Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
File: J_8gRAummKTcBDm8F5-zOj7hzJU.mft (raw, json)
Hash identifier: 02VXuSyJCfd4dHLpV5tObQufnIZs2Jlvzu10NgxJrAU=
Subject key identifier: 8D:DD:BE:9A:1F:04:BB:70:CF:54:93:89:05:15:22:A0:DD:E2:A6:0B
Authority key identifier: 27:FF:20:44:0B:A6:98:A4:DC:04:39:BC:17:9F:B3:3A:3E:E1:CC:95
Certificate issuer: /CN=27ff20440ba698a4dc0439bc179fb33a3ee1cc95
Certificate serial: 019A5299D032EFDD5FD0ED4AECB8FE0A8350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
Manifest number: 0DE5
Signing time: Wed 05 Nov 2025 06:00:03 +0000
Manifest this update: Wed 05 Nov 2025 06:00:03 +0000
Manifest next update: Thu 06 Nov 2025 06:00:03 +0000
Files and hashes: 1: J_8gRAummKTcBDm8F5-zOj7hzJU.crl (hash: R7us9CfawfHagl/rd+nb0TZUhRrpFcXE4ncHDKeXUSY=)
2: _tUXooY9b06bDKDjgo1P9zjilGI.roa (hash: eyE2Sp1NPUfSOv01mHhVH2OIahlIo+oZSctInWb+NT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:99:d0:32:ef:dd:5f:d0:ed:4a:ec:b8:fe:0a:83:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27ff20440ba698a4dc0439bc179fb33a3ee1cc95
Validity
Not Before: Nov 5 06:00:03 2025 GMT
Not After : Nov 6 06:00:03 2025 GMT
Subject: CN=8dddbe9a1f04bb70cf549389051522a0dde2a60b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a5:2d:5c:12:31:64:1f:05:f0:60:56:5a:d7:
8e:95:3c:8d:17:c7:63:61:e0:8c:74:97:d9:7c:cb:
cb:2e:b4:56:af:2b:f3:93:1a:2e:f6:67:05:16:2a:
aa:25:bb:4d:50:a5:6c:b6:1a:14:88:ca:4f:39:12:
33:aa:09:3d:d9:79:dd:f3:01:1b:70:bf:6b:e0:36:
a0:93:f8:f5:fe:a2:fc:ea:3d:a3:12:e9:c6:55:35:
76:c2:5c:00:cd:4d:01:fb:b7:3e:4e:cd:68:34:a1:
a5:c0:21:0d:74:1e:2d:0b:98:2b:cd:7a:da:14:de:
d6:fe:5b:15:bd:2d:6c:8f:c4:3a:09:b1:e1:ca:90:
aa:98:9f:30:e4:6a:87:25:30:b2:92:06:42:e3:b7:
1b:06:0d:ce:2d:3c:d1:ea:4f:bc:5d:26:b8:c0:bf:
72:4b:d1:a4:b6:db:c3:31:46:93:95:05:6b:75:4c:
4f:5d:75:ef:1a:f5:01:1c:d1:f0:ac:6d:ec:08:36:
29:e3:ed:2f:47:33:80:28:fd:d0:ce:e2:d6:8a:78:
42:f0:d9:b8:c2:ee:1a:f8:84:ad:23:26:e5:1f:03:
5f:8b:02:ba:ef:4c:df:49:1c:f9:b9:64:cf:eb:9b:
4f:d3:cb:92:67:59:ec:50:8f:3c:8a:b8:87:a9:3d:
a6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:DD:BE:9A:1F:04:BB:70:CF:54:93:89:05:15:22:A0:DD:E2:A6:0B
X509v3 Authority Key Identifier:
keyid:27:FF:20:44:0B:A6:98:A4:DC:04:39:BC:17:9F:B3:3A:3E:E1:CC:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ad:7a:44:54:48:15:6b:ab:9e:ea:3f:9d:08:92:b3:c8:3c:
