Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.mft
File: Jm8xrRcB38ohu_SmXgfyXBzyssg.mft (raw, json)
Hash identifier: m520JShuPcSIAeCHs6L8wm/+JP5YLfe5ZJEam0JZaiY=
Subject key identifier: EE:2C:1B:1A:39:BA:D3:A9:3F:1E:70:03:FE:D6:F7:8A:CD:8D:C0:5A
Authority key identifier: 26:6F:31:AD:17:01:DF:CA:21:BB:F4:A6:5E:07:F2:5C:1C:F2:B2:C8
Certificate issuer: /CN=266f31ad1701dfca21bbf4a65e07f25c1cf2b2c8
Certificate serial: 019A52D156E91197CC64F73FF4F230EBFA13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jm8xrRcB38ohu_SmXgfyXBzyssg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.mft
Manifest number: 078C
Signing time: Wed 05 Nov 2025 07:00:42 +0000
Manifest this update: Wed 05 Nov 2025 07:00:42 +0000
Manifest next update: Thu 06 Nov 2025 07:00:42 +0000
Files and hashes: 1: 3gd5yhd86K_T7jr5SxEq6WbDoig.roa (hash: ojHL5lyJlzOv7t+xWWNn1JpZWPbuIJXizb57Of8VZwQ=)
2: Jm8xrRcB38ohu_SmXgfyXBzyssg.crl (hash: vg/WX59HV+VqHjCnaMOs5JDNhbCOKCSStgWKvMuj5xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jm8xrRcB38ohu_SmXgfyXBzyssg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:56:e9:11:97:cc:64:f7:3f:f4:f2:30:eb:fa:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=266f31ad1701dfca21bbf4a65e07f25c1cf2b2c8
Validity
Not Before: Nov 5 07:00:42 2025 GMT
Not After : Nov 6 07:00:42 2025 GMT
Subject: CN=ee2c1b1a39bad3a93f1e7003fed6f78acd8dc05a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:95:db:26:8d:fc:9b:e1:1e:80:c5:ae:e1:21:
04:3e:46:7d:4c:82:04:a3:ec:53:b3:d2:e1:9f:47:
b1:6e:d7:96:19:db:01:5a:08:95:14:d3:39:ee:7d:
e7:b7:d8:e7:9c:c2:6a:2a:db:9c:f4:e0:e3:73:c2:
c0:c3:66:10:16:f0:6c:b1:eb:a4:cc:11:ff:89:9c:
c5:fa:e2:86:cb:f4:da:13:5f:09:af:3a:03:cd:0a:
27:e7:57:b7:57:19:43:33:f1:3b:d9:68:4d:55:5c:
ae:f8:73:bd:b9:39:3e:50:36:31:86:17:1e:eb:00:
b2:67:87:f0:a4:1f:fb:d8:3c:70:e9:0a:7a:0e:21:
56:67:84:6c:ab:68:ca:20:ba:6a:c4:87:47:2b:48:
bf:e4:b0:2b:ef:9f:a9:2c:f4:7c:da:ad:49:49:42:
48:da:51:5a:48:1a:67:d6:9b:96:ad:39:1a:24:c5:
41:12:6f:fc:3b:26:d0:8e:af:95:fa:c0:6b:16:0f:
b5:7e:54:04:62:dd:7a:e0:74:2c:9a:66:b0:74:da:
73:ce:07:ce:16:cd:30:04:be:d3:37:7f:85:8e:61:
b7:d2:e9:cb:66:08:ee:a8:b4:f7:dd:4a:37:6e:55:
d6:00:7c:3b:6e:88:a2:bc:a5:c8:de:5e:07:a6:3f:
d1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:2C:1B:1A:39:BA:D3:A9:3F:1E:70:03:FE:D6:F7:8A:CD:8D:C0:5A
X509v3 Authority Key Identifier:
keyid:26:6F:31:AD:17:01:DF:CA:21:BB:F4:A6:5E:07:F2:5C:1C:F2:B2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jm8xrRcB38ohu_SmXgfyXBzyssg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/4437d6-22d8-401b-8137-10bf77b20dac/1/Jm8xrRcB38ohu_SmXgfyXBzyssg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e0:3b:59:a1:b8:22:33:4b:31:2e:66:db:d2:d2:7e:2a:2d:
