Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
File: Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft (raw, json)
Hash identifier: 4iO0gfXx8r17kZwZ6zU5cwmUPIURQ13qBJZaoy+glvc=
Subject key identifier: D1:AD:93:36:F6:0B:69:A9:66:A0:9C:3D:FD:75:F4:5B:19:55:B8:A1
Authority key identifier: 26:7D:9E:CB:99:64:82:5D:44:DD:26:6B:BD:32:AA:08:04:BC:10:F7
Certificate issuer: /CN=267d9ecb9964825d44dd266bbd32aa0804bc10f7
Certificate serial: 0199FC58DAB524AFBD22F75FD35FB2C5DADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
Manifest number: 1634
Signing time: Sun 19 Oct 2025 12:01:45 +0000
Manifest this update: Sun 19 Oct 2025 12:01:45 +0000
Manifest next update: Mon 20 Oct 2025 12:01:45 +0000
Files and hashes: 1: Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl (hash: l70NzaaApiUk2PiT8/6ksgR1wSYtReR9njpZFCfTCIw=)
2: ifTKeL7Q3yOfbgGQD-O0V2FKxJg.roa (hash: JhNUlPYthTeXHHV7LF1Jgo8sCxuBA07GISDC2g5jYXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:da:b5:24:af:bd:22:f7:5f:d3:5f:b2:c5:da:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=267d9ecb9964825d44dd266bbd32aa0804bc10f7
Validity
Not Before: Oct 19 12:01:45 2025 GMT
Not After : Oct 20 12:01:45 2025 GMT
Subject: CN=d1ad9336f60b69a966a09c3dfd75f45b1955b8a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:26:87:78:19:16:f3:c2:d4:97:39:8e:ee:a6:
7d:42:19:20:c6:72:08:bd:45:ce:0b:42:e7:e2:ce:
86:5d:90:9d:73:f5:c0:d6:36:69:c5:b4:ff:54:f9:
c2:5e:28:5d:50:a7:a6:d4:7f:10:67:99:b6:be:41:
4e:e3:e4:75:55:e1:4a:c8:66:9c:43:c3:d8:c3:6b:
43:0b:0c:f1:e4:f6:fe:3a:be:23:63:00:a9:b3:78:
65:12:97:04:61:2d:5b:44:90:e1:87:12:d2:00:68:
40:88:12:0f:07:fa:1b:3a:c4:5e:4b:f4:fc:4e:31:
f3:fb:9a:e7:73:e7:8e:90:e4:8c:4c:8c:0f:88:35:
ff:c2:e4:51:b0:03:12:86:3a:28:10:8c:74:2f:39:
36:6f:fc:0e:9c:39:62:29:ee:5b:e1:79:3a:35:48:
cc:c4:d9:9d:5f:7f:2d:a5:b3:87:e7:bb:81:6b:03:
7a:d1:da:b9:d7:12:ce:3d:0a:16:f7:41:af:de:d8:
dd:a1:23:6a:42:a1:8f:a8:3a:ca:12:b6:75:58:82:
63:65:bf:b8:d0:83:9f:ad:65:a9:98:e2:74:5a:06:
45:c4:61:1e:45:be:b3:02:9f:15:b4:ab:cf:99:20:
23:e4:a7:cf:f9:02:7d:f0:2b:0e:59:76:cf:06:a5:
76:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AD:93:36:F6:0B:69:A9:66:A0:9C:3D:FD:75:F4:5B:19:55:B8:A1
X509v3 Authority Key Identifier:
keyid:26:7D:9E:CB:99:64:82:5D:44:DD:26:6B:BD:32:AA:08:04:BC:10:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:4e:bf:36:45:2d:c2:d1:64:83:91:91:38:60:d4:b4:f9:01:
