Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
File: J7jb2X3kzUBZtS5RPc81zTgaMrM.mft (raw, json)
Hash identifier: kLDU7OQGwODRRjH28PItqvYh4QlH1W1barNTWqdGnBg=
Subject key identifier: E1:4D:40:FD:AE:38:80:E0:F9:04:F1:B5:D0:17:AA:A0:34:7E:26:3D
Authority key identifier: 27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
Certificate issuer: /CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Certificate serial: 0199FC58B3D02ED9B6E0A229309C01666199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
Manifest number: 0FBC
Signing time: Sun 19 Oct 2025 12:01:35 +0000
Manifest this update: Sun 19 Oct 2025 12:01:35 +0000
Manifest next update: Mon 20 Oct 2025 12:01:35 +0000
Files and hashes: 1: 7z6VwEslCL2FPJkLcnWBqsZx-Yc.roa (hash: 4HX05uMrwNGyncqNvEyr0SjiIMdyEc2AyvawA9NsEGo=)
2: H1ODV9W4buqhl3EqdtbJBcTx8bE.roa (hash: ACjxboSyCSfEn+fJ3xsL41v0ySwcobd1/VO5RHv6Sbs=)
3: J7jb2X3kzUBZtS5RPc81zTgaMrM.crl (hash: 92FCMl/zSBy17FViWw7501193neeS7ZX8DEDDXMu+is=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:b3:d0:2e:d9:b6:e0:a2:29:30:9c:01:66:61:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Validity
Not Before: Oct 19 12:01:35 2025 GMT
Not After : Oct 20 12:01:35 2025 GMT
Subject: CN=e14d40fdae3880e0f904f1b5d017aaa0347e263d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8c:dd:48:64:37:44:16:ae:c4:0a:e3:11:a5:
b4:2b:4c:07:f0:5d:6f:94:da:01:5f:9b:60:9e:c0:
69:83:ce:b7:32:15:91:64:ee:39:86:e8:33:d9:bd:
27:bf:06:fd:0c:cf:8b:d2:ad:3c:2a:b0:c3:f0:f2:
c1:9b:f0:ba:41:9e:c2:43:51:d2:53:0b:68:44:bc:
a4:17:8c:92:11:ee:ca:3a:50:c6:a3:ae:50:40:44:
85:25:17:d8:a0:e2:74:6d:e5:3f:c8:63:70:38:ea:
dc:7a:99:19:59:95:ba:28:78:6b:e0:1d:10:8a:c9:
91:85:8b:c6:14:59:45:35:72:32:8e:80:55:ef:7a:
d6:5e:c1:fb:2d:75:dc:b0:37:b2:f6:b5:3d:f0:f3:
4e:9c:50:c9:eb:84:2d:ce:2c:c3:d6:80:47:39:08:
e8:41:bc:d9:68:30:6b:e3:b9:ba:d1:14:f9:e6:00:
89:57:ed:95:d2:d0:3d:49:f1:48:41:ae:96:35:f1:
60:b3:3b:5d:21:ff:48:a1:ea:c4:51:fb:be:fe:74:
c2:d9:6a:d8:7b:be:be:bc:55:22:02:59:cc:1c:96:
a0:86:82:6a:05:c4:70:39:9b:0c:fe:bf:11:d9:07:
5c:91:2a:82:b8:5a:4e:83:34:bc:97:24:ce:61:a9:
19:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:4D:40:FD:AE:38:80:E0:F9:04:F1:B5:D0:17:AA:A0:34:7E:26:3D
X509v3 Authority Key Identifier:
keyid:27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:1a:e5:7a:b8:c0:c2:18:ca:32:d2:3c:16:46:90:d7:78:eb:
f9:b4:0c:72:71:13:f5:02:85:7a:61:ac:bf:25:b0:24:7e:2f:
e4:2a:90:2d:0a:fe:ab:98:83:84:ae:15:e4:39:d2:f0:87:4f:
61:ce:4b:46:d3:4f:03:e8:da:1b:6a:fe:d1:02:23:00:a9:66:
6e:54:c7:a0:75:4c:e3:e8:04:dd:6b:e8:29:81:d8:28:d8:07:
ca:74:c9:44:e3:1c:df:8b:31:43:df:88:89:2c:08:60:55:d4:
84:d5:6c:72:e3:11:8d:6b:91:5a:66:91:86:df:d0:06:18:ad:
f0:40:ef:8a:38:ee:34:7d:d5:f8:01:d5:0b:d3:26:ad:d2:cf:
49:1f:c6:cb:4b:5d:8f:23:92:c6:c1:64:68:aa:63:4b:b8:43:
cd:d5:18:7a:a7:b4:80:7e:8d:d6:09:13:37:ed:26:38:13:b2:
7f:93:35:99:1e:14:a7:16:a8:bb:94:24:18:fe:7c:60:6d:5e:
b0:e7:4b:d7:72:1e:b7:e9:58:a8:d0:c6:60:57:e2:65:b8:2b:
2a:0d:6c:ee:b2:c3:1d:7f:5e:49:e1:83:2f:0c:0d:36:5b:50:
f7:09:5a:ce:f6:93:e5:f7:ff:f9:9d:67:f8:b4:1b:b2:f7:2f:
c4:ad:89:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WLPQLtm24KIpMJwBZmGZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YjhkYmQ5N2RlNGNkNDA1OWI1MmU1MTNkY2YzNWNkMzgx
YTMyYjMwHhcNMjUxMDE5MTIwMTM1WhcNMjUxMDIwMTIwMTM1WjAzMTEwLwYDVQQD
EyhlMTRkNDBmZGFlMzg4MGUwZjkwNGYxYjVkMDE3YWFhMDM0N2UyNjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54zdSGQ3RBauxArjEaW0K0wH8F1v
lNoBX5tgnsBpg863MhWRZO45hugz2b0nvwb9DM+L0q08KrDD8PLBm/C6QZ7CQ1HS
UwtoRLykF4ySEe7KOlDGo65QQESFJRfYoOJ0beU/yGNwOOrcepkZWZW6KHhr4B0Q
ismRhYvGFFlFNXIyjoBV73rWXsH7LXXcsDey9rU98PNOnFDJ64QtzizD1oBHOQjo
QbzZaDBr47m60RT55gCJV+2V0tA9SfFIQa6WNfFgsztdIf9IoerEUfu+/nTC2WrY
e76+vFUiAlnMHJaghoJqBcRwOZsM/r8R2QdckSqCuFpOgzS8lyTOYakZUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOFNQP2uOIDg+QTxtdAXqqA0fiY9MB8GA1UdIwQY
MBaAFCe429l95M1AWbUuUT3PNc04GjKzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjdqYjJYM2t6VUJadFM1UlBjODF6VGdhTXJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy84NTkyOGYtNWYxOS00MWQ5LTgyMzgt
NWM1NGNkYWQxOWYxLzEvSjdqYjJYM2t6VUJadFM1UlBjODF6VGdhTXJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy84NTkyOGYtNWYxOS00MWQ5LTgyMzgtNWM1NGNkYWQxOWYx
LzEvSjdqYjJYM2t6VUJadFM1UlBjODF6VGdhTXJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZhrlerjA
whjKMtI8FkaQ13jr+bQMcnET9QKFemGsvyWwJH4v5CqQLQr+q5iDhK4V5DnS8IdP
Yc5LRtNPA+jaG2r+0QIjAKlmblTHoHVM4+gE3WvoKYHYKNgHynTJROMc34sxQ9+I
iSwIYFXUhNVscuMRjWuRWmaRht/QBhit8EDvijjuNH3V+AHVC9MmrdLPSR/Gy0td
jyOSxsFkaKpjS7hDzdUYeqe0gH6N1gkTN+0mOBOyf5M1mR4Upxaou5QkGP58YG1e
sOdL13Iet+lYqNDGYFfiZbgrKg1s7rLDHX9eSeGDLwwNNltQ9wlazvaT5ff/+Z1n
+LQbsvcvxK2Jew==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:09 2025 by rpki-client