Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
File: jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft (raw, json)
Hash identifier: gW9rOiBeyFVCpVYyARwUeS8AUiX1UAUj7o1DVhRp+aI=
Subject key identifier: E8:7E:A7:DA:59:A8:99:3E:56:B1:52:21:EB:48:10:DE:E7:3E:83:2C
Authority key identifier: 8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
Certificate issuer: /CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Certificate serial: 0199FCC652D930C33F7BEECC4EB0B9D9441C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
Manifest number: 02F9
Signing time: Sun 19 Oct 2025 14:01:19 +0000
Manifest this update: Sun 19 Oct 2025 14:01:19 +0000
Manifest next update: Mon 20 Oct 2025 14:01:19 +0000
Files and hashes: 1: 2a4uGqXqRLFwxkrNzW_s6-qnGXE.roa (hash: goHZck25hCom6tNMtTpOVgal0/zlXu42ccbA4cfzVE0=)
2: jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl (hash: kNkxuVG2osl3xXCYRDSdWH99LSFDokeSqXVSr2Zyeuc=)
3: kFOw0UjGI7qti8qa1uAUEOsP1Y0.roa (hash: 3Ka4QMk7D3J6EIhtUeiuaJXa58kFmA+7bZN+m672Gvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:52:d9:30:c3:3f:7b:ee:cc:4e:b0:b9:d9:44:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Validity
Not Before: Oct 19 14:01:19 2025 GMT
Not After : Oct 20 14:01:19 2025 GMT
Subject: CN=e87ea7da59a8993e56b15221eb4810dee73e832c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:97:35:de:af:02:27:d3:b9:f5:05:80:fc:5e:
4b:0d:ef:b7:bf:ed:f0:a2:36:d1:dc:e5:1d:cf:ee:
e2:13:a9:cf:68:57:0e:d5:5b:88:2c:70:20:94:97:
09:ae:12:df:02:e3:65:ea:b9:09:2f:17:c1:ba:c5:
38:ac:96:47:4d:51:9a:25:7a:c3:dd:00:af:10:61:
84:ee:45:62:00:ea:5e:3a:3a:b8:37:20:10:58:f2:
75:95:ce:34:80:64:aa:d4:c0:15:df:1a:c2:cf:1a:
0f:c8:0e:79:2b:d6:5c:7a:61:4c:5e:92:d2:41:88:
5b:8e:6b:9d:d3:70:70:4c:40:37:d4:fe:07:f5:80:
bc:d4:5c:cf:6a:e3:cb:e3:30:8b:2d:b4:39:a6:71:
96:96:fd:f4:dd:5c:64:4e:de:f6:99:d1:c9:e1:c3:
ac:9d:7c:b6:9c:ce:53:75:32:42:7d:f1:0b:92:95:
e7:5a:3e:19:6f:fe:0a:f9:e9:73:95:f6:bd:09:a7:
90:0e:6a:b3:6e:63:1c:3b:c5:af:6d:8a:f7:ac:13:
d0:44:c9:e6:a9:27:5b:77:4a:02:78:bd:31:ad:03:
26:2c:f1:a8:d2:0b:5b:37:bc:39:fe:a3:59:19:00:
1b:ee:8d:59:86:e7:be:42:60:de:50:83:c8:b2:1c:
9b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7E:A7:DA:59:A8:99:3E:56:B1:52:21:EB:48:10:DE:E7:3E:83:2C
X509v3 Authority Key Identifier:
keyid:8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d7:92:a6:f4:e9:9f:fe:78:d4:2f:5e:4a:2e:e8:f9:7c:ad:
7b:30:1f:11:8f:f9:e2:49:71:e5:c0:3a:4f:5c:a1:5d:f6:1f:
a9:7d:c9:01:23:06:b8:5b:57:a8:e4:df:a9:65:24:66:95:04:
fa:12:4a:f9:1d:d6:df:4e:cc:29:30:a5:3f:ab:ee:a7:25:a3:
b0:c2:4b:6b:1b:78:e1:65:f0:b2:5f:67:a7:84:89:28:4e:16:
12:23:30:39:4a:f1:ce:a5:e9:dc:03:63:d2:7e:30:f2:8d:00:
03:ca:10:32:cc:7e:9f:df:16:07:e0:b2:fe:11:80:a8:61:56:
97:46:ea:c6:36:0a:91:c1:fb:a1:57:87:c4:59:28:51:8f:00:
23:4f:df:34:1b:18:01:ea:f5:cb:7a:3a:e9:e6:4d:6f:27:e5:
1d:de:29:fe:fe:cd:fa:24:e3:08:01:e8:23:5a:43:2d:7f:25:
ba:02:07:26:24:16:e4:77:0b:27:b0:64:24:e6:57:3b:40:34:
d7:4d:a2:30:a2:05:b0:c6:60:a7:85:14:ea:af:e8:cb:e8:aa:
9a:ed:40:8f:e7:da:2e:58:40:9b:5d:98:5a:d2:35:23:c8:e4:
e6:09:2b:15:be:2a:b9:ff:68:40:b6:9f:40:d7:90:82:6f:02:
d5:83:a9:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8xlLZMMM/e+7MTrC52UQcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMzRmYWI5YWEzM2ViNTVkOTg1NDIzN2JkMGQyMjUyNzky
MTMyZTYwHhcNMjUxMDE5MTQwMTE5WhcNMjUxMDIwMTQwMTE5WjAzMTEwLwYDVQQD
EyhlODdlYTdkYTU5YTg5OTNlNTZiMTUyMjFlYjQ4MTBkZWU3M2U4MzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpc13q8CJ9O59QWA/F5LDe+3v+3w
ojbR3OUdz+7iE6nPaFcO1VuILHAglJcJrhLfAuNl6rkJLxfBusU4rJZHTVGaJXrD
3QCvEGGE7kViAOpeOjq4NyAQWPJ1lc40gGSq1MAV3xrCzxoPyA55K9ZcemFMXpLS
QYhbjmud03BwTEA31P4H9YC81FzPauPL4zCLLbQ5pnGWlv303VxkTt72mdHJ4cOs
nXy2nM5TdTJCffELkpXnWj4Zb/4K+elzlfa9CaeQDmqzbmMcO8WvbYr3rBPQRMnm
qSdbd0oCeL0xrQMmLPGo0gtbN7w5/qNZGQAb7o1Zhue+QmDeUIPIshybUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOh+p9pZqJk+VrFSIetIEN7nPoMsMB8GA1UdIwQY
MBaAFI00+rmqM+tV2YVCN70NIlJ5ITLmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalRUNnVhb3o2MVhaaFVJM3ZRMGlVbmtoTXVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC82ZGU3ZmYtMzIxZS00YjQ3LWIzYzUt
NmRiMDg2YzAwZjZhLzEvalRUNnVhb3o2MVhaaFVJM3ZRMGlVbmtoTXVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC82ZGU3ZmYtMzIxZS00YjQ3LWIzYzUtNmRiMDg2YzAwZjZh
LzEvalRUNnVhb3o2MVhaaFVJM3ZRMGlVbmtoTXVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABNeSpvTp
n/541C9eSi7o+XytezAfEY/54klx5cA6T1yhXfYfqX3JASMGuFtXqOTfqWUkZpUE
+hJK+R3W307MKTClP6vupyWjsMJLaxt44WXwsl9np4SJKE4WEiMwOUrxzqXp3ANj
0n4w8o0AA8oQMsx+n98WB+Cy/hGAqGFWl0bqxjYKkcH7oVeHxFkoUY8AI0/fNBsY
Aer1y3o66eZNbyflHd4p/v7N+iTjCAHoI1pDLX8lugIHJiQW5HcLJ7BkJOZXO0A0
102iMKIFsMZgp4UU6q/oy+iqmu1Aj+faLlhAm12YWtI1I8jk5gkrFb4quf9oQLaf
QNeQgm8C1YOpNA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:35:28 2025 by rpki-client