Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.mft
File: _JgxNwQvyMSSFwfU622l9sSnmls.mft (raw, json)
Hash identifier: +Q9MYEtsETUHabF9e3l8qheqJW2MHeudGQ+BV1PZLww=
Subject key identifier: D7:06:72:92:85:32:94:74:FD:EE:32:E6:D4:A2:AF:6D:09:0C:95:84
Authority key identifier: FC:98:31:37:04:2F:C8:C4:92:17:07:D4:EB:6D:A5:F6:C4:A7:9A:5B
Certificate issuer: /CN=fc983137042fc8c4921707d4eb6da5f6c4a79a5b
Certificate serial: 019A51BE6AA5C2CDF40695E94C3EB3C836B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 02:00:24 +0000
Manifest this update: Wed 05 Nov 2025 02:00:24 +0000
Manifest next update: Thu 06 Nov 2025 02:00:24 +0000
Files and hashes: 1: SXZm8wbMg3xM60shH7B8R-_NnKM.roa (hash: L4R596s7KyX9eES8kDOckvjATz5MXeTWz01yNs2zMaw=)
2: TSzzT-wDXDGDMx-4wmmQgF1l3HA.roa (hash: yUpCizyCuVdygvZFqIzlfSb6NuJnZoyRJzdQ53d5l/A=)
3: _JgxNwQvyMSSFwfU622l9sSnmls.crl (hash: S5LBRz2xgfjzL+rB6DA9NzP2K1ONGqB1/KMXbBfgT7k=)
4: _L_G56aRVg6nD-NomNA5jLK-OFc.roa (hash: pqPipm6sSmIrz6wz+oGLMWSdr2XRQ9UIYUQfzfKl1sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:6a:a5:c2:cd:f4:06:95:e9:4c:3e:b3:c8:36:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc983137042fc8c4921707d4eb6da5f6c4a79a5b
Validity
Not Before: Nov 5 02:00:24 2025 GMT
Not After : Nov 6 02:00:24 2025 GMT
Subject: CN=d706729285329474fdee32e6d4a2af6d090c9584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3b:44:a5:8b:da:54:d5:52:0f:62:7c:d3:4d:
7b:43:e5:32:c1:bb:a5:f2:f8:d6:5d:a5:d2:d8:f1:
79:92:2d:e3:ff:2f:d1:90:4d:14:56:ba:31:05:70:
db:7a:f8:a0:16:db:d2:72:dc:c5:b0:ea:79:8c:6f:
62:6e:0b:a3:d1:09:01:63:0c:a0:e4:0e:1f:be:92:
d3:f9:83:cf:22:f0:3b:92:16:1a:47:c9:93:ab:b6:
0f:f1:31:b8:b5:8a:d9:3f:1d:3e:6b:00:46:7c:7d:
d6:fa:a5:c8:f5:df:bf:de:7d:ff:2c:8c:2c:c8:4c:
52:c9:6c:a9:b6:1c:3c:58:81:66:46:2b:76:7a:98:
07:54:f0:16:19:a9:b2:1c:e9:3a:f7:21:ba:40:5c:
d6:e8:39:3a:45:17:e4:87:a0:d0:25:96:10:95:62:
d3:cb:83:92:2e:e2:88:36:16:d2:f4:0b:fc:e5:4f:
66:7b:e0:c8:b0:17:e5:37:33:d5:65:67:08:27:5d:
1a:3e:0b:5f:9a:2b:41:f2:96:1b:3f:95:e5:cc:ed:
4c:e4:60:46:69:f5:2c:e3:83:09:f3:89:08:5d:af:
ea:15:c2:a5:c3:83:19:d4:96:a4:10:78:ba:a7:be:
81:b1:b5:fc:64:bb:8f:df:28:46:c1:cd:81:07:14:
78:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:06:72:92:85:32:94:74:FD:EE:32:E6:D4:A2:AF:6D:09:0C:95:84
X509v3 Authority Key Identifier:
keyid:FC:98:31:37:04:2F:C8:C4:92:17:07:D4:EB:6D:A5:F6:C4:A7:9A:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ef:75:e1:4e:03:77:8a:06:f6:7d:59:72:62:55:97:a5:95:
2f:73:b7:6c:48:1f:7f:b8:ed:ea:9f:34:0c:72:e9:3c:6f:f2:
09:06:49:be:c7:86:d4:30:4b:d0:9c:de:00:3a:9e:55:ed:1d:
3e:14:ed:60:e9:e4:dc:bc:03:45:bc:3a:b2:34:f2:6b:35:7d:
ba:a7:e3:be:01:04:a3:88:3a:cb:90:eb:52:b4:59:ba:2c:63:
a1:55:b4:0e:36:7c:24:24:05:22:98:07:6e:01:2f:46:0b:18:
48:d1:01:e7:85:4b:fd:cf:df:5b:8d:c6:eb:cf:5c:8d:3f:c9:
40:af:8c:f7:c6:a0:58:4f:95:a9:4c:3e:aa:ae:fe:74:2a:96:
75:10:f7:07:9e:b8:32:1a:27:e5:e6:ca:12:2d:a4:9a:32:1e:
67:1d:56:7d:f9:d1:7e:5c:9e:4d:f0:f5:d5:2a:98:81:87:18:
f7:c0:60:61:f2:84:da:23:ad:e2:05:6b:b9:1f:67:97:f2:ec:
cf:50:fe:f9:1a:fd:fe:3c:69:f7:2d:69:5d:24:dc:c1:37:34:
53:83:44:e8:eb:1e:46:1f:a8:9e:2e:ee:ff:5e:d4:32:c4:6e:
a6:c4:84:0a:e7:e6:b2:35:00:d0:63:8b:d9:65:99:c0:b6:2a:
02:61:ce:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRvmqlws30BpXpTD6zyDawMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjOTgzMTM3MDQyZmM4YzQ5MjE3MDdkNGViNmRhNWY2YzRh
NzlhNWIwHhcNMjUxMTA1MDIwMDI0WhcNMjUxMTA2MDIwMDI0WjAzMTEwLwYDVQQD
EyhkNzA2NzI5Mjg1MzI5NDc0ZmRlZTMyZTZkNGEyYWY2ZDA5MGM5NTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ztEpYvaVNVSD2J80017Q+Uywbul
8vjWXaXS2PF5ki3j/y/RkE0UVroxBXDbevigFtvSctzFsOp5jG9ibguj0QkBYwyg
5A4fvpLT+YPPIvA7khYaR8mTq7YP8TG4tYrZPx0+awBGfH3W+qXI9d+/3n3/LIws
yExSyWypthw8WIFmRit2epgHVPAWGamyHOk69yG6QFzW6Dk6RRfkh6DQJZYQlWLT
y4OSLuKINhbS9Av85U9me+DIsBflNzPVZWcIJ10aPgtfmitB8pYbP5XlzO1M5GBG
afUs44MJ84kIXa/qFcKlw4MZ1JakEHi6p76BsbX8ZLuP3yhGwc2BBxR4ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNcGcpKFMpR0/e4y5tSir20JDJWEMB8GA1UdIwQY
MBaAFPyYMTcEL8jEkhcH1OttpfbEp5pbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0pneE53UXZ5TVNTRndmVTYyMmw5c1NubWxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MjFjODAtZWQzYS00N2ZkLThkMmMt
MjI0ZjEwYTk4MWZlLzEvX0pneE53UXZ5TVNTRndmVTYyMmw5c1NubWxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy80MjFjODAtZWQzYS00N2ZkLThkMmMtMjI0ZjEwYTk4MWZl
LzEvX0pneE53UXZ5TVNTRndmVTYyMmw5c1NubWxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeu914U4D
d4oG9n1ZcmJVl6WVL3O3bEgff7jt6p80DHLpPG/yCQZJvseG1DBL0JzeADqeVe0d
PhTtYOnk3LwDRbw6sjTyazV9uqfjvgEEo4g6y5DrUrRZuixjoVW0DjZ8JCQFIpgH
bgEvRgsYSNEB54VL/c/fW43G689cjT/JQK+M98agWE+VqUw+qq7+dCqWdRD3B564
Mhon5ebKEi2kmjIeZx1WffnRflyeTfD11SqYgYcY98BgYfKE2iOt4gVruR9nl/Ls
z1D++Rr9/jxp9y1pXSTcwTc0U4NE6OseRh+oni7u/17UMsRupsSECufmsjUA0GOL
2WWZwLYqAmHOwQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:41:34 2025 by rpki-client