Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
File: jagkvGMczuGumdcQOv0tx08eKcQ.mft (raw, json)
Hash identifier: DV9QyUUw6VjMoDBARRFtaS7EVNFsZCLvrg+KZSNMcv8=
Subject key identifier: E8:24:FD:6E:2C:BD:69:72:F9:59:FD:2C:93:89:FA:B8:09:B9:93:BF
Authority key identifier: 8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4
Certificate issuer: /CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4
Certificate serial: 019A01EC27C808186510811068731B532ED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
Manifest number: 1678
Signing time: Mon 20 Oct 2025 14:00:45 +0000
Manifest this update: Mon 20 Oct 2025 14:00:45 +0000
Manifest next update: Tue 21 Oct 2025 14:00:45 +0000
Files and hashes: 1: 5fSz0gTL93bDKbRX7UB399KTqWo.roa (hash: ZekzmLJCJyI/RlrN5lYEw3o4UXuAl+RnUA/jnalWWzw=)
2: QEmXwsIj7ueEdKdwPu44tosMpfM.roa (hash: 2lzHt7XOAfmu9gjrRW7d2O3LPWtVfpw+P41EhC9URe8=)
3: bce44foTbAKg3tHOJ0Qgt1xOcf8.roa (hash: F4bF540q8PJ+GpaHKowNj8adXBg7SShvDYJVRvSviDg=)
4: dNxBOY3fJxweU0pOsjJMTtBxibI.roa (hash: +7/ZxVutYTL6jT8ak+OBnFIC5cdnfh0cuZkYLSLo+Fg=)
5: jagkvGMczuGumdcQOv0tx08eKcQ.crl (hash: AZeSiktZ9SFDfmaTUejUmBLuMNtrfSXM72yfWHgUVxc=)
6: zEt70xhNCNspyv0BGLFGKL4d_Fo.roa (hash: NlwMM676+ehPCudhUDq8LrrGW5swFBYUpzUKu5v1ls8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:ec:27:c8:08:18:65:10:81:10:68:73:1b:53:2e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4
Validity
Not Before: Oct 20 14:00:45 2025 GMT
Not After : Oct 21 14:00:45 2025 GMT
Subject: CN=e824fd6e2cbd6972f959fd2c9389fab809b993bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:61:e4:f5:c1:91:9e:d7:b0:08:a1:53:40:57:
47:21:1e:80:dc:43:7a:95:07:9d:22:42:19:e8:99:
dd:02:a2:a2:d2:3d:eb:03:2d:15:32:8d:40:18:8e:
c7:82:03:87:92:6d:39:0e:66:d7:61:f0:33:8f:bb:
d4:c0:e9:1a:86:ac:e9:c0:8e:55:3d:75:c6:e8:94:
37:dd:76:80:36:ad:fc:7d:97:97:33:fc:ae:9f:9f:
37:33:fc:cd:3b:cc:3a:20:01:f1:f4:3b:3e:95:60:
61:f3:ff:4b:a1:45:6b:c1:b6:f8:70:c5:1b:4f:1e:
9f:b3:68:a6:ab:71:a5:46:a9:e6:fe:44:a9:f6:f0:
7e:32:47:7a:83:6a:0a:1b:82:86:ec:ab:85:b4:98:
42:fe:4b:2a:e7:37:ad:5a:97:9e:c7:38:87:64:84:
3a:7b:7f:f6:e2:32:65:54:cf:ca:f7:87:22:aa:65:
3e:bd:9e:c8:1b:b8:29:52:0e:07:34:6e:1b:48:10:
c3:60:b3:31:66:94:88:ec:4c:fc:4f:39:26:ab:86:
0b:ea:08:ad:d1:bf:e1:83:21:54:3e:09:a2:97:35:
56:9a:1b:de:11:05:8e:3b:21:8b:dc:62:ba:f9:35:
c9:3e:da:a6:03:e8:8c:10:8a:07:b9:9a:0d:8e:e5:
55:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:24:FD:6E:2C:BD:69:72:F9:59:FD:2C:93:89:FA:B8:09:B9:93:BF
X509v3 Authority Key Identifier:
