Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft
File: jgo5Gq64_HyDP4JX16nnSlWzOv4.mft (raw, json)
Hash identifier: Qcpe+7eiu7ROEcE+hyfOZh0q7zbqI+AD+YQbI5/9Pdc=
Subject key identifier: A7:57:E6:1D:CF:65:C9:96:9C:41:55:C1:F4:AB:B7:7A:DF:32:BD:F1
Authority key identifier: 8E:0A:39:1A:AE:B8:FC:7C:83:3F:82:57:D7:A9:E7:4A:55:B3:3A:FE
Certificate issuer: /CN=8e0a391aaeb8fc7c833f8257d7a9e74a55b33afe
Certificate serial: 019A50AB8E2BD5A4423882284E7096729DC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft
Manifest number: 1653
Signing time: Tue 04 Nov 2025 21:00:11 +0000
Manifest this update: Tue 04 Nov 2025 21:00:11 +0000
Manifest next update: Wed 05 Nov 2025 21:00:11 +0000
Files and hashes: 1: DYRo5UxpUtRoBr5siZIGMHmDOmk.roa (hash: CNeg8TW20mVMGXVcVuZCa6OMSEOFftuPH5JmAwDqWJM=)
2: jgo5Gq64_HyDP4JX16nnSlWzOv4.crl (hash: CRlKRGEp4TpP5u6GqxemKXX3UWOmvm8uwEgo7UKxkd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:ab:8e:2b:d5:a4:42:38:82:28:4e:70:96:72:9d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0a391aaeb8fc7c833f8257d7a9e74a55b33afe
Validity
Not Before: Nov 4 21:00:11 2025 GMT
Not After : Nov 5 21:00:11 2025 GMT
Subject: CN=a757e61dcf65c9969c4155c1f4abb77adf32bdf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:31:90:00:fc:ef:bf:49:dd:eb:ea:73:57:62:
3e:99:8b:6c:d8:43:6a:9a:82:af:34:bf:3b:1b:89:
31:60:79:9c:b9:af:69:e9:68:2f:3a:59:3a:46:f9:
5f:dc:b1:3b:4b:54:d3:15:01:93:4c:f1:38:b3:93:
01:c3:d4:8f:03:34:b3:dc:0e:f5:93:c8:62:67:26:
4c:11:50:a6:3f:a8:32:28:55:fd:38:d5:3e:88:a4:
90:23:f4:31:b0:aa:ca:94:35:97:1e:3b:09:04:d5:
4f:6c:42:54:2e:32:d4:b2:a9:11:c0:a1:00:be:66:
f7:d3:53:c7:d1:4b:97:a2:a3:bb:8e:24:c2:f4:a7:
53:66:c0:28:c9:78:41:87:99:a8:d0:9d:33:9c:58:
66:39:a6:6a:b8:93:24:cd:d1:b5:5d:9b:c6:59:7e:
37:26:b5:00:90:84:f9:8e:d8:8d:4b:c8:f7:e4:81:
2c:b9:ff:dd:be:8a:2d:06:97:8e:29:04:09:90:61:
7c:39:85:3f:60:d9:9b:1e:7c:f3:fe:7b:12:c3:19:
c4:10:f9:0c:10:27:7c:d4:ef:17:b1:0e:04:02:48:
e1:0a:a9:84:4f:c0:38:8b:4c:90:44:ae:aa:58:0a:
22:76:25:31:cb:04:ad:3e:84:79:d1:a4:74:d8:4a:
8f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:57:E6:1D:CF:65:C9:96:9C:41:55:C1:F4:AB:B7:7A:DF:32:BD:F1
X509v3 Authority Key Identifier:
keyid:8E:0A:39:1A:AE:B8:FC:7C:83:3F:82:57:D7:A9:E7:4A:55:B3:3A:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgo5Gq64_HyDP4JX16nnSlWzOv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f26501-6718-42bc-91df-edb43e1d4ee0/1/jgo5Gq64_HyDP4JX16nnSlWzOv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:4d:30:0a:32:f7:2f:a5:3a:bf:d4:01:7e:fc:a2:25:08:42:
77:bf:0c:c8:bf:cf:3a:1a:fb:14:55:1b:4d:5c:fd:1b:16:65:
57:d6:aa:6d:80:78:5a:0a:18:94:82:e2:24:56:b9:c5:46:57:
99:a6:62:b7:c2:d5:9a:26:55:e3:af:c4:42:ba:28:b2:52:b9:
ed:ba:ad:44:fa:0e:29:78:c3:35:75:56:50:fa:2a:ca:d5:ae:
c8:dc:a6:d4:37:8f:3b:4e:d8:61:c2:4f:d0:9f:08:75:c2:89:
c3:a4:f5:d6:e0:35:54:a4:fa:1d:58:ae:ad:c7:fa:42:b9:b7:
72:a7:ca:4c:f0:c0:f2:de:63:9b:7c:83:e7:c3:4f:c7:be:2a:
1c:3b:04:5e:80:01:e4:55:e1:c7:dc:ea:83:65:cc:90:ca:23:
12:38:7b:4f:37:eb:1b:32:76:5f:77:39:1e:97:b1:f1:21:2b:
d7:42:92:bc:a0:82:ff:fa:2d:d8:38:39:49:0f:f6:a8:b7:40:
9e:5d:5d:5e:c3:1f:91:23:1e:fc:22:03:e7:8b:aa:ab:22:18:
b8:17:4d:20:82:3b:c4:36:02:26:c9:bd:00:ea:99:59:a8:6b:
ce:c0:f6:a7:a3:2b:46:f2:95:56:89:7e:12:a1:c7:70:fa:bb:
4b:95:86:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQq44r1aRCOIIoTnCWcp3AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMGEzOTFhYWViOGZjN2M4MzNmODI1N2Q3YTllNzRhNTVi
MzNhZmUwHhcNMjUxMTA0MjEwMDExWhcNMjUxMTA1MjEwMDExWjAzMTEwLwYDVQQD
EyhhNzU3ZTYxZGNmNjVjOTk2OWM0MTU1YzFmNGFiYjc3YWRmMzJiZGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzGQAPzvv0nd6+pzV2I+mYts2ENq
moKvNL87G4kxYHmcua9p6WgvOlk6Rvlf3LE7S1TTFQGTTPE4s5MBw9SPAzSz3A71
k8hiZyZMEVCmP6gyKFX9ONU+iKSQI/QxsKrKlDWXHjsJBNVPbEJULjLUsqkRwKEA
vmb301PH0UuXoqO7jiTC9KdTZsAoyXhBh5mo0J0znFhmOaZquJMkzdG1XZvGWX43
JrUAkIT5jtiNS8j35IEsuf/dvootBpeOKQQJkGF8OYU/YNmbHnzz/nsSwxnEEPkM
ECd81O8XsQ4EAkjhCqmET8A4i0yQRK6qWAoidiUxywStPoR50aR02EqPiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdX5h3PZcmWnEFVwfSrt3rfMr3xMB8GA1UdIwQY
MBaAFI4KORquuPx8gz+CV9ep50pVszr+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamdvNUdxNjRfSHlEUDRKWDE2bm5TbFd6T3Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mMjY1MDEtNjcxOC00MmJjLTkxZGYt
ZWRiNDNlMWQ0ZWUwLzEvamdvNUdxNjRfSHlEUDRKWDE2bm5TbFd6T3Y0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9mMjY1MDEtNjcxOC00MmJjLTkxZGYtZWRiNDNlMWQ0ZWUw
LzEvamdvNUdxNjRfSHlEUDRKWDE2bm5TbFd6T3Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoU0wCjL3
L6U6v9QBfvyiJQhCd78MyL/POhr7FFUbTVz9GxZlV9aqbYB4WgoYlILiJFa5xUZX
maZit8LVmiZV46/EQrooslK57bqtRPoOKXjDNXVWUPoqytWuyNym1DePO07YYcJP
0J8IdcKJw6T11uA1VKT6HViurcf6Qrm3cqfKTPDA8t5jm3yD58NPx74qHDsEXoAB
5FXhx9zqg2XMkMojEjh7TzfrGzJ2X3c5Hpex8SEr10KSvKCC//ot2Dg5SQ/2qLdA
nl1dXsMfkSMe/CID54uqqyIYuBdNIII7xDYCJsm9AOqZWahrzsD2p6MrRvKVVol+
EqHHcPq7S5WG8w==
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:51:06 2025 by rpki-client