Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
File: JFf3O_AvdUseYxfumk8-iGN_Gqc.mft (raw, json)
Hash identifier: S45ycJ8x/DxIaulEqsM6nlHyctZmpskcncZHxsJllyw=
Subject key identifier: 35:B6:5C:58:CE:C8:63:1B:B7:BB:E3:7C:9A:75:08:FA:DF:72:E2:6A
Authority key identifier: 24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7
Certificate issuer: /CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7
Certificate serial: 019A4E86DB654AA00E124A67C9AB7F10B418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
Manifest number: 0542
Signing time: Tue 04 Nov 2025 11:00:51 +0000
Manifest this update: Tue 04 Nov 2025 11:00:51 +0000
Manifest next update: Wed 05 Nov 2025 11:00:51 +0000
Files and hashes: 1: JFf3O_AvdUseYxfumk8-iGN_Gqc.crl (hash: qd01BtuRtDLxZ/DnwKMloGGX3w918fiarxg84OtX9pY=)
2: cXiQb0zcA0CLvw3qjr3Z14vvqVw.roa (hash: pX6VDAJEOVOavf5pZdZN7fQIN/wzAPZygKeMCqQda9A=)
3: pAkDpXLHJSVq5brO4eRR6jwHtU8.roa (hash: wuv8wzRTFGHFi0hdFLFmbRsgX25lIcuDItaxFFAOXPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:db:65:4a:a0:0e:12:4a:67:c9:ab:7f:10:b4:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7
Validity
Not Before: Nov 4 11:00:51 2025 GMT
Not After : Nov 5 11:00:51 2025 GMT
Subject: CN=35b65c58cec8631bb7bbe37c9a7508fadf72e26a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8e:98:9a:03:c6:e7:4a:8c:a0:4f:b4:64:bb:
a1:ca:c8:7d:ff:b9:a7:ed:cf:25:fc:1b:fb:d9:8c:
c0:34:cc:9c:5b:15:21:e3:f2:1c:17:72:9d:15:2a:
e5:31:35:4a:42:91:d2:46:a8:e0:6e:21:dc:35:f3:
df:7d:43:99:65:25:f8:b4:a7:ef:b3:eb:bf:2e:ad:
8e:5a:a1:0f:b6:de:36:9b:fa:3b:66:50:cc:0d:68:
38:b1:7f:0f:5c:48:67:3c:6a:45:61:5c:47:40:17:
67:a6:31:8a:5b:23:49:1c:e1:03:68:d5:ce:db:be:
ae:06:1d:a1:dc:2f:16:3d:ac:68:72:a8:3e:bf:1b:
6d:2b:b3:69:4e:c5:8e:05:30:9b:2f:58:d3:b4:03:
60:f6:c7:89:0a:bf:d8:12:62:59:f4:cb:f8:f1:27:
f7:98:da:ef:3c:da:f4:db:a8:d4:9b:a5:f8:a2:97:
e7:e2:e6:e1:c6:29:74:69:36:0f:f9:71:1b:4d:8f:
26:09:78:2a:32:02:07:eb:e1:b5:e7:ed:ec:d1:04:
14:92:76:8c:56:ea:80:e5:18:3f:8b:b2:64:c7:95:
60:3a:c0:be:05:b5:c2:a4:72:cb:ae:4b:77:10:81:
27:d9:4a:a8:9b:f8:50:87:dd:93:f2:19:b8:c2:a4:
cd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B6:5C:58:CE:C8:63:1B:B7:BB:E3:7C:9A:75:08:FA:DF:72:E2:6A
X509v3 Authority Key Identifier:
keyid:24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:cd:60:24:70:63:62:1d:4b:58:1e:25:ad:33:90:6c:45:5e:
