Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft
File: jVdqhq46NTLhCcXN9ymtR4wcaX8.mft (raw, json)
Hash identifier: IjGuyTzeRyUNy4oRw208Br8DQM9s1Kf5GkFKWRcnRcg=
Subject key identifier: E0:C7:B8:A9:81:F7:1E:B0:F9:1B:95:90:BE:F8:5B:54:9B:D2:6A:31
Authority key identifier: 8D:57:6A:86:AE:3A:35:32:E1:09:C5:CD:F7:29:AD:47:8C:1C:69:7F
Certificate issuer: /CN=8d576a86ae3a3532e109c5cdf729ad478c1c697f
Certificate serial: 0199FE0FE95E21181D02D8AD8A3650A3189D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft
Manifest number: 13FC
Signing time: Sun 19 Oct 2025 20:01:19 +0000
Manifest this update: Sun 19 Oct 2025 20:01:19 +0000
Manifest next update: Mon 20 Oct 2025 20:01:19 +0000
Files and hashes: 1: FHdXx9mFGE91HKwW6NlniVutY68.roa (hash: bCfamFt9mTX4NzIQ8vZRhb/+uNTjpTqVv/iTNAFMwHg=)
2: jVdqhq46NTLhCcXN9ymtR4wcaX8.crl (hash: lVaG80S/IeBTjJ2jG+oq1oWsLIW+d/oMpRi+5ATilDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:e9:5e:21:18:1d:02:d8:ad:8a:36:50:a3:18:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d576a86ae3a3532e109c5cdf729ad478c1c697f
Validity
Not Before: Oct 19 20:01:19 2025 GMT
Not After : Oct 20 20:01:19 2025 GMT
Subject: CN=e0c7b8a981f71eb0f91b9590bef85b549bd26a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b4:d2:ee:e6:0a:5f:bb:86:3b:4e:39:79:7c:
b9:96:a3:ad:f7:d9:0c:d2:43:b5:35:a6:ed:b4:d0:
c3:54:38:b9:fa:68:94:4b:9a:52:cb:d6:f6:3a:1c:
25:e1:ce:87:f6:25:7e:81:13:b5:73:d2:c0:5a:a2:
55:98:56:ef:09:8c:d2:59:f9:53:7d:36:dd:0c:cb:
17:1b:fd:cb:3d:34:f7:e9:1b:a7:02:81:c5:7f:48:
1c:de:68:28:49:86:04:cc:d5:03:28:ba:45:30:e4:
29:d5:7c:7c:54:8a:53:12:ee:c7:b3:74:ec:04:cb:
bb:21:63:f7:7d:df:6c:66:37:bd:67:03:a1:da:67:
d2:47:9c:8f:93:8d:37:99:9d:b9:df:86:08:f7:87:
e5:63:ab:d0:a7:78:dd:11:dd:35:b9:c7:96:d5:9d:
0d:f2:64:a8:ef:15:e2:fc:b6:78:fc:16:df:0d:1b:
9a:c9:fa:4b:b4:2f:85:3f:c5:e3:94:78:08:3e:aa:
a5:06:4e:05:d5:89:97:f8:da:09:f4:0e:2a:23:da:
a0:57:88:76:60:1e:a6:53:db:a7:c2:b0:06:f9:6e:
75:55:b6:52:16:70:ac:31:2c:c5:cc:a4:ef:a2:69:
02:35:5e:cf:73:58:db:5d:4c:f8:d8:cf:d2:f6:c2:
25:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C7:B8:A9:81:F7:1E:B0:F9:1B:95:90:BE:F8:5B:54:9B:D2:6A:31
X509v3 Authority Key Identifier:
keyid:8D:57:6A:86:AE:3A:35:32:E1:09:C5:CD:F7:29:AD:47:8C:1C:69:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:b7:68:0b:16:e5:9e:ca:4a:8f:89:29:cd:e4:cd:98:f0:55:
