Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
File: jMyCpb7jqTYzA8M83N0278aPi0Q.mft (raw, json)
Hash identifier: 2tsUZixBkmH9TC33I4vJi/891w7ScNW4kuqX6DoOBRs=
Subject key identifier: CA:AF:4C:68:6A:31:0E:CE:C9:9F:47:76:C3:82:20:9B:EA:F0:84:0B
Authority key identifier: 8C:CC:82:A5:BE:E3:A9:36:33:03:C3:3C:DC:DD:36:EF:C6:8F:8B:44
Certificate issuer: /CN=8ccc82a5bee3a9363303c33cdcdd36efc68f8b44
Certificate serial: 019A4E86379A7C579E2C37DC3BCF0F12CABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
Manifest number: 0301
Signing time: Tue 04 Nov 2025 11:00:10 +0000
Manifest this update: Tue 04 Nov 2025 11:00:10 +0000
Manifest next update: Wed 05 Nov 2025 11:00:10 +0000
Files and hashes: 1: DUQ0ry08WIUw5lopwRc9s2zZ5Ck.roa (hash: 4MMSMGpFYTj64gvYvAI9aZYJdovl51CVqQfi4na/C5A=)
2: jMyCpb7jqTYzA8M83N0278aPi0Q.crl (hash: ExsAz84BIt//4i3c4M1X1s9hNQv0MYpFWaqmjG3owvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:37:9a:7c:57:9e:2c:37:dc:3b:cf:0f:12:ca:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ccc82a5bee3a9363303c33cdcdd36efc68f8b44
Validity
Not Before: Nov 4 11:00:10 2025 GMT
Not After : Nov 5 11:00:10 2025 GMT
Subject: CN=caaf4c686a310ecec99f4776c382209beaf0840b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:21:03:33:9a:99:85:ff:93:9d:a8:ed:1c:95:
a4:cd:9c:e9:11:91:3e:e0:86:74:d9:68:fe:e7:df:
5d:7e:17:5e:0f:c1:83:d5:3b:1f:82:93:12:0c:07:
a6:3d:81:76:72:c5:11:13:83:8d:24:bb:e2:bb:03:
94:ed:13:e8:63:66:4c:0a:2d:41:18:76:ab:d4:67:
93:5e:94:26:4b:bb:a0:31:37:ec:14:6e:30:65:fd:
85:2e:15:d8:b3:e7:7e:49:a3:9a:2c:ec:e4:66:65:
cb:c9:ae:d6:0d:31:ce:90:a0:2b:0d:de:01:22:15:
64:25:c1:64:2f:a5:1e:b4:6d:a2:9e:dc:1c:7e:e6:
35:5a:e7:39:c2:22:0a:80:de:8e:cb:0b:31:da:96:
b4:f2:48:6d:44:2e:f6:42:d8:26:da:9d:3e:0f:f7:
db:70:ee:d5:4a:cd:07:b2:71:9c:55:2b:11:fc:f3:
4e:ff:4b:d1:d6:fb:9e:84:3f:3a:3c:5e:61:9b:dc:
9f:e9:4e:20:38:2a:49:42:7e:b7:1c:9b:1a:03:46:
cb:2f:5d:18:3d:46:a9:e3:2d:54:47:ca:be:35:9a:
b8:77:2f:be:48:7e:47:79:fa:81:8c:0e:6e:cc:d2:
e4:b9:21:55:89:20:aa:86:03:84:64:99:f8:67:65:
fb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:AF:4C:68:6A:31:0E:CE:C9:9F:47:76:C3:82:20:9B:EA:F0:84:0B
X509v3 Authority Key Identifier:
keyid:8C:CC:82:A5:BE:E3:A9:36:33:03:C3:3C:DC:DD:36:EF:C6:8F:8B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:16:70:97:65:52:18:51:ef:40:85:5f:d2:8a:38:0e:88:9b:
b2:dc:6e:a1:da:a5:f7:eb:6e:d6:13:a7:b9:88:52:69:e7:10:
de:8d:d5:05:b0:fe:64:d7:fe:44:d6:a2:08:63:83:34:7d:07:
bc:cb:bb:9a:f5:03:26:1f:a0:a3:9a:ca:35:69:5d:4e:94:7a:
72:92:49:78:ee:40:a4:8c:03:d0:03:ae:36:3a:7c:ea:b0:24:
3e:18:e0:a2:c7:02:08:04:a8:1a:39:02:74:44:5a:80:cd:23:
1c:76:8e:2d:e1:2b:e6:10:84:26:13:c0:05:49:1d:c6:f1:dc:
0e:cf:33:ee:99:16:d1:f7:04:f0:9b:fe:44:2d:85:a9:8f:81:
09:47:ff:22:5b:6d:a4:f7:c0:e3:d2:13:b4:3f:80:d1:de:35:
78:4c:cc:4d:71:93:88:5d:a3:54:ab:c4:d6:22:d6:1e:01:cb:
5c:0b:8e:dd:f6:e2:91:77:ca:6a:7f:4a:4e:ad:6d:da:64:30:
e5:cf:d3:15:53:98:50:89:c5:c8:bb:a9:14:90:5c:43:10:56:
51:f6:50:b6:72:90:41:88:a5:de:fe:aa:2c:c2:24:3b:e7:28:
42:24:78:86:5f:a9:b8:8b:3b:c2:4d:e8:94:24:47:01:a7:17:
75:06:d5:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhjeafFeeLDfcO88PEsq+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjY2M4MmE1YmVlM2E5MzYzMzAzYzMzY2RjZGQzNmVmYzY4
ZjhiNDQwHhcNMjUxMTA0MTEwMDEwWhcNMjUxMTA1MTEwMDEwWjAzMTEwLwYDVQQD
EyhjYWFmNGM2ODZhMzEwZWNlYzk5ZjQ3NzZjMzgyMjA5YmVhZjA4NDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyEDM5qZhf+TnajtHJWkzZzpEZE+
4IZ02Wj+599dfhdeD8GD1TsfgpMSDAemPYF2csURE4ONJLviuwOU7RPoY2ZMCi1B
GHar1GeTXpQmS7ugMTfsFG4wZf2FLhXYs+d+SaOaLOzkZmXLya7WDTHOkKArDd4B
IhVkJcFkL6UetG2intwcfuY1Wuc5wiIKgN6Oywsx2pa08khtRC72Qtgm2p0+D/fb
cO7VSs0HsnGcVSsR/PNO/0vR1vuehD86PF5hm9yf6U4gOCpJQn63HJsaA0bLL10Y
PUap4y1UR8q+NZq4dy++SH5HefqBjA5uzNLkuSFViSCqhgOEZJn4Z2X7fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMqvTGhqMQ7OyZ9HdsOCIJvq8IQLMB8GA1UdIwQY
MBaAFIzMgqW+46k2MwPDPNzdNu/Gj4tEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak15Q3BiN2pxVFl6QThNODNOMDI3OGFQaTBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lYjVmZDItYjk3NC00N2M5LWI5MjQt
YmViZGExNjA4ZDA5LzEvak15Q3BiN2pxVFl6QThNODNOMDI3OGFQaTBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9lYjVmZDItYjk3NC00N2M5LWI5MjQtYmViZGExNjA4ZDA5
LzEvak15Q3BiN2pxVFl6QThNODNOMDI3OGFQaTBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARRZwl2VS
GFHvQIVf0oo4Doibstxuodql9+tu1hOnuYhSaecQ3o3VBbD+ZNf+RNaiCGODNH0H
vMu7mvUDJh+go5rKNWldTpR6cpJJeO5ApIwD0AOuNjp86rAkPhjgoscCCASoGjkC
dERagM0jHHaOLeEr5hCEJhPABUkdxvHcDs8z7pkW0fcE8Jv+RC2FqY+BCUf/Iltt
pPfA49ITtD+A0d41eEzMTXGTiF2jVKvE1iLWHgHLXAuO3fbikXfKan9KTq1t2mQw
5c/TFVOYUInFyLupFJBcQxBWUfZQtnKQQYil3v6qLMIkO+coQiR4hl+puIs7wk3o
lCRHAacXdQbV7A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:25 2025 by rpki-client