Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
File: JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft (raw, json)
Hash identifier: 6/iQTXty+ixaM1/3sKYqiWVPBMofGcPpA9+rA8yxIpw=
Subject key identifier: 7F:B5:F7:A1:11:1E:7A:9E:89:82:28:AB:99:E6:58:D4:7E:1C:D8:D1
Authority key identifier: 24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
Certificate issuer: /CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Certificate serial: 019A006C1010C27EA11F0E1D9F2492AB37F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
Manifest number: 1748
Signing time: Mon 20 Oct 2025 07:01:13 +0000
Manifest this update: Mon 20 Oct 2025 07:01:13 +0000
Manifest next update: Tue 21 Oct 2025 07:01:13 +0000
Files and hashes: 1: J5hR6qbnwqDQorjgQKA4nS-MMic.roa (hash: K6vNh4g2g+c8tlGqdXpR0r75yDquSeuJCke6e2iRcws=)
2: JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl (hash: 9yDS9f4eTHAZlwOsoyt896F11nO8DxWhEzM4i/d57Bk=)
3: Yjz0EriP9DUb51GdW-zHnP36Zd0.roa (hash: cjw7MupvPbtiLozQbL8Owq78kSNGKocuToBDzuLGFa4=)
4: uGyfl12bvyJ2eV3o7doqVU6voOE.roa (hash: a09UlLa9GmADfOkOHhG1EZH/uY1F2w2X5XhkL2/q/aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:10:10:c2:7e:a1:1f:0e:1d:9f:24:92:ab:37:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24147c8b3f37850e9f9074993845c4e069f8efe2
Validity
Not Before: Oct 20 07:01:13 2025 GMT
Not After : Oct 21 07:01:13 2025 GMT
Subject: CN=7fb5f7a1111e7a9e898228ab99e658d47e1cd8d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7e:90:08:88:41:69:29:d5:d4:62:04:70:d6:
24:0b:b8:d7:72:e6:5e:75:b0:0f:72:f2:9e:75:82:
15:be:0f:53:6c:96:7f:99:13:a4:02:3f:79:6e:cf:
55:3c:81:0a:4b:35:09:8f:0c:14:52:e7:09:a9:47:
e2:87:05:44:cc:cb:ea:3f:65:14:39:1d:cc:73:97:
55:84:51:3a:ac:e6:e2:ac:b7:9c:74:75:b2:7b:f9:
32:fc:4b:5c:63:48:65:b3:01:e0:d3:1d:b7:86:0a:
2e:28:43:52:69:97:48:5a:40:e8:ef:a9:a1:16:96:
ed:d5:04:75:46:b8:ea:9f:40:38:a6:6c:9c:9a:f4:
b1:61:e3:d2:eb:61:35:81:78:5b:d5:bb:4f:3c:93:
4c:83:67:28:1a:7a:27:9e:35:98:a5:f2:5f:7d:e1:
e8:fb:73:33:2b:ae:51:22:07:e0:9f:68:d8:a2:8f:
c4:6d:22:d4:f8:a3:a3:85:68:a9:ac:4a:9e:f1:5b:
b4:44:16:fa:f3:a2:88:70:69:42:85:a4:70:2b:bd:
eb:63:b1:58:7d:1d:4d:b4:f7:54:e3:c6:ec:8e:b5:
58:fd:93:a4:46:eb:d7:30:ed:2d:4d:b0:cb:76:2b:
cd:46:6b:6a:b7:5c:67:18:42:88:6d:1a:49:f1:7e:
52:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B5:F7:A1:11:1E:7A:9E:89:82:28:AB:99:E6:58:D4:7E:1C:D8:D1
X509v3 Authority Key Identifier:
keyid:24:14:7C:8B:3F:37:85:0E:9F:90:74:99:38:45:C4:E0:69:F8:EF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBR8iz83hQ6fkHSZOEXE4Gn47-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8da5fe-f405-4ce0-b2d1-b3535b4ca50f/1/JBR8iz83hQ6fkHSZOEXE4Gn47-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:39:b3:bf:a2:7d:3a:57:c3:50:d7:5f:ff:bb:8c:3f:d8:29:
2f:e7:95:d4:0c:6a:e4:8a:38:c8:d3:56:e3:3d:c5:9d:46:ca:
fc:33:9c:62:40:9d:2f:87:b8:68:d5:48:fb:e8:51:56:6f:7f:
d2:cd:ff:91:ad:d5:8c:6f:61:92:94:9a:06:fb:c8:17:39:15:
ef:95:d9:bb:a0:6c:28:51:59:39:b7:75:0f:ea:eb:9c:6d:95:
fb:37:87:2d:da:c2:95:73:43:9c:9c:f1:5f:d1:46:27:44:d6:
56:d7:ec:b9:16:cc:62:78:41:dd:c4:52:43:9b:0f:8e:93:e5:
12:59:80:75:37:3c:74:3d:00:9d:c4:04:43:f1:2e:35:fd:8a:
29:00:12:30:5b:ce:3b:ef:3a:03:47:c5:0f:71:02:25:eb:6a:
ff:9b:98:cd:6b:dc:8f:0c:a7:7b:97:61:58:bb:73:06:9d:be:
90:90:d6:91:69:cc:6f:58:10:bf:4b:3a:c0:31:25:d7:a0:04:
6f:fd:e4:51:81:54:17:fa:84:04:7c:80:e3:df:85:22:a7:34:
ff:54:45:42:b3:5b:a5:67:d9:06:c7:61:79:1e:e7:22:ba:fa:
2e:06:d7:2d:89:6b:c7:db:c9:49:d8:43:bb:9c:48:b9:bb:d2:
85:cb:07:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAbBAQwn6hHw4dnySSqzf4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MTQ3YzhiM2YzNzg1MGU5ZjkwNzQ5OTM4NDVjNGUwNjlm
OGVmZTIwHhcNMjUxMDIwMDcwMTEzWhcNMjUxMDIxMDcwMTEzWjAzMTEwLwYDVQQD
Eyg3ZmI1ZjdhMTExMWU3YTllODk4MjI4YWI5OWU2NThkNDdlMWNkOGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlH6QCIhBaSnV1GIEcNYkC7jXcuZe
dbAPcvKedYIVvg9TbJZ/mROkAj95bs9VPIEKSzUJjwwUUucJqUfihwVEzMvqP2UU
OR3Mc5dVhFE6rObirLecdHWye/ky/EtcY0hlswHg0x23hgouKENSaZdIWkDo76mh
Fpbt1QR1Rrjqn0A4pmycmvSxYePS62E1gXhb1btPPJNMg2coGnonnjWYpfJffeHo
+3MzK65RIgfgn2jYoo/EbSLU+KOjhWiprEqe8Vu0RBb686KIcGlChaRwK73rY7FY
fR1NtPdU48bsjrVY/ZOkRuvXMO0tTbDLdivNRmtqt1xnGEKIbRpJ8X5SmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+196ERHnqeiYIoq5nmWNR+HNjRMB8GA1UdIwQY
MBaAFCQUfIs/N4UOn5B0mThFxOBp+O/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkJSOGl6ODNoUTZma0hTWk9FWEU0R240Ny1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS84ZGE1ZmUtZjQwNS00Y2UwLWIyZDEt
YjM1MzViNGNhNTBmLzEvSkJSOGl6ODNoUTZma0hTWk9FWEU0R240Ny1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS84ZGE1ZmUtZjQwNS00Y2UwLWIyZDEtYjM1MzViNGNhNTBm
LzEvSkJSOGl6ODNoUTZma0hTWk9FWEU0R240Ny1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXjmzv6J9
OlfDUNdf/7uMP9gpL+eV1Axq5Io4yNNW4z3FnUbK/DOcYkCdL4e4aNVI++hRVm9/
0s3/ka3VjG9hkpSaBvvIFzkV75XZu6BsKFFZObd1D+rrnG2V+zeHLdrClXNDnJzx
X9FGJ0TWVtfsuRbMYnhB3cRSQ5sPjpPlElmAdTc8dD0AncQEQ/EuNf2KKQASMFvO
O+86A0fFD3ECJetq/5uYzWvcjwyne5dhWLtzBp2+kJDWkWnMb1gQv0s6wDEl16AE
b/3kUYFUF/qEBHyA49+FIqc0/1RFQrNbpWfZBsdheR7nIrr6LgbXLYlrx9vJSdhD
u5xIubvShcsHdQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 13:21:42 2025 by rpki-client