Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
File: jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft (raw, json)
Hash identifier: PMAQ4JPwJWa3/zbW/8kwtqcpVqbAy9P0xI/T1+gHi8Q=
Subject key identifier: DC:0D:E6:39:8A:3B:14:D8:EF:8B:7A:BE:62:BC:F0:BC:33:F4:12:1C
Authority key identifier: 8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B
Certificate issuer: /CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b
Certificate serial: 0199FDA1BFC09798FDDCAAB222CFC7C2D938
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
Manifest number: 15AF
Signing time: Sun 19 Oct 2025 18:00:59 +0000
Manifest this update: Sun 19 Oct 2025 18:00:59 +0000
Manifest next update: Mon 20 Oct 2025 18:00:59 +0000
Files and hashes: 1: HK8tZZEnH3XebSxA7uU7eXL76hY.roa (hash: A9qzXbhJ+D8oACcswpJV6B2AKA++OqnaZLnW9gQTaUM=)
2: RQvFwPyBVAELy1TU_YFm3UJenmE.roa (hash: LzZxpUC6I1GH1bpp8UofG4oZYb3QFGgu/BwVtxYx/Xk=)
3: jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl (hash: 9SXHjrFJvAi5UL3Ghoq2VqFnb93t8Oqf/eZm3xEsf7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:a1:bf:c0:97:98:fd:dc:aa:b2:22:cf:c7:c2:d9:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c32a6e57ec81cc5cb43bb503749b360f2b05c3b
Validity
Not Before: Oct 19 18:00:59 2025 GMT
Not After : Oct 20 18:00:59 2025 GMT
Subject: CN=dc0de6398a3b14d8ef8b7abe62bcf0bc33f4121c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d7:d1:0a:a4:84:47:06:09:0a:dc:66:40:be:
3e:c6:43:6e:2c:d5:27:58:43:87:e5:21:76:43:d0:
da:b3:f3:f5:16:ad:ff:65:39:c1:17:b3:41:c8:a0:
e1:63:9a:ac:9c:75:5c:e7:16:80:92:10:10:c8:b4:
37:ce:82:c7:91:a4:36:5a:0b:8e:bd:6b:31:5c:51:
54:c4:27:37:d5:09:db:73:29:0b:96:57:3f:31:85:
5d:fb:58:40:dc:47:3f:d3:25:e0:f1:8a:85:19:a2:
c7:fc:73:1c:60:e1:f2:11:f4:a3:02:3c:e6:09:9a:
b4:2b:f8:38:59:4e:e8:62:28:23:79:cd:65:3b:6d:
51:60:e9:18:ea:15:79:1c:b1:04:2c:2b:13:57:3f:
92:2f:4e:d0:e2:d8:8b:07:9b:a8:a5:11:1b:76:6c:
ff:1f:2e:91:10:1d:8c:83:b7:ca:84:30:6c:19:0d:
9d:d6:68:db:de:34:ac:b5:02:c1:cd:c0:cc:9a:38:
7d:48:27:25:2a:98:2a:16:44:ef:1b:a9:9e:ee:f5:
dc:e5:76:22:14:0d:66:55:06:65:22:87:17:68:39:
6f:09:0c:26:0b:30:7d:e0:f9:6f:c8:36:c5:df:b9:
b8:5b:40:f7:fe:41:fc:8e:a8:ef:78:7c:ef:4c:9d:
fb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:0D:E6:39:8A:3B:14:D8:EF:8B:7A:BE:62:BC:F0:BC:33:F4:12:1C
X509v3 Authority Key Identifier:
keyid:8C:32:A6:E5:7E:C8:1C:C5:CB:43:BB:50:37:49:B3:60:F2:B0:5C:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6e0cfa-205e-4d66-ae3a-c743d7c0bb22/1/jDKm5X7IHMXLQ7tQN0mzYPKwXDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:bb:c6:a0:f4:4b:9a:68:f5:f7:5e:a1:82:46:ce:65:38:05:
