Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
File: jfPflxqnyyXft8tVspyHvL4yCCk.mft (raw, json)
Hash identifier: KaX1kSTK69lp8DDV/rW7EAHLZyzN0SnDNZ2p4nKOQQo=
Subject key identifier: 1A:77:12:5E:D2:FF:DE:6E:97:D4:CE:F2:86:38:23:05:64:8B:7A:39
Authority key identifier: 8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29
Certificate issuer: /CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829
Certificate serial: 0199FBEA936E97FBD0165A3AA3BD66536950
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 10:01:18 +0000
Manifest this update: Sun 19 Oct 2025 10:01:18 +0000
Manifest next update: Mon 20 Oct 2025 10:01:18 +0000
Files and hashes: 1: 1IvUdF6sc26gQi1PrEF2at2Gu_w.roa (hash: v/QlU4UHuYWzg7iCrnrdYQGm1IMje67B6F+Jo7o9yAA=)
2: jfPflxqnyyXft8tVspyHvL4yCCk.crl (hash: T3pQyYEjIeRVmsJLsinfZdb3QHEfyjhSqmM2oj0pz2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:93:6e:97:fb:d0:16:5a:3a:a3:bd:66:53:69:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829
Validity
Not Before: Oct 19 10:01:18 2025 GMT
Not After : Oct 20 10:01:18 2025 GMT
Subject: CN=1a77125ed2ffde6e97d4cef286382305648b7a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3d:0d:18:ac:f1:2b:24:3b:e8:84:01:a7:44:
d9:a6:a0:e6:10:63:cf:88:b3:c5:df:78:66:f4:08:
1a:f2:fe:cc:e0:ba:bc:70:37:b6:45:fb:45:b4:19:
52:41:f2:28:e3:82:4d:af:10:67:fe:e9:7d:e6:fa:
f5:55:cd:ac:45:0c:5d:8a:60:81:0e:75:39:b0:71:
37:4d:95:e5:5c:ec:ba:c8:af:c5:d6:00:51:76:a5:
ea:cc:da:9d:f3:38:24:ec:42:e4:55:df:fe:fe:de:
c8:4b:28:db:b0:42:0d:ae:76:fb:c7:f1:a6:77:11:
84:97:59:58:93:4f:0a:12:b3:1d:2f:f5:7d:bb:7d:
27:f4:9b:66:0b:05:22:ca:c0:31:77:af:e0:a9:9f:
57:14:65:2c:e6:81:b6:3d:45:6e:99:66:96:7c:b4:
dc:23:f5:0f:d0:d3:21:87:eb:d0:5c:2f:d1:9b:8d:
30:67:00:16:e6:a7:f3:af:fb:53:e7:91:02:47:c2:
21:28:b5:8b:66:d1:b2:ab:ef:b6:e0:59:21:a1:71:
c4:7b:05:f3:a5:0e:19:82:a1:4d:b0:47:72:a4:a0:
62:23:43:9a:e1:ef:07:53:c8:33:85:48:63:ea:30:
4c:b5:e5:5e:8c:9d:6a:89:6e:49:42:6f:9e:a5:da:
b7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:77:12:5E:D2:FF:DE:6E:97:D4:CE:F2:86:38:23:05:64:8B:7A:39
X509v3 Authority Key Identifier:
keyid:8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:05:dd:cd:29:7a:ee:d9:6c:39:a4:c4:d4:9c:47:c2:9b:74:
01:5a:f2:de:2e:8d:e5:d9:5e:51:d9:f9:d1:ad:7e:cc:fa:3f:
2b:19:35:9c:68:5a:1c:9e:9b:2e:59:c6:3e:3b:0f:3e:3e:bf:
