Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft
File: jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft (raw, json)
Hash identifier: 3dkFg2LA+62PXKBSuhbPjjDFbkUJdSfFDqfn+rjl9Xk=
Subject key identifier: 2D:1C:DA:F6:A2:1C:A9:2E:9E:46:46:0E:6D:09:AA:1A:BB:53:A9:92
Authority key identifier: 8E:61:5E:51:BF:61:AA:74:BF:39:72:55:19:97:59:CF:EC:7C:C9:BB
Certificate issuer: /CN=8e615e51bf61aa74bf397255199759cfec7cc9bb
Certificate serial: 0199FBEB70C9E36A82963C383B326E37042E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft
Manifest number: 0524
Signing time: Sun 19 Oct 2025 10:02:14 +0000
Manifest this update: Sun 19 Oct 2025 10:02:14 +0000
Manifest next update: Mon 20 Oct 2025 10:02:14 +0000
Files and hashes: 1: VCruuJKpBEqYRmO1DijMiFDvfUg.roa (hash: 7eO2Zsxc+ifKLBaQAWYNaRvbWk6+lGNPQlm3ncwwgpg=)
2: jmFeUb9hqnS_OXJVGZdZz-x8ybs.crl (hash: 8MqueC9RwauHDNeGna5u/GpNQmZN0SiufFN5zbGYHYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:70:c9:e3:6a:82:96:3c:38:3b:32:6e:37:04:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e615e51bf61aa74bf397255199759cfec7cc9bb
Validity
Not Before: Oct 19 10:02:14 2025 GMT
Not After : Oct 20 10:02:14 2025 GMT
Subject: CN=2d1cdaf6a21ca92e9e46460e6d09aa1abb53a992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b0:be:36:15:ea:d3:19:bf:48:ea:66:e9:4b:
89:82:93:1e:c7:42:c2:ce:ed:4b:82:4d:6d:07:41:
17:de:d7:37:75:9c:87:dd:f7:23:1b:8b:3c:75:98:
af:13:6e:99:d3:f6:05:2c:5d:4e:a0:51:64:3f:a4:
f0:36:66:8c:38:b8:af:66:c9:d0:1f:15:55:e0:b3:
74:ae:76:1e:53:e3:4d:a2:9e:50:8a:99:bd:c6:6c:
1c:c6:61:03:e6:33:66:e2:3e:68:b2:fb:8b:b3:ee:
06:cb:43:0a:a3:56:cf:19:65:e0:b1:3c:50:c6:c9:
f3:15:a9:9c:8a:bb:32:59:ab:02:e4:6b:45:ae:0a:
d1:aa:0e:51:3d:ed:17:6d:e0:16:c3:36:36:98:80:
a5:58:ac:d9:27:b5:cc:c2:da:e2:bd:ad:7b:2f:d4:
68:ee:3a:c8:ca:cf:38:a7:81:62:85:e1:30:53:ca:
48:80:29:f6:4d:01:1c:aa:77:d3:19:70:9f:bf:04:
a3:28:1b:f1:b8:a3:7b:f6:e1:39:3b:62:af:e7:2a:
5c:2a:19:95:4f:3b:9f:66:92:a1:12:b5:a2:f1:19:
7b:9b:dc:b7:5a:48:16:4c:b8:69:03:a0:41:39:4f:
f1:44:6a:fc:70:a1:e9:b4:e7:b0:79:ce:af:33:95:
6e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:1C:DA:F6:A2:1C:A9:2E:9E:46:46:0E:6D:09:AA:1A:BB:53:A9:92
X509v3 Authority Key Identifier:
keyid:8E:61:5E:51:BF:61:AA:74:BF:39:72:55:19:97:59:CF:EC:7C:C9:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmFeUb9hqnS_OXJVGZdZz-x8ybs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/99e8c1-8691-41d5-9a7f-5435f4345122/1/jmFeUb9hqnS_OXJVGZdZz-x8ybs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:80:2a:b4:e4:e6:5e:54:c2:77:93:14:7b:d7:f6:a4:92:80:
