Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
File: jzaP655VO90TFWJYSjNTsddVXFA.mft (raw, json)
Hash identifier: o1d7CaC6YWffEmW2O9JorGqfALySB0zcHr9FCuPtC/8=
Subject key identifier: DC:39:1F:67:72:2E:02:8E:2A:9F:82:A0:4C:DA:31:0D:75:6E:75:A6
Authority key identifier: 8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
Certificate issuer: /CN=8f368feb9e553bdd131562584a3353b1d7555c50
Certificate serial: 019A4EF477D4A458171938EED6A5C74734F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
Manifest number: 171E
Signing time: Tue 04 Nov 2025 13:00:35 +0000
Manifest this update: Tue 04 Nov 2025 13:00:35 +0000
Manifest next update: Wed 05 Nov 2025 13:00:35 +0000
Files and hashes: 1: VgDY9zN_B3grCrz_H8xjNykqXTQ.roa (hash: V5RUWHdPXufxGeDHhevmGSEqGhIbGyboqgCFXxKzrT8=)
2: eWNwoG2gNqVOl4jxtgq3km86-j8.roa (hash: tuYXWwSXyhuCjeV5A6/luy4IrIPezyScgsOJmMQtw38=)
3: jzaP655VO90TFWJYSjNTsddVXFA.crl (hash: FnPmM6ih6OxwcEJP5uFWwfyw1vjSFUwab1+6NYC9rN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:77:d4:a4:58:17:19:38:ee:d6:a5:c7:47:34:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f368feb9e553bdd131562584a3353b1d7555c50
Validity
Not Before: Nov 4 13:00:35 2025 GMT
Not After : Nov 5 13:00:35 2025 GMT
Subject: CN=dc391f67722e028e2a9f82a04cda310d756e75a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:86:f2:c1:7e:95:eb:c8:2f:2c:c8:a5:17:a6:
25:97:2a:68:8f:bd:fa:ba:02:7b:9e:d8:51:ac:1a:
b9:de:7c:96:8b:b3:92:c7:a1:f7:47:63:6f:6e:0d:
0f:90:11:c2:50:95:b4:9e:2a:34:7c:e8:f9:f6:ad:
e1:86:50:3a:d5:67:52:f2:57:f2:c6:b6:21:4f:9c:
11:08:13:aa:05:7f:1e:c2:d7:bf:22:38:9a:08:60:
28:9c:46:cd:60:4d:bd:48:f4:88:b1:a1:84:ea:c4:
49:cd:72:e9:81:f8:eb:70:e7:a9:11:85:59:ad:d7:
6b:f9:96:d3:79:be:31:6b:0d:d0:fe:a6:77:6b:bb:
c5:bf:71:87:43:cf:e8:15:06:fc:7f:2c:25:a5:b5:
4f:d4:71:5a:29:c2:e1:60:17:66:14:0b:78:66:d3:
6b:ff:1f:98:49:92:ee:17:80:91:b7:f8:3e:02:a5:
5f:4e:9e:6f:df:13:1e:e8:ff:5f:1c:06:1c:80:02:
9e:70:c3:9f:a8:34:0b:06:d5:77:31:1a:2b:75:06:
0c:88:2e:47:53:fb:c2:f0:a7:dd:f5:f7:7b:3b:4d:
59:ed:1c:6a:d2:1e:f9:ce:ba:60:31:8a:bd:a3:6c:
06:bc:dd:28:3d:36:ee:63:99:13:bb:b6:db:a8:e7:
9b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:39:1F:67:72:2E:02:8E:2A:9F:82:A0:4C:DA:31:0D:75:6E:75:A6
X509v3 Authority Key Identifier:
keyid:8F:36:8F:EB:9E:55:3B:DD:13:15:62:58:4A:33:53:B1:D7:55:5C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzaP655VO90TFWJYSjNTsddVXFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0547cb-c5dc-4e2f-aff7-3eca7df2ae57/1/jzaP655VO90TFWJYSjNTsddVXFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:55:42:8b:ad:d7:fc:24:ed:33:f6:f8:b7:13:6d:75:c4:97:
a0:8e:40:66:b1:4d:cb:1e:39:f3:ad:a8:7a:cf:92:db:67:20:
9e:40:d2:78:db:6b:9e:cd:6f:ac:c5:4a:8c:9f:03:8a:6b:2d:
90:06:05:58:3c:82:ae:c8:09:5d:0c:9e:49:24:11:b0:71:68:
b8:dc:23:de:27:61:18:5d:ee:d5:e6:b7:af:7c:25:6a:fb:3f:
da:e3:57:ff:fa:92:70:62:6d:79:8f:83:f6:7e:a4:eb:b9:15:
9c:90:23:b9:0a:6b:df:f1:bd:08:51:0b:34:3a:5a:25:1f:d4:
0f:74:d5:ee:f9:02:44:33:65:56:1f:33:f2:45:4f:58:0a:66:
b6:a1:5e:9e:1c:27:63:f2:25:4e:36:8e:6e:be:95:65:02:0c:
44:87:83:43:8f:9c:ac:93:0a:0a:7c:5b:eb:69:d9:49:f5:1c:
9c:e3:b4:7c:c4:af:b2:85:d1:b0:70:85:03:86:54:b1:65:67:
a6:51:25:79:37:a6:ea:09:63:a1:5b:41:2c:92:b9:bc:a8:9a:
45:14:eb:49:81:7d:d7:ac:58:bf:57:13:20:f5:c7:77:a6:c6:
7e:2a:38:a9:39:2d:2c:43:1e:6a:c0:8a:b8:d7:61:ab:5d:09:
88:77:dc:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9HfUpFgXGTju1qXHRzTxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMzY4ZmViOWU1NTNiZGQxMzE1NjI1ODRhMzM1M2IxZDc1
NTVjNTAwHhcNMjUxMTA0MTMwMDM1WhcNMjUxMTA1MTMwMDM1WjAzMTEwLwYDVQQD
EyhkYzM5MWY2NzcyMmUwMjhlMmE5ZjgyYTA0Y2RhMzEwZDc1NmU3NWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1obywX6V68gvLMilF6Yllypoj736
ugJ7nthRrBq53nyWi7OSx6H3R2Nvbg0PkBHCUJW0nio0fOj59q3hhlA61WdS8lfy
xrYhT5wRCBOqBX8ewte/IjiaCGAonEbNYE29SPSIsaGE6sRJzXLpgfjrcOepEYVZ
rddr+ZbTeb4xaw3Q/qZ3a7vFv3GHQ8/oFQb8fywlpbVP1HFaKcLhYBdmFAt4ZtNr
/x+YSZLuF4CRt/g+AqVfTp5v3xMe6P9fHAYcgAKecMOfqDQLBtV3MRordQYMiC5H
U/vC8Kfd9fd7O01Z7Rxq0h75zrpgMYq9o2wGvN0oPTbuY5kTu7bbqOebkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNw5H2dyLgKOKp+CoEzaMQ11bnWmMB8GA1UdIwQY
MBaAFI82j+ueVTvdExViWEozU7HXVVxQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanphUDY1NVZPOTBURldKWVNqTlRzZGRWWEZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8wNTQ3Y2ItYzVkYy00ZTJmLWFmZjct
M2VjYTdkZjJhZTU3LzEvanphUDY1NVZPOTBURldKWVNqTlRzZGRWWEZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8wNTQ3Y2ItYzVkYy00ZTJmLWFmZjctM2VjYTdkZjJhZTU3
LzEvanphUDY1NVZPOTBURldKWVNqTlRzZGRWWEZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPVVCi63X
/CTtM/b4txNtdcSXoI5AZrFNyx45862oes+S22cgnkDSeNtrns1vrMVKjJ8Dimst
kAYFWDyCrsgJXQyeSSQRsHFouNwj3idhGF3u1ea3r3wlavs/2uNX//qScGJteY+D
9n6k67kVnJAjuQpr3/G9CFELNDpaJR/UD3TV7vkCRDNlVh8z8kVPWApmtqFenhwn
Y/IlTjaObr6VZQIMRIeDQ4+crJMKCnxb62nZSfUcnOO0fMSvsoXRsHCFA4ZUsWVn
plEleTem6gljoVtBLJK5vKiaRRTrSYF916xYv1cTIPXHd6bGfio4qTktLEMeasCK
uNdhq10JiHfczg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:11 2025 by rpki-client