Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
File: j5h_qG-uztjKekRir38AXqsneag.mft (raw, json)
Hash identifier: 3yhBzaeQLINKnhuvFRutR+d8GThIU0KtsETAeKW78ns=
Subject key identifier: 76:42:27:7C:36:EE:C0:6C:8A:7C:D5:2D:C5:FC:BB:80:E3:CE:3B:EF
Authority key identifier: 8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8
Certificate issuer: /CN=8f987fa86faeced8ca7a4462af7f005eab2779a8
Certificate serial: 0199FC21B5DD1067D894F42AE0EC2DB52B4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
Manifest number: 0DC3
Signing time: Sun 19 Oct 2025 11:01:31 +0000
Manifest this update: Sun 19 Oct 2025 11:01:31 +0000
Manifest next update: Mon 20 Oct 2025 11:01:31 +0000
Files and hashes: 1: TZNlzSisEozO9bUPt3Ymc1srv8E.roa (hash: wa8v9NsgWL1gYj2sgVAPeIrXdGt5FFoRvprZhnIr4yo=)
2: j5h_qG-uztjKekRir38AXqsneag.crl (hash: qfrf/Vs1vPYkMplpd3PJIAVJO83diVeyLBIaDUX5V38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:b5:dd:10:67:d8:94:f4:2a:e0:ec:2d:b5:2b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f987fa86faeced8ca7a4462af7f005eab2779a8
Validity
Not Before: Oct 19 11:01:31 2025 GMT
Not After : Oct 20 11:01:31 2025 GMT
Subject: CN=7642277c36eec06c8a7cd52dc5fcbb80e3ce3bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6e:89:eb:88:8a:6f:46:8a:40:29:0a:44:60:
e0:49:3d:73:bf:c0:f0:a9:95:09:e2:8e:fe:c1:f2:
a2:8b:87:9f:c8:ee:d1:9f:50:64:65:92:85:5e:70:
30:db:c4:8d:80:fb:9e:3a:8f:77:fc:23:5b:95:69:
a8:48:45:dc:9e:a8:01:1b:82:05:84:d8:2a:5e:1a:
90:8a:65:5f:6b:69:3a:8e:d0:d9:95:1b:b9:9a:33:
c1:e6:b5:ea:43:34:dc:2b:f7:94:fa:2e:78:35:d7:
61:4a:99:e9:93:9b:b7:14:4a:a0:14:03:d2:f0:8f:
3e:54:94:ae:1f:4a:52:5a:e8:5b:00:ee:1f:17:2e:
05:7b:29:3a:ce:fd:19:47:e0:55:0c:aa:72:f5:1e:
12:7a:36:de:4d:c7:5d:6d:ef:b7:82:bd:a0:44:9a:
bf:91:15:e6:d0:a4:42:e8:ef:d4:50:a1:1c:78:a6:
8a:8f:86:a4:74:51:2a:ea:77:40:fc:ed:f3:16:60:
51:9e:d2:22:11:2d:2a:66:53:1c:c6:bc:c6:d3:23:
ac:ce:81:ee:5c:f5:d6:b5:07:d7:71:c0:b1:07:f6:
af:53:d0:c9:b0:2b:f4:77:71:29:91:82:ab:01:25:
e0:cd:13:3b:5c:0c:21:1b:bb:3d:7e:7c:c3:c6:ad:
0a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:42:27:7C:36:EE:C0:6C:8A:7C:D5:2D:C5:FC:BB:80:E3:CE:3B:EF
X509v3 Authority Key Identifier:
keyid:8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:a2:a0:04:51:56:3d:1b:5d:71:80:25:2c:5d:72:e9:fa:f6:
34:3d:12:49:0a:fe:60:4d:40:29:3d:78:56:84:b7:30:ca:99:
d9:f3:da:92:6a:a9:82:03:90:3b:27:03:6e:19:4c:2b:50:b7:
3f:a6:6c:14:a1:a0:86:09:83:16:de:5b:b0:b8:a4:10:1f:1b:
13:11:d9:b5:d7:e1:49:7a:91:93:a7:70:3d:30:13:fa:a2:9a:
fc:a9:27:a0:b2:fc:c4:38:8c:82:f3:bc:f9:53:5b:5a:5b:3b:
e7:0b:1c:28:19:86:a1:04:87:a5:05:39:11:c9:cf:6b:2c:66:
c0:d4:80:04:79:53:be:6f:11:0a:ac:66:ed:43:26:98:7a:a1:
3a:34:ca:81:61:86:a2:1b:87:aa:04:80:c0:90:da:1c:34:c1:
da:59:57:13:7b:ad:03:a2:28:e5:4b:30:1d:c3:bb:4b:63:bb:
c0:16:d4:e6:9d:9a:23:76:68:0e:a9:94:b8:b3:7c:99:73:29:
8e:2a:57:ed:70:7e:b2:68:44:03:78:b9:66:55:3e:9f:a9:54:
e4:28:3f:6b:0b:09:e0:19:23:bb:dd:f0:8f:a3:54:4e:75:26:
12:24:bb:e9:cf:24:11:e9:ed:bf:b5:35:ac:e1:94:4c:a2:ad:
10:fa:c4:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IbXdEGfYlPQq4OwttStOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmOTg3ZmE4NmZhZWNlZDhjYTdhNDQ2MmFmN2YwMDVlYWIy
Nzc5YTgwHhcNMjUxMDE5MTEwMTMxWhcNMjUxMDIwMTEwMTMxWjAzMTEwLwYDVQQD
Eyg3NjQyMjc3YzM2ZWVjMDZjOGE3Y2Q1MmRjNWZjYmI4MGUzY2UzYmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz26J64iKb0aKQCkKRGDgST1zv8Dw
qZUJ4o7+wfKii4efyO7Rn1BkZZKFXnAw28SNgPueOo93/CNblWmoSEXcnqgBG4IF
hNgqXhqQimVfa2k6jtDZlRu5mjPB5rXqQzTcK/eU+i54NddhSpnpk5u3FEqgFAPS
8I8+VJSuH0pSWuhbAO4fFy4Feyk6zv0ZR+BVDKpy9R4SejbeTcddbe+3gr2gRJq/
kRXm0KRC6O/UUKEceKaKj4akdFEq6ndA/O3zFmBRntIiES0qZlMcxrzG0yOszoHu
XPXWtQfXccCxB/avU9DJsCv0d3EpkYKrASXgzRM7XAwhG7s9fnzDxq0K3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZCJ3w27sBsinzVLcX8u4DjzjvvMB8GA1UdIwQY
MBaAFI+Yf6hvrs7YynpEYq9/AF6rJ3moMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajVoX3FHLXV6dGpLZWtSaXIzOEFYcXNuZWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9mYjRjNjMtYmRiMy00Yjg1LTgyZjAt
NmY2YzZjODIxNzgxLzEvajVoX3FHLXV6dGpLZWtSaXIzOEFYcXNuZWFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9mYjRjNjMtYmRiMy00Yjg1LTgyZjAtNmY2YzZjODIxNzgx
LzEvajVoX3FHLXV6dGpLZWtSaXIzOEFYcXNuZWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcqKgBFFW
PRtdcYAlLF1y6fr2ND0SSQr+YE1AKT14VoS3MMqZ2fPakmqpggOQOycDbhlMK1C3
P6ZsFKGghgmDFt5bsLikEB8bExHZtdfhSXqRk6dwPTAT+qKa/KknoLL8xDiMgvO8
+VNbWls75wscKBmGoQSHpQU5EcnPayxmwNSABHlTvm8RCqxm7UMmmHqhOjTKgWGG
ohuHqgSAwJDaHDTB2llXE3utA6Io5UswHcO7S2O7wBbU5p2aI3ZoDqmUuLN8mXMp
jipX7XB+smhEA3i5ZlU+n6lU5Cg/awsJ4Bkju93wj6NUTnUmEiS76c8kEentv7U1
rOGUTKKtEPrE0A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:36 2025 by rpki-client