Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
File: jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft (raw, json)
Hash identifier: OzDFMTdKYBodKep8BYx885SY76ejZbYG4XGYdtUQR+c=
Subject key identifier: 1B:E7:93:EB:67:96:A8:2E:7F:23:DB:5A:99:3B:85:65:BF:61:DA:64
Authority key identifier: 8E:62:2A:34:C5:5E:39:B8:FA:15:A3:7B:A9:E3:70:EA:AF:D9:97:74
Certificate issuer: /CN=8e622a34c55e39b8fa15a37ba9e370eaafd99774
Certificate serial: 019A4D3D3C7BD75817E85DB6BACFF865E147
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 05:00:49 +0000
Manifest this update: Tue 04 Nov 2025 05:00:49 +0000
Manifest next update: Wed 05 Nov 2025 05:00:49 +0000
Files and hashes: 1: MeStYchfIIM21gIjTEqDbpySbzo.roa (hash: HjyEWI+y6IoPKwCyj+P1YglxdC4kh2ZH6Sa5Jx7lTg0=)
2: ifGa29cDfCtmHluYzDCGArXBHSE.roa (hash: SagmwRWK2BwuwUrS3xLYWQnMEp8bHt5W3ObsAvGOP+A=)
3: jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl (hash: NSjTuy/T1mx5XCYhDJj9/mRGbCeqQlEfNER76N6QCd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:3c:7b:d7:58:17:e8:5d:b6:ba:cf:f8:65:e1:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e622a34c55e39b8fa15a37ba9e370eaafd99774
Validity
Not Before: Nov 4 05:00:49 2025 GMT
Not After : Nov 5 05:00:49 2025 GMT
Subject: CN=1be793eb6796a82e7f23db5a993b8565bf61da64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6a:75:51:f4:b6:79:59:8d:d3:c4:03:b2:64:
9f:22:9c:40:ac:4d:15:7a:79:bc:85:0e:b9:0c:fe:
83:dc:b8:99:5d:d1:07:d0:38:95:99:79:e7:c0:7c:
29:a9:5f:f5:6e:59:9a:df:1c:80:a9:9f:5b:10:f9:
c1:05:35:04:ea:63:af:3f:d3:d5:77:a0:84:78:83:
04:5c:ea:bb:46:4d:e8:79:02:2a:e9:b0:6b:20:4a:
ca:85:f4:e4:bc:71:dc:5d:3c:10:14:fc:38:76:6e:
6f:05:d1:df:53:77:f5:89:7c:9b:fe:33:2b:6c:73:
2e:2e:2d:72:cc:b6:e6:43:eb:50:38:e2:3e:81:bb:
3b:da:38:c5:80:c9:99:1d:36:44:bf:6f:69:53:0d:
dd:da:45:c5:89:cd:24:34:d8:be:f3:bc:02:44:60:
22:d2:6a:a8:f0:38:46:62:15:6a:96:2d:b2:01:71:
3d:0d:a7:f4:39:e5:eb:d0:8c:8f:69:a7:41:9d:1f:
9a:2f:b8:fc:20:fb:e3:6d:12:cd:d0:e7:ba:f4:4f:
9c:0e:94:8c:e9:dc:fd:c7:77:94:67:4a:f0:e3:de:
dc:c2:cd:d8:f5:22:c3:e2:42:b2:7c:7a:8c:eb:09:
b4:af:af:be:e2:c9:32:21:08:5c:92:4e:da:23:6d:
32:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E7:93:EB:67:96:A8:2E:7F:23:DB:5A:99:3B:85:65:BF:61:DA:64
X509v3 Authority Key Identifier:
keyid:8E:62:2A:34:C5:5E:39:B8:FA:15:A3:7B:A9:E3:70:EA:AF:D9:97:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:cf:57:f9:b3:26:0b:b2:66:89:cc:e6:10:28:2f:de:5f:db:
8d:f8:82:6a:7b:06:e0:a3:95:7c:4f:3b:85:b8:a3:c4:b8:bf:
46:d4:ad:2b:eb:35:3d:cf:12:1f:89:c9:f9:af:92:5a:84:83:
31:88:42:24:c7:f7:0c:df:1f:ab:15:50:9c:b2:f6:9b:50:8e:
b0:74:5e:cc:c7:f6:15:ce:bd:55:84:6f:b8:e5:6b:b1:9c:c7:
69:b0:b5:4a:9f:15:23:ce:6f:c8:89:26:3b:4a:8e:5f:90:70:
79:87:54:fb:ed:8f:93:b4:91:2f:62:07:4b:e5:91:d1:f2:97:
5c:3d:68:e1:5a:4e:ad:86:b5:86:2e:fd:43:1a:73:15:75:2a:
88:1b:44:d5:59:28:61:18:90:81:93:a9:4d:b2:ce:f9:c9:11:
f3:eb:45:5c:65:ab:b7:f6:82:a0:e7:81:b9:ac:9b:83:b1:c5:
82:cd:eb:d9:17:e9:02:43:1c:52:1e:b9:fd:c3:5a:d8:cc:4f:
1e:4f:fb:d0:16:a2:02:f4:5a:62:50:e4:d5:de:25:bc:b1:b1:
f5:3d:13:a2:94:9e:89:f0:50:f8:08:86:e0:82:b2:ca:95:62:
52:33:43:98:e7:72:db:43:8f:1a:1d:84:00:d8:7b:16:17:40:
91:12:e3:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPTx711gX6F22us/4ZeFHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNjIyYTM0YzU1ZTM5YjhmYTE1YTM3YmE5ZTM3MGVhYWZk
OTk3NzQwHhcNMjUxMTA0MDUwMDQ5WhcNMjUxMTA1MDUwMDQ5WjAzMTEwLwYDVQQD
EygxYmU3OTNlYjY3OTZhODJlN2YyM2RiNWE5OTNiODU2NWJmNjFkYTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGp1UfS2eVmN08QDsmSfIpxArE0V
enm8hQ65DP6D3LiZXdEH0DiVmXnnwHwpqV/1blma3xyAqZ9bEPnBBTUE6mOvP9PV
d6CEeIMEXOq7Rk3oeQIq6bBrIErKhfTkvHHcXTwQFPw4dm5vBdHfU3f1iXyb/jMr
bHMuLi1yzLbmQ+tQOOI+gbs72jjFgMmZHTZEv29pUw3d2kXFic0kNNi+87wCRGAi
0mqo8DhGYhVqli2yAXE9Daf0OeXr0IyPaadBnR+aL7j8IPvjbRLN0Oe69E+cDpSM
6dz9x3eUZ0rw497cws3Y9SLD4kKyfHqM6wm0r6++4skyIQhckk7aI20yGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBvnk+tnlqgufyPbWpk7hWW/YdpkMB8GA1UdIwQY
MBaAFI5iKjTFXjm4+hWje6njcOqv2Zd0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam1JcU5NVmVPYmo2RmFON3FlTnc2cV9abDNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84MmNiM2UtODE5OS00OTE3LWExNzYt
ZTUwZTFlOWJiNGIzLzEvam1JcU5NVmVPYmo2RmFON3FlTnc2cV9abDNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC84MmNiM2UtODE5OS00OTE3LWExNzYtZTUwZTFlOWJiNGIz
LzEvam1JcU5NVmVPYmo2RmFON3FlTnc2cV9abDNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoM9X+bMm
C7JmiczmECgv3l/bjfiCansG4KOVfE87hbijxLi/RtStK+s1Pc8SH4nJ+a+SWoSD
MYhCJMf3DN8fqxVQnLL2m1COsHRezMf2Fc69VYRvuOVrsZzHabC1Sp8VI85vyIkm
O0qOX5BweYdU++2Pk7SRL2IHS+WR0fKXXD1o4VpOrYa1hi79QxpzFXUqiBtE1Vko
YRiQgZOpTbLO+ckR8+tFXGWrt/aCoOeBuaybg7HFgs3r2RfpAkMcUh65/cNa2MxP
Hk/70BaiAvRaYlDk1d4lvLGx9T0TopSeifBQ+AiG4IKyypViUjNDmOdy20OPGh2E
ANh7FhdAkRLj4A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:01:54 2025 by rpki-client