Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
File: ju56OtFSu4clp9ubt1IIBLbxFV8.mft (raw, json)
Hash identifier: OsX00q6fgqAXly+/cW2QuK44+IPJJMJ4fxT5mXtwzRs=
Subject key identifier: 94:D0:53:D2:D0:27:E7:7D:10:DD:61:94:22:A4:5D:0D:EA:AC:5A:A7
Authority key identifier: 8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
Certificate issuer: /CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Certificate serial: 0199FC8F2E6F47F5020A485CBC013B1BA481
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
Manifest number: 16EB
Signing time: Sun 19 Oct 2025 13:01:05 +0000
Manifest this update: Sun 19 Oct 2025 13:01:05 +0000
Manifest next update: Mon 20 Oct 2025 13:01:05 +0000
Files and hashes: 1: JXdwz8Kh5s8D4fZUiI7MP0vHa-g.roa (hash: aGy7W4wvxfuA3DMrWGQip2XzAfgBaKwU1Q707mDCSqY=)
2: W1sV2SXycnhhhyOvaUwWx8t1ifs.roa (hash: HcxcuKRHaI2x0IIJ12wkt3W53ioexeV4UAL0OsdORr4=)
3: ju56OtFSu4clp9ubt1IIBLbxFV8.crl (hash: peL39/7GfNz9DC5U39i4aBmTcULrEGtfCXjyeRUoWCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:2e:6f:47:f5:02:0a:48:5c:bc:01:3b:1b:a4:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Validity
Not Before: Oct 19 13:01:05 2025 GMT
Not After : Oct 20 13:01:05 2025 GMT
Subject: CN=94d053d2d027e77d10dd619422a45d0deaac5aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1c:e1:39:20:45:39:12:af:f4:dc:ac:ef:4e:
b3:0b:60:c1:ff:56:52:ff:22:82:0b:41:32:78:66:
97:24:f1:99:43:78:25:8f:fa:2c:49:ed:df:1b:cb:
52:8e:49:a5:18:3d:f1:6c:51:c5:f4:15:41:d9:7c:
eb:42:88:63:dd:c7:ac:68:49:c8:12:59:0d:34:b3:
c7:56:ef:51:3f:57:d6:2e:4c:14:b3:88:76:7b:e8:
5f:4f:b5:a5:38:fd:b8:8c:34:10:d4:0d:99:23:a8:
0f:2a:d8:5a:89:20:cc:6e:33:91:18:05:fd:68:d9:
56:fb:a5:2d:11:24:5a:c4:e8:fc:44:98:03:27:b2:
b0:27:49:45:0f:d0:a6:8c:8a:b7:f4:3b:f3:98:d8:
a5:fa:d0:80:f2:df:b2:f6:25:31:5f:4f:dc:62:7f:
20:d6:48:01:a6:5d:65:7e:aa:19:32:00:bc:a8:8c:
bd:7d:72:8c:dc:f4:a0:df:90:04:fb:6b:a3:fc:c7:
f5:4d:e0:f8:ae:db:c7:5c:46:d6:62:fa:09:6a:67:
bd:fc:26:4b:f8:9a:ab:2f:45:df:ee:4e:e9:4f:11:
10:52:f2:81:15:68:a2:24:a0:b7:f5:b6:39:13:3b:
3d:10:95:bd:78:7d:cc:10:67:6b:5b:96:4f:3a:33:
df:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D0:53:D2:D0:27:E7:7D:10:DD:61:94:22:A4:5D:0D:EA:AC:5A:A7
X509v3 Authority Key Identifier:
keyid:8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:29:13:a9:fa:53:99:00:0a:21:ea:3b:6e:12:dc:68:20:6e:
