Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.mft
File: jsla_3i9Id2Om9X0Ud_I-ALvaRY.mft (raw, json)
Hash identifier: eRB8MqtV17RgPbd0+2bT7pjbsvX8opPXR3KGTa9589U=
Subject key identifier: 20:E8:E2:7D:34:79:37:AF:4B:19:3B:77:1E:A2:E6:3C:FF:54:43:BF
Authority key identifier: 8E:C9:5A:FF:78:BD:21:DD:8E:9B:D5:F4:51:DF:C8:F8:02:EF:69:16
Certificate issuer: /CN=8ec95aff78bd21dd8e9bd5f451dfc8f802ef6916
Certificate serial: 019A4EBD3ADB4684C8619036D92CCA5FAA79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsla_3i9Id2Om9X0Ud_I-ALvaRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.mft
Manifest number: 0D13
Signing time: Tue 04 Nov 2025 12:00:15 +0000
Manifest this update: Tue 04 Nov 2025 12:00:15 +0000
Manifest next update: Wed 05 Nov 2025 12:00:15 +0000
Files and hashes: 1: YzWNeQoNIDqjyGCk746jvrBM23k.roa (hash: zjvc7yggWtt0zDSCwKp/MBGW7ImHpfGU+2REQ6ZUwRI=)
2: jsla_3i9Id2Om9X0Ud_I-ALvaRY.crl (hash: G4R5zXKBKgFzJJn37ct2bBDgXkgSBmzTBaoF9xCGyBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsla_3i9Id2Om9X0Ud_I-ALvaRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:3a:db:46:84:c8:61:90:36:d9:2c:ca:5f:aa:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec95aff78bd21dd8e9bd5f451dfc8f802ef6916
Validity
Not Before: Nov 4 12:00:15 2025 GMT
Not After : Nov 5 12:00:15 2025 GMT
Subject: CN=20e8e27d347937af4b193b771ea2e63cff5443bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:64:23:6f:cb:f6:0a:69:fe:60:cf:0f:8d:73:
28:e4:27:6a:7b:08:c3:68:43:98:b2:f7:6f:01:bd:
04:16:59:9a:a6:1f:17:09:07:93:18:25:bc:76:eb:
30:9c:00:60:fe:82:c8:93:17:0f:96:83:22:46:fd:
36:7e:2c:28:cf:41:9c:9e:59:3d:31:dc:c8:0f:e6:
29:d5:d2:38:ea:8e:d5:66:75:50:ee:e5:87:42:3f:
55:70:83:40:bc:5e:a2:92:07:3c:b0:b7:7c:4d:4c:
d9:5f:1e:9d:d1:aa:6f:7b:2d:cd:2c:58:03:3f:29:
9d:76:66:46:9c:22:38:ba:f2:42:77:7f:23:39:da:
c1:80:19:63:4a:c9:37:c7:71:a3:29:be:9c:56:c2:
52:a2:06:31:e4:c4:0c:03:68:2c:56:6c:87:08:22:
fb:e4:88:f9:d4:01:35:61:ad:c4:29:96:7c:2b:4a:
63:8d:e0:d0:3e:c3:25:e8:75:cd:26:c9:a0:1e:b9:
0a:95:a8:88:b8:a0:a8:b5:a4:5e:92:cb:88:e5:1b:
18:38:82:4e:de:ea:f8:7b:f3:dd:ee:f6:c9:1b:79:
15:10:c7:a0:86:cd:d7:9a:20:eb:4f:dd:18:77:c9:
a6:9a:b0:7e:04:dd:eb:e1:9c:d2:20:96:31:cc:35:
c9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E8:E2:7D:34:79:37:AF:4B:19:3B:77:1E:A2:E6:3C:FF:54:43:BF
X509v3 Authority Key Identifier:
keyid:8E:C9:5A:FF:78:BD:21:DD:8E:9B:D5:F4:51:DF:C8:F8:02:EF:69:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsla_3i9Id2Om9X0Ud_I-ALvaRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/e5c483-44bf-41ad-9e8f-93d0b00e7e04/1/jsla_3i9Id2Om9X0Ud_I-ALvaRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:31:f0:b4:bc:53:f2:3f:3f:56:d1:f4:28:72:6e:0a:f8:ed:
c6:80:48:f3:af:6b:50:6f:09:8e:09:11:34:83:29:e4:cd:b8:
2f:b0:79:64:96:d7:b9:8e:13:6e:79:4c:22:f5:40:d4:48:33:
02:7e:92:16:c6:44:9f:82:a6:4d:75:ba:fd:2b:35:df:b3:6c:
f0:73:f0:f4:9c:d5:fc:e9:35:bb:8a:29:73:2e:b7:8e:4d:f3:
05:bd:b0:e6:a5:95:06:5e:11:de:d8:87:db:6b:26:a7:79:e4:
7f:f1:a5:dc:72:3e:c2:59:be:02:37:52:80:e9:9f:18:45:6c:
9c:d0:19:00:73:9a:95:21:d8:a3:7f:e7:2f:01:5a:6f:ad:c4:
ef:c1:c4:6d:bc:95:8f:45:4d:42:01:b2:68:db:a4:7f:0d:2c:
a6:f4:9a:57:3b:c6:c4:b2:b6:18:c5:f8:e1:c3:31:ef:e0:18:
69:34:45:42:71:b9:ab:9b:8b:d1:1b:8f:99:e8:74:0b:1b:73:
44:fa:71:5e:b5:4d:00:6e:96:98:5c:7b:f0:9d:ff:27:cb:63:
1a:bc:11:8d:3b:9b:83:62:2d:9d:0d:b3:1c:e9:f5:1b:59:79:
d5:ae:08:f1:34:90:65:18:3c:92:8c:94:3c:5b:63:ef:11:cc:
13:ab:e3:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOvTrbRoTIYZA22SzKX6p5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYzk1YWZmNzhiZDIxZGQ4ZTliZDVmNDUxZGZjOGY4MDJl
ZjY5MTYwHhcNMjUxMTA0MTIwMDE1WhcNMjUxMTA1MTIwMDE1WjAzMTEwLwYDVQQD
EygyMGU4ZTI3ZDM0NzkzN2FmNGIxOTNiNzcxZWEyZTYzY2ZmNTQ0M2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWQjb8v2Cmn+YM8PjXMo5CdqewjD
aEOYsvdvAb0EFlmaph8XCQeTGCW8duswnABg/oLIkxcPloMiRv02fiwoz0Gcnlk9
MdzID+Yp1dI46o7VZnVQ7uWHQj9VcINAvF6ikgc8sLd8TUzZXx6d0apvey3NLFgD
PymddmZGnCI4uvJCd38jOdrBgBljSsk3x3GjKb6cVsJSogYx5MQMA2gsVmyHCCL7
5Ij51AE1Ya3EKZZ8K0pjjeDQPsMl6HXNJsmgHrkKlaiIuKCotaReksuI5RsYOIJO
3ur4e/Pd7vbJG3kVEMeghs3XmiDrT90Yd8mmmrB+BN3r4ZzSIJYxzDXJswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCDo4n00eTevSxk7dx6i5jz/VEO/MB8GA1UdIwQY
MBaAFI7JWv94vSHdjpvV9FHfyPgC72kWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanNsYV8zaTlJZDJPbTlYMFVkX0ktQUx2YVJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9lNWM0ODMtNDRiZi00MWFkLTllOGYt
OTNkMGIwMGU3ZTA0LzEvanNsYV8zaTlJZDJPbTlYMFVkX0ktQUx2YVJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9lNWM0ODMtNDRiZi00MWFkLTllOGYtOTNkMGIwMGU3ZTA0
LzEvanNsYV8zaTlJZDJPbTlYMFVkX0ktQUx2YVJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAozHwtLxT
8j8/VtH0KHJuCvjtxoBI869rUG8JjgkRNIMp5M24L7B5ZJbXuY4TbnlMIvVA1Egz
An6SFsZEn4KmTXW6/Ss137Ns8HPw9JzV/Ok1u4opcy63jk3zBb2w5qWVBl4R3tiH
22smp3nkf/Gl3HI+wlm+AjdSgOmfGEVsnNAZAHOalSHYo3/nLwFab63E78HEbbyV
j0VNQgGyaNukfw0spvSaVzvGxLK2GMX44cMx7+AYaTRFQnG5q5uL0RuPmeh0Cxtz
RPpxXrVNAG6WmFx78J3/J8tjGrwRjTubg2ItnQ2zHOn1G1l51a4I8TSQZRg8koyU
PFtj7xHME6vjIQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:52:46 2025 by rpki-client