Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft
File: jJ3M-eLzfrEHSWp6rxOJTsR243U.mft (raw, json)
Hash identifier: ftg2kmXAkdd2HW011cCttBLJa2E9SLORuF4LoxpgIX0=
Subject key identifier: 15:78:EF:AF:54:35:F9:1A:5C:30:B8:AE:4E:E0:C2:ED:23:CC:05:2C
Authority key identifier: 8C:9D:CC:F9:E2:F3:7E:B1:07:49:6A:7A:AF:13:89:4E:C4:76:E3:75
Certificate issuer: /CN=8c9dccf9e2f37eb107496a7aaf13894ec476e375
Certificate serial: 019A0259A074534AEB9425D771B06DD9A249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft
Manifest number: 0D0E
Signing time: Mon 20 Oct 2025 16:00:19 +0000
Manifest this update: Mon 20 Oct 2025 16:00:19 +0000
Manifest next update: Tue 21 Oct 2025 16:00:19 +0000
Files and hashes: 1: 52ZQ5PtYcXOVHNH-cKfCvXr-NLk.roa (hash: IeCBQ+eKPNR/krpQbJSGOw+keX8AySOWQVyhW1zLVTg=)
2: jJ3M-eLzfrEHSWp6rxOJTsR243U.crl (hash: zryhW77hJz9bSF5Bzo96v2KFm+7Zff8P/lks8pe+EM8=)
3: k6vAZPYoHdRCo63AYTmi48skRhw.roa (hash: SzdnDp8HU7dtL+1ssCq3abGfy6JSu5LenwIqWzaID2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft
rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:59:a0:74:53:4a:eb:94:25:d7:71:b0:6d:d9:a2:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c9dccf9e2f37eb107496a7aaf13894ec476e375
Validity
Not Before: Oct 20 16:00:19 2025 GMT
Not After : Oct 21 16:00:19 2025 GMT
Subject: CN=1578efaf5435f91a5c30b8ae4ee0c2ed23cc052c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:25:f7:ff:2e:0b:e5:d3:46:fe:19:21:eb:38:
50:3f:b5:d2:58:1f:e7:6b:e0:76:99:37:d0:3e:11:
65:8d:89:c6:e0:00:83:21:f9:cb:27:aa:65:ab:1d:
bc:a3:4f:7a:be:7c:88:e0:f3:58:6a:33:bc:bc:ad:
f1:19:02:a7:b3:1b:01:72:9e:8d:5c:e5:a3:1f:e7:
44:20:3c:9a:53:d3:80:09:07:a9:a8:e7:cb:52:b9:
c9:9f:90:89:35:39:15:c1:c6:08:e0:35:76:9b:24:
3e:4f:63:73:9b:fb:1b:a0:d7:74:74:85:92:d6:72:
cd:aa:77:24:cd:76:6c:96:bd:42:a6:ef:b7:a4:fe:
61:10:51:e1:d3:68:f9:3a:85:39:3a:f5:c8:66:03:
6e:b1:8f:64:62:95:6f:ff:47:86:35:83:0d:78:fb:
71:f2:e1:ad:a2:af:49:c8:4d:4f:cf:5e:58:53:06:
32:56:bf:29:18:fd:48:85:7e:57:32:6b:ea:ca:32:
3c:3f:ae:87:c2:e5:20:09:dd:97:03:6c:9f:38:6d:
e9:c5:0f:ca:70:bf:73:4f:21:2c:64:b4:a9:fe:73:
c7:45:8a:c4:27:20:1a:79:67:d0:c4:25:49:4e:c4:
3f:b9:d3:eb:c6:3d:9d:88:9e:06:20:60:9e:8c:e4:
68:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:78:EF:AF:54:35:F9:1A:5C:30:B8:AE:4E:E0:C2:ED:23:CC:05:2C
X509v3 Authority Key Identifier:
keyid:8C:9D:CC:F9:E2:F3:7E:B1:07:49:6A:7A:AF:13:89:4E:C4:76:E3:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:27:62:81:a7:c1:96:a0:08:df:62:b6:2f:90:33:29:cc:af:
e6:53:41:d1:75:52:b2:d7:9f:94:22:17:1a:f0:29:03:36:a8:
62:28:9d:8b:38:56:b1:b8:da:2b:cc:06:1d:c9:8a:24:54:31:
20:8d:69:01:59:d9:ff:4d:dc:f6:04:82:80:17:b7:f4:2f:ce:
f1:27:d0:4e:78:85:b8:27:09:a4:0f:60:f6:07:98:30:cd:bb:
d3:7e:78:70:87:e2:95:26:79:39:de:46:6f:c1:c5:68:0b:46:
9d:b5:d5:85:69:ca:e4:7e:c0:2a:ad:46:ee:d0:49:82:55:36:
fa:35:e5:0c:8a:5a:4e:4c:73:9f:ac:5d:71:52:cb:ff:f8:e8:
32:74:6e:98:6e:6d:7d:57:ac:f2:ed:3e:24:15:2b:d7:0b:1f:
7c:13:38:ab:5d:a0:3d:80:8e:e5:9f:e0:01:f6:70:73:9d:fa:
d0:b1:f9:66:51:eb:8f:89:1c:25:d3:2b:28:bf:be:28:89:a1:
24:16:6d:49:8d:8d:00:18:39:37:69:61:57:38:0d:52:e1:82:
f9:49:09:ea:e2:33:75:c8:9a:b0:7f:2a:85:8d:20:55:54:d5:
15:00:38:82:ae:56:31:9e:2b:78:8d:1d:40:ad:fb:2a:1b:ff:
f6:ca:f6:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoCWaB0U0rrlCXXcbBt2aJJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjOWRjY2Y5ZTJmMzdlYjEwNzQ5NmE3YWFmMTM4OTRlYzQ3
NmUzNzUwHhcNMjUxMDIwMTYwMDE5WhcNMjUxMDIxMTYwMDE5WjAzMTEwLwYDVQQD
EygxNTc4ZWZhZjU0MzVmOTFhNWMzMGI4YWU0ZWUwYzJlZDIzY2MwNTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yX3/y4L5dNG/hkh6zhQP7XSWB/n
a+B2mTfQPhFljYnG4ACDIfnLJ6plqx28o096vnyI4PNYajO8vK3xGQKnsxsBcp6N
XOWjH+dEIDyaU9OACQepqOfLUrnJn5CJNTkVwcYI4DV2myQ+T2Nzm/sboNd0dIWS
1nLNqnckzXZslr1Cpu+3pP5hEFHh02j5OoU5OvXIZgNusY9kYpVv/0eGNYMNePtx
8uGtoq9JyE1Pz15YUwYyVr8pGP1IhX5XMmvqyjI8P66HwuUgCd2XA2yfOG3pxQ/K
cL9zTyEsZLSp/nPHRYrEJyAaeWfQxCVJTsQ/udPrxj2diJ4GIGCejORoCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBV4769UNfkaXDC4rk7gwu0jzAUsMB8GA1UdIwQY
MBaAFIydzPni836xB0lqeq8TiU7EduN1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakozTS1lTHpmckVIU1dwNnJ4T0pUc1IyNDNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iZDU1ZWUtYzdhNi00MWI4LWJiMzEt
NmE4YzNiNjc2YjU3LzEvakozTS1lTHpmckVIU1dwNnJ4T0pUc1IyNDNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9iZDU1ZWUtYzdhNi00MWI4LWJiMzEtNmE4YzNiNjc2YjU3
LzEvakozTS1lTHpmckVIU1dwNnJ4T0pUc1IyNDNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYidigafB
lqAI32K2L5AzKcyv5lNB0XVSsteflCIXGvApAzaoYiidizhWsbjaK8wGHcmKJFQx
II1pAVnZ/03c9gSCgBe39C/O8SfQTniFuCcJpA9g9geYMM270354cIfilSZ5Od5G
b8HFaAtGnbXVhWnK5H7AKq1G7tBJglU2+jXlDIpaTkxzn6xdcVLL//joMnRumG5t
fVes8u0+JBUr1wsffBM4q12gPYCO5Z/gAfZwc5360LH5ZlHrj4kcJdMrKL++KImh
JBZtSY2NABg5N2lhVzgNUuGC+UkJ6uIzdciasH8qhY0gVVTVFQA4gq5WMZ4reI0d
QK37Khv/9sr2XA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:06:00 2025 by rpki-client