d6:b9:53:d5:57:9d:c7:49:c5:e2:19:ec:8f:fe:5f:04:ed:e2:
6e:a9:87:1e:d6:3f:f1:33:3d:39:82:86:cd:ba:10:af:22:c1:
9c:86:6e:c2:bd:f1:19:47:e3:05:0d:96:7b:ca:d0:7f:36:71:
a6:6d:0e:d6:e6:8f:78:dc:b9:19:a7:c5:90:c2:18:72:af:ad:
9e:32:67:49:83:c8:a0:c5:35:48:1c:f2:8a:2f:85:ab:a8:ff:
aa:00:85:81:65:47:10:d7:03:55:1f:5c:3f:5e:5f:85:5a:df:
88:cf:7a:61:d6:14:da:4f:b4:5d:ce:a2:5d:86:d3:0c:a0:e7:
5d:bb:57:6c:79:dc:05:49:85:d7:a9:7d:e9:db:51:15:f5:28:
ad:1d:a1:d1:21:35:e1:98:66:59:9e:86:9a:27:7d:c3:f7:3d:
e8:a8:b6:e6:16:05:bf:f2:dc:3d:b0:61:4c:98:4b:0f:9a:9d:
f4:c7:08:4a:2c:d2:54:95:8d:77:58:92:5b:bb:36:9a:60:db:
f5:ff:fd:6f:6e:ab:2b:ce:85:5b:d9:83:bb:62:7a:96:92:78:
a8:b5:67:00:ab:9f:0d:3f:4f:bf:a3:02:cf:db:d9:d7:96:0e:
8e:58:c4:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn763DJ42qCljw4OzJuNwQuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNjE1ZTUxYmY2MWFhNzRiZjM5NzI1NTE5OTc1OWNmZWM3
Y2M5YmIwHhcNMjUxMDE5MTAwMjE0WhcNMjUxMDIwMTAwMjE0WjAzMTEwLwYDVQQD
EygyZDFjZGFmNmEyMWNhOTJlOWU0NjQ2MGU2ZDA5YWExYWJiNTNhOTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrC+NhXq0xm/SOpm6UuJgpMex0LC
zu1Lgk1tB0EX3tc3dZyH3fcjG4s8dZivE26Z0/YFLF1OoFFkP6TwNmaMOLivZsnQ
HxVV4LN0rnYeU+NNop5Qipm9xmwcxmED5jNm4j5osvuLs+4Gy0MKo1bPGWXgsTxQ
xsnzFamcirsyWasC5GtFrgrRqg5RPe0XbeAWwzY2mIClWKzZJ7XMwtriva17L9Ro
7jrIys84p4FiheEwU8pIgCn2TQEcqnfTGXCfvwSjKBvxuKN79uE5O2Kv5ypcKhmV
TzufZpKhErWi8Rl7m9y3WkgWTLhpA6BBOU/xRGr8cKHptOewec6vM5VugwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC0c2vaiHKkunkZGDm0Jqhq7U6mSMB8GA1UdIwQY
MBaAFI5hXlG/Yap0vzlyVRmXWc/sfMm7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam1GZVViOWhxblNfT1hKVkdaZFp6LXg4eWJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85OWU4YzEtODY5MS00MWQ1LTlhN2Yt
NTQzNWY0MzQ1MTIyLzEvam1GZVViOWhxblNfT1hKVkdaZFp6LXg4eWJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS85OWU4YzEtODY5MS00MWQ1LTlhN2YtNTQzNWY0MzQ1MTIy
LzEvam1GZVViOWhxblNfT1hKVkdaZFp6LXg4eWJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHYAqtOTm
XlTCd5MUe9f2pJKA1rlT1Vedx0nF4hnsj/5fBO3ibqmHHtY/8TM9OYKGzboQryLB
nIZuwr3xGUfjBQ2We8rQfzZxpm0O1uaPeNy5GafFkMIYcq+tnjJnSYPIoMU1SBzy
ii+Fq6j/qgCFgWVHENcDVR9cP15fhVrfiM96YdYU2k+0Xc6iXYbTDKDnXbtXbHnc
BUmF16l96dtRFfUorR2h0SE14ZhmWZ6Gmid9w/c96Ki25hYFv/LcPbBhTJhLD5qd
9McISizSVJWNd1iSW7s2mmDb9f/9b26rK86FW9mDu2J6lpJ4qLVnAKufDT9Pv6MC
z9vZ15YOjljEuw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:39 2025 by rpki-client