Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
File: jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft (raw, json)
Hash identifier: VMRFjmY/tEFsX98GDGD8VKdehBQFbRQANtKGNQgFW94=
Subject key identifier: 78:93:C3:C8:D6:53:5B:C8:DB:63:D8:FC:F6:EA:26:D5:1B:2B:C5:18
Authority key identifier: 8C:D5:24:39:CA:C2:71:9B:64:E8:5B:26:FF:0E:A8:46:8D:57:96:0E
Certificate issuer: /CN=8cd52439cac2719b64e85b26ff0ea8468d57960e
Certificate serial: 0199FA6A86BED8552E3BA3313F1C07A0285B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 03:01:49 +0000
Manifest this update: Sun 19 Oct 2025 03:01:49 +0000
Manifest next update: Mon 20 Oct 2025 03:01:49 +0000
Files and hashes: 1: 7jEmnnvVVJelmr8qrjn50rWFOcw.roa (hash: EchIPXfoij0iDBazd31BWfFW6DqbRboeZNJcaicEn4E=)
2: aRZdBae0vWh1J6sn44sYIdyVlG8.roa (hash: w9fqOKBIoaM9G2/C9dOdVNyy6b2w4OHx2wQuYWhSANs=)
3: jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl (hash: 7CVDQFl/pN7617NT5JCX87sp+7xbaV5sFaH47IpKAyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:86:be:d8:55:2e:3b:a3:31:3f:1c:07:a0:28:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd52439cac2719b64e85b26ff0ea8468d57960e
Validity
Not Before: Oct 19 03:01:49 2025 GMT
Not After : Oct 20 03:01:49 2025 GMT
Subject: CN=7893c3c8d6535bc8db63d8fcf6ea26d51b2bc518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fc:39:aa:c2:d4:ba:e9:0b:ae:60:25:5b:cb:
f5:1f:71:d5:67:ba:57:e0:0f:c9:c5:97:d9:2f:80:
de:5c:63:85:c5:f9:97:3f:57:e0:57:7a:dc:ea:bd:
b0:61:4b:1e:26:f5:3d:f5:4f:78:86:6f:72:59:a0:
08:f3:0c:99:ee:c5:06:f5:10:d5:f5:da:98:cd:6e:
c2:31:8c:a6:5d:f8:8a:af:39:17:f0:d6:17:e7:5f:
4c:6c:be:fc:2d:61:1e:0a:e6:6b:f4:b7:56:5b:44:
f3:7a:f9:3d:d8:1f:89:4c:b5:73:5e:c7:5f:96:b4:
c2:9d:b9:38:2f:e4:2e:18:4e:ad:78:1d:15:ca:89:
d9:a1:de:95:6d:11:59:cf:cf:4a:42:b3:5b:6a:49:
0c:a9:39:56:fc:f2:c0:0c:bf:03:59:fe:58:24:c9:
f6:15:af:a1:03:ff:79:af:59:34:b6:09:23:a3:7e:
83:94:72:aa:92:0c:0a:f2:75:7a:0c:2b:ec:de:6b:
f8:a7:0d:e0:7a:e1:f6:7c:73:2d:96:45:62:03:a9:
44:4e:90:c1:0a:93:c8:54:a8:14:6e:cb:76:39:98:
08:8a:27:a4:0e:78:49:4d:3f:92:df:2d:27:c8:58:
39:2a:fa:9e:b5:49:f6:6d:9d:c2:d4:27:af:a1:09:
be:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:93:C3:C8:D6:53:5B:C8:DB:63:D8:FC:F6:EA:26:D5:1B:2B:C5:18
X509v3 Authority Key Identifier:
keyid:8C:D5:24:39:CA:C2:71:9B:64:E8:5B:26:FF:0E:A8:46:8D:57:96:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:07:e8:c2:6d:a2:1c:ed:22:85:1e:3c:46:b8:c4:ec:2d:11:
9d:5a:bb:ef:06:95:47:7b:9d:21:99:da:d4:48:42:75:5b:45:
48:29:f0:50:8c:47:36:2a:c2:cb:0f:14:8a:3d:d6:ec:1e:14:
7d:21:e5:7d:25:42:e1:6d:8b:a5:67:1e:0b:16:27:55:37:bc:
c8:aa:f1:2f:d7:a9:a0:86:67:a3:e6:ff:67:0d:9a:62:79:a1:
33:91:0e:30:9f:b6:16:4c:2b:7b:30:31:37:3c:73:96:44:51:
20:6e:67:89:29:ac:1a:74:5a:cf:e3:4d:90:01:9a:d1:43:56:
5a:78:52:a8:41:cc:31:54:79:47:7a:b2:c5:c2:a6:08:63:a1:
63:48:c5:f7:74:d2:c0:bb:9f:1d:3f:f2:89:bb:f5:e0:93:89:
e5:92:c0:2b:48:6e:05:dc:82:e3:7d:e8:25:73:e7:75:d9:92:
8a:a6:53:1e:19:85:c4:bf:7c:c4:88:eb:c1:57:07:6f:8c:ab:
22:80:0e:8d:62:75:7b:47:20:13:0d:b3:26:f1:73:f7:ff:c5:
af:75:6a:ad:e2:6a:d7:26:a1:95:76:b0:09:0b:51:ec:a1:b7:
ea:f0:46:ad:d3:fc:d0:cf:d7:b5:6f:a7:94:c6:19:f2:49:18:
cb:db:15:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn6aoa+2FUuO6MxPxwHoChbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZDUyNDM5Y2FjMjcxOWI2NGU4NWIyNmZmMGVhODQ2OGQ1
Nzk2MGUwHhcNMjUxMDE5MDMwMTQ5WhcNMjUxMDIwMDMwMTQ5WjAzMTEwLwYDVQQD
Eyg3ODkzYzNjOGQ2NTM1YmM4ZGI2M2Q4ZmNmNmVhMjZkNTFiMmJjNTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/w5qsLUuukLrmAlW8v1H3HVZ7pX
4A/JxZfZL4DeXGOFxfmXP1fgV3rc6r2wYUseJvU99U94hm9yWaAI8wyZ7sUG9RDV
9dqYzW7CMYymXfiKrzkX8NYX519MbL78LWEeCuZr9LdWW0Tzevk92B+JTLVzXsdf
lrTCnbk4L+QuGE6teB0VyonZod6VbRFZz89KQrNbakkMqTlW/PLADL8DWf5YJMn2
Fa+hA/95r1k0tgkjo36DlHKqkgwK8nV6DCvs3mv4pw3geuH2fHMtlkViA6lETpDB
CpPIVKgUbst2OZgIiiekDnhJTT+S3y0nyFg5KvqetUn2bZ3C1CevoQm+ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHiTw8jWU1vI22PY/PbqJtUbK8UYMB8GA1UdIwQY
MBaAFIzVJDnKwnGbZOhbJv8OqEaNV5YOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak5Va09jckNjWnRrNkZzbV93Nm9SbzFYbGc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jZDM3MTEtNzA4NC00YjE1LWJjMjUt
M2U0YTAyNmRmMDAwLzEvak5Va09jckNjWnRrNkZzbV93Nm9SbzFYbGc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9jZDM3MTEtNzA4NC00YjE1LWJjMjUtM2U0YTAyNmRmMDAw
LzEvak5Va09jckNjWnRrNkZzbV93Nm9SbzFYbGc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADgfowm2i
HO0ihR48RrjE7C0RnVq77waVR3udIZna1EhCdVtFSCnwUIxHNirCyw8Uij3W7B4U
fSHlfSVC4W2LpWceCxYnVTe8yKrxL9epoIZno+b/Zw2aYnmhM5EOMJ+2FkwrezAx
NzxzlkRRIG5niSmsGnRaz+NNkAGa0UNWWnhSqEHMMVR5R3qyxcKmCGOhY0jF93TS
wLufHT/yibv14JOJ5ZLAK0huBdyC433oJXPnddmSiqZTHhmFxL98xIjrwVcHb4yr
IoAOjWJ1e0cgEw2zJvFz9//Fr3VqreJq1yahlXawCQtR7KG36vBGrdP80M/XtW+n
lMYZ8kkYy9sVLA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:14 2025 by rpki-client