ee:6a:74:a2:31:ca:f9:bf:4a:fd:61:c5:7d:61:f6:f2:5d:30:
9b:04:a6:ca:c0:26:45:b2:01:6c:fe:9d:cb:50:3e:26:c1:8c:
f0:9b:84:7f:c8:11:be:49:b6:85:81:d1:7d:25:0d:3b:4b:80:
8e:85:24:b6:5c:62:9d:45:9d:cc:ca:b3:cc:69:4d:fb:04:68:
ad:a9:51:6c:ca:bf:cf:b5:c1:77:da:bb:0a:71:a9:d4:8e:90:
d7:3e:2c:35:ae:1d:ca:b6:28:d7:f7:01:7a:6e:cd:83:6e:c7:
51:17:24:25:1a:5e:40:a5:ec:64:f1:d2:f5:76:92:ad:0f:6d:
d0:09:44:64:0b:78:9c:0f:0e:2c:6c:5a:6a:ed:1d:2f:5f:43:
a8:cc:aa:71:0f:9c:ae:d4:72:00:42:12:10:55:b0:e8:4a:b6:
98:f2:72:98:a3:07:3c:f8:01:b2:28:b1:9c:12:6b:98:35:35:
3c:19:59:5e:4d:17:bf:6b:c2:02:6b:0d:f9:bf:7e:f8:e1:3a:
7f:bc:01:b9:79:82:e6:35:1a:5d:34:e6:5d:0d:46:c0:e3:f7:
cc:c4:a1:6d:08:72:ba:df:55:d3:ad:67:c4:87:b4:64:11:6f:
4e:f0:aa:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSmdAy791f0O1K7Lj+CoNQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZmYyMDQ0MGJhNjk4YTRkYzA0MzliYzE3OWZiMzNhM2Vl
MWNjOTUwHhcNMjUxMTA1MDYwMDAzWhcNMjUxMTA2MDYwMDAzWjAzMTEwLwYDVQQD
Eyg4ZGRkYmU5YTFmMDRiYjcwY2Y1NDkzODkwNTE1MjJhMGRkZTJhNjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6UtXBIxZB8F8GBWWteOlTyNF8dj
YeCMdJfZfMvLLrRWryvzkxou9mcFFiqqJbtNUKVsthoUiMpPORIzqgk92Xnd8wEb
cL9r4Dagk/j1/qL86j2jEunGVTV2wlwAzU0B+7c+Ts1oNKGlwCENdB4tC5grzXra
FN7W/lsVvS1sj8Q6CbHhypCqmJ8w5GqHJTCykgZC47cbBg3OLTzR6k+8XSa4wL9y
S9GkttvDMUaTlQVrdUxPXXXvGvUBHNHwrG3sCDYp4+0vRzOAKP3QzuLWinhC8Nm4
wu4a+IStIyblHwNfiwK670zfSRz5uWTP65tP08uSZ1nsUI88iriHqT2m7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI3dvpofBLtwz1STiQUVIqDd4qYLMB8GA1UdIwQY
MBaAFCf/IEQLppik3AQ5vBefszo+4cyVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSl84Z1JBdW1tS1RjQkRtOEY1LXpPajdoekpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yMWRlYmEtZGI2Ni00NzAyLWJkYmYt
MDkxMTVkNTkyZTZmLzEvSl84Z1JBdW1tS1RjQkRtOEY1LXpPajdoekpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8yMWRlYmEtZGI2Ni00NzAyLWJkYmYtMDkxMTVkNTkyZTZm
LzEvSl84Z1JBdW1tS1RjQkRtOEY1LXpPajdoekpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiK16RFRI
FWurnuo/nQiSs8g87mp0ojHK+b9K/WHFfWH28l0wmwSmysAmRbIBbP6dy1A+JsGM
8JuEf8gRvkm2hYHRfSUNO0uAjoUktlxinUWdzMqzzGlN+wRoralRbMq/z7XBd9q7
CnGp1I6Q1z4sNa4dyrYo1/cBem7Ng27HURckJRpeQKXsZPHS9XaSrQ9t0AlEZAt4
nA8OLGxaau0dL19DqMyqcQ+crtRyAEISEFWw6Eq2mPJymKMHPPgBsiixnBJrmDU1
PBlZXk0Xv2vCAmsN+b9++OE6f7wBuXmC5jUaXTTmXQ1GwOP3zMShbQhyut9V061n
xIe0ZBFvTvCqkg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:44:27 2025 by rpki-client