
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
File: jpC9KHAFDIRHehYesJDwXrliAWw.mft (raw, json)
Hash identifier: VpJ3zxGieW0eIzuMR8aX04rLbXfyzpTFTWg0maznFKE=
Subject key identifier: 55:28:48:67:73:1C:CB:6D:79:A4:BF:B6:D9:51:1A:A2:E7:F3:79:29
Authority key identifier: 8E:90:BD:28:70:05:0C:84:47:7A:16:1E:B0:90:F0:5E:B9:62:01:6C
Certificate issuer: /CN=8e90bd2870050c84477a161eb090f05eb962016c
Certificate serial: 0199FEEB9725B8D89B2A3FC8F64480976E86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
Manifest number: 1675
Signing time: Mon 20 Oct 2025 00:01:16 +0000
Manifest this update: Mon 20 Oct 2025 00:01:16 +0000
Manifest next update: Tue 21 Oct 2025 00:01:16 +0000
Files and hashes: 1: BSlnEx89lgl_01HQ-REkDQoHDZg.roa (hash: MlbhOxiaJMprDhYtQeIoXiaVKxfqoVezHoPe9+NM65Y=)
2: dKs_OVLBRUdu5eRJeY09vs38U8U.roa (hash: 2juP1UOIoyK0h+ulYDMXknIUbcCOY8A/8FAOZg52IL0=)
3: jpC9KHAFDIRHehYesJDwXrliAWw.crl (hash: W++x8eRQfsgACChQqQmVlXtQErzdsMdPtKi2xqEhKTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:97:25:b8:d8:9b:2a:3f:c8:f6:44:80:97:6e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e90bd2870050c84477a161eb090f05eb962016c
Validity
Not Before: Oct 20 00:01:16 2025 GMT
Not After : Oct 21 00:01:16 2025 GMT
Subject: CN=55284867731ccb6d79a4bfb6d9511aa2e7f37929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d6:cd:4c:2e:a5:1e:74:47:f6:2d:80:1e:ac:
20:08:4b:d8:15:2d:9e:6b:98:da:5b:36:3e:71:d9:
09:b7:c9:04:07:4d:d0:bb:bf:f4:a7:68:9f:01:90:
a6:d4:a9:2a:8f:d9:42:37:2e:3f:24:ab:6d:1d:1b:
c7:91:7f:ae:9a:da:66:09:71:4d:f7:15:2c:ad:1e:
fe:8f:1b:19:5c:d0:51:ca:9f:93:77:c8:07:43:64:
89:e4:8c:4e:aa:e9:45:6e:7b:92:42:ee:cd:2d:7c:
0e:6a:b8:98:d9:64:e1:bf:e4:c8:48:cc:da:c5:26:
e6:d7:10:77:a8:db:ef:bd:9e:a6:60:83:ff:75:20:
d6:6c:32:85:95:52:71:6e:7b:30:bf:69:ac:da:a3:
b7:46:36:9b:ab:f6:9f:4d:d2:f5:6d:4e:4f:d2:48:
53:6f:98:e8:d2:e4:bc:7c:08:40:2a:d9:d9:92:1e:
99:15:86:f7:e5:fe:b4:e8:b3:ce:76:0b:16:d6:5f:
43:d4:12:2a:a0:23:8f:f3:c3:59:9d:4a:b6:09:9a:
2e:5c:5e:5e:5d:f8:17:9e:6b:f3:30:bb:45:47:8c:
71:21:33:d9:77:5c:de:2d:83:31:4d:5f:dc:3c:ee:
30:e6:35:6a:7a:f0:29:2d:9e:5a:d6:84:fb:19:d8:
02:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:28:48:67:73:1C:CB:6D:79:A4:BF:B6:D9:51:1A:A2:E7:F3:79:29
X509v3 Authority Key Identifier:
keyid:8E:90:BD:28:70:05:0C:84:47:7A:16:1E:B0:90:F0:5E:B9:62:01:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jpC9KHAFDIRHehYesJDwXrliAWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/28e113-3931-4d3d-b793-ecb80702a117/1/jpC9KHAFDIRHehYesJDwXrliAWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:98:e6:e9:32:b9:38:21:95:93:b6:29:d1:56:cf:9c:06:f2:
58:a1:ca:d8:af:68:35:49:10:4e:b6:11:af:3f:a2:1b:dd:a3:
af:a2:ff:bf:7a:64:a3:6d:72:af:8c:e0:fb:74:8c:a8:c2:1b:
bd:9b:74:ca:11:14:d2:90:b1:0b:ea:f1:e2:87:fe:84:e2:fc:
d0:f2:e1:31:54:fb:4b:f7:6c:a9:bc:04:16:08:d1:ff:cd:59:
f2:86:c1:41:53:7b:4a:ea:bd:36:ac:47:84:d1:41:fa:f4:39:
c1:59:0c:fc:cd:5c:dd:34:bc:03:54:17:e1:c8:f2:fd:06:d4:
cf:79:30:cc:5b:c9:1a:a6:ba:36:95:ab:21:d1:a2:a5:8f:ff:
ff:22:4f:58:32:1b:d1:ec:93:8d:73:e4:b3:00:75:45:96:a2:
aa:42:88:6e:76:cb:1c:6c:74:a8:f3:c6:90:43:49:e7:e4:59:
92:be:b3:1a:f0:16:3b:f7:aa:00:24:62:a2:df:67:5d:41:58:
43:b7:09:2f:b2:74:ee:c2:57:6e:a2:a8:2f:5e:4d:9f:af:9e:
c3:ba:f3:e3:57:a1:36:d1:75:72:aa:c2:21:0a:c9:07:b7:5b:
62:89:9c:58:b8:be:4e:ce:43:56:f5:78:d9:0f:dd:db:79:35:
80:d5:18:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+65cluNibKj/I9kSAl26GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlOTBiZDI4NzAwNTBjODQ0NzdhMTYxZWIwOTBmMDVlYjk2
MjAxNmMwHhcNMjUxMDIwMDAwMTE2WhcNMjUxMDIxMDAwMTE2WjAzMTEwLwYDVQQD
Eyg1NTI4NDg2NzczMWNjYjZkNzlhNGJmYjZkOTUxMWFhMmU3ZjM3OTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtbNTC6lHnRH9i2AHqwgCEvYFS2e
a5jaWzY+cdkJt8kEB03Qu7/0p2ifAZCm1Kkqj9lCNy4/JKttHRvHkX+umtpmCXFN
9xUsrR7+jxsZXNBRyp+Td8gHQ2SJ5IxOqulFbnuSQu7NLXwOariY2WThv+TISMza
xSbm1xB3qNvvvZ6mYIP/dSDWbDKFlVJxbnswv2ms2qO3Rjabq/afTdL1bU5P0khT
b5jo0uS8fAhAKtnZkh6ZFYb35f606LPOdgsW1l9D1BIqoCOP88NZnUq2CZouXF5e
XfgXnmvzMLtFR4xxITPZd1zeLYMxTV/cPO4w5jVqevApLZ5a1oT7GdgCbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFUoSGdzHMtteaS/ttlRGqLn83kpMB8GA1UdIwQY
MBaAFI6QvShwBQyER3oWHrCQ8F65YgFsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanBDOUtIQUZESVJIZWhZZXNKRHdYcmxpQVd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yOGUxMTMtMzkzMS00ZDNkLWI3OTMt
ZWNiODA3MDJhMTE3LzEvanBDOUtIQUZESVJIZWhZZXNKRHdYcmxpQVd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8yOGUxMTMtMzkzMS00ZDNkLWI3OTMtZWNiODA3MDJhMTE3
LzEvanBDOUtIQUZESVJIZWhZZXNKRHdYcmxpQVd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWZjm6TK5
OCGVk7Yp0VbPnAbyWKHK2K9oNUkQTrYRrz+iG92jr6L/v3pko21yr4zg+3SMqMIb
vZt0yhEU0pCxC+rx4of+hOL80PLhMVT7S/dsqbwEFgjR/81Z8obBQVN7Suq9NqxH
hNFB+vQ5wVkM/M1c3TS8A1QX4cjy/QbUz3kwzFvJGqa6NpWrIdGipY///yJPWDIb
0eyTjXPkswB1RZaiqkKIbnbLHGx0qPPGkENJ5+RZkr6zGvAWO/eqACRiot9nXUFY
Q7cJL7J07sJXbqKoL15Nn6+ew7rz41ehNtF1cqrCIQrJB7dbYomcWLi+Ts5DVvV4
2Q/d23k1gNUYXA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:15:02 2025 by rpki-client