Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft
File: j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft (raw, json)
Hash identifier: k6XK335wevQKL6Lkdithgm6s1cPs8GIO2WPDGtLT5DI=
Subject key identifier: 57:F4:3E:CF:07:1C:EE:10:6F:9C:40:A0:7A:3C:AF:1E:47:CC:E7:0E
Authority key identifier: 8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1
Certificate issuer: /CN=8f4669216a2078cb024231f4632eab4da7ee4bc1
Certificate serial: 019A5187C9195D09E341D5FD86E77F540197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft
Manifest number: 1720
Signing time: Wed 05 Nov 2025 01:00:44 +0000
Manifest this update: Wed 05 Nov 2025 01:00:44 +0000
Manifest next update: Thu 06 Nov 2025 01:00:44 +0000
Files and hashes: 1: 5SRdROovrhyXWGtWXnDFhbpkyNE.roa (hash: hUbJFE1+vLQRNMkjWduaxN2rKYsbGtqSAbyAyZE357w=)
2: 6XrFWNa1C0R0sDYBaWkEAGDO1jA.roa (hash: x/McLjYuN68G+ok93frZNMwAwTarNWM5GuHdXugF2/o=)
3: aa5AbLBPnoYTAUvTmbD3Iub_120.roa (hash: PcPVYbE1FKjarjaLrOxDhw3YIdXoKle1a0a471+wigo=)
4: j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl (hash: l1/u0HdlTxt5ranQJFEXN9Kd3dh2uqRzCwT9eEdkN68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:c9:19:5d:09:e3:41:d5:fd:86:e7:7f:54:01:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4669216a2078cb024231f4632eab4da7ee4bc1
Validity
Not Before: Nov 5 01:00:44 2025 GMT
Not After : Nov 6 01:00:44 2025 GMT
Subject: CN=57f43ecf071cee106f9c40a07a3caf1e47cce70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f1:d6:b7:ec:fe:5b:c0:96:3f:fc:05:88:5b:
1e:70:b3:63:20:6c:d4:b1:70:c3:6f:d5:eb:46:c7:
b6:54:f3:4d:24:20:1d:c6:5a:1b:e0:d6:05:a0:29:
67:e4:72:21:5f:01:0a:bd:88:4a:b0:fb:21:c8:f4:
64:30:a4:0d:db:97:70:1e:52:4f:40:ec:f9:90:94:
33:e5:61:89:e6:7d:29:59:bd:35:f2:8b:3c:5a:46:
13:5b:a0:f0:fb:48:2e:28:a4:37:a8:a8:5c:1e:b1:
a1:d1:bc:f2:f2:50:85:78:df:4e:89:eb:1b:02:c9:
d3:7c:63:ba:46:ff:34:80:6b:a0:7d:e2:7f:a5:ac:
0a:1d:94:7a:b0:b2:d6:fe:8f:e5:cc:67:cb:ca:6c:
d9:ba:b5:52:2f:0e:88:b6:e6:c4:01:02:ee:4e:29:
54:ea:2f:39:ce:e1:f7:64:fb:69:97:8f:2e:e4:0a:
38:f9:53:2f:32:bc:0a:b5:b6:c6:46:c6:86:61:00:
0f:9a:a4:15:a6:8d:d8:97:7c:0e:e8:3c:35:a6:68:
72:08:07:31:df:40:a1:ad:b5:d5:57:7b:2f:49:7b:
8b:16:4e:27:30:1c:50:37:32:b7:16:dd:b0:a9:31:
92:95:5b:55:c4:e3:a1:a1:db:c6:3d:e9:ab:c8:2e:
cb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F4:3E:CF:07:1C:EE:10:6F:9C:40:A0:7A:3C:AF:1E:47:CC:E7:0E
X509v3 Authority Key Identifier:
keyid:8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:b0:57:f9:85:dc:05:79:32:38:fa:7d:5d:be:a4:3f:31:d3:
48:ed:66:22:b0:7a:44:68:e7:5b:6d:b0:8c:5c:21:b8:3d:6e:
c4:34:9d:c5:9a:6b:ce:1e:72:02:f6:37:dd:d6:84:4d:de:a6:
7e:3c:20:f8:c2:f2:da:b0:63:9d:58:54:ec:59:ee:f5:49:ba:
54:c2:b1:e4:89:66:db:27:dd:d5:a0:b7:3e:a1:8a:fb:3a:a8:
ae:fe:54:06:f0:9c:fe:69:1a:3c:11:e0:4b:91:2d:86:05:76:
ff:64:54:c2:fc:a9:f0:36:d6:6a:fc:d3:1c:9b:05:55:6f:e1:
97:7c:32:61:9b:50:75:8a:67:84:cf:a5:11:e5:cd:3a:df:af:
ce:43:44:d3:33:c1:71:b9:a2:d9:61:a8:9b:7e:86:3b:20:12:
61:a4:f4:69:f7:b8:97:a3:c6:8a:92:ef:9e:7d:66:02:7d:5a:
83:34:a5:1a:4c:8a:24:bf:9c:b9:60:8f:69:57:0e:eb:4e:eb:
3c:3b:3c:f7:ef:26:8a:43:3e:5f:12:f2:87:1e:8f:27:fe:f2:
1f:d1:97:75:dd:5a:50:9d:26:6a:62:7e:c9:75:4f:aa:a7:f2:
54:0a:6e:6a:9b:ed:0f:5b:84:54:26:0d:79:ed:67:cf:e3:8a:
a0:4e:58:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRh8kZXQnjQdX9hud/VAGXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmNDY2OTIxNmEyMDc4Y2IwMjQyMzFmNDYzMmVhYjRkYTdl
ZTRiYzEwHhcNMjUxMTA1MDEwMDQ0WhcNMjUxMTA2MDEwMDQ0WjAzMTEwLwYDVQQD
Eyg1N2Y0M2VjZjA3MWNlZTEwNmY5YzQwYTA3YTNjYWYxZTQ3Y2NlNzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvHWt+z+W8CWP/wFiFsecLNjIGzU
sXDDb9XrRse2VPNNJCAdxlob4NYFoCln5HIhXwEKvYhKsPshyPRkMKQN25dwHlJP
QOz5kJQz5WGJ5n0pWb018os8WkYTW6Dw+0guKKQ3qKhcHrGh0bzy8lCFeN9Oiesb
AsnTfGO6Rv80gGugfeJ/pawKHZR6sLLW/o/lzGfLymzZurVSLw6ItubEAQLuTilU
6i85zuH3ZPtpl48u5Ao4+VMvMrwKtbbGRsaGYQAPmqQVpo3Yl3wO6Dw1pmhyCAcx
30ChrbXVV3svSXuLFk4nMBxQNzK3Ft2wqTGSlVtVxOOhodvGPemryC7LuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFf0Ps8HHO4Qb5xAoHo8rx5HzOcOMB8GA1UdIwQY
MBaAFI9GaSFqIHjLAkIx9GMuq02n7kvBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajBacElXb2dlTXNDUWpIMFl5NnJUYWZ1UzhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9kYTQ4ZTItZmY2My00YmNkLTgyYTIt
ZDdiOGViNDYwOGUyLzEvajBacElXb2dlTXNDUWpIMFl5NnJUYWZ1UzhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9kYTQ4ZTItZmY2My00YmNkLTgyYTItZDdiOGViNDYwOGUy
LzEvajBacElXb2dlTXNDUWpIMFl5NnJUYWZ1UzhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI7BX+YXc
BXkyOPp9Xb6kPzHTSO1mIrB6RGjnW22wjFwhuD1uxDSdxZprzh5yAvY33daETd6m
fjwg+MLy2rBjnVhU7Fnu9Um6VMKx5Ilm2yfd1aC3PqGK+zqorv5UBvCc/mkaPBHg
S5EthgV2/2RUwvyp8DbWavzTHJsFVW/hl3wyYZtQdYpnhM+lEeXNOt+vzkNE0zPB
cbmi2WGom36GOyASYaT0afe4l6PGipLvnn1mAn1agzSlGkyKJL+cuWCPaVcO607r
PDs89+8mikM+XxLyhx6PJ/7yH9GXdd1aUJ0mamJ+yXVPqqfyVApuapvtD1uEVCYN
ee1nz+OKoE5YlQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:08:08 2025 by rpki-client