Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
File: jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft (raw, json)
Hash identifier: qyqzs+uzEAlgV5KNrQuBm2La/us2rzZvTbRj+XnULto=
Subject key identifier: 39:61:FF:F6:C8:F3:38:A6:09:55:06:5D:82:14:63:77:62:1C:32:AE
Authority key identifier: 8E:0C:54:B3:AA:E2:51:91:5F:FC:98:BD:34:A5:50:18:1F:FA:B4:9A
Certificate issuer: /CN=8e0c54b3aae251915ffc98bd34a550181ffab49a
Certificate serial: 019A4EF546692A4D0F5F306331BC3457E984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
Manifest number: 16A0
Signing time: Tue 04 Nov 2025 13:01:28 +0000
Manifest this update: Tue 04 Nov 2025 13:01:28 +0000
Manifest next update: Wed 05 Nov 2025 13:01:28 +0000
Files and hashes: 1: BCN4ZtExcExoi2ZpeY5zxnXpqZs.roa (hash: J4RuOv92rnUwTT9ZA2LqfolBgIUjjRVEb11UiMubpN8=)
2: KQ8djxwDZnjEjwDeGenO8z4CQfE.roa (hash: n8AngvQ0fquzsxztAqeeyBCrmmkZMY5Guz/NYsJtM+U=)
3: jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl (hash: q530QgG9UU/szB8IP+qPCUU+9bHfpBcbmTKtUd6RCQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:46:69:2a:4d:0f:5f:30:63:31:bc:34:57:e9:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0c54b3aae251915ffc98bd34a550181ffab49a
Validity
Not Before: Nov 4 13:01:28 2025 GMT
Not After : Nov 5 13:01:28 2025 GMT
Subject: CN=3961fff6c8f338a60955065d82146377621c32ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:95:16:ba:8e:99:d3:04:f5:14:d7:dd:a8:2d:
55:e3:93:e3:ee:30:33:78:b0:bc:e9:e3:ca:ba:13:
b6:39:c4:b5:5a:2d:0e:2f:c5:79:89:74:c0:a0:e5:
2c:96:ff:74:d6:86:fd:b0:65:7a:86:cc:3d:ad:4b:
f4:63:81:bd:ac:da:a2:bd:e6:d6:e7:11:f3:49:69:
6e:18:1b:78:67:e5:16:d7:8a:a1:2f:53:fe:48:30:
98:0e:11:32:be:57:17:57:0c:50:bd:40:b9:a4:16:
9b:1e:9e:5e:e1:73:8c:04:10:ab:4a:1e:e0:a5:b0:
6a:d3:78:fc:95:0d:39:78:36:73:ee:29:c8:ce:74:
bd:ad:d2:05:32:3e:f8:1d:03:20:2c:46:e6:2e:25:
19:ee:9a:25:14:8b:a1:a3:0d:f4:07:89:d1:8a:18:
b9:9e:07:bc:23:49:2a:5c:c7:95:fe:e7:92:85:32:
a8:63:e0:e3:d9:f3:de:72:de:e5:32:3d:a1:6d:99:
c3:1e:96:32:ae:67:9f:31:56:d9:b0:11:cc:e5:17:
c8:ba:dc:5f:b3:7a:dd:9b:1b:86:66:e6:8a:f5:f1:
0a:58:f2:82:d1:64:ce:14:d8:68:e8:72:a3:74:0d:
1b:2e:37:2e:f1:e4:97:ee:43:85:df:ce:f2:6f:62:
8f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:61:FF:F6:C8:F3:38:A6:09:55:06:5D:82:14:63:77:62:1C:32:AE
X509v3 Authority Key Identifier:
keyid:8E:0C:54:B3:AA:E2:51:91:5F:FC:98:BD:34:A5:50:18:1F:FA:B4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgxUs6riUZFf_Ji9NKVQGB_6tJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b6250c-e062-4037-b8f3-bf1e1de2ea63/1/jgxUs6riUZFf_Ji9NKVQGB_6tJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:0e:65:cb:d6:c7:90:34:87:86:da:22:f0:95:e9:ad:d5:64:
c0:95:4d:ba:a0:ff:7e:05:2a:76:aa:f2:fd:99:e1:be:fb:d7:
b5:0a:6e:da:cc:53:2a:aa:a6:64:7c:47:a8:3b:6f:1e:8f:a3:
22:55:e5:be:f0:58:d0:c4:4a:da:db:97:ab:b9:16:2b:23:08:
3f:b7:a8:f9:5b:c2:e4:21:2c:ac:df:6e:fe:1c:1a:c1:39:62:
f4:ef:de:64:30:4b:1b:94:9a:7c:e4:1d:4b:0f:9d:5c:2c:8c:
b2:f9:79:53:94:11:df:ae:36:e9:ca:f7:e7:8d:e3:27:f9:ea:
88:57:d3:0f:19:8d:6e:3c:7e:4b:27:63:60:38:bb:05:47:67:
ff:77:e3:16:ed:8c:62:f5:02:5a:d0:6d:01:54:1f:8b:47:98:
dc:05:26:cd:f6:a6:fe:be:1a:06:57:6b:40:d5:c1:a0:1c:54:
47:13:d2:a4:cb:d8:71:35:57:89:ab:a5:58:a0:46:5c:9c:19:
ed:a1:07:38:b3:8c:c2:10:26:dc:7e:d3:42:00:e9:37:ce:fe:
0b:66:1d:0f:d7:43:27:ef:4e:60:b2:a3:5a:76:6c:1e:0b:1b:
0c:2f:98:31:a5:07:6c:3f:7b:e2:35:7a:f5:75:1e:44:6c:81:
00:ab:98:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9UZpKk0PXzBjMbw0V+mEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMGM1NGIzYWFlMjUxOTE1ZmZjOThiZDM0YTU1MDE4MWZm
YWI0OWEwHhcNMjUxMTA0MTMwMTI4WhcNMjUxMTA1MTMwMTI4WjAzMTEwLwYDVQQD
EygzOTYxZmZmNmM4ZjMzOGE2MDk1NTA2NWQ4MjE0NjM3NzYyMWMzMmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspUWuo6Z0wT1FNfdqC1V45Pj7jAz
eLC86ePKuhO2OcS1Wi0OL8V5iXTAoOUslv901ob9sGV6hsw9rUv0Y4G9rNqivebW
5xHzSWluGBt4Z+UW14qhL1P+SDCYDhEyvlcXVwxQvUC5pBabHp5e4XOMBBCrSh7g
pbBq03j8lQ05eDZz7inIznS9rdIFMj74HQMgLEbmLiUZ7polFIuhow30B4nRihi5
nge8I0kqXMeV/ueShTKoY+Dj2fPect7lMj2hbZnDHpYyrmefMVbZsBHM5RfIutxf
s3rdmxuGZuaK9fEKWPKC0WTOFNho6HKjdA0bLjcu8eSX7kOF387yb2KPkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDlh//bI8zimCVUGXYIUY3diHDKuMB8GA1UdIwQY
MBaAFI4MVLOq4lGRX/yYvTSlUBgf+rSaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamd4VXM2cmlVWkZmX0ppOU5LVlFHQl82dEpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9iNjI1MGMtZTA2Mi00MDM3LWI4ZjMt
YmYxZTFkZTJlYTYzLzEvamd4VXM2cmlVWkZmX0ppOU5LVlFHQl82dEpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9iNjI1MGMtZTA2Mi00MDM3LWI4ZjMtYmYxZTFkZTJlYTYz
LzEvamd4VXM2cmlVWkZmX0ppOU5LVlFHQl82dEpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARg5ly9bH
kDSHhtoi8JXprdVkwJVNuqD/fgUqdqry/ZnhvvvXtQpu2sxTKqqmZHxHqDtvHo+j
IlXlvvBY0MRK2tuXq7kWKyMIP7eo+VvC5CEsrN9u/hwawTli9O/eZDBLG5SafOQd
Sw+dXCyMsvl5U5QR36426cr3543jJ/nqiFfTDxmNbjx+SydjYDi7BUdn/3fjFu2M
YvUCWtBtAVQfi0eY3AUmzfam/r4aBldrQNXBoBxURxPSpMvYcTVXiaulWKBGXJwZ
7aEHOLOMwhAm3H7TQgDpN87+C2YdD9dDJ+9OYLKjWnZsHgsbDC+YMaUHbD974jV6
9XUeRGyBAKuYYg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:35 2025 by rpki-client