Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
File: Jd40sXxTewli5M272bxnKcix2Qo.mft (raw, json)
Hash identifier: afyyQ5lvim0/69sZeSWVVrabi5cGGjNk7mXJgZcj5Iw=
Subject key identifier: 09:E5:33:A1:26:1B:85:EB:FE:23:1B:98:4A:5C:B0:92:0E:DF:45:D2
Authority key identifier: 25:DE:34:B1:7C:53:7B:09:62:E4:CD:BB:D9:BC:67:29:C8:B1:D9:0A
Certificate issuer: /CN=25de34b17c537b0962e4cdbbd9bc6729c8b1d90a
Certificate serial: 019A5074F84C34EA5EA8DFD0D2E0D858B243
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
Manifest number: F2
Signing time: Tue 04 Nov 2025 20:00:34 +0000
Manifest this update: Tue 04 Nov 2025 20:00:34 +0000
Manifest next update: Wed 05 Nov 2025 20:00:34 +0000
Files and hashes: 1: Jd40sXxTewli5M272bxnKcix2Qo.crl (hash: S66Vy53L0+jRsy7U2aejn6JM7wza7DVZPRqjN8Hs19E=)
2: h6iYTxkEjd04WV05dd6fQmp61L8.roa (hash: R2cWVyoWjWNVsdNIi8vnopbDtThlhMuHspPbR0pD3jU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:f8:4c:34:ea:5e:a8:df:d0:d2:e0:d8:58:b2:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25de34b17c537b0962e4cdbbd9bc6729c8b1d90a
Validity
Not Before: Nov 4 20:00:34 2025 GMT
Not After : Nov 5 20:00:34 2025 GMT
Subject: CN=09e533a1261b85ebfe231b984a5cb0920edf45d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:02:54:03:9f:59:e3:ef:94:da:2c:e7:68:5b:
a6:91:7a:cd:76:48:05:84:ce:24:82:3c:bc:22:30:
31:1b:0f:59:55:99:08:8f:ca:ac:87:73:4e:7f:01:
a5:bb:3b:a9:62:f3:e9:b1:29:e4:c8:77:4b:92:4f:
c9:83:a2:9b:82:6e:e0:80:24:95:01:27:49:3b:dd:
36:d9:9d:d2:d0:f6:2d:64:9d:5d:0a:f6:98:0c:5f:
c5:91:65:aa:c2:1a:82:2d:3a:83:5c:5d:f4:8a:a4:
c1:0a:ba:1b:14:55:b3:aa:b1:3e:ef:56:89:bc:27:
64:45:44:68:27:d0:81:30:92:49:85:e9:eb:09:80:
5f:f7:0f:05:04:92:fb:3e:a1:18:3f:45:4a:e3:67:
aa:f8:f1:4d:89:a5:10:98:09:5f:b5:88:a9:27:11:
7e:5c:a5:ad:04:4c:36:ae:68:9b:6e:65:c9:91:3d:
5a:1a:71:b9:67:93:d2:fb:ac:46:5c:16:94:39:b6:
0a:8b:df:e2:73:e9:ce:23:e8:08:f3:82:a1:5d:d6:
3b:2a:df:af:88:ff:ef:1c:67:ba:c4:d5:85:72:53:
1c:0e:f2:ae:29:d5:aa:3c:d3:23:af:eb:6b:33:83:
e1:d3:42:cd:64:31:64:92:66:47:b3:b0:70:a7:1d:
1d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E5:33:A1:26:1B:85:EB:FE:23:1B:98:4A:5C:B0:92:0E:DF:45:D2
X509v3 Authority Key Identifier:
keyid:25:DE:34:B1:7C:53:7B:09:62:E4:CD:BB:D9:BC:67:29:C8:B1:D9:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:34:db:ef:76:b7:93:24:73:e4:27:19:ea:55:3f:5c:8d:4d:
2a:cf:df:12:f6:d7:23:19:28:2f:df:17:d7:8a:97:7a:ac:73:
22:ee:56:1d:bd:35:bd:70:2c:b1:69:84:b4:be:bc:ed:cd:67:
01:0d:ec:73:9a:29:95:10:5d:17:b3:35:42:6e:d2:7a:27:5c:
10:d6:7c:cc:36:26:53:95:6f:02:15:7f:66:2f:92:a9:5e:87:
11:1d:96:a7:8d:a8:42:1f:24:d0:0a:b2:f4:e3:ac:2e:0f:0a:
73:4c:aa:fa:97:11:21:db:af:f3:09:d3:cb:41:db:a1:cc:43:
fb:76:d5:63:b7:94:89:93:9a:e3:3d:90:3f:a4:a9:52:11:fc:
39:71:19:8e:48:51:52:7b:18:5b:98:2b:fb:60:b1:4f:f7:36:
c7:11:56:03:f2:e3:86:58:61:41:75:c7:e4:7d:55:28:fc:aa:
f0:1e:96:82:4c:1a:88:48:f3:4c:6e:f6:77:df:8d:39:60:c9:
bb:89:d9:65:b1:c8:ce:78:5d:4e:ed:a6:1c:2a:7a:f2:a0:ba:
d1:7b:41:f7:fd:dc:29:8c:ae:82:27:6e:b0:0e:76:b5:d7:f4:
7b:70:90:67:78:40:90:e4:27:49:be:42:32:7c:7b:99:5c:62:
9c:b6:26:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQdPhMNOpeqN/Q0uDYWLJDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZGUzNGIxN2M1MzdiMDk2MmU0Y2RiYmQ5YmM2NzI5Yzhi
MWQ5MGEwHhcNMjUxMTA0MjAwMDM0WhcNMjUxMTA1MjAwMDM0WjAzMTEwLwYDVQQD
EygwOWU1MzNhMTI2MWI4NWViZmUyMzFiOTg0YTVjYjA5MjBlZGY0NWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQJUA59Z4++U2iznaFumkXrNdkgF
hM4kgjy8IjAxGw9ZVZkIj8qsh3NOfwGluzupYvPpsSnkyHdLkk/Jg6Kbgm7ggCSV
ASdJO9022Z3S0PYtZJ1dCvaYDF/FkWWqwhqCLTqDXF30iqTBCrobFFWzqrE+71aJ
vCdkRURoJ9CBMJJJhenrCYBf9w8FBJL7PqEYP0VK42eq+PFNiaUQmAlftYipJxF+
XKWtBEw2rmibbmXJkT1aGnG5Z5PS+6xGXBaUObYKi9/ic+nOI+gI84KhXdY7Kt+v
iP/vHGe6xNWFclMcDvKuKdWqPNMjr+trM4Ph00LNZDFkkmZHs7Bwpx0dAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnlM6EmG4Xr/iMbmEpcsJIO30XSMB8GA1UdIwQY
MBaAFCXeNLF8U3sJYuTNu9m8ZynIsdkKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmQ0MHNYeFRld2xpNU0yNzJieG5LY2l4MlFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy83ZmQzZTEtMzVjMC00NTI4LTk4NTQt
MDk4OTQ5NDU4OGJmLzEvSmQ0MHNYeFRld2xpNU0yNzJieG5LY2l4MlFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy83ZmQzZTEtMzVjMC00NTI4LTk4NTQtMDk4OTQ5NDU4OGJm
LzEvSmQ0MHNYeFRld2xpNU0yNzJieG5LY2l4MlFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMTTb73a3
kyRz5CcZ6lU/XI1NKs/fEvbXIxkoL98X14qXeqxzIu5WHb01vXAssWmEtL687c1n
AQ3sc5oplRBdF7M1Qm7SeidcENZ8zDYmU5VvAhV/Zi+SqV6HER2Wp42oQh8k0Aqy
9OOsLg8Kc0yq+pcRIduv8wnTy0HbocxD+3bVY7eUiZOa4z2QP6SpUhH8OXEZjkhR
UnsYW5gr+2CxT/c2xxFWA/LjhlhhQXXH5H1VKPyq8B6WgkwaiEjzTG72d9+NOWDJ
u4nZZbHIznhdTu2mHCp68qC60XtB9/3cKYyugidusA52tdf0e3CQZ3hAkOQnSb5C
Mnx7mVxinLYmEw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 04:07:42 2025 by rpki-client