Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft
File: JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft (raw, json)
Hash identifier: NjeatdlQ7nSRnpadF41xnfhlqrUlLaSmz9pvMCZM5uk=
Subject key identifier: 2E:78:61:F3:B2:5D:FA:C4:A3:60:20:9D:28:52:FE:A4:D0:C5:B4:AB
Authority key identifier: 26:25:1C:F7:D8:D6:D0:57:DC:64:71:5B:A8:36:29:9D:F3:9F:D8:5B
Certificate issuer: /CN=26251cf7d8d6d057dc64715ba836299df39fd85b
Certificate serial: 019A5119DFB556474E56EB0C1BD43932FCC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JiUc99jW0FfcZHFbqDYpnfOf2Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft
Manifest number: 73
Signing time: Tue 04 Nov 2025 23:00:41 +0000
Manifest this update: Tue 04 Nov 2025 23:00:41 +0000
Manifest next update: Wed 05 Nov 2025 23:00:41 +0000
Files and hashes: 1: JiUc99jW0FfcZHFbqDYpnfOf2Fs.crl (hash: vc60Qz9aiTsm79zJlSPx3xMO0gPzEFlPwlx33LD7/o8=)
2: yD4usZMSXbGkK2CBunEX74yn4QI.roa (hash: SizEhRkGwm4GTxXwCKgcYA/BLRuUEVBDL2+vReMYwzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JiUc99jW0FfcZHFbqDYpnfOf2Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 23:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:df:b5:56:47:4e:56:eb:0c:1b:d4:39:32:fc:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26251cf7d8d6d057dc64715ba836299df39fd85b
Validity
Not Before: Nov 4 23:00:41 2025 GMT
Not After : Nov 5 23:00:41 2025 GMT
Subject: CN=2e7861f3b25dfac4a360209d2852fea4d0c5b4ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:52:d8:f3:5d:08:8e:46:12:c7:fe:dd:51:13:
af:f8:93:b8:0c:22:af:56:c5:f3:9c:43:d4:54:b3:
dd:d8:94:ef:1a:0d:ba:0f:30:ad:a6:49:4c:b4:01:
de:25:59:c7:f6:12:bf:25:a1:4d:97:e8:39:8c:61:
b1:33:69:a7:76:24:f7:65:f3:83:14:9e:e4:e2:28:
d2:be:d7:33:0f:cc:a1:24:07:f3:3c:89:2e:b8:eb:
f6:b0:0b:85:10:f9:db:cc:fb:90:8b:77:a1:f2:a8:
4b:e3:9a:33:ba:47:1d:46:6e:d0:71:eb:a5:3e:0e:
06:75:d8:9c:79:3b:d5:4a:51:14:8e:8e:03:39:cf:
db:5b:c0:a0:a3:32:02:1c:72:8a:70:bc:f2:59:13:
6d:45:1b:90:40:07:65:ae:72:f1:63:c0:ea:a8:85:
10:bf:64:d7:b8:dd:2c:9e:ed:29:ea:c6:e5:57:73:
a7:8c:93:69:cf:cf:ec:15:91:fc:a9:c9:14:51:70:
61:09:62:05:1c:9e:a3:59:bf:20:52:79:e7:76:31:
4a:c7:ce:94:c1:46:a3:2d:42:8a:08:cd:0f:60:1c:
24:77:89:fa:b1:8e:37:09:ed:14:e1:03:61:c7:a3:
56:b2:78:a3:e3:3d:a6:83:0e:75:df:0f:a1:42:a4:
3c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:78:61:F3:B2:5D:FA:C4:A3:60:20:9D:28:52:FE:A4:D0:C5:B4:AB
X509v3 Authority Key Identifier:
