Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft
File: jb7S38YJhwkqB6Dty0arFMv3QxI.mft (raw, json)
Hash identifier: UV9ChV5++U0Uuozc8tO9JoI3dMiRySIn/sEV8CLAR/c=
Subject key identifier: 3C:43:8A:B0:F0:10:6F:CD:C6:0B:05:49:A3:E6:EE:0D:9E:BB:8B:C2
Authority key identifier: 8D:BE:D2:DF:C6:09:87:09:2A:07:A0:ED:CB:46:AB:14:CB:F7:43:12
Certificate issuer: /CN=8dbed2dfc60987092a07a0edcb46ab14cbf74312
Certificate serial: 0199FC8F8EBC94C2977A34A8245BB908D8C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft
Manifest number: 123D
Signing time: Sun 19 Oct 2025 13:01:30 +0000
Manifest this update: Sun 19 Oct 2025 13:01:30 +0000
Manifest next update: Mon 20 Oct 2025 13:01:30 +0000
Files and hashes: 1: TJNsPm3cbta4SQWCq5-FtGHmun4.roa (hash: /493UDv5vGkPWe3z6b3+uF0MkKOjrmJEUEa2xUPVozs=)
2: ZZHa3B2vDiatqWBi2tEDKV0gImw.roa (hash: umPrB29FpLkve01nKipglkcLKOaJtGMVXwoyXB3BjP4=)
3: jb7S38YJhwkqB6Dty0arFMv3QxI.crl (hash: 4Szcd7HDE03zZY5qXMWSibsPpoDKfBFeSe3635Gq9is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:8e:bc:94:c2:97:7a:34:a8:24:5b:b9:08:d8:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dbed2dfc60987092a07a0edcb46ab14cbf74312
Validity
Not Before: Oct 19 13:01:30 2025 GMT
Not After : Oct 20 13:01:30 2025 GMT
Subject: CN=3c438ab0f0106fcdc60b0549a3e6ee0d9ebb8bc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:43:e7:04:92:2d:16:ae:3b:e9:ea:f4:7e:f5:
d2:7f:1c:01:07:2d:8a:88:81:57:f9:1e:9c:7b:09:
3c:ac:37:48:81:5b:a6:ce:8b:24:39:bf:81:1b:d6:
4f:ee:4e:9e:02:23:0c:a7:c3:4c:db:ea:36:4e:f7:
a7:24:cc:34:2f:1a:2d:53:c2:97:57:1c:2b:34:cb:
51:1b:53:64:94:39:8e:38:e0:66:d4:bc:89:82:b4:
48:a1:83:e8:09:2d:c3:65:bc:e0:18:63:92:c2:73:
e3:fa:54:5e:a3:fc:a9:94:8c:ad:14:8c:b3:d8:10:
40:0b:84:cf:f2:5f:5e:33:54:06:4b:ec:7e:0e:59:
aa:97:0e:d7:c7:5d:40:1c:2d:a8:07:be:db:61:63:
9a:e6:a0:1d:c7:ef:e3:a5:00:e6:d5:9e:b5:36:b3:
64:3d:87:0a:a6:ce:5c:6b:7d:7d:7f:35:19:f7:e9:
9d:62:2a:d1:97:d1:25:6f:03:90:13:79:06:49:ad:
51:d9:a2:a9:10:b8:28:b5:64:25:05:61:e9:d4:7a:
9a:cf:2f:da:70:32:c0:a0:1c:be:67:87:f5:f0:67:
dd:6d:f5:28:41:87:89:9e:0a:20:5f:02:11:ce:50:
c3:49:78:90:39:7e:9f:4e:4a:dd:8d:de:0d:a3:98:
92:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:43:8A:B0:F0:10:6F:CD:C6:0B:05:49:A3:E6:EE:0D:9E:BB:8B:C2
X509v3 Authority Key Identifier:
keyid:8D:BE:D2:DF:C6:09:87:09:2A:07:A0:ED:CB:46:AB:14:CB:F7:43:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:ed:2f:98:fd:85:90:ac:ab:cf:f9:02:f0:1f:5d:8a:fe:a2:
