Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
File: joIj7fCuQlYOjwwssFnjyPWuTRo.mft (raw, json)
Hash identifier: szjDwd5WvBhiy1c2xg5V3S34wd1cHocsjYPMtlGzqXU=
Subject key identifier: 74:E6:3C:82:5F:AB:99:C7:6D:D4:40:6F:0D:3A:AC:51:5D:AB:DB:24
Authority key identifier: 8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A
Certificate issuer: /CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a
Certificate serial: 019A047F7C2540930BDA67FA1B29C4A005A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
Manifest number: 09B0
Signing time: Tue 21 Oct 2025 02:00:54 +0000
Manifest this update: Tue 21 Oct 2025 02:00:54 +0000
Manifest next update: Wed 22 Oct 2025 02:00:54 +0000
Files and hashes: 1: RpYPR1Gi-4IalDvM_FJ3EiJEySA.roa (hash: 5bL7bq1TTrrMHUlx6xb11JGKYBQ34VQ/azRdoDzlQjA=)
2: joIj7fCuQlYOjwwssFnjyPWuTRo.crl (hash: zaAo1wyjAc0mDiZ1ubERS9MZI52nFgkh5Pq4z4ibw3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:7f:7c:25:40:93:0b:da:67:fa:1b:29:c4:a0:05:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a
Validity
Not Before: Oct 21 02:00:54 2025 GMT
Not After : Oct 22 02:00:54 2025 GMT
Subject: CN=74e63c825fab99c76dd4406f0d3aac515dabdb24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:08:4f:86:c3:8d:0b:2d:f3:e6:1b:b4:a5:5f:
63:ed:b0:0e:f5:d2:18:cd:86:11:e2:c4:07:3e:97:
78:ec:09:0a:98:89:7f:28:4d:f2:88:7f:53:5f:cb:
a5:8a:3a:78:99:86:4f:b2:90:be:0f:be:34:fe:7e:
e4:b2:f8:2e:38:a3:fd:07:1e:6d:b6:80:70:99:5c:
2d:50:1b:90:6c:ed:79:1a:a6:17:35:24:55:cc:f9:
18:25:07:f3:dd:3b:21:3a:ca:40:d5:e2:ea:b5:8f:
7d:24:e8:ad:2e:91:f4:f2:23:fa:2a:46:cb:03:e3:
c8:fc:1e:d4:e7:e1:5c:72:fc:df:7a:9c:91:e1:8f:
a3:99:7f:ac:68:7c:2d:16:0e:d2:92:d2:af:e1:53:
71:3b:6a:3e:a3:df:96:72:fb:8e:de:62:41:56:12:
db:51:0c:8a:8f:b6:8a:44:8c:f4:b8:43:9a:15:7a:
a0:ef:b3:ff:ed:e4:69:70:2a:d5:67:fd:51:3d:6b:
a4:b7:9e:c1:5b:21:da:4c:5c:cf:f2:87:2a:e6:a8:
5f:4a:b7:53:22:6e:a9:06:53:c7:3e:6b:fa:ac:0b:
05:03:51:c4:0b:34:cc:00:85:fb:9d:b3:17:98:2f:
ea:a4:bd:54:2a:8c:5d:35:9a:cc:0a:45:6a:74:47:
19:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E6:3C:82:5F:AB:99:C7:6D:D4:40:6F:0D:3A:AC:51:5D:AB:DB:24
X509v3 Authority Key Identifier:
keyid:8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:31:40:c3:89:cb:01:fe:fb:7d:34:85:56:be:a7:bd:52:21:
54:7f:21:fe:fb:5b:4a:59:66:6c:39:4a:01:74:62:d7:b8:48:
46:64:48:34:41:cc:c4:9a:4f:dd:c2:70:6c:18:bf:23:4a:78:
60:37:bd:86:55:1c:39:53:4c:1f:3b:b0:d5:9c:7b:0b:a7:96:
cd:6a:65:2c:f7:bf:9c:72:50:15:29:34:68:4f:43:e7:45:6f:
9e:fe:de:02:be:92:e6:07:e8:76:b0:38:96:8e:79:45:fb:1b:
9a:1d:05:78:bc:da:91:96:89:66:ce:11:0d:a7:d8:4d:15:71:
78:e9:72:d6:4c:15:d0:dd:b1:db:7e:78:b5:c7:d3:13:7f:ea:
6e:bb:56:dc:36:ff:04:9f:88:92:fe:38:3a:ef:7b:f0:1d:5e:
29:c2:b6:7b:08:6f:f6:75:1e:34:7e:dc:0c:86:34:44:03:15:
04:67:47:16:3d:0e:2c:04:04:43:76:81:eb:6d:9e:40:5f:62:
1a:95:e4:0a:9c:3c:42:70:b4:31:7a:d0:39:b2:64:b9:1d:c2:
12:6b:73:03:c1:d3:a2:2e:46:51:9a:23:a6:d6:b1:01:b2:2b:
d1:35:69:4e:9e:ec:aa:ae:f3:34:c9:74:f9:0e:09:71:69:2e:
35:07:0d:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoEf3wlQJML2mf6GynEoAWlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlODIyM2VkZjBhZTQyNTYwZThmMGMyY2IwNTllM2M4ZjVh
ZTRkMWEwHhcNMjUxMDIxMDIwMDU0WhcNMjUxMDIyMDIwMDU0WjAzMTEwLwYDVQQD
Eyg3NGU2M2M4MjVmYWI5OWM3NmRkNDQwNmYwZDNhYWM1MTVkYWJkYjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6AhPhsONCy3z5hu0pV9j7bAO9dIY
zYYR4sQHPpd47AkKmIl/KE3yiH9TX8ulijp4mYZPspC+D740/n7ksvguOKP9Bx5t
toBwmVwtUBuQbO15GqYXNSRVzPkYJQfz3TshOspA1eLqtY99JOitLpH08iP6KkbL
A+PI/B7U5+FccvzfepyR4Y+jmX+saHwtFg7SktKv4VNxO2o+o9+WcvuO3mJBVhLb
UQyKj7aKRIz0uEOaFXqg77P/7eRpcCrVZ/1RPWukt57BWyHaTFzP8ocq5qhfSrdT
Im6pBlPHPmv6rAsFA1HECzTMAIX7nbMXmC/qpL1UKoxdNZrMCkVqdEcZcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTmPIJfq5nHbdRAbw06rFFdq9skMB8GA1UdIwQY
MBaAFI6CI+3wrkJWDo8MLLBZ48j1rk0aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam9JajdmQ3VRbFlPand3c3NGbmp5UFd1VFJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9kZDE1YjQtM2NkYi00YTdhLTkyYjEt
ZDE2ODk1ZTBlMThlLzEvam9JajdmQ3VRbFlPand3c3NGbmp5UFd1VFJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9kZDE1YjQtM2NkYi00YTdhLTkyYjEtZDE2ODk1ZTBlMThl
LzEvam9JajdmQ3VRbFlPand3c3NGbmp5UFd1VFJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABDFAw4nL
Af77fTSFVr6nvVIhVH8h/vtbSllmbDlKAXRi17hIRmRINEHMxJpP3cJwbBi/I0p4
YDe9hlUcOVNMHzuw1Zx7C6eWzWplLPe/nHJQFSk0aE9D50Vvnv7eAr6S5gfodrA4
lo55Rfsbmh0FeLzakZaJZs4RDafYTRVxeOly1kwV0N2x2354tcfTE3/qbrtW3Db/
BJ+Ikv44Ou978B1eKcK2ewhv9nUeNH7cDIY0RAMVBGdHFj0OLAQEQ3aB622eQF9i
GpXkCpw8QnC0MXrQObJkuR3CEmtzA8HToi5GUZojptaxAbIr0TVpTp7sqq7zNMl0
+Q4JcWkuNQcNRQ==
-----END CERTIFICATE-----
Generated at Tue Oct 21 09:48:27 2025 by rpki-client