Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
File: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft (raw, json)
Hash identifier: AuYg20szlkAjpQxfl7qqsUc+spipRR8aInAnd9vy69I=
Subject key identifier: 37:66:D5:66:01:E1:C3:07:3E:E2:60:5F:11:B3:69:40:6F:99:23:9A
Authority key identifier: 8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
Certificate issuer: /CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Certificate serial: 0199FCC6BE4292EEF6744334E14012C69DE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 14:01:47 +0000
Manifest this update: Sun 19 Oct 2025 14:01:47 +0000
Manifest next update: Mon 20 Oct 2025 14:01:47 +0000
Files and hashes: 1: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl (hash: tOIIwGiFrb2/BETzrFVDwJPAbegAefFe0E3Tg/lh8tI=)
2: jimDe-5H6zrXzlwiRCOInbvPXSU.roa (hash: 0bIYKD/kK1rGLj7aPZgB8MSgTvL3rbLfVOH84c3hc+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:be:42:92:ee:f6:74:43:34:e1:40:12:c6:9d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Validity
Not Before: Oct 19 14:01:47 2025 GMT
Not After : Oct 20 14:01:47 2025 GMT
Subject: CN=3766d56601e1c3073ee2605f11b369406f99239a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e0:6d:f8:9b:92:44:ef:f2:da:03:5c:6e:59:
8b:be:1f:6a:d0:a5:29:3b:d4:0a:6c:74:75:28:03:
74:ce:00:06:47:2f:fc:25:e0:3a:23:2a:aa:73:87:
67:58:43:44:88:71:84:9c:71:5e:a3:5d:a2:79:45:
e0:b9:95:e0:23:b7:19:55:a6:be:ff:23:06:3a:39:
99:68:92:96:8e:bf:91:23:2f:0c:db:9d:5c:87:5d:
be:8f:e4:a6:8e:d9:a8:34:87:cb:b1:39:b0:fa:17:
10:7e:44:d1:11:eb:49:fe:ac:a6:af:e1:66:28:34:
3e:bf:d7:03:9f:b9:a3:aa:4b:b6:2e:31:c2:76:57:
5e:b2:4d:c8:36:3d:49:65:ed:8b:48:77:d9:20:e1:
e9:a9:d4:02:89:16:05:8f:00:47:12:be:fe:da:69:
9a:13:44:3e:a9:53:3b:08:3a:60:26:12:3d:4c:d8:
a4:d8:7b:03:16:a0:f2:22:57:26:34:7a:7d:aa:fe:
f0:97:4d:57:b5:fc:6a:e5:70:21:27:fb:3c:06:97:
d5:db:d5:35:4d:a5:96:10:4b:ff:0c:1d:d2:a9:e8:
e8:a5:11:21:a1:75:73:8e:12:98:8e:5e:b1:2c:6c:
01:d7:dd:98:ac:73:96:df:4d:2d:e8:db:c8:c6:d7:
6b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:66:D5:66:01:E1:C3:07:3E:E2:60:5F:11:B3:69:40:6F:99:23:9A
X509v3 Authority Key Identifier:
keyid:8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:62:e7:ae:e6:1a:b3:1e:56:09:88:f3:6f:c6:72:44:c8:d2:
94:37:1a:df:77:39:a9:00:b1:ea:f5:60:67:0b:27:c6:4b:58:
35:9e:52:ba:ca:b0:0b:c4:d9:a4:43:2c:20:43:18:65:2f:db:
bd:39:b0:10:87:08:73:f2:cb:29:88:02:fc:1c:df:7a:65:f0:
09:b7:7d:bc:97:f5:d5:7f:9c:ce:65:d8:cd:ba:27:19:01:9b:
5c:99:e8:1d:18:04:1a:03:51:c1:64:3a:bf:b0:94:9f:00:3b:
28:0c:e2:35:bc:2a:d3:79:8b:be:4f:1c:ff:f6:66:ea:bf:94:
65:0f:82:4e:84:6d:4b:e0:bd:2c:e6:66:c2:22:46:c3:50:01:
b6:7e:f8:61:b0:de:3f:ef:79:d7:af:87:03:4e:a5:2c:d3:3b:
34:50:20:97:d9:52:9d:cd:23:59:90:b2:78:67:36:39:1f:53:
b9:70:c6:16:c4:86:e0:d6:72:78:50:35:00:69:ed:fd:a9:e2:
ce:3c:8f:39:5d:03:80:e8:ee:ca:14:4b:88:d4:bc:32:bf:51:
29:71:6b:67:f9:13:63:40:2e:86:50:4d:4a:35:d8:3f:91:aa:
af:58:f5:a7:28:90:c6:e4:d6:18:f1:9a:9f:49:72:59:2c:b6:
39:55:03:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xr5Cku72dEM04UASxp3lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjN2YyNTFhYzExOTBjOWRlZGM4ZTViZTA4NWQ1NDM4N2Y0
MDFhMzcwHhcNMjUxMDE5MTQwMTQ3WhcNMjUxMDIwMTQwMTQ3WjAzMTEwLwYDVQQD
EygzNzY2ZDU2NjAxZTFjMzA3M2VlMjYwNWYxMWIzNjk0MDZmOTkyMzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveBt+JuSRO/y2gNcblmLvh9q0KUp
O9QKbHR1KAN0zgAGRy/8JeA6Iyqqc4dnWENEiHGEnHFeo12ieUXguZXgI7cZVaa+
/yMGOjmZaJKWjr+RIy8M251ch12+j+SmjtmoNIfLsTmw+hcQfkTREetJ/qymr+Fm
KDQ+v9cDn7mjqku2LjHCdldesk3INj1JZe2LSHfZIOHpqdQCiRYFjwBHEr7+2mma
E0Q+qVM7CDpgJhI9TNik2HsDFqDyIlcmNHp9qv7wl01Xtfxq5XAhJ/s8BpfV29U1
TaWWEEv/DB3SqejopREhoXVzjhKYjl6xLGwB192YrHOW300t6NvIxtdr+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDdm1WYB4cMHPuJgXxGzaUBvmSOaMB8GA1UdIwQY
MBaAFIx/JRrBGQyd7cjlvghdVDh/QBo3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakg4bEdzRVpESjN0eU9XLUNGMVVPSDlBR2pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9iMmUzNTAtYWY5MC00ZjliLThmYmYt
NTAwYzdjNDVmNDE5LzEvakg4bEdzRVpESjN0eU9XLUNGMVVPSDlBR2pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9iMmUzNTAtYWY5MC00ZjliLThmYmYtNTAwYzdjNDVmNDE5
LzEvakg4bEdzRVpESjN0eU9XLUNGMVVPSDlBR2pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkWLnruYa
sx5WCYjzb8ZyRMjSlDca33c5qQCx6vVgZwsnxktYNZ5SusqwC8TZpEMsIEMYZS/b
vTmwEIcIc/LLKYgC/BzfemXwCbd9vJf11X+czmXYzbonGQGbXJnoHRgEGgNRwWQ6
v7CUnwA7KAziNbwq03mLvk8c//Zm6r+UZQ+CToRtS+C9LOZmwiJGw1ABtn74YbDe
P+9516+HA06lLNM7NFAgl9lSnc0jWZCyeGc2OR9TuXDGFsSG4NZyeFA1AGnt/ani
zjyPOV0DgOjuyhRLiNS8Mr9RKXFrZ/kTY0AuhlBNSjXYP5Gqr1j1pyiQxuTWGPGa
n0lyWSy2OVUD7g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:41 2025 by rpki-client