Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
File: j1T8geUVM4bLQsFzMwUNqDGtqeU.mft (raw, json)
Hash identifier: owf/rbgIMMSl2iPXibWWXMos5hmAm31zEBeMnrA3sdI=
Subject key identifier: 94:C5:0E:FD:24:83:B3:F0:B3:C3:57:C7:A2:7E:B4:52:C4:40:65:C2
Authority key identifier: 8F:54:FC:81:E5:15:33:86:CB:42:C1:73:33:05:0D:A8:31:AD:A9:E5
Certificate issuer: /CN=8f54fc81e5153386cb42c17333050da831ada9e5
Certificate serial: 0199FF5997357296942477013FF67C4C10E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
Manifest number: 0B5B
Signing time: Mon 20 Oct 2025 02:01:25 +0000
Manifest this update: Mon 20 Oct 2025 02:01:25 +0000
Manifest next update: Tue 21 Oct 2025 02:01:25 +0000
Files and hashes: 1: j1T8geUVM4bLQsFzMwUNqDGtqeU.crl (hash: Q1tGKOjsvM8+lAYIj1GGsSlm5bWPzrlUNWaYusChM8Q=)
2: v0kVKV7zgFySWfJ-lGmi8aljQUA.roa (hash: QFeJpmHiChV7sVzkjOtXP/zd/9P3djdIsqxjZcryjik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:97:35:72:96:94:24:77:01:3f:f6:7c:4c:10:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f54fc81e5153386cb42c17333050da831ada9e5
Validity
Not Before: Oct 20 02:01:25 2025 GMT
Not After : Oct 21 02:01:25 2025 GMT
Subject: CN=94c50efd2483b3f0b3c357c7a27eb452c44065c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:00:3b:c1:60:c8:b1:8f:bf:d9:4b:9c:7c:14:
d2:95:88:b8:d3:3d:60:f8:0a:7f:dd:58:d6:03:bb:
f0:1b:ed:bf:e5:b8:1b:84:e8:ff:e7:36:f1:24:f7:
05:ff:aa:2d:12:05:4b:8e:80:5d:80:1d:1b:b7:09:
87:f5:a9:79:8f:95:5f:24:e5:46:8a:84:32:23:e2:
c2:00:b7:93:72:c2:9f:63:79:f8:82:64:50:a8:71:
22:05:35:89:ee:59:1e:24:c1:50:54:f2:b2:00:4c:
e6:d8:47:25:64:24:83:72:31:e7:ed:d5:e3:71:61:
b6:e2:0b:82:32:37:74:3c:a3:75:99:b4:b5:7a:38:
27:c9:97:2c:fd:29:45:8a:3c:7f:81:79:6f:ef:a1:
e9:3b:27:b4:f2:ac:2b:12:e3:5a:d9:2d:64:74:1c:
33:89:99:90:1c:1b:1d:3a:f6:7a:1d:b7:dc:8a:6e:
f8:b0:39:26:8e:9a:4e:56:4e:c6:10:16:7a:14:45:
12:9a:f2:19:8c:42:3e:45:83:aa:53:3b:32:42:f3:
54:cf:e2:fd:4a:e6:e3:57:c8:f2:93:91:1f:be:09:
c2:4b:b5:3c:79:83:95:19:ae:a5:6b:05:1b:b1:78:
3a:27:52:f1:44:83:e4:15:ea:57:0c:20:10:5d:5d:
55:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C5:0E:FD:24:83:B3:F0:B3:C3:57:C7:A2:7E:B4:52:C4:40:65:C2
X509v3 Authority Key Identifier:
keyid:8F:54:FC:81:E5:15:33:86:CB:42:C1:73:33:05:0D:A8:31:AD:A9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:b9:d3:32:70:39:95:bf:7e:3e:e2:36:e6:4b:d8:7a:b7:bd:
d3:c9:85:f5:08:d3:6f:aa:4c:92:13:e6:ff:95:d5:44:21:33:
12:de:af:3d:49:48:0b:ff:d8:9f:35:42:b2:46:21:6c:6f:07:
a2:d4:80:f2:75:c0:38:b9:fb:94:7e:8f:80:3a:fc:6a:06:f8:
25:86:5f:1a:09:11:47:e1:8a:91:49:26:71:fe:f3:00:7f:19:
35:7b:50:41:45:4e:47:0a:f9:e8:7f:43:36:43:c0:48:43:6e:
93:7a:42:b9:97:01:1b:7f:6f:7c:25:53:a6:29:97:10:01:27:
4a:90:1c:f7:38:23:c6:d5:2d:ef:4a:3d:5a:7d:be:09:d8:c4:
fd:29:17:4a:45:48:12:87:6a:94:af:68:bb:b5:c6:d7:ef:cc:
43:fa:a2:fc:cf:d0:68:ac:79:94:80:87:79:33:f4:88:b1:55:
30:d5:a0:d8:d7:32:a1:51:48:69:65:c4:27:19:b0:ac:64:22:
6a:ca:71:c0:e3:af:73:bd:9d:47:ba:8d:cf:bd:f0:81:a5:a5:
ee:e5:17:71:33:03:8d:89:f4:fd:4b:c9:12:49:17:83:87:7d:
3b:84:30:f4:b8:50:42:57:5d:44:86:92:ff:c1:94:a6:a6:04:
c1:78:64:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/WZc1cpaUJHcBP/Z8TBDhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmNTRmYzgxZTUxNTMzODZjYjQyYzE3MzMzMDUwZGE4MzFh
ZGE5ZTUwHhcNMjUxMDIwMDIwMTI1WhcNMjUxMDIxMDIwMTI1WjAzMTEwLwYDVQQD
Eyg5NGM1MGVmZDI0ODNiM2YwYjNjMzU3YzdhMjdlYjQ1MmM0NDA2NWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8AA7wWDIsY+/2UucfBTSlYi40z1g
+Ap/3VjWA7vwG+2/5bgbhOj/5zbxJPcF/6otEgVLjoBdgB0btwmH9al5j5VfJOVG
ioQyI+LCALeTcsKfY3n4gmRQqHEiBTWJ7lkeJMFQVPKyAEzm2EclZCSDcjHn7dXj
cWG24guCMjd0PKN1mbS1ejgnyZcs/SlFijx/gXlv76HpOye08qwrEuNa2S1kdBwz
iZmQHBsdOvZ6Hbfcim74sDkmjppOVk7GEBZ6FEUSmvIZjEI+RYOqUzsyQvNUz+L9
SubjV8jyk5EfvgnCS7U8eYOVGa6lawUbsXg6J1LxRIPkFepXDCAQXV1VywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJTFDv0kg7Pws8NXx6J+tFLEQGXCMB8GA1UdIwQY
MBaAFI9U/IHlFTOGy0LBczMFDagxranlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajFUOGdlVVZNNGJMUXNGek13VU5xREd0cWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81NDIyNTAtYmEwYi00YTEwLThiZGQt
NDU3OTQ5MjRjYjUzLzEvajFUOGdlVVZNNGJMUXNGek13VU5xREd0cWVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC81NDIyNTAtYmEwYi00YTEwLThiZGQtNDU3OTQ5MjRjYjUz
LzEvajFUOGdlVVZNNGJMUXNGek13VU5xREd0cWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKLnTMnA5
lb9+PuI25kvYere908mF9QjTb6pMkhPm/5XVRCEzEt6vPUlIC//YnzVCskYhbG8H
otSA8nXAOLn7lH6PgDr8agb4JYZfGgkRR+GKkUkmcf7zAH8ZNXtQQUVORwr56H9D
NkPASENuk3pCuZcBG39vfCVTpimXEAEnSpAc9zgjxtUt70o9Wn2+CdjE/SkXSkVI
EodqlK9ou7XG1+/MQ/qi/M/QaKx5lICHeTP0iLFVMNWg2NcyoVFIaWXEJxmwrGQi
aspxwOOvc72dR7qNz73wgaWl7uUXcTMDjYn0/UvJEkkXg4d9O4Qw9LhQQlddRIaS
/8GUpqYEwXhkhg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:48:25 2025 by rpki-client