Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
File: Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft (raw, json)
Hash identifier: TEGzUfo17dGdH9JcHiAL3rFUpBcC/IudndpRlGUL0Fo=
Subject key identifier: 76:0D:2E:A0:07:62:49:91:FD:4B:55:CA:AC:E9:65:8A:41:6D:B1:37
Authority key identifier: 25:FD:57:81:57:6F:3D:42:25:AF:99:45:3E:93:A9:25:98:52:71:26
Certificate issuer: /CN=25fd5781576f3d4225af99453e93a92598527126
Certificate serial: 0199FDD9E2903D20A557F544925A8C4C1E7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jf1XgVdvPUIlr5lFPpOpJZhScSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
Manifest number: 14FE
Signing time: Sun 19 Oct 2025 19:02:18 +0000
Manifest this update: Sun 19 Oct 2025 19:02:18 +0000
Manifest next update: Mon 20 Oct 2025 19:02:18 +0000
Files and hashes: 1: Jf1XgVdvPUIlr5lFPpOpJZhScSY.crl (hash: 8H8gQh7pqmZSkyGfaQtcdXhSriU9JuiAPiHxi+peVQs=)
2: ShfkVecVvyoW3_YQq7LwcMaYmQs.roa (hash: BoQNVikNhGTcu9edVXF4u7v7ipMyHbA4n2LulfglPKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jf1XgVdvPUIlr5lFPpOpJZhScSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:e2:90:3d:20:a5:57:f5:44:92:5a:8c:4c:1e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25fd5781576f3d4225af99453e93a92598527126
Validity
Not Before: Oct 19 19:02:18 2025 GMT
Not After : Oct 20 19:02:18 2025 GMT
Subject: CN=760d2ea007624991fd4b55caace9658a416db137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2b:20:93:52:e9:de:46:7d:96:b9:bc:76:06:
73:22:aa:f5:e5:cc:90:1e:91:c9:f1:df:09:31:be:
41:65:0c:47:92:1e:a3:38:08:b2:2d:f8:c0:2a:52:
ca:83:86:1e:2a:80:1f:f5:45:5e:9b:7f:67:f2:b7:
af:e3:51:54:9f:01:fd:17:1d:98:ee:e9:d6:98:94:
84:11:8d:9b:fe:ca:ec:63:c9:b5:f9:68:3b:b5:11:
8f:b2:e7:e5:ed:61:96:bb:b4:67:1d:53:d3:8f:8a:
47:7e:8e:23:9e:a8:dd:2c:3d:03:5d:25:32:86:26:
10:30:20:73:93:94:49:1a:a8:ee:cd:d6:18:f2:99:
f5:f1:08:13:19:ed:ca:fa:3f:68:79:0a:b6:68:72:
fc:d6:c8:ee:1e:a5:7d:c5:fc:12:0a:3f:a4:3e:70:
c6:e0:77:dd:99:d1:2d:08:18:5a:ae:b6:4d:83:42:
c4:60:2d:49:59:7b:1e:a8:7b:0a:ac:ad:b1:1d:5e:
11:33:19:1b:80:6f:2c:ae:1c:27:0d:0a:28:02:49:
7d:15:c4:1b:cc:a1:7a:37:99:c5:24:de:52:53:1c:
1a:b3:c8:84:1e:98:7c:01:23:65:fd:26:cb:3c:a5:
93:94:23:79:bd:0e:5e:65:67:7a:46:4d:de:7c:79:
21:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:0D:2E:A0:07:62:49:91:FD:4B:55:CA:AC:E9:65:8A:41:6D:B1:37
X509v3 Authority Key Identifier:
keyid:25:FD:57:81:57:6F:3D:42:25:AF:99:45:3E:93:A9:25:98:52:71:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jf1XgVdvPUIlr5lFPpOpJZhScSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:74:a7:1b:d9:77:a0:df:95:29:0f:ce:29:22:14:22:e2:19:
ef:79:31:a5:9c:e8:ea:45:b1:a9:34:bf:1c:ff:51:f9:73:09:
3f:f6:78:2c:55:83:b7:58:7c:4e:e7:b2:86:10:14:e1:db:1b:
3d:1a:ac:51:18:c4:c5:ea:5c:5e:8a:9e:41:3e:36:1f:e2:dc:
2d:8a:ab:9c:9c:92:3e:b7:45:74:87:df:28:03:17:23:52:ba:
a1:a7:ab:d1:ac:67:4a:4d:87:08:0d:ce:6f:4f:49:5e:9f:69:
8f:62:93:2a:66:50:83:47:8a:b2:87:2b:05:0d:a6:20:1d:bf:
e8:b1:b1:70:ee:7e:8e:3b:5e:5d:2e:d0:10:f3:e8:9b:59:9c:
b7:ff:11:bc:c5:0e:c0:b5:ae:31:91:ee:a3:11:54:d2:a2:d1:
be:e8:7f:47:13:86:22:47:c2:ea:ec:9f:33:b5:f0:47:65:01:
a7:0e:61:94:47:16:19:47:d7:1a:dd:0d:fd:9d:bc:4b:56:4c:
0f:f7:b9:36:65:b6:cb:97:15:bf:ae:6a:89:b3:f6:92:bc:c0:
1a:50:d2:9d:5c:5e:d6:23:ab:cc:41:74:0b:36:ef:00:3c:1c:
9d:65:c0:ee:fb:bf:4d:c7:72:31:08:58:f1:05:87:da:4f:29:
f9:c5:60:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92eKQPSClV/VEklqMTB59MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZmQ1NzgxNTc2ZjNkNDIyNWFmOTk0NTNlOTNhOTI1OTg1
MjcxMjYwHhcNMjUxMDE5MTkwMjE4WhcNMjUxMDIwMTkwMjE4WjAzMTEwLwYDVQQD
Eyg3NjBkMmVhMDA3NjI0OTkxZmQ0YjU1Y2FhY2U5NjU4YTQxNmRiMTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiysgk1Lp3kZ9lrm8dgZzIqr15cyQ
HpHJ8d8JMb5BZQxHkh6jOAiyLfjAKlLKg4YeKoAf9UVem39n8rev41FUnwH9Fx2Y
7unWmJSEEY2b/srsY8m1+Wg7tRGPsufl7WGWu7RnHVPTj4pHfo4jnqjdLD0DXSUy
hiYQMCBzk5RJGqjuzdYY8pn18QgTGe3K+j9oeQq2aHL81sjuHqV9xfwSCj+kPnDG
4HfdmdEtCBharrZNg0LEYC1JWXseqHsKrK2xHV4RMxkbgG8srhwnDQooAkl9FcQb
zKF6N5nFJN5SUxwas8iEHph8ASNl/SbLPKWTlCN5vQ5eZWd6Rk3efHkhWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYNLqAHYkmR/UtVyqzpZYpBbbE3MB8GA1UdIwQY
MBaAFCX9V4FXbz1CJa+ZRT6TqSWYUnEmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmYxWGdWZHZQVUlscjVsRlBwT3BKWmhTY1NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85NDlkZGUtZTgxNC00ZmIyLTlmOWIt
NTk0ODNmYTA5ZmUxLzEvSmYxWGdWZHZQVUlscjVsRlBwT3BKWmhTY1NZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni85NDlkZGUtZTgxNC00ZmIyLTlmOWItNTk0ODNmYTA5ZmUx
LzEvSmYxWGdWZHZQVUlscjVsRlBwT3BKWmhTY1NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKHSnG9l3
oN+VKQ/OKSIUIuIZ73kxpZzo6kWxqTS/HP9R+XMJP/Z4LFWDt1h8TueyhhAU4dsb
PRqsURjExepcXoqeQT42H+LcLYqrnJySPrdFdIffKAMXI1K6oaer0axnSk2HCA3O
b09JXp9pj2KTKmZQg0eKsocrBQ2mIB2/6LGxcO5+jjteXS7QEPPom1mct/8RvMUO
wLWuMZHuoxFU0qLRvuh/RxOGIkfC6uyfM7XwR2UBpw5hlEcWGUfXGt0N/Z28S1ZM
D/e5NmW2y5cVv65qibP2krzAGlDSnVxe1iOrzEF0CzbvADwcnWXA7vu/TcdyMQhY
8QWH2k8p+cVgSg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:25:51 2025 by rpki-client