Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
File: jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft (raw, json)
Hash identifier: 4wl50k6R/GFlfHgN6KWM3HXnCTsXx82swwiiQrvmypw=
Subject key identifier: 93:C0:82:22:58:5A:12:B5:3F:7D:56:DC:AB:7B:07:57:EA:01:B7:08
Authority key identifier: 8E:0C:54:B3:AA:E2:51:91:5F:FC:98:BD:34:A5:50:18:1F:FA:B4:9A
Certificate issuer: /CN=8e0c54b3aae251915ffc98bd34a550181ffab49a
Certificate serial: 019A01B647ED1E0F56C8D15B9C5D14BB3F61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
Manifest number: 1678
Signing time: Mon 20 Oct 2025 13:01:54 +0000
Manifest this update: Mon 20 Oct 2025 13:01:54 +0000
Manifest next update: Tue 21 Oct 2025 13:01:54 +0000
Files and hashes: 1: BCN4ZtExcExoi2ZpeY5zxnXpqZs.roa (hash: J4RuOv92rnUwTT9ZA2LqfolBgIUjjRVEb11UiMubpN8=)
2: KQ8djxwDZnjEjwDeGenO8z4CQfE.roa (hash: n8AngvQ0fquzsxztAqeeyBCrmmkZMY5Guz/NYsJtM+U=)
3: jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl (hash: SP0P06VcGsgmJkwN/RVhVsDqDq/emR4RxwQxlqzJZKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b6:47:ed:1e:0f:56:c8:d1:5b:9c:5d:14:bb:3f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0c54b3aae251915ffc98bd34a550181ffab49a
Validity
Not Before: Oct 20 13:01:54 2025 GMT
Not After : Oct 21 13:01:54 2025 GMT
Subject: CN=93c08222585a12b53f7d56dcab7b0757ea01b708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:08:b2:eb:cb:66:e0:f7:d1:68:3c:28:d4:25:
cd:ed:be:84:0e:c6:4c:e0:21:c0:8b:0d:55:29:aa:
81:2a:2c:10:4d:38:7a:48:9f:34:a9:69:3b:1c:5d:
28:cd:38:84:29:c9:13:68:19:24:cb:80:86:e4:e0:
f4:e1:dc:3e:d0:49:cc:10:a8:e0:cb:1e:59:47:84:
be:c1:40:e4:23:f8:04:dd:89:24:a5:ce:e4:db:45:
fd:43:fc:da:4a:bd:93:f4:ad:ef:bd:eb:7d:f9:98:
6d:28:95:a3:1b:07:e8:76:15:58:21:ec:3b:ce:1e:
12:97:cf:52:33:44:5b:25:79:ac:93:2f:7f:d2:8b:
8c:6f:a7:93:5e:73:5f:e8:f2:8d:03:21:ed:4a:58:
62:35:5a:34:3b:13:42:5f:37:ce:66:b8:b7:8b:43:
17:93:6e:2b:ce:bf:a0:8a:8c:88:94:85:19:59:68:
07:16:01:a0:e7:21:00:91:97:85:6a:82:13:e1:a9:
b7:ba:b8:be:a1:0f:13:94:af:cd:9b:b4:94:f2:6d:
09:39:4b:86:16:b3:9d:04:ec:18:02:4c:b3:17:1e:
0e:f9:4a:f3:32:e8:66:94:dd:5c:60:90:25:b6:09:
d8:c6:ce:95:11:b3:c8:91:83:6a:7f:81:ca:2e:ba:
20:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C0:82:22:58:5A:12:B5:3F:7D:56:DC:AB:7B:07:57:EA:01:B7:08
X509v3 Authority Key Identifier:
keyid:8E:0C:54:B3:AA:E2:51:91:5F:FC:98:BD:34:A5:50:18:1F:FA:B4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:40:3e:13:df:29:02:9c:89:e8:2b:bc:5e:d2:ce:b6:54:7a:
83:53:cf:a9:e3:e9:c0:9c:46:87:ce:22:d5:98:2e:b2:aa:62:
41:cb:7a:39:6d:ce:03:21:a8:ca:ee:ff:e3:02:66:61:41:45:
45:79:96:3d:19:07:fd:17:83:be:07:0e:7e:32:1c:8b:1e:c9:
e8:91:6d:97:2d:a2:c0:67:ce:0e:f0:3a:71:02:aa:68:6f:c3:
15:a4:1d:6e:90:35:15:3d:ed:94:f4:dd:0d:3d:e3:8e:4a:1e:
e1:ff:b8:da:d3:68:79:bd:69:2b:75:ac:f0:d5:16:c2:55:b3:
c5:76:44:99:f6:03:25:af:47:9e:74:90:85:19:14:1b:18:cb:
ae:93:12:4b:f4:71:d6:46:32:d4:fa:38:d6:f8:e8:e6:84:e2:
7e:b0:c5:2f:46:79:c4:84:48:3b:5e:d7:53:93:fd:43:90:9a:
3e:a0:c5:ad:65:67:f7:4c:a8:0c:11:13:79:24:88:7f:e9:f4:
48:a8:48:7a:fd:25:60:13:7a:da:bb:fb:36:7e:f4:59:45:92:
ef:2f:f8:08:f2:8b:9a:ee:d8:49:fd:b3:fc:86:07:59:ce:49:
39:9e:85:d1:7d:d6:a5:bb:c4:59:45:46:86:f5:93:ac:c0:ab:
92:c4:36:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoBtkftHg9WyNFbnF0Uuz9hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMGM1NGIzYWFlMjUxOTE1ZmZjOThiZDM0YTU1MDE4MWZm
YWI0OWEwHhcNMjUxMDIwMTMwMTU0WhcNMjUxMDIxMTMwMTU0WjAzMTEwLwYDVQQD
Eyg5M2MwODIyMjU4NWExMmI1M2Y3ZDU2ZGNhYjdiMDc1N2VhMDFiNzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogiy68tm4PfRaDwo1CXN7b6EDsZM
4CHAiw1VKaqBKiwQTTh6SJ80qWk7HF0ozTiEKckTaBkky4CG5OD04dw+0EnMEKjg
yx5ZR4S+wUDkI/gE3Ykkpc7k20X9Q/zaSr2T9K3vvet9+ZhtKJWjGwfodhVYIew7
zh4Sl89SM0RbJXmsky9/0ouMb6eTXnNf6PKNAyHtSlhiNVo0OxNCXzfOZri3i0MX
k24rzr+gioyIlIUZWWgHFgGg5yEAkZeFaoIT4am3uri+oQ8TlK/Nm7SU8m0JOUuG
FrOdBOwYAkyzFx4O+UrzMuhmlN1cYJAltgnYxs6VEbPIkYNqf4HKLrog+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJPAgiJYWhK1P31W3Kt7B1fqAbcIMB8GA1UdIwQY
MBaAFI4MVLOq4lGRX/yYvTSlUBgf+rSaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamd4VXM2cmlVWkZmX0ppOU5LVlFHQl82dEpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9iNjI1MGMtZTA2Mi00MDM3LWI4ZjMt
YmYxZTFkZTJlYTYzLzEvamd4VXM2cmlVWkZmX0ppOU5LVlFHQl82dEpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9iNjI1MGMtZTA2Mi00MDM3LWI4ZjMtYmYxZTFkZTJlYTYz
LzEvamd4VXM2cmlVWkZmX0ppOU5LVlFHQl82dEpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVUA+E98p
ApyJ6Cu8XtLOtlR6g1PPqePpwJxGh84i1ZgusqpiQct6OW3OAyGoyu7/4wJmYUFF
RXmWPRkH/ReDvgcOfjIcix7J6JFtly2iwGfODvA6cQKqaG/DFaQdbpA1FT3tlPTd
DT3jjkoe4f+42tNoeb1pK3Ws8NUWwlWzxXZEmfYDJa9HnnSQhRkUGxjLrpMSS/Rx
1kYy1Po41vjo5oTifrDFL0Z5xIRIO17XU5P9Q5CaPqDFrWVn90yoDBETeSSIf+n0
SKhIev0lYBN62rv7Nn70WUWS7y/4CPKLmu7YSf2z/IYHWc5JOZ6F0X3WpbvEWUVG
hvWTrMCrksQ2Bw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:30:52 2025 by rpki-client