31:bd:4f:30:09:20:0c:70:c6:35:fb:87:c2:49:e5:09:bc:73:
8d:f0:70:46:d8:30:ef:08:d2:55:89:dc:6e:d1:ab:f1:34:a4:
7e:86:64:6c:e7:e5:a2:cc:f8:8b:de:a6:77:00:31:61:fc:17:
e8:f1:5d:ab:42:1a:cb:bd:b8:c3:21:96:69:3e:70:0b:7d:fb:
b2:bc:3b:9b:06:18:60:0d:66:dc:10:b3:2c:a4:d6:75:69:65:
28:15:ee:78:7d:e3:4d:bf:d5:df:e4:08:e2:39:59:8e:dd:a7:
37:46:de:a2:6b:5f:7c:ae:dd:d7:8f:f3:3a:e7:b9:85:da:db:
38:76:08:96:91:e6:ca:11:70:40:d1:9e:96:a2:bc:b1:63:f9:
4f:47:87:b8:86:e8:12:0f:46:41:94:3e:2e:80:4e:07:bb:dd:
a5:1f:b4:a3:dd:86:4e:d1:41:b9:16:35:17:c1:73:fc:cd:11:
cb:75:fd:6d:96:96:ef:19:0c:96:cb:b0:b8:41:65:26:fb:e7:
f8:85:97:4f:d3:34:1e:9b:c2:18:c3:af:e3:67:96:49:1c:30:
84:53:a2:d9:bd:8f:b9:e6:c4:5e:52:54:73:44:70:14:8d:10:
54:1c:28:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOhttlSqAOEkpnyat/ELQYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NTdmNzNiZjAyZjc1NGIxZTYzMTdlZTlhNGYzZTg4NjM3
ZjFhYTcwHhcNMjUxMTA0MTEwMDUxWhcNMjUxMTA1MTEwMDUxWjAzMTEwLwYDVQQD
EygzNWI2NWM1OGNlYzg2MzFiYjdiYmUzN2M5YTc1MDhmYWRmNzJlMjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI6YmgPG50qMoE+0ZLuhysh9/7mn
7c8l/Bv72YzANMycWxUh4/IcF3KdFSrlMTVKQpHSRqjgbiHcNfPffUOZZSX4tKfv
s+u/Lq2OWqEPtt42m/o7ZlDMDWg4sX8PXEhnPGpFYVxHQBdnpjGKWyNJHOEDaNXO
276uBh2h3C8WPaxocqg+vxttK7NpTsWOBTCbL1jTtANg9seJCr/YEmJZ9Mv48Sf3
mNrvPNr026jUm6X4opfn4ubhxil0aTYP+XEbTY8mCXgqMgIH6+G15+3s0QQUknaM
VuqA5Rg/i7Jkx5VgOsC+BbXCpHLLrkt3EIEn2Uqom/hQh92T8hm4wqTNbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDW2XFjOyGMbt7vjfJp1CPrfcuJqMB8GA1UdIwQY
MBaAFCRX9zvwL3VLHmMX7ppPPohjfxqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkZmM09fQXZkVXNlWXhmdW1rOC1pR05fR3FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8wYmE1OWItZmY0Zi00MzhjLTg0MTct
NWZhMzgwNzQ5NDk3LzEvSkZmM09fQXZkVXNlWXhmdW1rOC1pR05fR3FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8wYmE1OWItZmY0Zi00MzhjLTg0MTctNWZhMzgwNzQ5NDk3
LzEvSkZmM09fQXZkVXNlWXhmdW1rOC1pR05fR3FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb81gJHBj
Yh1LWB4lrTOQbEVeMb1PMAkgDHDGNfuHwknlCbxzjfBwRtgw7wjSVYncbtGr8TSk
foZkbOflosz4i96mdwAxYfwX6PFdq0Iay724wyGWaT5wC337srw7mwYYYA1m3BCz
LKTWdWllKBXueH3jTb/V3+QI4jlZjt2nN0beomtffK7d14/zOue5hdrbOHYIlpHm
yhFwQNGelqK8sWP5T0eHuIboEg9GQZQ+LoBOB7vdpR+0o92GTtFBuRY1F8Fz/M0R
y3X9bZaW7xkMlsuwuEFlJvvn+IWXT9M0HpvCGMOv42eWSRwwhFOi2b2PuebEXlJU
c0RwFI0QVBwoUA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:06 2025 by rpki-client