Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
File: JdYnfp1eXwpz2jcfMLWseZknkjo.mft (raw, json)
Hash identifier: fu+8ZWoaksQH2SNaFmAMuaGVDhc++LUFJTXjUvwozQg=
Subject key identifier: 7A:63:AC:B3:90:39:E7:DB:04:DE:47:AC:F8:37:A6:D0:A8:D9:5B:62
Authority key identifier: 25:D6:27:7E:9D:5E:5F:0A:73:DA:37:1F:30:B5:AC:79:99:27:92:3A
Certificate issuer: /CN=25d6277e9d5e5f0a73da371f30b5ac799927923a
Certificate serial: 019A4DAA8A1862B987880BF083E42BEBA259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
Manifest number: 042D
Signing time: Tue 04 Nov 2025 07:00:13 +0000
Manifest this update: Tue 04 Nov 2025 07:00:13 +0000
Manifest next update: Wed 05 Nov 2025 07:00:13 +0000
Files and hashes: 1: JdYnfp1eXwpz2jcfMLWseZknkjo.crl (hash: nHXBfp3B+ItoniSxLt1It4GE5NV+sJe2cTTXKaa4LOA=)
2: W33wCNoqVtC8nnysLfc50xpdZy0.roa (hash: ojPlZl8ybzd2ray8ATJYzRb0Yn01gVHIP83ulWRE+8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:8a:18:62:b9:87:88:0b:f0:83:e4:2b:eb:a2:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d6277e9d5e5f0a73da371f30b5ac799927923a
Validity
Not Before: Nov 4 07:00:13 2025 GMT
Not After : Nov 5 07:00:13 2025 GMT
Subject: CN=7a63acb39039e7db04de47acf837a6d0a8d95b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5a:3e:97:ff:f9:cc:29:f4:75:a5:f5:2f:78:
79:a9:ca:de:b9:26:a7:a5:39:92:88:b1:48:92:1e:
37:0f:c5:d4:9d:cd:0c:b0:78:f7:35:c0:4a:59:5a:
9b:41:08:c3:69:a0:ed:04:26:e5:37:f2:97:7c:7f:
0e:ef:bb:b7:2a:f8:fc:ca:36:22:83:81:d8:d3:59:
e6:95:37:ec:3f:d9:eb:e5:b5:9b:86:57:8a:10:c3:
96:e8:39:a3:68:de:dc:af:6f:51:96:72:fd:c2:a3:
43:83:94:80:cd:ea:b6:20:be:c5:6e:5f:f3:34:88:
2f:a5:33:7e:9a:29:3d:60:dd:a1:41:51:ad:b8:98:
d4:e8:e6:5f:ca:cc:4b:8a:f9:7c:16:15:6a:15:17:
c1:49:93:7b:3a:e1:ab:0e:c1:0b:17:1a:66:fe:aa:
d5:c9:77:00:b3:ee:a8:b8:43:7f:1f:d8:df:37:74:
93:ac:4a:29:67:8c:99:55:8c:65:f6:ae:b1:d4:0c:
4c:f3:ee:8c:8a:72:ec:0a:b0:68:8b:db:a8:b7:25:
88:26:59:7d:51:88:96:64:8d:7f:a2:ae:18:bd:40:
c5:4c:53:cd:a1:7a:99:6c:4c:2d:84:a8:4f:fe:53:
49:34:58:42:1b:db:1f:dd:87:eb:73:43:b1:c8:cf:
7b:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:63:AC:B3:90:39:E7:DB:04:DE:47:AC:F8:37:A6:D0:A8:D9:5B:62
X509v3 Authority Key Identifier:
keyid:25:D6:27:7E:9D:5E:5F:0A:73:DA:37:1F:30:B5:AC:79:99:27:92:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c9:69:eb:df:81:54:bb:79:55:bb:c7:7b:c1:83:d4:9d:66:
9c:ee:10:a4:54:62:00:1b:69:ce:b3:99:42:57:23:84:33:8d:
be:ec:fb:01:e9:36:c2:f0:f4:5a:4a:ab:a4:d8:3d:37:d9:04:
6a:c6:13:a0:3b:a8:40:85:df:ad:aa:ec:68:89:cf:4d:ff:b9:
d3:fd:15:d9:1c:67:b4:a9:86:51:de:4f:47:0f:d5:84:31:da:
61:41:68:0a:85:80:2f:20:9e:ba:8d:ff:60:37:c6:c1:62:ed:
2e:b2:6f:bb:32:0f:79:40:cf:51:f2:3d:bf:be:56:0d:4c:4e:
c4:b1:90:20:74:85:03:7c:3e:e4:97:39:77:69:1b:b6:08:cd:
d0:9c:79:51:3e:46:5f:fb:c7:0b:18:41:2f:c3:ac:f3:d9:f5:
ef:9f:a3:32:93:7b:52:6a:68:55:c2:8d:18:4b:0f:71:53:01:
92:f4:df:cd:f5:97:69:6e:30:c3:4a:ea:98:01:8b:39:af:88:
d8:f1:51:37:b2:a5:ed:30:6e:38:7c:de:64:60:f6:60:9b:2f:
db:1c:01:04:8c:de:e6:27:b1:9b:a6:92:83:cc:d2:7a:34:f8:
31:cb:68:71:29:80:59:66:1c:9a:91:b8:b8:35:6f:af:0b:5f:
28:54:c1:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqooYYrmHiAvwg+Qr66JZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZDYyNzdlOWQ1ZTVmMGE3M2RhMzcxZjMwYjVhYzc5OTky
NzkyM2EwHhcNMjUxMTA0MDcwMDEzWhcNMjUxMTA1MDcwMDEzWjAzMTEwLwYDVQQD
Eyg3YTYzYWNiMzkwMzllN2RiMDRkZTQ3YWNmODM3YTZkMGE4ZDk1YjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Vo+l//5zCn0daX1L3h5qcreuSan
pTmSiLFIkh43D8XUnc0MsHj3NcBKWVqbQQjDaaDtBCblN/KXfH8O77u3Kvj8yjYi
g4HY01nmlTfsP9nr5bWbhleKEMOW6DmjaN7cr29RlnL9wqNDg5SAzeq2IL7Fbl/z
NIgvpTN+mik9YN2hQVGtuJjU6OZfysxLivl8FhVqFRfBSZN7OuGrDsELFxpm/qrV
yXcAs+6ouEN/H9jfN3STrEopZ4yZVYxl9q6x1AxM8+6MinLsCrBoi9uotyWIJll9
UYiWZI1/oq4YvUDFTFPNoXqZbEwthKhP/lNJNFhCG9sf3Yfrc0OxyM97ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHpjrLOQOefbBN5HrPg3ptCo2VtiMB8GA1UdIwQY
MBaAFCXWJ36dXl8Kc9o3HzC1rHmZJ5I6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmRZbmZwMWVYd3B6MmpjZk1MV3NlWmtua2pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83YmVmM2QtNTQyNi00MGNmLTg0MWUt
NDcxOTI3YTgzY2UzLzEvSmRZbmZwMWVYd3B6MmpjZk1MV3NlWmtua2pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83YmVmM2QtNTQyNi00MGNmLTg0MWUtNDcxOTI3YTgzY2Uz
LzEvSmRZbmZwMWVYd3B6MmpjZk1MV3NlWmtua2pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfslp69+B
VLt5VbvHe8GD1J1mnO4QpFRiABtpzrOZQlcjhDONvuz7Aek2wvD0WkqrpNg9N9kE
asYToDuoQIXfrarsaInPTf+50/0V2RxntKmGUd5PRw/VhDHaYUFoCoWALyCeuo3/
YDfGwWLtLrJvuzIPeUDPUfI9v75WDUxOxLGQIHSFA3w+5Jc5d2kbtgjN0Jx5UT5G
X/vHCxhBL8Os89n175+jMpN7UmpoVcKNGEsPcVMBkvTfzfWXaW4ww0rqmAGLOa+I
2PFRN7Kl7TBuOHzeZGD2YJsv2xwBBIze5iexm6aSg8zSejT4MctocSmAWWYcmpG4
uDVvrwtfKFTB4Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:56 2025 by rpki-client