Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
File: jjUN1thC69Td0IytQdj_gWv9__g.mft (raw, json)
Hash identifier: 8VutGk+PN5k56pIoczgNz3tjJGq65VZxxUQ2q3SqjBc=
Subject key identifier: 59:8D:57:2A:63:E0:70:22:A7:52:BE:DE:E9:D8:C0:48:D4:31:99:1A
Authority key identifier: 8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8
Certificate issuer: /CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8
Certificate serial: 019A51F57FD96F51E165AF68AE61EAD97D29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
Manifest number: 0F82
Signing time: Wed 05 Nov 2025 03:00:34 +0000
Manifest this update: Wed 05 Nov 2025 03:00:34 +0000
Manifest next update: Thu 06 Nov 2025 03:00:34 +0000
Files and hashes: 1: iVIbS2LxmtBFtz1_IM2nGzPQpUE.roa (hash: tzf09d7UopXNcvR8NL3fhh4Pys9GVj3aQxT6Ly8ih98=)
2: jjUN1thC69Td0IytQdj_gWv9__g.crl (hash: vK4TDoiZLGJ/WXfyWdWKHTPgCyg2DfgpHCnEGJdRIQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:7f:d9:6f:51:e1:65:af:68:ae:61:ea:d9:7d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8
Validity
Not Before: Nov 5 03:00:34 2025 GMT
Not After : Nov 6 03:00:34 2025 GMT
Subject: CN=598d572a63e07022a752bedee9d8c048d431991a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:fb:43:a8:dc:8d:21:dc:d1:ab:93:b3:17:5f:
80:81:9c:61:1d:bf:9a:fc:0f:0d:68:b9:52:90:1f:
ac:66:e9:22:ad:cd:18:a8:42:64:4c:25:8b:18:86:
64:88:bf:22:e1:11:01:b8:c1:5d:0f:ac:70:52:5d:
4a:56:66:4b:8c:a0:dd:cb:f9:42:f2:42:23:16:af:
b3:85:08:f8:3e:15:cd:41:50:5f:69:ec:08:45:97:
60:6c:c3:eb:8c:46:29:ca:db:ae:cf:90:28:6f:96:
e2:f7:ae:fc:20:f0:56:9d:e1:24:e4:bf:20:1e:23:
45:28:04:1d:e4:b0:58:2d:31:c8:d3:78:0a:ae:d6:
7d:ac:51:2e:c6:70:44:c2:96:a4:3e:69:5e:17:fd:
51:13:44:34:96:aa:37:c7:cb:f1:d7:b2:2d:6b:14:
8f:13:12:17:e8:b0:fd:d3:1a:56:0f:ca:73:67:97:
c8:26:5e:b5:07:d8:db:74:d4:72:2a:00:fa:0a:09:
13:83:52:47:5a:6e:e7:fc:10:57:59:b1:d2:66:f5:
1c:e3:40:a0:36:93:70:7c:d5:14:bd:84:86:14:60:
58:29:9c:f0:de:d2:e8:77:db:fb:34:01:c0:bb:55:
9b:1e:03:b0:f3:19:a2:84:76:53:cc:ec:ec:c2:d8:
bf:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8D:57:2A:63:E0:70:22:A7:52:BE:DE:E9:D8:C0:48:D4:31:99:1A
X509v3 Authority Key Identifier:
keyid:8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c4:5f:ae:4f:ba:eb:01:c9:8b:78:b5:08:3c:05:09:33:51:
6a:01:9c:55:e3:86:8b:7f:35:e3:78:a7:a2:c8:d0:5b:7a:9d:
ad:5b:3b:36:55:9f:73:b5:5d:b0:41:1b:f3:cf:6d:05:ef:fd:
ad:d2:b4:1e:d1:0b:88:0b:30:26:27:21:3d:78:3a:71:31:a8:
b2:00:8c:3a:38:1c:c1:72:67:6b:a9:cf:2f:aa:e9:c0:15:33:
ee:1c:b5:11:bc:e2:b9:95:6d:5b:41:ee:35:38:d0:ae:40:63:
28:62:b0:46:82:e9:85:e7:86:1b:7e:b9:e2:8a:77:b3:2f:1d:
59:8e:3d:bf:a7:07:78:12:dd:88:ef:7f:f3:67:fb:e5:17:31:
f1:97:e4:e1:a6:d3:15:cd:7e:08:46:10:b3:ff:d1:57:7f:eb:
19:8a:52:f1:50:6a:b9:f2:28:14:1c:99:7b:d2:b9:9a:2c:e3:
af:86:54:89:62:16:10:66:f6:70:f6:b1:16:a6:d5:a2:39:9e:
b4:e8:4a:33:25:c5:c9:09:ca:b4:e8:76:dd:ca:e9:ee:54:7a:
9a:50:51:2d:04:b2:66:44:04:51:f1:b4:cd:e4:fa:5b:3f:bd:
ca:97:85:03:3f:9b:ba:ac:8c:70:b6:1c:f8:5e:b3:d7:47:86:
2f:c1:10:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpR9X/Zb1HhZa9ormHq2X0pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMzUwZGQ2ZDg0MmViZDRkZGQwOGNhZDQxZDhmZjgxNmJm
ZGZmZjgwHhcNMjUxMTA1MDMwMDM0WhcNMjUxMTA2MDMwMDM0WjAzMTEwLwYDVQQD
Eyg1OThkNTcyYTYzZTA3MDIyYTc1MmJlZGVlOWQ4YzA0OGQ0MzE5OTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7vtDqNyNIdzRq5OzF1+AgZxhHb+a
/A8NaLlSkB+sZukirc0YqEJkTCWLGIZkiL8i4REBuMFdD6xwUl1KVmZLjKDdy/lC
8kIjFq+zhQj4PhXNQVBfaewIRZdgbMPrjEYpytuuz5Aob5bi9678IPBWneEk5L8g
HiNFKAQd5LBYLTHI03gKrtZ9rFEuxnBEwpakPmleF/1RE0Q0lqo3x8vx17ItaxSP
ExIX6LD90xpWD8pzZ5fIJl61B9jbdNRyKgD6CgkTg1JHWm7n/BBXWbHSZvUc40Cg
NpNwfNUUvYSGFGBYKZzw3tLod9v7NAHAu1WbHgOw8xmihHZTzOzswti/MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmNVypj4HAip1K+3unYwEjUMZkaMB8GA1UdIwQY
MBaAFI41DdbYQuvU3dCMrUHY/4Fr/f/4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvampVTjF0aEM2OVRkMEl5dFFkal9nV3Y5X19nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8xYmYyZTEtMzM5Mi00YjZlLTk1OTct
MjFmM2YyNjQ4NGQ5LzEvampVTjF0aEM2OVRkMEl5dFFkal9nV3Y5X19nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8xYmYyZTEtMzM5Mi00YjZlLTk1OTctMjFmM2YyNjQ4NGQ5
LzEvampVTjF0aEM2OVRkMEl5dFFkal9nV3Y5X19nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC8Rfrk+6
6wHJi3i1CDwFCTNRagGcVeOGi38143inosjQW3qdrVs7NlWfc7VdsEEb889tBe/9
rdK0HtELiAswJichPXg6cTGosgCMOjgcwXJna6nPL6rpwBUz7hy1EbziuZVtW0Hu
NTjQrkBjKGKwRoLpheeGG3654op3sy8dWY49v6cHeBLdiO9/82f75Rcx8Zfk4abT
Fc1+CEYQs//RV3/rGYpS8VBqufIoFByZe9K5mizjr4ZUiWIWEGb2cPaxFqbVojme
tOhKMyXFyQnKtOh23crp7lR6mlBRLQSyZkQEUfG0zeT6Wz+9ypeFAz+buqyMcLYc
+F6z10eGL8EQQA==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:59:19 2025 by rpki-client