Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
File: JLcItlJ6u9LeK5s3NJarwddItuc.mft (raw, json)
Hash identifier: 5VRs3Sjk8cQtj+d0egQ2y80ZDg8KXWA3BDg8Ku7df84=
Subject key identifier: 97:CB:4C:B6:57:C6:CC:DD:52:9C:8C:81:D8:D8:B4:54:D4:B4:B2:59
Authority key identifier: 24:B7:08:B6:52:7A:BB:D2:DE:2B:9B:37:34:96:AB:C1:D7:48:B6:E7
Certificate issuer: /CN=24b708b6527abbd2de2b9b373496abc1d748b6e7
Certificate serial: 019A51F59FF4AB1E7E361ED4B81435219986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
Manifest number: 145C
Signing time: Wed 05 Nov 2025 03:00:42 +0000
Manifest this update: Wed 05 Nov 2025 03:00:42 +0000
Manifest next update: Thu 06 Nov 2025 03:00:42 +0000
Files and hashes: 1: JLcItlJ6u9LeK5s3NJarwddItuc.crl (hash: DEC/jEoGlNuHdU/z/B0E2m1dZEZPMpo7dI6ekhkqUW0=)
2: vZBmS-EA2uBUhcAI4deCtG0tMbQ.roa (hash: jDBhmRUhtmMAlFzmv4saGBsUFOT3KgtgZMefYA3RiUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:9f:f4:ab:1e:7e:36:1e:d4:b8:14:35:21:99:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b708b6527abbd2de2b9b373496abc1d748b6e7
Validity
Not Before: Nov 5 03:00:42 2025 GMT
Not After : Nov 6 03:00:42 2025 GMT
Subject: CN=97cb4cb657c6ccdd529c8c81d8d8b454d4b4b259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f2:a0:c3:db:6c:77:c2:5c:18:3a:35:a3:a0:
8a:7e:e8:78:42:b2:13:b7:ab:f8:87:73:03:28:c2:
13:34:af:e0:d0:f5:c0:1a:6d:23:09:96:9b:e3:00:
e2:3d:30:40:6c:f2:8b:c3:c3:35:d3:14:b0:25:3d:
74:0d:90:05:c0:24:9e:23:60:f3:db:01:ef:e8:ca:
b6:70:dd:7a:eb:1a:73:25:3f:ae:8b:d3:26:60:e7:
5d:7a:d0:e1:6d:be:5e:51:be:19:ab:5b:d2:0d:e0:
f4:9b:a0:6d:50:57:a1:65:2f:3b:72:76:b1:1b:33:
bf:b4:a9:96:9a:91:1e:ad:75:df:bc:83:a1:66:9c:
90:12:b2:ad:8e:dc:92:25:8f:63:b5:0e:56:8f:10:
af:8d:d3:81:f9:3e:9b:17:8d:21:74:59:d4:81:d2:
07:05:23:17:40:87:57:4e:84:ff:22:79:bd:74:fa:
6b:28:90:6d:8c:c3:32:3e:e7:8a:81:2a:0e:95:e3:
9b:f1:c7:13:fe:98:f6:db:71:87:01:87:cc:e0:58:
92:fd:58:b5:14:59:9e:46:5e:85:5a:32:cb:89:22:
aa:5e:76:bc:fd:c4:eb:24:2e:ca:e8:5d:de:d4:29:
de:b1:65:64:1c:be:c0:69:67:a8:c5:f2:08:68:90:
7c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:CB:4C:B6:57:C6:CC:DD:52:9C:8C:81:D8:D8:B4:54:D4:B4:B2:59
X509v3 Authority Key Identifier:
keyid:24:B7:08:B6:52:7A:BB:D2:DE:2B:9B:37:34:96:AB:C1:D7:48:B6:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:30:b1:3f:9b:78:ac:40:21:1e:55:09:58:91:df:2b:d1:20:
