Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft
File: rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft (raw, json)
Hash identifier: eBYiatjLU1V9MYUJzAj2/ZEc+FRKSEQCYvFk/eJybTU=
Subject key identifier: CD:A0:CA:29:B9:F9:4C:95:0D:6E:8F:17:C5:EF:E0:3A:5E:2E:95:FD
Authority key identifier: AC:98:7F:A1:F3:63:ED:8D:81:78:28:2C:67:48:08:1D:CC:34:28:03
Certificate issuer: /CN=ac987fa1f363ed8d8178282c6748081dcc342803
Certificate serial: 0199FFFE43CC5EE51CFC6141A78265AAFF2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft
Manifest number: 0B1F
Signing time: Mon 20 Oct 2025 05:01:17 +0000
Manifest this update: Mon 20 Oct 2025 05:01:17 +0000
Manifest next update: Tue 21 Oct 2025 05:01:17 +0000
Files and hashes: 1: FtRwgK_I9t-YF_sE7UyodoqDTX4.roa (hash: Dqn0JGEobLwx+9jJ1AESQC6JXGtHX+GiTsykBk6YE2c=)
2: rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.crl (hash: bRQtFigwhmWFbWyxHXIIbqKE8CKl7a/1nhTKu4ZnHXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:43:cc:5e:e5:1c:fc:61:41:a7:82:65:aa:ff:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac987fa1f363ed8d8178282c6748081dcc342803
Validity
Not Before: Oct 20 05:01:17 2025 GMT
Not After : Oct 21 05:01:17 2025 GMT
Subject: CN=cda0ca29b9f94c950d6e8f17c5efe03a5e2e95fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:35:87:ed:5d:86:8c:db:b1:16:5f:7d:c7:b0:
ad:53:8d:57:7d:8b:65:05:ee:21:f4:65:20:fd:d3:
dd:53:e3:8d:0c:19:ba:69:e9:09:8b:dc:5b:ee:d3:
db:eb:df:90:29:7b:3d:66:38:b9:c9:bb:00:dd:c9:
28:6d:07:89:bb:dc:0f:f9:77:59:79:af:3a:f5:cf:
e3:f2:56:06:0d:bc:6b:7b:24:26:35:e2:56:8b:fc:
4f:33:98:b6:5d:f9:ff:84:2d:3c:59:59:23:22:b3:
80:d0:83:b4:1c:97:2f:cc:1a:1b:86:7f:85:18:6d:
41:28:cb:91:aa:d2:c7:6b:cb:2a:2c:6d:25:ed:b9:
af:2f:7c:b0:c5:01:4a:44:bf:13:e2:27:be:3d:33:
8e:74:4d:23:a0:44:ab:a4:a2:95:90:cf:f3:41:f8:
e6:22:e8:5d:94:6a:af:ab:a6:b4:25:5a:61:1c:38:
27:18:f0:d6:bd:ec:6a:14:be:a4:ee:a6:2c:75:87:
4a:a8:fc:a0:66:b1:77:2a:42:74:29:de:5e:4b:d3:
d8:f6:68:dc:d5:b5:fa:8c:3a:2b:6d:a9:2f:6c:ba:
13:55:f0:87:cf:c1:10:a1:94:05:b3:a7:1a:7a:b3:
3b:23:30:2a:65:9c:38:a0:50:78:da:7c:cc:9a:4a:
21:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A0:CA:29:B9:F9:4C:95:0D:6E:8F:17:C5:EF:E0:3A:5E:2E:95:FD
X509v3 Authority Key Identifier:
keyid:AC:98:7F:A1:F3:63:ED:8D:81:78:28:2C:67:48:08:1D:CC:34:28:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d8053-3812-4497-9777-9ce798d01f8d/1/rJh_ofNj7Y2BeCgsZ0gIHcw0KAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b4:4d:10:c9:9a:c5:23:17:da:b0:8f:9b:86:d6:d3:75:b3:
67:03:14:23:e2:dd:00:ca:09:98:33:85:f7:f3:54:ef:37:23:
84:76:fb:50:84:8f:03:b1:82:a6:47:71:75:8d:02:ca:fd:8f:
b8:3d:84:1a:8a:47:aa:4e:da:81:ae:dd:74:c4:38:26:2f:86:
c4:49:1e:3b:68:60:40:66:66:8c:89:f9:d1:6f:c5:56:d9:9b:
be:ad:f7:58:09:2c:be:90:23:07:10:2e:72:32:b3:a9:be:83:
5f:8a:d0:39:f6:9e:b7:63:e5:0c:e9:db:ff:6c:8d:d2:8d:05:
93:5c:e4:50:e3:e5:e4:29:b8:3b:76:3b:5b:19:a3:87:35:8f:
1d:f2:e2:aa:3b:26:b7:be:b8:78:da:af:6d:8a:bb:cb:b4:d7:
b4:57:46:df:f6:f5:af:ab:d5:41:7e:71:8e:79:40:3b:f6:dd:
61:82:54:be:d1:4e:e1:fe:c6:49:a4:77:b2:c3:6e:1e:64:e1:
54:4f:96:f4:a1:fd:f9:f1:6e:d0:ba:a6:d5:b8:30:8f:f0:45:
fd:8c:ff:cd:54:e8:35:09:0a:37:6c:3d:4d:32:cb:6f:5a:e3:
d7:25:f8:7e:be:b2:b0:30:79:62:e8:2d:95:74:a4:c4:64:5a:
0d:ee:d4:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn//kPMXuUc/GFBp4Jlqv8sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjOTg3ZmExZjM2M2VkOGQ4MTc4MjgyYzY3NDgwODFkY2Mz
NDI4MDMwHhcNMjUxMDIwMDUwMTE3WhcNMjUxMDIxMDUwMTE3WjAzMTEwLwYDVQQD
EyhjZGEwY2EyOWI5Zjk0Yzk1MGQ2ZThmMTdjNWVmZTAzYTVlMmU5NWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TWH7V2GjNuxFl99x7CtU41XfYtl
Be4h9GUg/dPdU+ONDBm6aekJi9xb7tPb69+QKXs9Zji5ybsA3ckobQeJu9wP+XdZ
ea869c/j8lYGDbxreyQmNeJWi/xPM5i2Xfn/hC08WVkjIrOA0IO0HJcvzBobhn+F
GG1BKMuRqtLHa8sqLG0l7bmvL3ywxQFKRL8T4ie+PTOOdE0joESrpKKVkM/zQfjm
IuhdlGqvq6a0JVphHDgnGPDWvexqFL6k7qYsdYdKqPygZrF3KkJ0Kd5eS9PY9mjc
1bX6jDorbakvbLoTVfCHz8EQoZQFs6caerM7IzAqZZw4oFB42nzMmkohxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM2gyim5+UyVDW6PF8Xv4DpeLpX9MB8GA1UdIwQY
MBaAFKyYf6HzY+2NgXgoLGdICB3MNCgDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckpoX29mTmo3WTJCZUNnc1owZ0lIY3cwS0FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8yZDgwNTMtMzgxMi00NDk3LTk3Nzct
OWNlNzk4ZDAxZjhkLzEvckpoX29mTmo3WTJCZUNnc1owZ0lIY3cwS0FNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8yZDgwNTMtMzgxMi00NDk3LTk3NzctOWNlNzk4ZDAxZjhk
LzEvckpoX29mTmo3WTJCZUNnc1owZ0lIY3cwS0FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfLRNEMma
xSMX2rCPm4bW03WzZwMUI+LdAMoJmDOF9/NU7zcjhHb7UISPA7GCpkdxdY0Cyv2P
uD2EGopHqk7aga7ddMQ4Ji+GxEkeO2hgQGZmjIn50W/FVtmbvq33WAksvpAjBxAu
cjKzqb6DX4rQOfaet2PlDOnb/2yN0o0Fk1zkUOPl5Cm4O3Y7WxmjhzWPHfLiqjsm
t764eNqvbYq7y7TXtFdG3/b1r6vVQX5xjnlAO/bdYYJUvtFO4f7GSaR3ssNuHmTh
VE+W9KH9+fFu0Lqm1bgwj/BF/Yz/zVToNQkKN2w9TTLLb1rj1yX4fr6ysDB5Yugt
lXSkxGRaDe7UJA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:51:36 2025 by rpki-client