Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft
File: JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft (raw, json)
Hash identifier: n8Z3vmG5hsTdTnLgyKDdpczocdlvh5NvLxHNHytyDW0=
Subject key identifier: 6C:19:85:F2:B1:1D:CE:62:25:98:2D:10:1C:28:6D:E3:A8:28:2E:B5
Authority key identifier: 24:33:A8:6B:BC:5C:2B:AB:45:2F:F0:3F:45:A9:EA:F0:A6:10:C4:0C
Certificate issuer: /CN=2433a86bbc5c2bab452ff03f45a9eaf0a610c40c
Certificate serial: 0199FB45D31A4D04D859C5F8B59C3C249B42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDOoa7xcK6tFL_A_Ranq8KYQxAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft
Manifest number: 10BD
Signing time: Sun 19 Oct 2025 07:01:21 +0000
Manifest this update: Sun 19 Oct 2025 07:01:21 +0000
Manifest next update: Mon 20 Oct 2025 07:01:21 +0000
Files and hashes: 1: 89L3qYgunLwQpom3bGdwccQduKU.roa (hash: Wmvi3Nv4a5j2YSCNbxxtOShkpYW766qjpODSUqcoafA=)
2: JDOoa7xcK6tFL_A_Ranq8KYQxAw.crl (hash: TCSY4kRphsddtkBrSep7BUs3pfTA0NufnZgZPrpn46E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JDOoa7xcK6tFL_A_Ranq8KYQxAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:d3:1a:4d:04:d8:59:c5:f8:b5:9c:3c:24:9b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2433a86bbc5c2bab452ff03f45a9eaf0a610c40c
Validity
Not Before: Oct 19 07:01:21 2025 GMT
Not After : Oct 20 07:01:21 2025 GMT
Subject: CN=6c1985f2b11dce6225982d101c286de3a8282eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:03:2c:71:8e:11:cc:6e:6e:38:67:4b:4e:47:
b7:4f:98:ba:2d:ea:5a:0e:4f:13:7a:5e:3e:c6:3a:
f7:43:de:92:1d:a4:42:35:39:92:19:44:45:b4:fe:
d3:96:7b:f0:39:62:2e:10:de:5f:51:6c:44:6c:b0:
1c:dc:49:12:22:b6:fd:0d:d7:bc:d2:c8:a4:c1:4e:
4e:70:7b:28:87:1d:b6:d0:33:0d:32:d9:e7:e0:90:
47:12:21:30:0e:02:aa:f5:4e:54:29:11:c1:a6:dd:
3f:ac:5e:5d:60:ee:bd:27:40:7e:67:61:44:0d:96:
17:1f:dd:c7:3e:7f:14:ab:14:9d:45:c8:18:3f:41:
79:04:10:71:c2:66:ce:d7:94:5c:a0:b0:7a:87:da:
b6:9b:04:34:1f:f6:9e:20:36:aa:e8:67:97:9d:02:
90:b0:0a:3c:af:b6:91:f6:c0:b7:c8:85:23:61:8e:
03:64:79:14:14:a3:f0:e0:a5:ed:81:cd:38:4d:e8:
a7:02:8d:f9:c4:24:f2:19:13:97:4b:9f:fb:0f:bb:
37:00:c6:e1:10:a9:d5:c1:e5:16:3f:4d:f4:79:f1:
c9:ea:10:62:e9:92:7e:9c:71:13:cf:16:6e:55:d4:
9d:4a:c6:f2:46:c4:6e:0d:4e:ee:21:f2:f3:ce:fc:
f7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:19:85:F2:B1:1D:CE:62:25:98:2D:10:1C:28:6D:E3:A8:28:2E:B5
X509v3 Authority Key Identifier:
keyid:24:33:A8:6B:BC:5C:2B:AB:45:2F:F0:3F:45:A9:EA:F0:A6:10:C4:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDOoa7xcK6tFL_A_Ranq8KYQxAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f0f2d0-2738-4ed4-8ad9-05b6c9c16441/1/JDOoa7xcK6tFL_A_Ranq8KYQxAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:cd:1a:ed:a4:1c:59:7e:28:08:b0:6b:2e:c0:78:c1:7d:e1:
96:e9:18:20:51:f5:8e:e3:3b:8f:f4:d2:a0:a9:21:29:b0:bd:
da:01:a7:7f:40:e8:d4:96:67:6f:25:bc:2f:2c:92:ba:18:c6:
42:18:90:42:e9:19:50:c1:75:b5:ec:15:fc:79:2e:87:f8:c9:
78:82:07:e6:02:3c:9e:35:3c:1d:63:83:5b:a1:98:73:1b:45:
15:86:ef:4a:0c:53:4a:7a:31:36:12:2a:59:0f:84:ca:f6:a2:
2e:bf:ac:9e:54:24:7a:77:e8:75:6c:07:cf:fa:40:0b:65:07:
de:eb:f9:2b:08:84:35:23:eb:66:a6:f2:fd:c5:e2:22:b0:b5:
32:d1:0b:00:11:c1:8c:d1:07:a4:3a:fa:fd:30:79:71:f8:ad:
ca:08:bc:4d:4a:cf:71:f0:fd:99:d2:c9:aa:30:3c:03:a5:6a:
dd:ce:f7:9d:d6:9f:74:ab:a9:84:44:20:be:6a:53:30:7d:80:
39:6a:a9:c9:f4:46:ac:a8:bf:fa:4c:2c:78:1b:61:13:02:a7:
0d:26:e5:57:c1:cc:e5:c8:ea:f2:06:74:c1:b5:ec:6e:73:0c:
b8:76:e3:81:8b:d0:53:9c:3a:cd:69:8e:d5:ad:ce:b6:88:4e:
82:ab:3c:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RdMaTQTYWcX4tZw8JJtCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MzNhODZiYmM1YzJiYWI0NTJmZjAzZjQ1YTllYWYwYTYx
MGM0MGMwHhcNMjUxMDE5MDcwMTIxWhcNMjUxMDIwMDcwMTIxWjAzMTEwLwYDVQQD
Eyg2YzE5ODVmMmIxMWRjZTYyMjU5ODJkMTAxYzI4NmRlM2E4MjgyZWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwMscY4RzG5uOGdLTke3T5i6Lepa
Dk8Tel4+xjr3Q96SHaRCNTmSGURFtP7TlnvwOWIuEN5fUWxEbLAc3EkSIrb9Dde8
0sikwU5OcHsohx220DMNMtnn4JBHEiEwDgKq9U5UKRHBpt0/rF5dYO69J0B+Z2FE
DZYXH93HPn8UqxSdRcgYP0F5BBBxwmbO15RcoLB6h9q2mwQ0H/aeIDaq6GeXnQKQ
sAo8r7aR9sC3yIUjYY4DZHkUFKPw4KXtgc04TeinAo35xCTyGROXS5/7D7s3AMbh
EKnVweUWP030efHJ6hBi6ZJ+nHETzxZuVdSdSsbyRsRuDU7uIfLzzvz3ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGwZhfKxHc5iJZgtEBwobeOoKC61MB8GA1UdIwQY
MBaAFCQzqGu8XCurRS/wP0Wp6vCmEMQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkRPb2E3eGNLNnRGTF9BX1JhbnE4S1lReEF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9mMGYyZDAtMjczOC00ZWQ0LThhZDkt
MDViNmM5YzE2NDQxLzEvSkRPb2E3eGNLNnRGTF9BX1JhbnE4S1lReEF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9mMGYyZDAtMjczOC00ZWQ0LThhZDktMDViNmM5YzE2NDQx
LzEvSkRPb2E3eGNLNnRGTF9BX1JhbnE4S1lReEF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPs0a7aQc
WX4oCLBrLsB4wX3hlukYIFH1juM7j/TSoKkhKbC92gGnf0Do1JZnbyW8LyySuhjG
QhiQQukZUMF1tewV/Hkuh/jJeIIH5gI8njU8HWODW6GYcxtFFYbvSgxTSnoxNhIq
WQ+EyvaiLr+snlQkenfodWwHz/pAC2UH3uv5KwiENSPrZqby/cXiIrC1MtELABHB
jNEHpDr6/TB5cfitygi8TUrPcfD9mdLJqjA8A6Vq3c73ndafdKuphEQgvmpTMH2A
OWqpyfRGrKi/+kwseBthEwKnDSblV8HM5cjq8gZ0wbXsbnMMuHbjgYvQU5w6zWmO
1a3OtohOgqs8Bw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:58 2025 by rpki-client