2X
8p4A4/Zydq2W6iuEnmwUEA4V6MLBDGiCi8EjDrk8gJ1wh1RgySr4zKa1vuk+JkXp
Bwu4dbGew0UN0tiIF+BXvHdSdaFd+w8U+BiwM2RdUp3S40sOYQJuZ6v4PHybUJa7
IN7SeUJnv7RK+ptz6pdH0VYuMS8LmJySbMdrUwNbhStGSRTImZ97LQFBWTr9DuuN
Q0tGojh2vqWSF9p1sTZiaHxpjNQzqIDGpFJ8uPR/pEQV1uklmh+6+NzyNXO+Px3V
GpYInkrgBrU066t97jwGyntvyCaNUX98DPKXNkwwXrF3tMD8JuPBLs1GvgX6jgyg
/rmDsbTDDzC/Hg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:58:38 2025 by rpki-client