Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft
File: JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft (raw, json)
Hash identifier: Mdw43nyy5kPlfmA2kdZ3BnBg3kgphnIY6vA8fk0jWCE=
Subject key identifier: 58:F9:37:21:7A:75:0C:20:12:8D:C3:9A:E8:53:9E:30:BA:4A:9B:D7
Authority key identifier: 27:18:9A:B5:3F:32:EF:F6:57:26:FD:49:D0:8D:42:FF:81:2C:6D:B3
Certificate issuer: /CN=27189ab53f32eff65726fd49d08d42ff812c6db3
Certificate serial: 019A5007235FF4295238697B8FBCA4AA1306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxiatT8y7_ZXJv1J0I1C_4EsbbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft
Manifest number: 045E
Signing time: Tue 04 Nov 2025 18:00:36 +0000
Manifest this update: Tue 04 Nov 2025 18:00:36 +0000
Manifest next update: Wed 05 Nov 2025 18:00:36 +0000
Files and hashes: 1: JxiatT8y7_ZXJv1J0I1C_4EsbbM.crl (hash: flSvFcHbKjMf7ta+9FJucywwOjkUfV8HUTDXcftVvfM=)
2: gm-1FgU2aGaeL3uBWUTc78I4FE8.roa (hash: 7heZcqbabPmaXzDUlAW6gffQrzGOH/CbDbfHIPp7ikU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxiatT8y7_ZXJv1J0I1C_4EsbbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:23:5f:f4:29:52:38:69:7b:8f:bc:a4:aa:13:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27189ab53f32eff65726fd49d08d42ff812c6db3
Validity
Not Before: Nov 4 18:00:36 2025 GMT
Not After : Nov 5 18:00:36 2025 GMT
Subject: CN=58f937217a750c20128dc39ae8539e30ba4a9bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2f:ed:6e:b7:15:28:e9:0d:14:20:70:93:9c:
55:97:e3:51:ed:05:59:f0:c0:11:72:42:07:39:94:
60:1d:57:4e:5a:06:d4:52:7f:6d:af:69:67:0d:89:
fc:7f:45:58:c5:89:b6:62:78:5b:91:e3:cb:bf:f1:
ef:5d:92:21:9a:1a:db:72:7e:71:46:dc:1d:92:2c:
92:10:5b:fd:1b:c6:28:f2:c7:2b:7c:11:eb:1d:43:
1c:b3:8f:4f:8f:b5:e6:4a:1f:58:65:cb:02:7e:f3:
a6:49:b9:48:69:bf:7d:3f:69:6f:a3:3e:f6:d3:05:
97:60:24:bf:2e:b8:32:91:49:50:80:68:f5:96:2d:
e4:1d:73:9e:a6:a0:97:14:93:b4:4b:dc:bf:91:40:
7e:04:3c:05:ce:51:7e:f6:4e:68:8c:27:cb:fb:34:
2a:b1:a1:ef:7e:dd:2d:7c:95:b6:2d:9b:2c:80:47:
c7:bf:b1:45:10:81:64:d7:4b:19:58:86:54:4a:20:
5b:b0:c2:c0:7c:dd:d3:12:d9:bb:1c:8b:d2:7a:d0:
eb:64:b4:b0:bb:dc:0b:1b:cf:fd:62:6e:37:70:50:
28:1b:68:2f:6d:ae:a1:d5:4a:72:f1:8e:da:0b:a1:
26:48:75:91:1a:ac:9c:ff:91:de:45:95:7d:8a:91:
cf:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F9:37:21:7A:75:0C:20:12:8D:C3:9A:E8:53:9E:30:BA:4A:9B:D7
X509v3 Authority Key Identifier:
keyid:27:18:9A:B5:3F:32:EF:F6:57:26:FD:49:D0:8D:42:FF:81:2C:6D:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxiatT8y7_ZXJv1J0I1C_4EsbbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:f0:db:5c:01:bf:2e:76:6e:63:d2:7d:82:a0:a6:76:30:be:
94:70:5f:0b:95:6a:8c:e2:8f:dd:8c:e5:08:63:27:6b:3c:00:
e0:f1:88:fc:a5:48:7f:7e:8e:8d:0c:03:22:34:54:0c:a0:2a:
99:10:35:6f:2d:78:31:d6:8d:d7:bb:23:b6:b3:06:7d:f4:79:
4a:b3:27:7c:59:20:c7:00:26:17:c1:d9:8b:20:06:72:32:41:
33:fc:9e:97:2e:88:c2:23:d8:17:7e:08:13:45:41:df:7f:f2:
2d:eb:49:81:80:e9:60:a2:a2:cc:5f:7a:d6:3f:0b:b0:07:63:
01:2d:d3:7a:90:16:98:00:ea:c3:f5:98:eb:60:77:73:7f:03:
fe:9d:85:d2:41:07:57:43:11:9a:b2:72:44:b6:b0:03:f0:b1:
a8:e4:68:4d:54:3e:4b:28:f4:7e:b9:1f:1e:3f:af:cc:44:94:
72:4f:90:4d:2f:21:bd:64:1c:e2:49:b8:27:3a:e2:48:17:48:
3a:b7:58:99:a4:d3:a7:f3:57:74:c9:b6:c3:6d:c6:f3:fc:b1:
c5:e4:f5:3c:ed:03:98:d5:75:59:15:15:cb:03:28:19:ce:14:
86:5b:27:c3:81:4b:88:df:1d:99:9c:66:52:5f:4e:3b:94:5d:
5a:2b:bc:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQByNf9ClSOGl7j7ykqhMGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MTg5YWI1M2YzMmVmZjY1NzI2ZmQ0OWQwOGQ0MmZmODEy
YzZkYjMwHhcNMjUxMTA0MTgwMDM2WhcNMjUxMTA1MTgwMDM2WjAzMTEwLwYDVQQD
Eyg1OGY5MzcyMTdhNzUwYzIwMTI4ZGMzOWFlODUzOWUzMGJhNGE5YmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6S/tbrcVKOkNFCBwk5xVl+NR7QVZ
8MARckIHOZRgHVdOWgbUUn9tr2lnDYn8f0VYxYm2YnhbkePLv/HvXZIhmhrbcn5x
RtwdkiySEFv9G8Yo8scrfBHrHUMcs49Pj7XmSh9YZcsCfvOmSblIab99P2lvoz72
0wWXYCS/LrgykUlQgGj1li3kHXOepqCXFJO0S9y/kUB+BDwFzlF+9k5ojCfL+zQq
saHvft0tfJW2LZssgEfHv7FFEIFk10sZWIZUSiBbsMLAfN3TEtm7HIvSetDrZLSw
u9wLG8/9Ym43cFAoG2gvba6h1Upy8Y7aC6EmSHWRGqyc/5HeRZV9ipHPpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFj5NyF6dQwgEo3DmuhTnjC6SpvXMB8GA1UdIwQY
MBaAFCcYmrU/Mu/2Vyb9SdCNQv+BLG2zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnhpYXRUOHk3X1pYSnYxSjBJMUNfNEVzYmJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9hMzRjMWUtMTg4MS00ZDZjLWFhZDYt
NTA3MDI1OGRiZjJmLzEvSnhpYXRUOHk3X1pYSnYxSjBJMUNfNEVzYmJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9hMzRjMWUtMTg4MS00ZDZjLWFhZDYtNTA3MDI1OGRiZjJm
LzEvSnhpYXRUOHk3X1pYSnYxSjBJMUNfNEVzYmJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsvDbXAG/
LnZuY9J9gqCmdjC+lHBfC5VqjOKP3YzlCGMnazwA4PGI/KVIf36OjQwDIjRUDKAq
mRA1by14MdaN17sjtrMGffR5SrMnfFkgxwAmF8HZiyAGcjJBM/yely6IwiPYF34I
E0VB33/yLetJgYDpYKKizF961j8LsAdjAS3TepAWmADqw/WY62B3c38D/p2F0kEH
V0MRmrJyRLawA/CxqORoTVQ+Syj0frkfHj+vzESUck+QTS8hvWQc4km4JzriSBdI
OrdYmaTTp/NXdMm2w23G8/yxxeT1PO0DmNV1WRUVywMoGc4Uhlsnw4FLiN8dmZxm
Ul9OO5RdWiu8bA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 23:01:26 2025 by rpki-client