15:66:5d:59:0f:47:b9:db:76:8c:1c:8c:5f:55:73:96:33:3e:
7a:b9:61:f8:8e:1b:b2:b2:ad:0e:43:28:34:38:b4:b1:04:a9:
eb:31:7d:c5:5b:df:b4:a9:22:dd:ab:15:07:61:b3:fc:11:a0:
3b:9e:89:24:7c:95:0b:4d:7f:8e:18:7b:4c:69:d9:c3:10:22:
5f:72:8f:e6:44:1b:48:0b:53:eb:e9:8f:49:f9:0e:c5:64:f1:
4b:94:71:ba:73:0a:d7:ce:fd:5d:1c:1e:34:ec:c5:50:2d:4d:
4c:8b:94:e0:3e:de:c6:11:ae:96:27:41:9f:db:2e:22:f4:07:
a3:50:18:0e:f4:7a:d9:44:fb:79:d6:93:9e:64:bd:9a:46:30:
50:a2:cd:e0:3d:64:6c:d6:13:bd:1f:c3:e8:d4:8c:a9:bf:8e:
64:5a:35:d2:5f:22:11:1e:b8:a7:4f:96:1f:78:a3:b9:8e:23:
58:14:9b:da:8f:c0:0e:a0:6f:ed:58:bd:16:1e:03:f5:1d:7a:
7f:d8:15:c1:b4:cc:ad:d2:1e:29:67:71:fb:fd:77:10:51:0f:
c8:44:43:50:16:4f:ed:94:43:80:5f:21:40:0a:ec:28:6a:b2:
e0:d9:2f:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+D+leIRgdAtitijZQoxidMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNTc2YTg2YWUzYTM1MzJlMTA5YzVjZGY3MjlhZDQ3OGMx
YzY5N2YwHhcNMjUxMDE5MjAwMTE5WhcNMjUxMDIwMjAwMTE5WjAzMTEwLwYDVQQD
EyhlMGM3YjhhOTgxZjcxZWIwZjkxYjk1OTBiZWY4NWI1NDliZDI2YTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbTS7uYKX7uGO045eXy5lqOt99kM
0kO1NabttNDDVDi5+miUS5pSy9b2Ohwl4c6H9iV+gRO1c9LAWqJVmFbvCYzSWflT
fTbdDMsXG/3LPTT36RunAoHFf0gc3mgoSYYEzNUDKLpFMOQp1Xx8VIpTEu7Hs3Ts
BMu7IWP3fd9sZje9ZwOh2mfSR5yPk403mZ2534YI94flY6vQp3jdEd01uceW1Z0N
8mSo7xXi/LZ4/BbfDRuayfpLtC+FP8XjlHgIPqqlBk4F1YmX+NoJ9A4qI9qgV4h2
YB6mU9unwrAG+W51VbZSFnCsMSzFzKTvomkCNV7Pc1jbXUz42M/S9sIlrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFODHuKmB9x6w+RuVkL74W1Sb0moxMB8GA1UdIwQY
MBaAFI1XaoauOjUy4QnFzfcprUeMHGl/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalZkcWhxNDZOVExoQ2NYTjl5bXRSNHdjYVg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8xYjg2NDgtNWU5Ni00Y2VmLTgwNTUt
NjRlNzI5ZWYzMDJkLzEvalZkcWhxNDZOVExoQ2NYTjl5bXRSNHdjYVg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8xYjg2NDgtNWU5Ni00Y2VmLTgwNTUtNjRlNzI5ZWYzMDJk
LzEvalZkcWhxNDZOVExoQ2NYTjl5bXRSNHdjYVg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx7doCxbl
nspKj4kpzeTNmPBVFWZdWQ9Hudt2jByMX1VzljM+erlh+I4bsrKtDkMoNDi0sQSp
6zF9xVvftKki3asVB2Gz/BGgO56JJHyVC01/jhh7TGnZwxAiX3KP5kQbSAtT6+mP
SfkOxWTxS5RxunMK1879XRweNOzFUC1NTIuU4D7exhGulidBn9suIvQHo1AYDvR6
2UT7edaTnmS9mkYwUKLN4D1kbNYTvR/D6NSMqb+OZFo10l8iER64p0+WH3ijuY4j
WBSb2o/ADqBv7Vi9Fh4D9R16f9gVwbTMrdIeKWdx+/13EFEPyERDUBZP7ZRDgF8h
QArsKGqy4NkvhA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:06:16 2025 by rpki-client