keyid:8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:04:6c:da:7c:a7:60:02:e9:bd:99:45:d1:70:ee:f3:4b:b3:
01:58:ae:81:01:9a:ff:2c:2e:a7:a9:15:a3:03:f0:4b:e8:5f:
aa:9f:54:2d:64:b4:cf:3e:93:d4:47:a7:3e:e0:d2:07:f7:e5:
41:86:cc:f5:21:a4:a8:c5:a7:1d:d1:af:db:61:b5:35:5c:27:
58:34:35:8f:09:b1:d6:7d:5e:ee:5d:c4:97:dc:4c:98:9a:ed:
bf:e0:ae:7c:f4:dc:7c:bd:03:8c:22:91:ff:67:1e:43:b0:06:
00:12:1a:11:68:d3:b8:dc:ba:2f:cd:ce:04:e8:4a:dd:9e:e5:
b4:f0:83:f7:03:1a:d9:93:06:48:c9:95:a0:1d:be:1f:75:b2:
cd:cb:04:d4:a4:07:46:d0:d4:ca:4e:64:ea:86:7e:78:2a:6e:
39:1b:7f:42:7e:c7:7b:c1:b6:b0:3a:89:03:8c:9e:6b:18:04:
b0:26:d9:10:04:04:e4:48:67:72:80:53:75:c6:c5:04:b4:07:
15:10:9d:08:a6:29:02:aa:5d:98:16:7b:76:c0:4f:7e:48:56:
7d:73:48:fa:1b:d1:33:ea:3b:a6:7a:57:8e:12:53:f1:10:6f:
81:34:8f:64:13:28:98:45:37:ac:c0:24:8f:b6:df:91:7c:50:
d8:1d:87:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoB7CfICBhlEIEQaHMbUy7SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYTgyNGJjNjMxY2NlZTFhZTk5ZDcxMDNhZmQyZGM3NGYx
ZTI5YzQwHhcNMjUxMDIwMTQwMDQ1WhcNMjUxMDIxMTQwMDQ1WjAzMTEwLwYDVQQD
EyhlODI0ZmQ2ZTJjYmQ2OTcyZjk1OWZkMmM5Mzg5ZmFiODA5Yjk5M2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2Hk9cGRntewCKFTQFdHIR6A3EN6
lQedIkIZ6JndAqKi0j3rAy0VMo1AGI7HggOHkm05DmbXYfAzj7vUwOkahqzpwI5V
PXXG6JQ33XaANq38fZeXM/yun583M/zNO8w6IAHx9Ds+lWBh8/9LoUVrwbb4cMUb
Tx6fs2imq3GlRqnm/kSp9vB+Mkd6g2oKG4KG7KuFtJhC/ksq5zetWpeexziHZIQ6
e3/24jJlVM/K94ciqmU+vZ7IG7gpUg4HNG4bSBDDYLMxZpSI7Ez8Tzkmq4YL6git
0b/hgyFUPgmilzVWmhveEQWOOyGL3GK6+TXJPtqmA+iMEIoHuZoNjuVVnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOgk/W4svWly+Vn9LJOJ+rgJuZO/MB8GA1UdIwQY
MBaAFI2oJLxjHM7hrpnXEDr9LcdPHinEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamFna3ZHTWN6dUd1bWRjUU92MHR4MDhlS2NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8xY2FhNzktYjhjNC00ZDA4LTliYmUt
Mzg2YzFmOGIwNjQwLzEvamFna3ZHTWN6dUd1bWRjUU92MHR4MDhlS2NRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8xY2FhNzktYjhjNC00ZDA4LTliYmUtMzg2YzFmOGIwNjQw
LzEvamFna3ZHTWN6dUd1bWRjUU92MHR4MDhlS2NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADQRs2nyn
YALpvZlF0XDu80uzAViugQGa/ywup6kVowPwS+hfqp9ULWS0zz6T1EenPuDSB/fl
QYbM9SGkqMWnHdGv22G1NVwnWDQ1jwmx1n1e7l3El9xMmJrtv+CufPTcfL0DjCKR
/2ceQ7AGABIaEWjTuNy6L83OBOhK3Z7ltPCD9wMa2ZMGSMmVoB2+H3WyzcsE1KQH
RtDUyk5k6oZ+eCpuORt/Qn7He8G2sDqJA4yeaxgEsCbZEAQE5EhncoBTdcbFBLQH
FRCdCKYpAqpdmBZ7dsBPfkhWfXNI+hvRM+o7pnpXjhJT8RBvgTSPZBMomEU3rMAk
j7bfkXxQ2B2HbQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:08:19 2025 by rpki-client