64:fc:1a:83:f7:2e:cf:94:09:6e:8e:05:8c:08:b7:f2:70:ce:
fb:c0:7a:b2:ef:70:a1:98:e6:6b:e2:ef:2f:68:ec:8a:98:89:
46:3f:cd:4b:6d:3b:6c:15:1b:7f:5d:61:65:3b:a9:47:87:17:
7f:ba:2d:83:53:8b:8c:f3:9a:eb:22:d6:0a:ef:96:ca:cd:6f:
47:34:48:bd:67:c0:27:c5:61:1a:56:44:16:59:6c:5f:0e:84:
8b:7d:e3:a0:d1:95:3b:ad:f7:75:8d:78:61:c0:f3:5e:ab:de:
fe:ac:51:96:1c:75:69:20:87:6a:a5:b3:fe:1b:2e:24:39:bb:
5c:48:1d:8c:e4:fb:e6:22:5e:25:b4:41:9e:fe:47:48:4e:2c:
5f:ae:42:85:8b:8c:87:98:8f:2a:06:33:9b:a5:52:d7:ec:53:
b1:20:11:86:d6:50:1f:2f:ba:f0:1c:7c:af:89:19:2d:a9:70:
b1:ce:22:bb:a5:82:30:c0:9a:00:7b:52:97:14:1d:03:d2:b1:
5b:66:f0:31:27:78:9e:b6:35:93:9b:57:a1:fa:61:2e:69:0c:
51:87:93:89:95:88:8e:a5:55:fc:1d:9e:50:40:12:ac:c7:a6:
67:0e:bf:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9ob/Al5j93KqyIs/Hwtk4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMzJhNmU1N2VjODFjYzVjYjQzYmI1MDM3NDliMzYwZjJi
MDVjM2IwHhcNMjUxMDE5MTgwMDU5WhcNMjUxMDIwMTgwMDU5WjAzMTEwLwYDVQQD
EyhkYzBkZTYzOThhM2IxNGQ4ZWY4YjdhYmU2MmJjZjBiYzMzZjQxMjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9fRCqSERwYJCtxmQL4+xkNuLNUn
WEOH5SF2Q9Das/P1Fq3/ZTnBF7NByKDhY5qsnHVc5xaAkhAQyLQ3zoLHkaQ2WguO
vWsxXFFUxCc31QnbcykLllc/MYVd+1hA3Ec/0yXg8YqFGaLH/HMcYOHyEfSjAjzm
CZq0K/g4WU7oYigjec1lO21RYOkY6hV5HLEELCsTVz+SL07Q4tiLB5uopREbdmz/
Hy6REB2Mg7fKhDBsGQ2d1mjb3jSstQLBzcDMmjh9SCclKpgqFkTvG6me7vXc5XYi
FA1mVQZlIocXaDlvCQwmCzB94PlvyDbF37m4W0D3/kH8jqjveHzvTJ37eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNwN5jmKOxTY74t6vmK88Lwz9BIcMB8GA1UdIwQY
MBaAFIwypuV+yBzFy0O7UDdJs2DysFw7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakRLbTVYN0lITVhMUTd0UU4wbXpZUEt3WERzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC82ZTBjZmEtMjA1ZS00ZDY2LWFlM2Et
Yzc0M2Q3YzBiYjIyLzEvakRLbTVYN0lITVhMUTd0UU4wbXpZUEt3WERzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC82ZTBjZmEtMjA1ZS00ZDY2LWFlM2EtYzc0M2Q3YzBiYjIy
LzEvakRLbTVYN0lITVhMUTd0UU4wbXpZUEt3WERzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPLvGoPRL
mmj1916hgkbOZTgFZPwag/cuz5QJbo4FjAi38nDO+8B6su9woZjma+LvL2jsipiJ
Rj/NS207bBUbf11hZTupR4cXf7otg1OLjPOa6yLWCu+Wys1vRzRIvWfAJ8VhGlZE
FllsXw6Ei33joNGVO633dY14YcDzXqve/qxRlhx1aSCHaqWz/hsuJDm7XEgdjOT7
5iJeJbRBnv5HSE4sX65ChYuMh5iPKgYzm6VS1+xTsSARhtZQHy+68Bx8r4kZLalw
sc4iu6WCMMCaAHtSlxQdA9KxW2bwMSd4nrY1k5tXofphLmkMUYeTiZWIjqVV/B2e
UEASrMemZw6/Nw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:37:23 2025 by rpki-client