d9:2e:a6:6f:01:e0:dd:26:c5:99:20:e6:ad:84:f9:b9:d7:27:
c0:25:a4:8f:5e:ae:f2:d8:f8:0a:6a:8e:89:05:64:e4:b8:1f:
22:df:60:29:42:7c:ad:d7:cb:dd:03:e7:a5:f8:6f:36:09:f6:
67:57:d2:68:db:37:57:bf:e1:4a:34:d1:e9:f3:b7:e5:c0:06:
22:d5:9b:1f:95:8b:11:21:22:d2:d0:2d:28:3f:a5:6e:aa:8b:
74:9a:8d:94:2a:33:ff:cb:24:94:c8:05:76:f9:7c:3b:a0:d7:
6f:84:23:33:65:d1:1a:03:9c:7b:93:02:1a:5b:ea:d2:c8:0e:
21:1a:8c:b4:43:da:73:c6:f4:ec:01:88:9e:55:4d:11:d2:ff:
ba:17:93:ab:b4:28:1c:d8:86:f4:f3:0e:4c:06:47:f6:66:fb:
c2:f8:ee:46:a6:53:46:17:ef:a6:b3:ed:9a:e7:ef:27:54:51:
d0:b9:1a:3c:c8:f3:cc:e9:f1:8f:b5:ea:72:c4:fc:ae:72:1e:
b6:05:ba:f0:8a:93:be:48:6b:24:c3:3d:c6:31:ca:7b:4c:f4:
51:73:58:8f:cc:6e:e6:9b:a0:50:a4:34:a2:a4:6d:87:9e:cb:
55:4e:fe:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8jy5vR/UCCkhcvAE7G6SBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlZWU3YTNhZDE1MmJiODcyNWE3ZGI5YmI3NTIwODA0YjZm
MTE1NWYwHhcNMjUxMDE5MTMwMTA1WhcNMjUxMDIwMTMwMTA1WjAzMTEwLwYDVQQD
Eyg5NGQwNTNkMmQwMjdlNzdkMTBkZDYxOTQyMmE0NWQwZGVhYWM1YWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhzhOSBFORKv9Nys706zC2DB/1ZS
/yKCC0EyeGaXJPGZQ3glj/osSe3fG8tSjkmlGD3xbFHF9BVB2XzrQohj3cesaEnI
ElkNNLPHVu9RP1fWLkwUs4h2e+hfT7WlOP24jDQQ1A2ZI6gPKthaiSDMbjORGAX9
aNlW+6UtESRaxOj8RJgDJ7KwJ0lFD9CmjIq39DvzmNil+tCA8t+y9iUxX0/cYn8g
1kgBpl1lfqoZMgC8qIy9fXKM3PSg35AE+2uj/Mf1TeD4rtvHXEbWYvoJame9/CZL
+JqrL0Xf7k7pTxEQUvKBFWiiJKC39bY5Ezs9EJW9eH3MEGdrW5ZPOjPf9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJTQU9LQJ+d9EN1hlCKkXQ3qrFqnMB8GA1UdIwQY
MBaAFI7uejrRUruHJafbm7dSCAS28RVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanU1Nk90RlN1NGNscDl1YnQxSUlCTGJ4RlY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83OTc5YjItYzNkOS00ZjMzLWEwOWYt
NDk1OTFhZmUxN2YwLzEvanU1Nk90RlN1NGNscDl1YnQxSUlCTGJ4RlY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS83OTc5YjItYzNkOS00ZjMzLWEwOWYtNDk1OTFhZmUxN2Yw
LzEvanU1Nk90RlN1NGNscDl1YnQxSUlCTGJ4RlY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQykTqfpT
mQAKIeo7bhLcaCBu2S6mbwHg3SbFmSDmrYT5udcnwCWkj16u8tj4CmqOiQVk5Lgf
It9gKUJ8rdfL3QPnpfhvNgn2Z1fSaNs3V7/hSjTR6fO35cAGItWbH5WLESEi0tAt
KD+lbqqLdJqNlCoz/8sklMgFdvl8O6DXb4QjM2XRGgOce5MCGlvq0sgOIRqMtEPa
c8b07AGInlVNEdL/uheTq7QoHNiG9PMOTAZH9mb7wvjuRqZTRhfvprPtmufvJ1RR
0LkaPMjzzOnxj7XqcsT8rnIetgW68IqTvkhrJMM9xjHKe0z0UXNYj8xu5pugUKQ0
oqRth57LVU7+/g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:46 2025 by rpki-client