Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
File: jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft (raw, json)
Hash identifier: 45pPFt6TpbuGj4mCI7E8SVZbUUfrhtFJCcKvGnUYc9k=
Subject key identifier: E7:DE:D1:3D:B3:3F:07:BC:1D:1F:04:66:D3:43:6F:0B:72:DB:F1:A7
Authority key identifier: 8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
Certificate issuer: /CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Certificate serial: 0199FB7C85B2B55353EBEEA542636F7AA63E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
Manifest number: 15C4
Signing time: Sun 19 Oct 2025 08:01:05 +0000
Manifest this update: Sun 19 Oct 2025 08:01:05 +0000
Manifest next update: Mon 20 Oct 2025 08:01:05 +0000
Files and hashes: 1: R2l9RMJ9r-Uxp3JREDEadFHxFJU.roa (hash: weYAVSG/ZQ3RqDZF3sJtlOJw4FVloRVdNFig6sXWzgw=)
2: jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl (hash: 0cyPJxAkQ6+RE1YB/n1JBsEKujhmiDju3otAWentwhs=)
3: pPRmMnVfJ7xdqUjJgPRkFHjdCl8.roa (hash: IWh8KTHgqy6EH2ywVMGWNHIBEN+BDziBPQVDednZZvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:85:b2:b5:53:53:eb:ee:a5:42:63:6f:7a:a6:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Validity
Not Before: Oct 19 08:01:05 2025 GMT
Not After : Oct 20 08:01:05 2025 GMT
Subject: CN=e7ded13db33f07bc1d1f0466d3436f0b72dbf1a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:95:b0:0c:7f:6d:2d:89:fb:b9:89:d3:cd:97:
87:01:4e:85:af:0d:05:4b:56:6b:f6:d7:e1:a6:d2:
5f:8f:e2:70:1d:83:6f:63:19:33:dc:39:22:d7:3e:
08:42:45:90:a7:82:11:6d:97:95:fc:54:7d:71:49:
71:ab:e7:02:12:01:ef:6c:24:55:04:3d:7c:31:6f:
fa:ad:0d:16:d1:47:d6:7d:3d:6b:76:87:0d:6f:d0:
fa:98:e4:47:6c:d6:e0:45:79:96:a2:c5:fa:f8:5b:
9a:bb:a1:e2:b6:5e:1a:8a:50:ee:d9:c4:fd:54:dc:
ea:82:8a:66:97:f7:cd:2a:c6:f1:80:7f:50:21:7d:
59:e1:37:0c:70:a9:b6:d8:10:92:51:c4:63:f5:e0:
9f:7a:45:8a:dd:d0:68:f4:fc:79:ce:93:d4:9b:e3:
6d:9c:c6:0d:b5:58:40:c8:ba:b8:1a:9f:5e:99:c5:
88:1b:cb:33:f4:0b:1d:5b:87:14:47:46:89:17:9d:
b8:a1:49:50:99:9a:1b:38:59:53:c8:a3:f6:74:3e:
a4:d6:88:fd:54:d3:03:65:a3:b7:c2:1f:01:31:34:
f5:f0:ef:9c:61:7e:54:07:96:c0:56:ca:64:4b:61:
a1:d5:09:e4:0f:7a:73:67:31:50:0c:9c:94:ce:e3:
1d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DE:D1:3D:B3:3F:07:BC:1D:1F:04:66:D3:43:6F:0B:72:DB:F1:A7
X509v3 Authority Key Identifier:
keyid:8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a3:cb:a1:fa:b0:8c:dc:3d:f6:59:1e:f9:be:22:68:78:26:
