Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft
File: jc5N9oBEmFoXezAy8A_G_iJK2LM.mft (raw, json)
Hash identifier: rclq6SVRKx6nEP5qzSCDp15htk2Y6yVP/DpyDVQwCoM=
Subject key identifier: 5A:F0:26:F9:70:F1:47:8C:27:BB:18:49:71:45:5C:51:5E:91:DB:44
Authority key identifier: 8D:CE:4D:F6:80:44:98:5A:17:7B:30:32:F0:0F:C6:FE:22:4A:D8:B3
Certificate issuer: /CN=8dce4df68044985a177b3032f00fc6fe224ad8b3
Certificate serial: 0199FBEC3B7138F88E580C9EE1EFAE2D32F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jc5N9oBEmFoXezAy8A_G_iJK2LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:03:06 +0000
Manifest this update: Sun 19 Oct 2025 10:03:06 +0000
Manifest next update: Mon 20 Oct 2025 10:03:06 +0000
Files and hashes: 1: QH9tbxKSp0iUql0lb1UYZe-9C60.roa (hash: j+EJALijkJNAty5MEqMWdkPqVKhawk2tfizWedc8Uwc=)
2: jc5N9oBEmFoXezAy8A_G_iJK2LM.crl (hash: qWTNjJZcAxDw5Y18fYCzjTYlPPIn9jHF49b11dUVlcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jc5N9oBEmFoXezAy8A_G_iJK2LM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:3b:71:38:f8:8e:58:0c:9e:e1:ef:ae:2d:32:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dce4df68044985a177b3032f00fc6fe224ad8b3
Validity
Not Before: Oct 19 10:03:06 2025 GMT
Not After : Oct 20 10:03:06 2025 GMT
Subject: CN=5af026f970f1478c27bb184971455c515e91db44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:69:7b:b1:52:c0:35:22:c4:13:ca:7c:20:ff:
1b:6f:e0:16:f5:96:f1:41:fb:c6:f1:90:87:08:5d:
21:6f:61:79:f4:bc:b4:18:29:eb:05:0c:0d:8d:40:
4f:35:17:df:1c:b3:05:27:4c:c6:74:e0:9c:62:87:
cd:0e:60:f4:f6:e0:37:3a:65:95:6d:3d:79:d5:fa:
3d:9f:34:5a:cd:32:bc:f2:a6:62:a2:cb:33:31:62:
41:9d:84:40:36:81:75:6d:7d:9c:ea:a2:b3:92:0e:
2d:13:56:dd:b8:51:99:8e:77:4c:f9:05:7e:73:48:
9f:24:f4:ae:72:9f:2a:e3:38:fa:70:22:c3:19:32:
ae:8b:05:22:7c:8b:31:40:03:43:83:3b:77:77:ea:
53:e7:a1:72:7a:31:f3:e5:9d:f4:b6:c4:53:bf:3e:
af:5a:b6:3e:47:a3:a5:62:4f:ed:a8:06:cb:e2:65:
c6:a5:fa:98:63:1c:6f:1c:a0:6d:78:4e:8d:f3:a9:
70:92:fd:84:cd:1c:98:47:b0:7d:e3:f0:03:1b:98:
b5:29:0a:d5:cc:2b:cd:90:8f:a6:0a:d7:15:6d:e7:
76:4b:97:d3:73:d4:d9:d5:69:ec:0c:cb:59:a9:a1:
c8:91:09:03:c6:e2:6b:73:00:b4:bc:06:2f:d3:82:
33:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F0:26:F9:70:F1:47:8C:27:BB:18:49:71:45:5C:51:5E:91:DB:44
X509v3 Authority Key Identifier:
keyid:8D:CE:4D:F6:80:44:98:5A:17:7B:30:32:F0:0F:C6:FE:22:4A:D8:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jc5N9oBEmFoXezAy8A_G_iJK2LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:0c:fd:4d:6f:8d:eb:f4:41:f8:bd:d6:dd:48:44:9b:d8:82:
7a:33:ff:23:98:07:e0:77:d0:09:c9:62:2d:22:52:63:23:20:
bc:d4:46:fa:44:03:02:83:22:cc:8b:fb:9c:60:49:c7:46:11:
71:f3:70:1f:32:04:a7:ed:6f:eb:83:04:87:5f:d6:7b:78:92:
f7:ae:f6:5e:3d:12:71:a0:bf:f5:df:02:8f:b8:f7:e3:c7:a1:
c9:ef:5f:e3:aa:df:60:bb:41:69:db:c7:87:3f:f6:f3:d2:77:
1f:be:7d:e9:b6:f6:fe:19:a6:88:4f:7b:dc:ff:c6:60:ea:59:
e1:5e:cf:78:fb:f1:b9:d7:9f:77:c7:62:b8:66:7f:30:d3:42:
ab:94:65:8a:48:59:16:7a:af:c3:59:99:b7:5d:9b:16:e1:c6:
64:20:8e:52:6f:a2:f7:57:87:9a:5f:21:a2:25:4b:fe:00:1c:
bc:a8:61:45:f9:65:12:d4:e7:64:4e:e1:ec:21:57:f3:27:ee:
00:f8:8e:8c:bd:39:e2:92:cf:d4:10:48:d5:43:f0:04:6c:aa:
3a:0a:47:5f:20:7c:a1:d8:9e:99:87:c3:31:35:b4:9a:7d:13:
21:f2:0c:78:66:03:df:f9:09:77:72:1a:2c:36:aa:ad:f0:6a:
77:0e:90:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn77DtxOPiOWAye4e+uLTLzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkY2U0ZGY2ODA0NDk4NWExNzdiMzAzMmYwMGZjNmZlMjI0
YWQ4YjMwHhcNMjUxMDE5MTAwMzA2WhcNMjUxMDIwMTAwMzA2WjAzMTEwLwYDVQQD
Eyg1YWYwMjZmOTcwZjE0NzhjMjdiYjE4NDk3MTQ1NWM1MTVlOTFkYjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22l7sVLANSLEE8p8IP8bb+AW9Zbx
QfvG8ZCHCF0hb2F59Ly0GCnrBQwNjUBPNRffHLMFJ0zGdOCcYofNDmD09uA3OmWV
bT151fo9nzRazTK88qZiosszMWJBnYRANoF1bX2c6qKzkg4tE1bduFGZjndM+QV+
c0ifJPSucp8q4zj6cCLDGTKuiwUifIsxQANDgzt3d+pT56FyejHz5Z30tsRTvz6v
WrY+R6OlYk/tqAbL4mXGpfqYYxxvHKBteE6N86lwkv2EzRyYR7B94/ADG5i1KQrV
zCvNkI+mCtcVbed2S5fTc9TZ1WnsDMtZqaHIkQkDxuJrcwC0vAYv04IzXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFrwJvlw8UeMJ7sYSXFFXFFekdtEMB8GA1UdIwQY
MBaAFI3OTfaARJhaF3swMvAPxv4iStizMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamM1TjlvQkVtRm9YZXpBeThBX0dfaUpLMkxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS81YmRhNTQtZGI3YS00NmQzLTljZjkt
MTZiMWQyZWU4OGE2LzEvamM1TjlvQkVtRm9YZXpBeThBX0dfaUpLMkxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS81YmRhNTQtZGI3YS00NmQzLTljZjktMTZiMWQyZWU4OGE2
LzEvamM1TjlvQkVtRm9YZXpBeThBX0dfaUpLMkxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOAz9TW+N
6/RB+L3W3UhEm9iCejP/I5gH4HfQCcliLSJSYyMgvNRG+kQDAoMizIv7nGBJx0YR
cfNwHzIEp+1v64MEh1/We3iS9672Xj0ScaC/9d8Cj7j348ehye9f46rfYLtBadvH
hz/289J3H7596bb2/hmmiE973P/GYOpZ4V7PePvxudefd8diuGZ/MNNCq5RlikhZ
Fnqvw1mZt12bFuHGZCCOUm+i91eHml8hoiVL/gAcvKhhRfllEtTnZE7h7CFX8yfu
APiOjL054pLP1BBI1UPwBGyqOgpHXyB8odiemYfDMTW0mn0TIfIMeGYD3/kJd3Ia
LDaqrfBqdw6QAw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:15 2025 by rpki-client