b3:43:21:76:0f:52:66:bd:68:13:1d:b8:9a:47:3b:1f:43:e8:
03:2e:78:a1:c7:ae:a6:72:ca:58:f6:e8:23:ff:82:e3:e0:9d:
c6:e0:21:61:74:24:87:d2:25:b8:3c:4d:ce:33:c7:6f:e2:a1:
20:29:44:fb:78:fb:d3:48:b0:62:04:89:23:1a:e7:0a:97:cb:
ea:6b:c3:ae:68:bd:a2:91:2b:91:ae:d9:58:e6:01:c8:38:cd:
40:a0:4e:8a:43:6c:2b:f5:5f:bf:44:ad:28:ec:52:86:8d:3b:
f2:98:f4:82:a3:3b:53:df:33:3f:d6:be:ed:80:b0:2e:c2:d9:
47:9f:d7:49:6a:81:7f:2c:7c:57:c5:47:a9:30:2b:b6:78:bf:
e7:8e:4f:0f:b4:04:0b:48:28:3e:3a:3e:6a:8a:fe:c3:c8:ee:
04:ee:84:fb:25:71:89:de:48:08:41:bd:7b:8a:9c:87:8e:5a:
c8:a9:93:e3:3d:b4:45:27:2c:00:9e:03:98:c0:80:27:c6:ad:
01:d5:09:80:c8:10:5a:eb:df:78:09:ef:48:0b:30:94:4d:15:
b3:0c:82:cb:af:5f:3b:04:f4:fb:a7:e9:22:ed:ff:a0:66:8f:
e9:d1:ef:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WNq1JK+9Ivdf01+yxdrdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2N2Q5ZWNiOTk2NDgyNWQ0NGRkMjY2YmJkMzJhYTA4MDRi
YzEwZjcwHhcNMjUxMDE5MTIwMTQ1WhcNMjUxMDIwMTIwMTQ1WjAzMTEwLwYDVQQD
EyhkMWFkOTMzNmY2MGI2OWE5NjZhMDljM2RmZDc1ZjQ1YjE5NTViOGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCaHeBkW88LUlzmO7qZ9QhkgxnII
vUXOC0Ln4s6GXZCdc/XA1jZpxbT/VPnCXihdUKem1H8QZ5m2vkFO4+R1VeFKyGac
Q8PYw2tDCwzx5Pb+Or4jYwCps3hlEpcEYS1bRJDhhxLSAGhAiBIPB/obOsReS/T8
TjHz+5rnc+eOkOSMTIwPiDX/wuRRsAMShjooEIx0Lzk2b/wOnDliKe5b4Xk6NUjM
xNmdX38tpbOH57uBawN60dq51xLOPQoW90Gv3tjdoSNqQqGPqDrKErZ1WIJjZb+4
0IOfrWWpmOJ0WgZFxGEeRb6zAp8VtKvPmSAj5KfP+QJ98CsOWXbPBqV2uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNGtkzb2C2mpZqCcPf119FsZVbihMB8GA1UdIwQY
MBaAFCZ9nsuZZIJdRN0ma70yqggEvBD3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm4yZXk1bGtnbDFFM1NacnZUS3FDQVM4RVBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8yOWFjODQtNDM2NS00ZWJhLTk4NzMt
MzkxYmNlNzFmZWExLzEvSm4yZXk1bGtnbDFFM1NacnZUS3FDQVM4RVBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8yOWFjODQtNDM2NS00ZWJhLTk4NzMtMzkxYmNlNzFmZWEx
LzEvSm4yZXk1bGtnbDFFM1NacnZUS3FDQVM4RVBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALk6/NkUt
wtFkg5GROGDUtPkBs0Mhdg9SZr1oEx24mkc7H0PoAy54oceupnLKWPboI/+C4+Cd
xuAhYXQkh9IluDxNzjPHb+KhIClE+3j700iwYgSJIxrnCpfL6mvDrmi9opErka7Z
WOYByDjNQKBOikNsK/Vfv0StKOxSho078pj0gqM7U98zP9a+7YCwLsLZR5/XSWqB
fyx8V8VHqTArtni/545PD7QEC0goPjo+aor+w8juBO6E+yVxid5ICEG9e4qch45a
yKmT4z20RScsAJ4DmMCAJ8atAdUJgMgQWuvfeAnvSAswlE0VswyCy69fOwT0+6fp
Iu3/oGaP6dHvLQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:22 2025 by rpki-client