Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft
File: JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft (raw, json)
Hash identifier: /FN1juyl0qcZ9h6SbB1669t6pZcaetYijwaY0iWhaIU=
Subject key identifier: 9F:B1:03:72:22:AF:F2:24:AF:AC:C0:01:CF:D1:E0:9A:E2:0C:43:02
Authority key identifier: 26:F3:6B:5C:6C:A7:A1:69:8E:74:21:A2:7E:3D:4A:6B:76:48:14:8D
Certificate issuer: /CN=26f36b5c6ca7a1698e7421a27e3d4a6b7648148d
Certificate serial: 0199FCFD1A49D52403691259FC26907B7B98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JvNrXGynoWmOdCGifj1Ka3ZIFI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 15:01:09 +0000
Manifest this update: Sun 19 Oct 2025 15:01:09 +0000
Manifest next update: Mon 20 Oct 2025 15:01:09 +0000
Files and hashes: 1: JvNrXGynoWmOdCGifj1Ka3ZIFI0.crl (hash: DL0pxeI2toLZZx3k69HaJ1ylt3YETV1loKsIsDPQBBk=)
2: pUkIJqBsM01F-i6Em2tr3Saf2sk.roa (hash: iY+eh+5NMCHozu8pjL4QFCTT1O1hYE+uhiNgfrNLxws=)
3: tnDBwukw0h8yvmfKynq161ze7HM.roa (hash: hhJlzz8ox0/NR3tX5f2QrfPo2aePRzJGPcnJfHw1RMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JvNrXGynoWmOdCGifj1Ka3ZIFI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:1a:49:d5:24:03:69:12:59:fc:26:90:7b:7b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26f36b5c6ca7a1698e7421a27e3d4a6b7648148d
Validity
Not Before: Oct 19 15:01:09 2025 GMT
Not After : Oct 20 15:01:09 2025 GMT
Subject: CN=9fb1037222aff224afacc001cfd1e09ae20c4302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bf:c2:91:8c:b4:96:e0:c1:6c:ee:e1:ed:1d:
fe:4f:d8:ea:54:49:c2:ef:9f:1d:31:50:b9:0f:a3:
fb:02:72:7b:71:8d:25:8a:cf:97:b2:38:87:87:b7:
77:c5:2d:f3:82:5d:1f:90:56:ae:9a:6d:c3:b7:f7:
8e:ac:30:d7:2c:78:14:55:16:2b:57:69:7d:b8:4a:
7e:f3:5d:55:62:20:f6:29:1c:73:8b:e1:96:da:de:
6f:36:8d:0c:fd:38:f5:b2:fc:c6:5d:20:86:55:2a:
9e:c0:3e:8f:14:c9:13:5d:8c:38:45:38:43:1e:83:
be:3c:00:0d:80:63:d9:11:61:5b:2a:40:96:95:11:
70:75:ed:3e:e1:83:41:f1:53:14:0a:c8:3a:80:3f:
9a:cb:b9:14:69:d5:40:5c:89:78:c1:44:9e:ff:01:
93:76:d2:b9:78:36:a5:99:8b:3b:85:24:fc:48:22:
a9:87:7f:91:de:a2:23:3d:fe:f6:5b:e0:5b:61:ad:
ab:18:b5:1e:7f:02:10:50:6f:7c:c2:35:96:e0:7e:
97:cb:cd:ff:e7:df:6d:0d:7e:29:5c:df:d7:52:68:
f9:2e:ae:e4:6f:c2:e4:dd:38:b8:28:53:fb:9f:7d:
06:44:98:35:07:1c:78:0d:b5:c0:cc:e8:a2:04:60:
fd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B1:03:72:22:AF:F2:24:AF:AC:C0:01:CF:D1:E0:9A:E2:0C:43:02
X509v3 Authority Key Identifier:
keyid:26:F3:6B:5C:6C:A7:A1:69:8E:74:21:A2:7E:3D:4A:6B:76:48:14:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvNrXGynoWmOdCGifj1Ka3ZIFI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c0:47:23:34:8f:a2:2d:bd:86:4a:1a:be:c8:dd:28:74:e9:
e7:40:3f:b8:f7:3f:bf:86:9d:53:77:a9:07:07:50:1e:d5:d7:
6c:63:ff:ba:fd:cd:4f:40:b6:f4:1a:41:4b:8b:51:73:74:df:
d1:af:62:2b:7c:f4:e3:1d:bd:50:ce:39:e7:46:e5:72:b5:d9:
bf:61:60:d1:59:48:c2:05:10:b1:cc:bc:f7:fa:6e:59:60:20:
4f:fc:49:56:b7:47:88:4b:2b:19:7e:e3:42:e2:81:2a:94:56:
83:87:d0:12:b5:cb:44:ee:ba:58:de:cc:bb:dc:f0:86:4c:54:
30:ec:64:28:af:83:af:ec:20:25:8a:57:eb:0c:5f:78:2b:ac:
1c:bc:99:08:33:cc:70:02:dc:0c:29:89:36:4d:b0:dd:71:db:
6d:3e:1b:75:59:ec:ee:cb:44:b9:f7:48:71:04:93:ca:23:d1:
14:91:fa:88:4a:b7:4e:87:1f:44:61:bc:47:be:28:63:16:94:
01:64:b1:cc:aa:b6:57:bf:7e:f6:1b:6e:0a:13:7a:b1:8c:79:
59:86:a9:cf:b4:f6:18:67:24:cf:0f:fd:1c:85:ae:9b:8c:4e:
11:77:df:9e:8d:4b:25:12:f4:f7:e9:42:70:0b:76:59:49:f4:
94:25:33:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/RpJ1SQDaRJZ/CaQe3uYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2ZjM2YjVjNmNhN2ExNjk4ZTc0MjFhMjdlM2Q0YTZiNzY0
ODE0OGQwHhcNMjUxMDE5MTUwMTA5WhcNMjUxMDIwMTUwMTA5WjAzMTEwLwYDVQQD
Eyg5ZmIxMDM3MjIyYWZmMjI0YWZhY2MwMDFjZmQxZTA5YWUyMGM0MzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnr/CkYy0luDBbO7h7R3+T9jqVEnC
758dMVC5D6P7AnJ7cY0lis+XsjiHh7d3xS3zgl0fkFaumm3Dt/eOrDDXLHgUVRYr
V2l9uEp+811VYiD2KRxzi+GW2t5vNo0M/Tj1svzGXSCGVSqewD6PFMkTXYw4RThD
HoO+PAANgGPZEWFbKkCWlRFwde0+4YNB8VMUCsg6gD+ay7kUadVAXIl4wUSe/wGT
dtK5eDalmYs7hST8SCKph3+R3qIjPf72W+BbYa2rGLUefwIQUG98wjWW4H6Xy83/
599tDX4pXN/XUmj5Lq7kb8Lk3Ti4KFP7n30GRJg1Bxx4DbXAzOiiBGD9YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+xA3Iir/Ikr6zAAc/R4JriDEMCMB8GA1UdIwQY
MBaAFCbza1xsp6FpjnQhon49Smt2SBSNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnZOclhHeW5vV21PZENHaWZqMUthM1pJRkkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS83Y2MwZjYtNzRlZi00MjNhLWE2OTYt
NGEyYmY0YWIxOTlkLzEvSnZOclhHeW5vV21PZENHaWZqMUthM1pJRkkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS83Y2MwZjYtNzRlZi00MjNhLWE2OTYtNGEyYmY0YWIxOTlk
LzEvSnZOclhHeW5vV21PZENHaWZqMUthM1pJRkkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmcBHIzSP
oi29hkoavsjdKHTp50A/uPc/v4adU3epBwdQHtXXbGP/uv3NT0C29BpBS4tRc3Tf
0a9iK3z04x29UM4550blcrXZv2Fg0VlIwgUQscy89/puWWAgT/xJVrdHiEsrGX7j
QuKBKpRWg4fQErXLRO66WN7Mu9zwhkxUMOxkKK+Dr+wgJYpX6wxfeCusHLyZCDPM
cALcDCmJNk2w3XHbbT4bdVns7stEufdIcQSTyiPRFJH6iEq3TocfRGG8R74oYxaU
AWSxzKq2V79+9htuChN6sYx5WYapz7T2GGckzw/9HIWum4xOEXffno1LJRL09+lC
cAt2WUn0lCUz8A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:30:57 2025 by rpki-client