Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft
File: JijMfwbqCaJH9r6enldMTze06bY.mft (raw, json)
Hash identifier: xkwY7o9GTyXMKI2pDZjtk1fbRy4cXyuK3JVEIuk2hcU=
Subject key identifier: 15:AD:1F:AF:46:79:97:1B:02:32:A6:F8:FC:09:E9:A7:1A:7E:3C:99
Authority key identifier: 26:28:CC:7F:06:EA:09:A2:47:F6:BE:9E:9E:57:4C:4F:37:B4:E9:B6
Certificate issuer: /CN=2628cc7f06ea09a247f6be9e9e574c4f37b4e9b6
Certificate serial: 019A51F59687236A1C8A87C1F0A31B6B0C9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JijMfwbqCaJH9r6enldMTze06bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft
Manifest number: 170D
Signing time: Wed 05 Nov 2025 03:00:40 +0000
Manifest this update: Wed 05 Nov 2025 03:00:40 +0000
Manifest next update: Thu 06 Nov 2025 03:00:40 +0000
Files and hashes: 1: JijMfwbqCaJH9r6enldMTze06bY.crl (hash: OoF/RR3seKLYZ3EAdbQK3a8lmM9z19Hccy+hEWiQqDM=)
2: hwIYyALOwoBN5zxSDcMvXKZuEhU.roa (hash: UgZLdR3szHuIjLGcrVjUdsIwYk5m69uSb6Pgyz7tXrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JijMfwbqCaJH9r6enldMTze06bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:96:87:23:6a:1c:8a:87:c1:f0:a3:1b:6b:0c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2628cc7f06ea09a247f6be9e9e574c4f37b4e9b6
Validity
Not Before: Nov 5 03:00:40 2025 GMT
Not After : Nov 6 03:00:40 2025 GMT
Subject: CN=15ad1faf4679971b0232a6f8fc09e9a71a7e3c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cc:72:b9:7d:a5:57:c3:8a:62:dd:3f:60:a9:
78:37:70:35:0e:96:40:58:3a:ca:15:d3:4f:68:ac:
da:e9:6a:9a:32:c1:0d:f8:9a:c7:e2:43:bf:a5:c2:
03:d2:a9:96:e1:bd:b3:c5:7d:3f:3d:9f:7b:af:54:
bb:64:ad:76:f6:a6:dc:b6:8c:74:fd:d4:ed:7e:e9:
26:03:dd:b7:13:f7:7d:af:a7:8e:c8:6a:e4:a0:db:
38:13:a4:ed:82:85:39:b1:66:be:bd:b7:7b:ba:40:
9d:fe:35:99:5e:fb:0b:61:bc:40:2c:8b:5b:7b:91:
a3:e2:8d:f0:eb:0a:16:13:d3:28:34:f3:d6:92:e5:
7e:c8:71:27:c7:14:1c:34:4c:43:f8:0c:6a:82:5e:
cf:c0:f4:93:ad:71:99:da:2b:b2:7a:40:b6:5c:f0:
45:2e:a5:2d:50:7f:da:c7:d1:15:06:04:41:51:40:
01:7f:bc:d6:6b:f3:e4:1a:6c:93:f3:50:09:2d:58:
13:3f:bd:38:87:6e:03:42:12:93:d7:bd:3c:fd:0a:
1d:90:87:db:84:7c:f1:e2:ab:69:2e:64:f1:e2:97:
4c:61:b8:06:4d:7f:6b:ff:cd:eb:87:25:85:c6:37:
76:56:b6:79:f0:60:10:8c:2e:aa:c9:cb:2c:29:ab:
a9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AD:1F:AF:46:79:97:1B:02:32:A6:F8:FC:09:E9:A7:1A:7E:3C:99
X509v3 Authority Key Identifier:
keyid:26:28:CC:7F:06:EA:09:A2:47:F6:BE:9E:9E:57:4C:4F:37:B4:E9:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JijMfwbqCaJH9r6enldMTze06bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c5:e9:95:4b:5b:4c:45:ed:33:fa:2c:05:25:47:22:3f:ff:
84:3d:85:d1:15:f2:4a:04:b6:cf:af:73:87:dc:d0:a1:cd:2d:
be:2b:bf:e2:b6:c5:79:78:10:4f:ed:5b:5b:af:aa:b4:1c:57:
72:40:70:fb:c5:af:0f:7f:4a:97:4d:45:5e:97:84:7e:3f:41:
19:47:c2:15:8d:89:54:94:de:d4:dd:0b:36:11:d9:5d:2b:83:
55:2b:eb:33:9e:d1:c0:d8:e2:d9:19:8a:05:60:47:ce:7e:65:
51:1d:e6:c1:7e:46:90:89:dc:92:54:e6:4f:84:58:1f:c8:b0:
27:62:0c:7e:aa:89:ae:40:ac:f8:74:2b:83:44:5b:b1:6d:be:
c3:14:71:1e:dc:79:68:4e:fd:ab:c2:2c:43:52:40:f2:7d:c7:
c8:39:4f:a2:28:88:38:87:f2:67:98:36:14:7f:95:bd:49:69:
09:ac:4b:cc:7a:63:62:03:0e:6b:28:7b:d2:b2:89:11:c9:e6:
a1:29:31:c9:10:b3:13:27:03:4e:66:72:9a:ff:3f:02:9a:c9:
41:66:b1:c9:4e:c6:eb:e5:a7:6c:99:3a:7b:c2:0d:ed:66:e4:
79:81:80:7a:54:49:84:8e:f2:18:6a:d4:ff:b5:21:70:26:ee:
13:9d:0d:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpR9ZaHI2ociofB8KMbawyeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MjhjYzdmMDZlYTA5YTI0N2Y2YmU5ZTllNTc0YzRmMzdi
NGU5YjYwHhcNMjUxMTA1MDMwMDQwWhcNMjUxMTA2MDMwMDQwWjAzMTEwLwYDVQQD
EygxNWFkMWZhZjQ2Nzk5NzFiMDIzMmE2ZjhmYzA5ZTlhNzFhN2UzYzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8xyuX2lV8OKYt0/YKl4N3A1DpZA
WDrKFdNPaKza6WqaMsEN+JrH4kO/pcID0qmW4b2zxX0/PZ97r1S7ZK129qbctox0
/dTtfukmA923E/d9r6eOyGrkoNs4E6TtgoU5sWa+vbd7ukCd/jWZXvsLYbxALItb
e5Gj4o3w6woWE9MoNPPWkuV+yHEnxxQcNExD+Axqgl7PwPSTrXGZ2iuyekC2XPBF
LqUtUH/ax9EVBgRBUUABf7zWa/PkGmyT81AJLVgTP704h24DQhKT1708/QodkIfb
hHzx4qtpLmTx4pdMYbgGTX9r/83rhyWFxjd2VrZ58GAQjC6qycssKaup+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBWtH69GeZcbAjKm+PwJ6acafjyZMB8GA1UdIwQY
MBaAFCYozH8G6gmiR/a+np5XTE83tOm2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmlqTWZ3YnFDYUpIOXI2ZW5sZE1UemUwNmJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8yNzE0NWEtM2U2Zi00YjkyLWI5NWIt
MTJhMjk3NjFlMDk0LzEvSmlqTWZ3YnFDYUpIOXI2ZW5sZE1UemUwNmJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8yNzE0NWEtM2U2Zi00YjkyLWI5NWItMTJhMjk3NjFlMDk0
LzEvSmlqTWZ3YnFDYUpIOXI2ZW5sZE1UemUwNmJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbMXplUtb
TEXtM/osBSVHIj//hD2F0RXySgS2z69zh9zQoc0tviu/4rbFeXgQT+1bW6+qtBxX
ckBw+8WvD39Kl01FXpeEfj9BGUfCFY2JVJTe1N0LNhHZXSuDVSvrM57RwNji2RmK
BWBHzn5lUR3mwX5GkIncklTmT4RYH8iwJ2IMfqqJrkCs+HQrg0RbsW2+wxRxHtx5
aE79q8IsQ1JA8n3HyDlPoiiIOIfyZ5g2FH+VvUlpCaxLzHpjYgMOayh70rKJEcnm
oSkxyRCzEycDTmZymv8/AprJQWaxyU7G6+WnbJk6e8IN7WbkeYGAelRJhI7yGGrU
/7UhcCbuE50NNw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:13:31 2025 by rpki-client