Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft
File: J49i86X4RyKFL8cPBSzxPeojdNA.mft (raw, json)
Hash identifier: g6sXj90+aDkriWS/DVYVNIq3P0ci+hf5zai1yFLFVYM=
Subject key identifier: 37:87:BA:D2:E3:56:9B:89:42:DC:CD:3D:9E:E0:C7:16:73:7F:67:B0
Authority key identifier: 27:8F:62:F3:A5:F8:47:22:85:2F:C7:0F:05:2C:F1:3D:EA:23:74:D0
Certificate issuer: /CN=278f62f3a5f84722852fc70f052cf13dea2374d0
Certificate serial: 0199FB7CB9FFBB90F7BEECC8AC1C9214783E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J49i86X4RyKFL8cPBSzxPeojdNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft
Manifest number: 09C2
Signing time: Sun 19 Oct 2025 08:01:19 +0000
Manifest this update: Sun 19 Oct 2025 08:01:19 +0000
Manifest next update: Mon 20 Oct 2025 08:01:19 +0000
Files and hashes: 1: B0B4Y6WmKTSsGtgiy_GaSYzTEw4.roa (hash: fz9V9BUWuOk2Mh3Jcg5jFOYmVDkKnHhcxn1Jkrdsy98=)
2: J49i86X4RyKFL8cPBSzxPeojdNA.crl (hash: x1l41gXnr6aJwe3Ivq4/t321D2R2NhpRXCLLEjcTH/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/J49i86X4RyKFL8cPBSzxPeojdNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:b9:ff:bb:90:f7:be:ec:c8:ac:1c:92:14:78:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278f62f3a5f84722852fc70f052cf13dea2374d0
Validity
Not Before: Oct 19 08:01:19 2025 GMT
Not After : Oct 20 08:01:19 2025 GMT
Subject: CN=3787bad2e3569b8942dccd3d9ee0c716737f67b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fa:24:71:f3:fa:03:c7:48:d1:d6:79:82:87:
f4:be:29:11:3b:43:d9:c6:1e:6c:ee:4a:9d:16:2e:
a5:7a:c1:ad:46:ed:69:8b:59:c0:6c:68:1d:cd:99:
6f:b8:f9:93:ac:bc:b4:00:2f:6e:23:be:f7:f0:61:
b8:fd:57:fc:fd:42:94:f1:be:dc:85:16:02:a2:c0:
0a:5a:94:be:33:c3:37:a0:32:ac:f9:b1:ae:e4:7f:
b3:60:f4:07:4a:92:ab:e0:92:07:a9:84:2d:e5:48:
01:85:ee:fa:fa:f6:c4:79:f2:38:7c:39:e3:27:75:
b1:c3:de:79:93:27:6d:90:7e:81:c6:d0:3b:87:ae:
48:ea:a7:39:0c:9c:0b:93:73:5f:3e:ec:03:42:51:
b1:49:00:6c:9c:bf:97:f5:5e:14:12:f2:b9:4e:ea:
f8:de:84:d8:34:f7:f3:34:02:6f:7b:6a:2f:d7:91:
a6:eb:f7:ea:e9:9b:95:d6:70:ed:9e:14:41:ec:c5:
5a:bc:8a:1e:64:cb:f4:23:f4:37:8b:57:80:65:35:
ba:42:93:fc:cb:40:2c:dd:6d:8c:cb:26:12:6a:5a:
40:60:2b:2b:7f:58:96:e3:02:0d:a0:af:ff:b7:4b:
b8:b5:f2:7b:5c:cc:a0:1d:12:fa:aa:29:03:d1:0e:
8c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:87:BA:D2:E3:56:9B:89:42:DC:CD:3D:9E:E0:C7:16:73:7F:67:B0
X509v3 Authority Key Identifier:
keyid:27:8F:62:F3:A5:F8:47:22:85:2F:C7:0F:05:2C:F1:3D:EA:23:74:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J49i86X4RyKFL8cPBSzxPeojdNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e4912b-5484-4ac0-8768-535bf9b1e8b7/1/J49i86X4RyKFL8cPBSzxPeojdNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:e6:72:34:fc:94:7d:b9:57:1e:f0:26:fb:40:6f:9b:50:b0:
f4:31:d4:d7:8e:ed:f5:58:f6:dd:77:e5:9a:28:8c:0f:98:21:
bb:77:44:03:ab:93:19:59:88:5f:aa:22:09:0b:34:51:32:2d:
f9:b7:1a:c4:ec:b0:40:6d:dc:99:ed:f9:1c:f2:db:ee:44:70:
22:67:72:e1:5f:4c:12:f6:63:2c:ce:d8:1e:d7:d8:24:82:0b:
6d:e0:69:ef:31:08:4e:e4:9e:4b:e4:4a:4f:b5:0e:ed:fe:2e:
c4:d9:98:1b:14:bc:3f:3a:33:16:c2:05:12:0b:bd:3b:2a:6c:
79:91:ae:27:7a:1c:4c:75:5e:63:11:a8:f6:0f:6c:ab:04:9b:
01:2d:9c:33:16:b7:4c:23:96:40:24:61:f0:ee:83:a5:15:8d:
1c:ab:19:31:2c:bc:4c:fb:90:86:30:e0:8d:e5:d7:29:93:d2:
6f:3d:1c:22:5e:e9:f2:98:17:64:af:db:fa:cd:1a:b8:90:68:
38:38:43:0f:7b:05:48:b7:d8:77:f3:1d:e9:a2:cf:04:23:8a:
e8:f8:6f:79:c6:4d:9e:69:35:04:e0:f7:b0:59:5c:5f:eb:cc:
93:c6:ae:73:ea:31:10:84:4a:7a:45:f5:4d:17:b7:68:e5:32:
59:e5:dc:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fLn/u5D3vuzIrBySFHg+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OGY2MmYzYTVmODQ3MjI4NTJmYzcwZjA1MmNmMTNkZWEy
Mzc0ZDAwHhcNMjUxMDE5MDgwMTE5WhcNMjUxMDIwMDgwMTE5WjAzMTEwLwYDVQQD
EygzNzg3YmFkMmUzNTY5Yjg5NDJkY2NkM2Q5ZWUwYzcxNjczN2Y2N2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/okcfP6A8dI0dZ5gof0vikRO0PZ
xh5s7kqdFi6lesGtRu1pi1nAbGgdzZlvuPmTrLy0AC9uI7738GG4/Vf8/UKU8b7c
hRYCosAKWpS+M8M3oDKs+bGu5H+zYPQHSpKr4JIHqYQt5UgBhe76+vbEefI4fDnj
J3Wxw955kydtkH6BxtA7h65I6qc5DJwLk3NfPuwDQlGxSQBsnL+X9V4UEvK5Tur4
3oTYNPfzNAJve2ov15Gm6/fq6ZuV1nDtnhRB7MVavIoeZMv0I/Q3i1eAZTW6QpP8
y0As3W2MyyYSalpAYCsrf1iW4wINoK//t0u4tfJ7XMygHRL6qikD0Q6MQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDeHutLjVpuJQtzNPZ7gxxZzf2ewMB8GA1UdIwQY
MBaAFCePYvOl+EcihS/HDwUs8T3qI3TQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjQ5aTg2WDRSeUtGTDhjUEJTenhQZW9qZE5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9lNDkxMmItNTQ4NC00YWMwLTg3Njgt
NTM1YmY5YjFlOGI3LzEvSjQ5aTg2WDRSeUtGTDhjUEJTenhQZW9qZE5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9lNDkxMmItNTQ4NC00YWMwLTg3NjgtNTM1YmY5YjFlOGI3
LzEvSjQ5aTg2WDRSeUtGTDhjUEJTenhQZW9qZE5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABuZyNPyU
fblXHvAm+0Bvm1Cw9DHU147t9Vj23XflmiiMD5ghu3dEA6uTGVmIX6oiCQs0UTIt
+bcaxOywQG3cme35HPLb7kRwImdy4V9MEvZjLM7YHtfYJIILbeBp7zEITuSeS+RK
T7UO7f4uxNmYGxS8PzozFsIFEgu9OypseZGuJ3ocTHVeYxGo9g9sqwSbAS2cMxa3
TCOWQCRh8O6DpRWNHKsZMSy8TPuQhjDgjeXXKZPSbz0cIl7p8pgXZK/b+s0auJBo
ODhDD3sFSLfYd/Md6aLPBCOK6PhvecZNnmk1BOD3sFlcX+vMk8auc+oxEIRKekX1
TRe3aOUyWeXcOA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:54 2025 by rpki-client