Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.mft
File: jqzH87IYxJLYjb68nNy5otLTDtE.mft (raw, json)
Hash identifier: Elw63mCNLOEk2x2j1LbxyEssrlPzJlakHJJLjQCkV68=
Subject key identifier: 77:6E:0B:B1:7E:64:52:37:7E:CC:60:BA:59:EC:B7:EC:E3:A1:77:E4
Authority key identifier: 8E:AC:C7:F3:B2:18:C4:92:D8:8D:BE:BC:9C:DC:B9:A2:D2:D3:0E:D1
Certificate issuer: /CN=8eacc7f3b218c492d88dbebc9cdcb9a2d2d30ed1
Certificate serial: 019A01B4B2F0DBF41986BD2CD5F053A29D85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqzH87IYxJLYjb68nNy5otLTDtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 13:00:10 +0000
Manifest this update: Mon 20 Oct 2025 13:00:10 +0000
Manifest next update: Tue 21 Oct 2025 13:00:10 +0000
Files and hashes: 1: G4xGjeiK9NbX0jXJY8uDkRmJuDc.roa (hash: muHuLGPiPatokQGw15YR2MNayDycTrh2aeAcpqtHkYI=)
2: _bjBL5LK2WVAfL5nxIuCTdAEYdU.roa (hash: hu7dwrJP9WhWK3glmNV0xBWx3TcYlk14ctZGu4bZyLs=)
3: jqzH87IYxJLYjb68nNy5otLTDtE.crl (hash: SbKO64vyk5f8RDcVC9oP7d9A+ndozh4dP7jahb+TTDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqzH87IYxJLYjb68nNy5otLTDtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b4:b2:f0:db:f4:19:86:bd:2c:d5:f0:53:a2:9d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eacc7f3b218c492d88dbebc9cdcb9a2d2d30ed1
Validity
Not Before: Oct 20 13:00:10 2025 GMT
Not After : Oct 21 13:00:10 2025 GMT
Subject: CN=776e0bb17e6452377ecc60ba59ecb7ece3a177e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9a:39:55:db:07:f9:39:fb:c9:e3:2a:02:69:
e6:7a:d2:75:8c:eb:cb:33:61:06:b9:8c:9a:48:ae:
c9:9b:40:75:f1:56:08:89:c5:25:79:fa:d3:f1:5b:
9a:26:9c:b0:a3:37:2e:ef:d0:c7:97:2a:82:76:65:
f7:bb:7c:dc:81:39:45:de:ef:81:0c:96:56:76:bd:
2c:bf:e6:fb:e7:f4:1c:32:da:a9:13:ef:70:2e:cf:
34:ff:2f:dd:1e:7a:b1:d6:06:9e:96:51:2a:b5:dd:
cf:d6:b0:c8:09:bd:6c:b3:20:99:43:dc:7a:6f:d4:
fd:ae:37:37:7d:51:02:4b:fa:e4:bd:7f:99:f7:30:
79:d9:05:47:d2:e9:9b:24:0d:8f:d7:82:7b:ce:c0:
c1:99:ca:df:55:da:d0:4c:6b:cb:91:d5:67:1c:dc:
74:42:63:1d:37:f2:96:c0:b4:65:ba:79:92:88:1a:
e7:98:5a:5b:3f:17:3d:69:ac:ac:69:a7:e0:12:6b:
4c:0f:21:1a:3b:27:d4:49:4e:de:04:36:2e:28:04:
fe:55:46:3c:6e:dd:95:8c:ac:47:bd:12:cb:61:29:
d5:a6:c6:49:ee:00:fd:02:89:19:32:27:6d:82:92:
b4:0d:d1:a1:3c:ce:cb:e3:46:79:b1:43:fb:35:41:
1c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:6E:0B:B1:7E:64:52:37:7E:CC:60:BA:59:EC:B7:EC:E3:A1:77:E4
X509v3 Authority Key Identifier:
keyid:8E:AC:C7:F3:B2:18:C4:92:D8:8D:BE:BC:9C:DC:B9:A2:D2:D3:0E:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqzH87IYxJLYjb68nNy5otLTDtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:74:cd:64:c0:ff:dc:8b:f8:1d:c8:cc:24:d8:5c:a4:a8:74:
9c:7a:85:65:81:f2:78:5f:75:e1:a2:c2:d6:6d:ab:68:36:a8:
5e:7d:ed:81:9b:bc:04:0d:a5:e1:a8:60:83:ae:e0:1a:5b:d5:
36:96:b0:36:36:a8:f0:7c:77:f6:86:8e:86:26:eb:bf:6a:dc:
78:fd:02:f4:50:7f:80:db:24:69:a3:cf:07:a0:ce:a1:a8:11:
e4:bc:73:dc:1a:6b:45:d5:19:fb:2d:21:1d:c9:3b:50:8f:96:
5d:cb:e8:5a:62:2b:0c:ab:03:89:24:b9:e5:9e:48:48:05:5e:
46:48:ea:f4:fa:0d:a0:a2:9f:b0:39:06:d2:41:44:7e:24:8c:
bc:7a:e0:64:c0:ab:b8:c8:b9:32:54:04:8f:69:cf:ee:56:2f:
90:4f:37:5b:d3:60:31:93:34:47:08:4e:91:a6:74:9c:d1:e8:
76:6d:5c:84:c6:85:d5:88:6f:b0:21:e0:5b:9c:e7:0a:b4:1b:
d3:7f:29:df:16:11:c7:f1:33:0d:8b:08:3f:d4:89:28:cd:c1:
a5:7b:e1:8b:9b:64:fa:47:b0:a9:fb:24:11:06:52:6b:74:62:
09:ad:41:d3:23:8d:69:07:4b:75:cb:da:79:e3:e3:a5:fb:48:
05:99:3a:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBtLLw2/QZhr0s1fBTop2FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYWNjN2YzYjIxOGM0OTJkODhkYmViYzljZGNiOWEyZDJk
MzBlZDEwHhcNMjUxMDIwMTMwMDEwWhcNMjUxMDIxMTMwMDEwWjAzMTEwLwYDVQQD
Eyg3NzZlMGJiMTdlNjQ1MjM3N2VjYzYwYmE1OWVjYjdlY2UzYTE3N2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Zo5VdsH+Tn7yeMqAmnmetJ1jOvL
M2EGuYyaSK7Jm0B18VYIicUlefrT8VuaJpywozcu79DHlyqCdmX3u3zcgTlF3u+B
DJZWdr0sv+b75/QcMtqpE+9wLs80/y/dHnqx1gaellEqtd3P1rDICb1ssyCZQ9x6
b9T9rjc3fVECS/rkvX+Z9zB52QVH0umbJA2P14J7zsDBmcrfVdrQTGvLkdVnHNx0
QmMdN/KWwLRlunmSiBrnmFpbPxc9aaysaafgEmtMDyEaOyfUSU7eBDYuKAT+VUY8
bt2VjKxHvRLLYSnVpsZJ7gD9AokZMidtgpK0DdGhPM7L40Z5sUP7NUEc+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHduC7F+ZFI3fsxgulnst+zjoXfkMB8GA1UdIwQY
MBaAFI6sx/OyGMSS2I2+vJzcuaLS0w7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanF6SDg3SVl4SkxZamI2OG5OeTVvdExURHRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9iZDQyZWEtZWJiNi00NDQ1LWJkMjAt
Nzc1ZGE2YWEzMTIzLzEvanF6SDg3SVl4SkxZamI2OG5OeTVvdExURHRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9iZDQyZWEtZWJiNi00NDQ1LWJkMjAtNzc1ZGE2YWEzMTIz
LzEvanF6SDg3SVl4SkxZamI2OG5OeTVvdExURHRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa3TNZMD/
3Iv4HcjMJNhcpKh0nHqFZYHyeF914aLC1m2raDaoXn3tgZu8BA2l4ahgg67gGlvV
NpawNjao8Hx39oaOhibrv2rceP0C9FB/gNskaaPPB6DOoagR5Lxz3BprRdUZ+y0h
Hck7UI+WXcvoWmIrDKsDiSS55Z5ISAVeRkjq9PoNoKKfsDkG0kFEfiSMvHrgZMCr
uMi5MlQEj2nP7lYvkE83W9NgMZM0RwhOkaZ0nNHodm1chMaF1YhvsCHgW5znCrQb
038p3xYRx/EzDYsIP9SJKM3BpXvhi5tk+kewqfskEQZSa3RiCa1B0yONaQdLdcva
eePjpftIBZk61Q==
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:00:24 2025 by rpki-client