Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
File: jsH30FMGguG2jjv-WodE7lGtM10.mft (raw, json)
Hash identifier: PFL3JFThxjMy+3e0MuPH+mTJfR7axYRxOPFion088aI=
Subject key identifier: 94:74:DB:E1:82:9E:A5:1C:A2:0D:33:4E:93:A1:CE:00:79:5A:32:21
Authority key identifier: 8E:C1:F7:D0:53:06:82:E1:B6:8E:3B:FE:5A:87:44:EE:51:AD:33:5D
Certificate issuer: /CN=8ec1f7d0530682e1b68e3bfe5a8744ee51ad335d
Certificate serial: 0199FD6B2D1CE152C420CC0F24F459A49C6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 17:01:23 +0000
Manifest this update: Sun 19 Oct 2025 17:01:23 +0000
Manifest next update: Mon 20 Oct 2025 17:01:23 +0000
Files and hashes: 1: WqkjigZnCXf1cGoouiwLBsYhyDg.roa (hash: JS3h2BtVCeMAnMIYV0aIQuTD6sVEzA9KQapJj6DBbJg=)
2: jsH30FMGguG2jjv-WodE7lGtM10.crl (hash: Hm4pMPtvkdvRNI8mr9w6p8Dr8hTAukJag/OX46hjhac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:2d:1c:e1:52:c4:20:cc:0f:24:f4:59:a4:9c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec1f7d0530682e1b68e3bfe5a8744ee51ad335d
Validity
Not Before: Oct 19 17:01:23 2025 GMT
Not After : Oct 20 17:01:23 2025 GMT
Subject: CN=9474dbe1829ea51ca20d334e93a1ce00795a3221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:43:45:7d:c7:fc:06:d2:85:0d:85:72:c5:88:
a0:4f:b1:75:88:6b:8d:4a:16:dd:55:91:4e:0f:f1:
19:11:81:4a:36:ad:c2:90:32:0d:e9:05:10:81:89:
b3:d0:52:8d:d6:fe:87:d1:0e:8e:aa:4d:03:9c:83:
0b:1c:f6:8d:5c:87:d0:eb:ab:46:de:14:5c:82:f4:
ee:b2:00:9f:76:07:09:2f:5b:81:7f:a6:6a:bb:1b:
b2:a4:8e:1b:e1:7b:8b:bd:d2:1b:af:8c:be:c0:3f:
09:d6:21:a7:6e:c2:38:19:b4:49:89:a3:aa:41:d0:
42:6b:ba:bd:8a:03:8e:de:c5:b2:3f:53:b2:30:eb:
13:1e:1f:d3:c8:b0:f3:01:37:16:29:fd:7f:0b:32:
db:8d:97:28:f9:08:0b:b8:cb:3e:59:ba:6f:e3:45:
59:a6:13:82:dc:4f:ed:2f:5f:6c:8c:ac:f0:8a:47:
e4:aa:de:4f:93:1b:2c:d5:de:4e:a7:87:d4:09:45:
9f:3f:ef:e6:33:fe:99:7d:90:83:38:05:c8:92:8e:
90:f0:58:a9:f3:15:85:ba:72:0d:8a:9a:e3:8f:ea:
d6:5e:8a:ca:8d:cf:f9:de:cc:ab:9c:f5:98:a5:c7:
f4:e1:22:02:eb:3d:23:31:ac:c2:26:89:7d:46:b9:
29:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:74:DB:E1:82:9E:A5:1C:A2:0D:33:4E:93:A1:CE:00:79:5A:32:21
X509v3 Authority Key Identifier:
keyid:8E:C1:F7:D0:53:06:82:E1:B6:8E:3B:FE:5A:87:44:EE:51:AD:33:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:84:10:d3:38:78:12:0c:7b:ca:37:7d:93:7b:d8:f7:55:d8:
58:b7:76:ee:0c:79:ff:f4:5d:1a:fe:ff:9a:b7:5d:60:bc:b3:
64:85:33:e9:23:a2:4a:25:ea:82:b4:d1:7a:7e:af:91:8e:f5:
f6:e6:dc:4c:5f:71:a5:93:44:bc:ac:44:3d:52:63:ae:d7:b3:
67:7e:1b:f8:38:5c:ff:86:dc:3f:37:79:fd:da:d9:2e:49:96:
d7:31:f5:87:89:81:23:f6:d1:60:34:bb:89:75:c7:27:4e:c4:
c2:64:f8:40:fc:f8:85:1e:55:83:0a:52:88:35:b9:5a:5d:e1:
dc:4c:30:6f:dc:f3:82:7e:73:ca:12:a5:2c:3c:1d:af:0b:f8:
3b:12:47:31:bf:db:5b:e1:c1:00:43:bd:55:a6:d8:24:45:65:
3e:68:36:db:69:08:31:4c:19:f1:e7:a0:14:35:9d:da:34:66:
43:76:0e:30:d9:25:be:2d:3b:1f:de:45:1e:0b:d9:74:35:e8:
83:96:74:da:94:e7:77:e3:14:57:7c:00:98:a5:30:9d:e1:d8:
d6:75:ce:27:7c:50:c1:cc:65:4c:8c:5c:5b:3f:a6:4d:aa:ae:
ea:6f:38:0b:9a:fc:76:43:68:f3:1c:43:30:0f:6f:a4:3d:27:
12:ce:7a:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9ay0c4VLEIMwPJPRZpJxsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYzFmN2QwNTMwNjgyZTFiNjhlM2JmZTVhODc0NGVlNTFh
ZDMzNWQwHhcNMjUxMDE5MTcwMTIzWhcNMjUxMDIwMTcwMTIzWjAzMTEwLwYDVQQD
Eyg5NDc0ZGJlMTgyOWVhNTFjYTIwZDMzNGU5M2ExY2UwMDc5NWEzMjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA90NFfcf8BtKFDYVyxYigT7F1iGuN
ShbdVZFOD/EZEYFKNq3CkDIN6QUQgYmz0FKN1v6H0Q6Oqk0DnIMLHPaNXIfQ66tG
3hRcgvTusgCfdgcJL1uBf6ZquxuypI4b4XuLvdIbr4y+wD8J1iGnbsI4GbRJiaOq
QdBCa7q9igOO3sWyP1OyMOsTHh/TyLDzATcWKf1/CzLbjZco+QgLuMs+Wbpv40VZ
phOC3E/tL19sjKzwikfkqt5Pkxss1d5Op4fUCUWfP+/mM/6ZfZCDOAXIko6Q8Fip
8xWFunINiprjj+rWXorKjc/53syrnPWYpcf04SIC6z0jMazCJol9RrkpEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJR02+GCnqUcog0zTpOhzgB5WjIhMB8GA1UdIwQY
MBaAFI7B99BTBoLhto47/lqHRO5RrTNdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanNIMzBGTUdndUcyamp2LVdvZEU3bEd0TTEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS85MThhMzMtNjc2Ni00Nzk1LTg1NzMt
YWVlNjk4YWY2OGI3LzEvanNIMzBGTUdndUcyamp2LVdvZEU3bEd0TTEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS85MThhMzMtNjc2Ni00Nzk1LTg1NzMtYWVlNjk4YWY2OGI3
LzEvanNIMzBGTUdndUcyamp2LVdvZEU3bEd0TTEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB4QQ0zh4
Egx7yjd9k3vY91XYWLd27gx5//RdGv7/mrddYLyzZIUz6SOiSiXqgrTRen6vkY71
9ubcTF9xpZNEvKxEPVJjrtezZ34b+Dhc/4bcPzd5/drZLkmW1zH1h4mBI/bRYDS7
iXXHJ07EwmT4QPz4hR5VgwpSiDW5Wl3h3Ewwb9zzgn5zyhKlLDwdrwv4OxJHMb/b
W+HBAEO9VabYJEVlPmg222kIMUwZ8eegFDWd2jRmQ3YOMNklvi07H95FHgvZdDXo
g5Z02pTnd+MUV3wAmKUwneHY1nXOJ3xQwcxlTIxcWz+mTaqu6m84C5r8dkNo8xxD
MA9vpD0nEs561g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:53:49 2025 by rpki-client