40:7a:b0:79:5f:eb:8e:de:da:21:67:83:e9:74:91:0d:1d:56:
de:52:67:f9:1f:c7:d8:6f:1d:e3:b0:c1:4f:ca:08:9f:45:a9:
18:2c:ac:1f:c4:6c:0f:f4:83:21:4c:d1:7e:ae:70:3b:6d:8a:
3d:ae:1e:70:96:38:0c:f9:d4:94:af:04:86:20:87:3a:96:5b:
2e:33:71:6f:f1:78:bd:f9:d5:47:3e:0c:a9:ae:19:65:28:b9:
83:09:91:88:67:d8:84:84:52:0d:0a:79:d4:ea:89:3c:7e:8f:
47:e2:7f:0c:96:ce:18:3b:f0:27:78:29:9d:67:c0:4f:e4:f7:
91:58:c2:70:04:87:4c:dd:c3:ec:af:eb:56:06:3f:f3:ea:8f:
d2:3f:ea:b1:59:55:e6:35:11:00:54:1c:64:b3:d2:d2:49:4a:
78:66:28:08:9d:1b:71:cd:ae:f2:44:ed:22:4b:57:9a:2b:88:
1a:0c:c4:a9:b3:af:ad:ff:4e:e2:63:c9:f1:3a:ea:7c:08:5d:
ec:d5:fb:0f:8c:08:a3:cd:41:d0:15:03:14:17:e2:15:42:61:
dc:f5:d3:53:e2:8e:45:b1:8e:c3:d0:2d:e5:0d:a6:4b:eb:54:
63:60:bd:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j468lMKXejSoJFu5CNjBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYmVkMmRmYzYwOTg3MDkyYTA3YTBlZGNiNDZhYjE0Y2Jm
NzQzMTIwHhcNMjUxMDE5MTMwMTMwWhcNMjUxMDIwMTMwMTMwWjAzMTEwLwYDVQQD
EygzYzQzOGFiMGYwMTA2ZmNkYzYwYjA1NDlhM2U2ZWUwZDllYmI4YmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UPnBJItFq476er0fvXSfxwBBy2K
iIFX+R6cewk8rDdIgVumzoskOb+BG9ZP7k6eAiMMp8NM2+o2TvenJMw0LxotU8KX
VxwrNMtRG1NklDmOOOBm1LyJgrRIoYPoCS3DZbzgGGOSwnPj+lReo/yplIytFIyz
2BBAC4TP8l9eM1QGS+x+Dlmqlw7Xx11AHC2oB77bYWOa5qAdx+/jpQDm1Z61NrNk
PYcKps5ca319fzUZ9+mdYirRl9ElbwOQE3kGSa1R2aKpELgotWQlBWHp1Hqazy/a
cDLAoBy+Z4f18GfdbfUoQYeJngogXwIRzlDDSXiQOX6fTkrdjd4No5iS0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDxDirDwEG/NxgsFSaPm7g2eu4vCMB8GA1UdIwQY
MBaAFI2+0t/GCYcJKgeg7ctGqxTL90MSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamI3UzM4WUpod2txQjZEdHkwYXJGTXYzUXhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8wY2M3MTItYTY2NS00OGQ3LWIzZDQt
ZjBmOGIwNzc1NTIzLzEvamI3UzM4WUpod2txQjZEdHkwYXJGTXYzUXhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8wY2M3MTItYTY2NS00OGQ3LWIzZDQtZjBmOGIwNzc1NTIz
LzEvamI3UzM4WUpod2txQjZEdHkwYXJGTXYzUXhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2O0vmP2F
kKyrz/kC8B9div6iQHqweV/rjt7aIWeD6XSRDR1W3lJn+R/H2G8d47DBT8oIn0Wp
GCysH8RsD/SDIUzRfq5wO22KPa4ecJY4DPnUlK8EhiCHOpZbLjNxb/F4vfnVRz4M
qa4ZZSi5gwmRiGfYhIRSDQp51OqJPH6PR+J/DJbOGDvwJ3gpnWfAT+T3kVjCcASH
TN3D7K/rVgY/8+qP0j/qsVlV5jURAFQcZLPS0klKeGYoCJ0bcc2u8kTtIktXmiuI
GgzEqbOvrf9O4mPJ8TrqfAhd7NX7D4wIo81B0BUDFBfiFUJh3PXTU+KORbGOw9At
5Q2mS+tUY2C9Bw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:11:43 2025 by rpki-client