4c:e7:2e:f1:e5:24:cc:1f:75:2a:63:77:ca:89:26:b8:17:91:
6b:6d:53:71:f5:89:e2:04:5a:93:e7:ba:53:6c:62:38:18:30:
bd:c4:c1:15:dc:c4:23:fa:37:ec:6a:49:9c:b6:76:33:9e:59:
e5:35:16:1f:f9:b8:78:2d:cb:13:59:4e:f5:57:65:20:bb:13:
80:97:d1:68:e5:63:a4:c2:e0:27:5a:86:ff:fa:4c:8d:d8:a7:
19:c3:c4:24:b7:4d:5a:d4:d1:28:fc:f3:d0:bb:3f:80:2d:28:
40:b4:78:1d:d7:2f:d3:5e:12:33:85:dd:e5:b6:a1:86:12:69:
97:91:20:0d:67:00:71:25:25:e1:52:d3:c5:2b:6e:99:78:75:
53:c3:5d:00:47:66:58:ae:3f:4c:27:12:da:58:19:42:5d:56:
c0:e9:f7:50:7a:8f:25:5f:4d:20:d1:89:bf:08:4f:0d:3e:2e:
7f:71:52:61:fa:78:49:98:65:94:dc:6b:4f:39:b8:ed:4f:0a:
af:bb:fd:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76pNul/vQFlo6o71mU2lQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkZjNkZjk3MWFhN2NiMjVkZmI3Y2I1NWIyOWM4N2JjYmUz
MjA4MjkwHhcNMjUxMDE5MTAwMTE4WhcNMjUxMDIwMTAwMTE4WjAzMTEwLwYDVQQD
EygxYTc3MTI1ZWQyZmZkZTZlOTdkNGNlZjI4NjM4MjMwNTY0OGI3YTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzT0NGKzxKyQ76IQBp0TZpqDmEGPP
iLPF33hm9Aga8v7M4Lq8cDe2RftFtBlSQfIo44JNrxBn/ul95vr1Vc2sRQxdimCB
DnU5sHE3TZXlXOy6yK/F1gBRdqXqzNqd8zgk7ELkVd/+/t7ISyjbsEINrnb7x/Gm
dxGEl1lYk08KErMdL/V9u30n9JtmCwUiysAxd6/gqZ9XFGUs5oG2PUVumWaWfLTc
I/UP0NMhh+vQXC/Rm40wZwAW5qfzr/tT55ECR8IhKLWLZtGyq++24FkhoXHEewXz
pQ4ZgqFNsEdypKBiI0Oa4e8HU8gzhUhj6jBMteVejJ1qiW5JQm+epdq3UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBp3El7S/95ul9TO8oY4IwVki3o5MB8GA1UdIwQY
MBaAFI3z35cap8sl37fLVbKch7y+MggpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamZQZmx4cW55eVhmdDh0VnNweUh2TDR5Q0NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9jMmFkNDQtZmU3ZC00NmQ5LTkxM2Ut
Yzc5NGI1Zjg3ODA0LzEvamZQZmx4cW55eVhmdDh0VnNweUh2TDR5Q0NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9jMmFkNDQtZmU3ZC00NmQ5LTkxM2UtYzc5NGI1Zjg3ODA0
LzEvamZQZmx4cW55eVhmdDh0VnNweUh2TDR5Q0NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFwXdzSl6
7tlsOaTE1JxHwpt0AVry3i6N5dleUdn50a1+zPo/Kxk1nGhaHJ6bLlnGPjsPPj6/
TOcu8eUkzB91KmN3yokmuBeRa21TcfWJ4gRak+e6U2xiOBgwvcTBFdzEI/o37GpJ
nLZ2M55Z5TUWH/m4eC3LE1lO9VdlILsTgJfRaOVjpMLgJ1qG//pMjdinGcPEJLdN
WtTRKPzz0Ls/gC0oQLR4Hdcv014SM4Xd5bahhhJpl5EgDWcAcSUl4VLTxStumXh1
U8NdAEdmWK4/TCcS2lgZQl1WwOn3UHqPJV9NINGJvwhPDT4uf3FSYfp4SZhllNxr
Tzm47U8Kr7v9bQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:13:40 2025 by rpki-client