67:39:dc:9e:31:ee:33:0f:f3:bf:b4:dd:d1:6a:de:b2:f8:83:
70:26:ff:1d:d8:b5:8a:18:cd:48:9e:34:28:54:63:f5:f5:79:
64:dd:f0:2c:63:bc:bb:4e:67:73:5b:68:64:7f:e2:27:63:49:
8a:33:63:d9:ab:1d:43:cb:fc:21:45:fe:2a:ff:90:9d:ff:58:
ef:66:33:b8:e8:2b:fc:fc:6e:84:95:d7:5e:13:4c:89:4d:24:
14:59:e4:6b:a2:b7:1f:3d:26:77:9c:9b:25:dc:68:23:ee:87:
3b:da:d3:a4:fe:93:f2:33:b8:36:d7:b7:dd:f8:41:b3:43:18:
a1:e2:54:dc:19:3c:3e:4d:8a:7d:8a:65:d4:7a:a3:00:6b:80:
f9:7c:44:34:01:f1:43:ad:88:97:7d:fa:60:42:90:12:da:77:
3f:9d:a4:37:8e:31:ed:81:72:cf:43:bd:48:b9:5a:9d:44:49:
cb:f7:47:e3:50:6b:8c:8f:e6:0c:7e:35:3e:8f:a4:e0:46:58:
c6:f7:49:3e:de:53:88:0b:2f:cd:a6:1f:31:92:b0:97:97:a1:
5c:f7:43:6e:22:de:b1:07:4a:6c:69:19:d3:3c:b3:5e:fc:36:
92:64:35:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0VbpEZfMZPc/9PIw6/oTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NmYzMWFkMTcwMWRmY2EyMWJiZjRhNjVlMDdmMjVjMWNm
MmIyYzgwHhcNMjUxMTA1MDcwMDQyWhcNMjUxMTA2MDcwMDQyWjAzMTEwLwYDVQQD
EyhlZTJjMWIxYTM5YmFkM2E5M2YxZTcwMDNmZWQ2Zjc4YWNkOGRjMDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZXbJo38m+EegMWu4SEEPkZ9TIIE
o+xTs9Lhn0exbteWGdsBWgiVFNM57n3nt9jnnMJqKtuc9ODjc8LAw2YQFvBsseuk
zBH/iZzF+uKGy/TaE18JrzoDzQon51e3VxlDM/E72WhNVVyu+HO9uTk+UDYxhhce
6wCyZ4fwpB/72Dxw6Qp6DiFWZ4Rsq2jKILpqxIdHK0i/5LAr75+pLPR82q1JSUJI
2lFaSBpn1puWrTkaJMVBEm/8OybQjq+V+sBrFg+1flQEYt164HQsmmawdNpzzgfO
Fs0wBL7TN3+FjmG30unLZgjuqLT33Uo3blXWAHw7boiivKXI3l4Hpj/RtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO4sGxo5utOpPx5wA/7W94rNjcBaMB8GA1UdIwQY
MBaAFCZvMa0XAd/KIbv0pl4H8lwc8rLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm04eHJSY0IzOG9odV9TbVhnZnlYQnp5c3NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi80NDM3ZDYtMjJkOC00MDFiLTgxMzct
MTBiZjc3YjIwZGFjLzEvSm04eHJSY0IzOG9odV9TbVhnZnlYQnp5c3NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi80NDM3ZDYtMjJkOC00MDFiLTgxMzctMTBiZjc3YjIwZGFj
LzEvSm04eHJSY0IzOG9odV9TbVhnZnlYQnp5c3NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATeA7WaG4
IjNLMS5m29LSfiotZzncnjHuMw/zv7Td0WresviDcCb/Hdi1ihjNSJ40KFRj9fV5
ZN3wLGO8u05nc1toZH/iJ2NJijNj2asdQ8v8IUX+Kv+Qnf9Y72YzuOgr/PxuhJXX
XhNMiU0kFFnka6K3Hz0md5ybJdxoI+6HO9rTpP6T8jO4Nte33fhBs0MYoeJU3Bk8
Pk2KfYpl1HqjAGuA+XxENAHxQ62Il336YEKQEtp3P52kN44x7YFyz0O9SLlanURJ
y/dH41BrjI/mDH41Po+k4EZYxvdJPt5TiAsvzaYfMZKwl5ehXPdDbiLesQdKbGkZ
0zyzXvw2kmQ10g==
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:05:14 2025 by rpki-client