ec:4c:1e:ef:ab:8d:9d:e1:59:18:7d:b1:1b:5f:66:8d:ed:f6:
d1:f4:78:4a:73:26:c5:3a:10:75:a1:4a:0f:6d:84:0b:b0:ca:
d7:e0:dc:a2:a8:0d:f8:8b:ed:79:08:84:96:c5:7b:3d:03:c7:
77:37:34:76:2e:78:64:76:ab:76:a7:df:fc:e5:79:1c:a5:cc:
91:0e:fb:b9:da:e9:4f:62:40:47:6a:5c:27:00:6e:c1:d7:3c:
ab:96:f3:11:3b:1d:e9:42:eb:ac:b4:78:78:a9:89:b3:1e:2e:
ef:92:f3:ad:24:4d:e6:d7:b1:6b:83:e2:54:77:96:af:bd:64:
f5:41:0d:98:6f:55:b7:1b:fe:eb:c8:73:8d:f9:7a:ac:93:70:
76:c9:aa:1e:7f:81:2d:72:3f:6f:1e:4d:57:d5:8f:f7:b3:f6:
97:ab:dd:de:22:12:de:ca:cc:b1:05:a9:08:d5:97:d4:36:fd:
c1:7b:64:4e:33:c9:8c:05:b6:3e:5a:a2:d0:44:e9:9e:5d:9c:
7c:0d:21:de:d3:c9:8f:40:ca:af:53:6d:be:39:e5:64:9d:eb:
06:53:9c:eb:4c:87:83:05:ba:08:be:8f:de:9c:2a:9f:a7:3b:
9b:5b:05:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fIWytVNT6+6lQmNveqY+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMDA2NGM2ZjgwZTA5NjdmYmU0ZTRiOGZiMjRhNDE0M2M0
ODU3YzYwHhcNMjUxMDE5MDgwMTA1WhcNMjUxMDIwMDgwMTA1WjAzMTEwLwYDVQQD
EyhlN2RlZDEzZGIzM2YwN2JjMWQxZjA0NjZkMzQzNmYwYjcyZGJmMWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZWwDH9tLYn7uYnTzZeHAU6Frw0F
S1Zr9tfhptJfj+JwHYNvYxkz3Dki1z4IQkWQp4IRbZeV/FR9cUlxq+cCEgHvbCRV
BD18MW/6rQ0W0UfWfT1rdocNb9D6mORHbNbgRXmWosX6+Fuau6Hitl4ailDu2cT9
VNzqgopml/fNKsbxgH9QIX1Z4TcMcKm22BCSUcRj9eCfekWK3dBo9Px5zpPUm+Nt
nMYNtVhAyLq4Gp9emcWIG8sz9AsdW4cUR0aJF524oUlQmZobOFlTyKP2dD6k1oj9
VNMDZaO3wh8BMTT18O+cYX5UB5bAVspkS2Gh1QnkD3pzZzFQDJyUzuMdswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOfe0T2zPwe8HR8EZtNDbwty2/GnMB8GA1UdIwQY
MBaAFI8AZMb4Dgln++TkuPskpBQ8SFfGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvandCa3h2Z09DV2Y3NU9TNC15U2tGRHhJVjhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy81YmFiNzktYWZhYS00Y2RkLWJjMjMt
NDAzMTRmYzNkODc0LzEvandCa3h2Z09DV2Y3NU9TNC15U2tGRHhJVjhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy81YmFiNzktYWZhYS00Y2RkLWJjMjMtNDAzMTRmYzNkODc0
LzEvandCa3h2Z09DV2Y3NU9TNC15U2tGRHhJVjhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi6PLofqw
jNw99lke+b4iaHgm7Ewe76uNneFZGH2xG19mje320fR4SnMmxToQdaFKD22EC7DK
1+DcoqgN+IvteQiElsV7PQPHdzc0di54ZHardqff/OV5HKXMkQ77udrpT2JAR2pc
JwBuwdc8q5bzETsd6ULrrLR4eKmJsx4u75LzrSRN5texa4PiVHeWr71k9UENmG9V
txv+68hzjfl6rJNwdsmqHn+BLXI/bx5NV9WP97P2l6vd3iIS3srMsQWpCNWX1Db9
wXtkTjPJjAW2Plqi0ETpnl2cfA0h3tPJj0DKr1NtvjnlZJ3rBlOc60yHgwW6CL6P
3pwqn6c7m1sFng==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:15 2025 by rpki-client