ba:4c:1c:64:fb:d7:d0:9f:31:8f:b7:28:f6:0e:e6:48:69:53:
58:f9:29:c7:2d:d4:a7:38:a0:50:da:11:c8:3d:e5:b0:e4:b0:
d7:5c:25:5d:63:a7:86:ac:c4:c1:0d:0a:db:90:bd:6e:f4:a7:
a3:b2:ca:2d:26:5b:6d:6e:29:44:0f:82:5a:53:99:ca:e2:77:
74:b5:a2:e0:99:ed:75:9b:0d:d7:87:97:24:d8:45:07:16:64:
a6:58:af:5a:ec:29:23:16:af:40:37:ef:2a:98:25:76:7f:72:
7e:67:49:d2:1f:05:59:1e:19:52:09:f7:50:cd:46:1d:f0:2f:
ea:2b:21:e4:c9:80:35:c9:b7:01:8d:68:ac:41:a4:4d:90:e3:
a9:3b:ff:a9:fa:67:e9:66:5c:1f:db:71:a2:1c:57:fe:79:bd:
bd:a5:f7:e8:14:0c:43:26:8f:89:4c:51:17:dc:dd:c3:9d:34:
93:a8:40:8e:93:b8:b1:92:8f:f0:9f:42:22:93:e8:c1:81:2a:
20:32:1f:94:91:7d:25:d2:23:73:4a:04:2c:71:d5:1d:69:44:
c6:8c:49:78:48:01:99:f4:63:05:77:1b:41:3a:7f:32:c0:d3:
ae:d9:61:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpR9Z/0qx5+Nh7UuBQ1IZmGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YjcwOGI2NTI3YWJiZDJkZTJiOWIzNzM0OTZhYmMxZDc0
OGI2ZTcwHhcNMjUxMTA1MDMwMDQyWhcNMjUxMTA2MDMwMDQyWjAzMTEwLwYDVQQD
Eyg5N2NiNGNiNjU3YzZjY2RkNTI5YzhjODFkOGQ4YjQ1NGQ0YjRiMjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvKgw9tsd8JcGDo1o6CKfuh4QrIT
t6v4h3MDKMITNK/g0PXAGm0jCZab4wDiPTBAbPKLw8M10xSwJT10DZAFwCSeI2Dz
2wHv6Mq2cN166xpzJT+ui9MmYOddetDhbb5eUb4Zq1vSDeD0m6BtUFehZS87cnax
GzO/tKmWmpEerXXfvIOhZpyQErKtjtySJY9jtQ5WjxCvjdOB+T6bF40hdFnUgdIH
BSMXQIdXToT/Inm9dPprKJBtjMMyPueKgSoOleOb8ccT/pj223GHAYfM4FiS/Vi1
FFmeRl6FWjLLiSKqXna8/cTrJC7K6F3e1CnesWVkHL7AaWeoxfIIaJB8IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJfLTLZXxszdUpyMgdjYtFTUtLJZMB8GA1UdIwQY
MBaAFCS3CLZServS3iubNzSWq8HXSLbnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkxjSXRsSjZ1OUxlSzVzM05KYXJ3ZGRJdHVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lZTQzYTAtZWRmNS00NDdkLWI0NzMt
YjJhMTNhM2E5YjhhLzEvSkxjSXRsSjZ1OUxlSzVzM05KYXJ3ZGRJdHVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi9lZTQzYTAtZWRmNS00NDdkLWI0NzMtYjJhMTNhM2E5Yjhh
LzEvSkxjSXRsSjZ1OUxlSzVzM05KYXJ3ZGRJdHVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjzCxP5t4
rEAhHlUJWJHfK9EgukwcZPvX0J8xj7co9g7mSGlTWPkpxy3UpzigUNoRyD3lsOSw
11wlXWOnhqzEwQ0K25C9bvSno7LKLSZbbW4pRA+CWlOZyuJ3dLWi4JntdZsN14eX
JNhFBxZkplivWuwpIxavQDfvKpgldn9yfmdJ0h8FWR4ZUgn3UM1GHfAv6ish5MmA
Ncm3AY1orEGkTZDjqTv/qfpn6WZcH9txohxX/nm9vaX36BQMQyaPiUxRF9zdw500
k6hAjpO4sZKP8J9CIpPowYEqIDIflJF9JdIjc0oELHHVHWlExoxJeEgBmfRjBXcb
QTp/MsDTrtlhcA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:44:05 2025 by rpki-client