Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
File: jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft (raw, json)
Hash identifier: 3o8G4stx1XOXCxck+FTd3dbdQqNk7JH3mdR5QNglCpw=
Subject key identifier: 1F:F4:49:88:6E:E4:C4:07:C9:3B:AD:44:FC:84:B5:23:18:7E:42:E7
Authority key identifier: 8C:FF:F2:15:38:E2:25:61:83:14:61:5E:4F:0D:06:88:B7:B0:DD:5A
Certificate issuer: /CN=8cfff21538e225618314615e4f0d0688b7b0dd5a
Certificate serial: 019A5074A1BE6B14581228B89BC4021BAD2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
Manifest number: 07E9
Signing time: Tue 04 Nov 2025 20:00:11 +0000
Manifest this update: Tue 04 Nov 2025 20:00:11 +0000
Manifest next update: Wed 05 Nov 2025 20:00:11 +0000
Files and hashes: 1: 8cHr2mkJzn1QpKoQW6YmFw7DlzE.roa (hash: t5szeV65SN4GVGDNCF4ePCjQmk1+gvyVxgvAgyz5YRg=)
2: gN1BkwtfLG0CVafSuu-7jUV0eE0.roa (hash: kgY2FVBsviF4YuznOeSj1jvbVSAFPg3ICiRBU7zTAS8=)
3: jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl (hash: 0ftRR9f1jfCXnmNksq3kScUohD57eltW/Iu0P68sSeQ=)
4: tLaWKw3WmHb20kxwM4G1kQ4uW9w.roa (hash: obhetsuugpMrSbVSqt3NiPZQ+jRMpp3fx8OhfxyMvVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:a1:be:6b:14:58:12:28:b8:9b:c4:02:1b:ad:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cfff21538e225618314615e4f0d0688b7b0dd5a
Validity
Not Before: Nov 4 20:00:11 2025 GMT
Not After : Nov 5 20:00:11 2025 GMT
Subject: CN=1ff449886ee4c407c93bad44fc84b523187e42e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:96:97:62:d6:ee:7c:f4:74:35:7d:84:85:b2:
62:a1:39:5a:27:72:7f:60:9a:02:e5:6b:f1:b0:00:
78:54:c8:38:f5:2e:aa:7e:a7:5a:77:8b:3a:5d:44:
4b:50:64:3c:33:ac:31:6b:a9:0a:9d:c1:7c:ad:00:
85:8e:39:44:4f:a5:35:d8:99:06:1c:9b:0c:5f:ae:
81:ad:56:92:ba:33:34:b7:2d:ee:e9:eb:97:d3:ca:
ac:f1:ee:03:ad:7f:33:5e:87:61:0c:58:f9:ae:87:
24:93:1d:6e:c0:22:1e:47:2e:48:74:4d:66:c4:b0:
c6:9a:86:53:e5:49:23:17:71:a8:47:94:6b:15:0e:
3f:2d:2a:f5:76:d8:53:e3:36:3d:97:6b:7b:ae:2a:
b9:89:a1:65:80:3c:79:f4:df:6c:bc:31:b4:a6:7e:
1a:04:45:e2:ec:c4:bb:25:ca:94:bc:13:60:25:be:
fb:82:e3:31:5d:fa:41:a8:38:7c:c1:39:c7:c8:ad:
fc:3f:8e:13:14:0c:55:dc:58:f9:7b:2d:0a:c5:34:
af:85:87:f6:9d:24:c2:1a:81:75:8b:2a:01:ce:e2:
4a:ef:34:f2:57:5e:57:58:b5:3b:24:5d:3a:fa:30:
6c:99:5b:52:81:7c:13:99:25:d4:f9:2e:b3:bc:0e:
aa:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F4:49:88:6E:E4:C4:07:C9:3B:AD:44:FC:84:B5:23:18:7E:42:E7
X509v3 Authority Key Identifier:
keyid:8C:FF:F2:15:38:E2:25:61:83:14:61:5E:4F:0D:06:88:B7:B0:DD:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jP_yFTjiJWGDFGFeTw0GiLew3Vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/67501a-78db-4c38-8a95-261666c3a589/1/jP_yFTjiJWGDFGFeTw0GiLew3Vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:fb:67:e4:9b:6c:66:ea:fc:6e:4f:c3:f9:72:78:b5:81:bb:
d6:4d:e9:6a:1a:8e:74:0b:c2:e6:7b:ec:3c:48:9e:6d:47:bb:
66:0e:94:3f:8a:6e:d9:21:b0:e5:c5:37:37:b3:c6:2c:50:52:
b1:07:84:7c:22:69:5a:cb:30:b9:a1:4f:45:ad:5e:34:55:2b:
c7:e6:61:1a:12:ea:c1:54:75:39:b2:09:9a:8f:45:db:5f:25:
ec:87:dc:37:65:88:04:38:13:cc:15:d2:5c:b8:22:4c:a9:6e:
78:20:8d:f6:97:15:96:d7:71:5f:f8:fd:65:4d:46:5c:cf:78:
29:92:f1:63:bb:f2:41:c6:78:b3:38:97:e5:7c:d6:64:30:ec:
5a:e2:99:31:30:60:00:78:8e:93:1c:3e:a3:21:1e:49:6f:4f:
cf:2e:b7:bc:29:e2:c2:56:01:f9:b9:92:9e:f3:93:66:3d:94:
2b:d6:21:3c:54:f7:f1:3c:e8:90:ee:30:5a:30:79:b9:64:0f:
af:ae:48:71:42:f3:a4:ad:25:d4:2d:44:53:eb:77:9c:ed:b2:
a0:28:4d:9a:89:9d:62:e6:60:1f:04:5b:9e:99:17:bb:78:16:
ab:c9:5f:e0:c5:72:9b:38:a7:c2:71:ae:1e:b7:f1:9c:aa:8b:
58:9d:21:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQdKG+axRYEii4m8QCG60rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZmZmMjE1MzhlMjI1NjE4MzE0NjE1ZTRmMGQwNjg4Yjdi
MGRkNWEwHhcNMjUxMTA0MjAwMDExWhcNMjUxMTA1MjAwMDExWjAzMTEwLwYDVQQD
EygxZmY0NDk4ODZlZTRjNDA3YzkzYmFkNDRmYzg0YjUyMzE4N2U0MmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJaXYtbufPR0NX2EhbJioTlaJ3J/
YJoC5WvxsAB4VMg49S6qfqdad4s6XURLUGQ8M6wxa6kKncF8rQCFjjlET6U12JkG
HJsMX66BrVaSujM0ty3u6euX08qs8e4DrX8zXodhDFj5rockkx1uwCIeRy5IdE1m
xLDGmoZT5UkjF3GoR5RrFQ4/LSr1dthT4zY9l2t7riq5iaFlgDx59N9svDG0pn4a
BEXi7MS7JcqUvBNgJb77guMxXfpBqDh8wTnHyK38P44TFAxV3Fj5ey0KxTSvhYf2
nSTCGoF1iyoBzuJK7zTyV15XWLU7JF06+jBsmVtSgXwTmSXU+S6zvA6q1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB/0SYhu5MQHyTutRPyEtSMYfkLnMB8GA1UdIwQY
MBaAFIz/8hU44iVhgxRhXk8NBoi3sN1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalBfeUZUamlKV0dERkdGZVR3MEdpTGV3M1ZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi82NzUwMWEtNzhkYi00YzM4LThhOTUt
MjYxNjY2YzNhNTg5LzEvalBfeUZUamlKV0dERkdGZVR3MEdpTGV3M1ZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi82NzUwMWEtNzhkYi00YzM4LThhOTUtMjYxNjY2YzNhNTg5
LzEvalBfeUZUamlKV0dERkdGZVR3MEdpTGV3M1ZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo/tn5Jts
Zur8bk/D+XJ4tYG71k3pahqOdAvC5nvsPEiebUe7Zg6UP4pu2SGw5cU3N7PGLFBS
sQeEfCJpWsswuaFPRa1eNFUrx+ZhGhLqwVR1ObIJmo9F218l7IfcN2WIBDgTzBXS
XLgiTKlueCCN9pcVltdxX/j9ZU1GXM94KZLxY7vyQcZ4sziX5XzWZDDsWuKZMTBg
AHiOkxw+oyEeSW9Pzy63vCniwlYB+bmSnvOTZj2UK9YhPFT38TzokO4wWjB5uWQP
r65IcULzpK0l1C1EU+t3nO2yoChNmomdYuZgHwRbnpkXu3gWq8lf4MVymzinwnGu
HrfxnKqLWJ0hGQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:40:38 2025 by rpki-client