keyid:26:25:1C:F7:D8:D6:D0:57:DC:64:71:5B:A8:36:29:9D:F3:9F:D8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiUc99jW0FfcZHFbqDYpnfOf2Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:3e:28:e7:e8:c7:66:a2:ac:58:d6:b5:94:4e:ba:d3:98:fe:
4b:91:1a:7a:bc:aa:92:b4:59:ef:cb:fe:84:71:7f:a5:e6:ae:
0a:5e:f4:52:59:8e:6b:8e:e3:0f:7e:67:66:81:8b:2c:89:d3:
f7:d3:5a:ff:18:25:a1:6d:34:78:82:36:5a:3d:f4:ea:ab:ac:
ed:29:37:9c:8c:0e:87:9f:b9:0f:fd:02:16:65:41:2c:9f:4b:
7f:a8:39:c1:dc:c9:90:b7:3c:a6:05:97:30:20:5a:4a:9e:69:
7a:0a:aa:9b:da:fa:30:11:ab:b1:78:0a:f1:98:9a:27:e7:77:
11:de:aa:4c:c3:36:57:30:b0:6d:86:93:b9:9d:21:a3:62:b8:
f6:40:40:d7:ec:17:eb:95:fa:bf:7b:5e:37:e8:c6:6f:07:9c:
08:0e:13:99:f9:a8:05:01:84:39:32:4f:5b:a7:1c:6c:fa:10:
f5:7a:58:ad:6f:7d:0d:64:f2:0a:2c:c7:6b:2d:53:77:fe:7c:
1b:cf:49:0f:e1:4b:fc:79:cd:4b:bb:39:44:be:da:4a:aa:13:
69:d9:5e:91:e9:cb:63:f2:dc:84:c2:30:2c:9b:8e:67:00:f8:
b2:98:ca:6b:ce:f6:90:aa:11:28:21:da:3b:ea:85:f8:30:3e:
e1:5a:a4:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRGd+1VkdOVusMG9Q5MvzDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MjUxY2Y3ZDhkNmQwNTdkYzY0NzE1YmE4MzYyOTlkZjM5
ZmQ4NWIwHhcNMjUxMTA0MjMwMDQxWhcNMjUxMTA1MjMwMDQxWjAzMTEwLwYDVQQD
EygyZTc4NjFmM2IyNWRmYWM0YTM2MDIwOWQyODUyZmVhNGQwYzViNGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlLY810IjkYSx/7dUROv+JO4DCKv
VsXznEPUVLPd2JTvGg26DzCtpklMtAHeJVnH9hK/JaFNl+g5jGGxM2mndiT3ZfOD
FJ7k4ijSvtczD8yhJAfzPIkuuOv2sAuFEPnbzPuQi3eh8qhL45ozukcdRm7Qceul
Pg4GddiceTvVSlEUjo4DOc/bW8CgozICHHKKcLzyWRNtRRuQQAdlrnLxY8DqqIUQ
v2TXuN0snu0p6sblV3OnjJNpz8/sFZH8qckUUXBhCWIFHJ6jWb8gUnnndjFKx86U
wUajLUKKCM0PYBwkd4n6sY43Ce0U4QNhx6NWsnij4z2mgw513w+hQqQ8IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC54YfOyXfrEo2AgnShS/qTQxbSrMB8GA1UdIwQY
MBaAFCYlHPfY1tBX3GRxW6g2KZ3zn9hbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmlVYzk5alcwRmZjWkhGYnFEWXBuZk9mMkZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80OGI1MmMtYTA0NS00MDlmLTk4MWIt
OTUyMDU0OWQ3ZmQxLzEvSmlVYzk5alcwRmZjWkhGYnFEWXBuZk9mMkZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi80OGI1MmMtYTA0NS00MDlmLTk4MWItOTUyMDU0OWQ3ZmQx
LzEvSmlVYzk5alcwRmZjWkhGYnFEWXBuZk9mMkZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKT4o5+jH
ZqKsWNa1lE6605j+S5EaeryqkrRZ78v+hHF/peauCl70UlmOa47jD35nZoGLLInT
99Na/xgloW00eII2Wj306qus7Sk3nIwOh5+5D/0CFmVBLJ9Lf6g5wdzJkLc8pgWX
MCBaSp5pegqqm9r6MBGrsXgK8ZiaJ+d3Ed6qTMM2VzCwbYaTuZ0ho2K49kBA1+wX
65X6v3teN+jGbwecCA4TmfmoBQGEOTJPW6ccbPoQ9XpYrW99DWTyCizHay1Td/58
G89JD+FL/HnNS7s5RL7aSqoTadlekenLY/LchMIwLJuOZwD4spjKa872kKoRKCHa
O+qF+DA+4VqkUQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 08:51:54 2025 by rpki-client