Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
File: J7syqoyfjQXFF74q1mUvZlUKjVc.mft (raw, json)
Hash identifier: 3UclBveN8tlFYFGAxEyZR4jhx3vOgaFsHb8NyZdAuQM=
Subject key identifier: 95:8C:3C:B7:B5:B0:2F:D8:C1:FD:1C:DD:FE:A2:AD:E6:A6:2C:F6:2B
Authority key identifier: 27:BB:32:AA:8C:9F:8D:05:C5:17:BE:2A:D6:65:2F:66:55:0A:8D:57
Certificate issuer: /CN=27bb32aa8c9f8d05c517be2ad6652f66550a8d57
Certificate serial: 019A4D3D27F4DAB94D2FD4C37720C30EEED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 05:00:44 +0000
Manifest this update: Tue 04 Nov 2025 05:00:44 +0000
Manifest next update: Wed 05 Nov 2025 05:00:44 +0000
Files and hashes: 1: J7syqoyfjQXFF74q1mUvZlUKjVc.crl (hash: HGoG6I78xc6L3l4PaVP4fKmLCBEhFN5JNfyYkUeWQY0=)
2: c8_yE52FicqJDyLTZs83EXz0uyw.roa (hash: dhlDGU7iUlzSklC2rupr+JKl7gpxZEkuve5PU6eqNIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:27:f4:da:b9:4d:2f:d4:c3:77:20:c3:0e:ee:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27bb32aa8c9f8d05c517be2ad6652f66550a8d57
Validity
Not Before: Nov 4 05:00:44 2025 GMT
Not After : Nov 5 05:00:44 2025 GMT
Subject: CN=958c3cb7b5b02fd8c1fd1cddfea2ade6a62cf62b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:91:7d:a7:cd:62:7e:8a:9f:3b:7d:5f:fa:ff:
3d:9f:54:e0:db:9d:92:d7:7e:8f:47:7f:3f:d9:f7:
df:d2:8c:77:8b:08:35:51:81:12:fd:17:97:eb:f0:
f0:fc:06:f1:6e:e2:bb:14:2f:38:06:f7:42:28:a5:
49:cb:5d:e8:72:c7:08:31:d8:c3:8a:8c:4d:6a:21:
12:08:6e:a1:57:55:99:4e:03:62:73:43:8c:77:be:
cc:6f:b6:87:7c:6a:ff:a5:bc:08:85:41:d2:a0:ea:
f0:6e:81:92:0a:70:fb:f1:9e:06:f4:55:85:91:8d:
af:2d:38:83:fd:d4:0f:1c:df:70:52:b2:b8:56:b1:
a8:e0:ec:0a:24:ae:dc:94:ef:c4:bf:37:04:d3:84:
e5:ad:9a:3f:a7:3f:03:47:55:33:0b:e1:9d:e5:3b:
0d:9d:e2:0b:04:45:52:de:81:91:e7:78:8b:40:2d:
44:67:3d:fc:ce:a8:ad:99:10:92:d0:2b:ee:8b:51:
0c:56:7d:08:fd:16:f6:00:2b:dd:a6:ed:51:19:1e:
60:2c:2b:21:98:55:c1:ed:0d:70:ed:1b:4d:ff:9f:
2d:95:58:ef:b9:b5:70:af:88:89:29:38:63:f5:c8:
70:a2:59:dc:0b:1d:83:c9:c8:83:19:42:99:9e:b6:
ec:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8C:3C:B7:B5:B0:2F:D8:C1:FD:1C:DD:FE:A2:AD:E6:A6:2C:F6:2B
X509v3 Authority Key Identifier:
keyid:27:BB:32:AA:8C:9F:8D:05:C5:17:BE:2A:D6:65:2F:66:55:0A:8D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:3e:cc:f9:df:ba:0e:a3:61:97:57:51:99:1d:e0:bb:2c:d6:
61:a1:36:b0:31:35:d3:49:1f:b5:87:0a:ae:1f:35:d5:a3:89:
91:e4:39:8c:f5:7a:f4:1a:2a:cd:ff:4f:69:b4:46:2d:83:27:
36:dc:38:24:db:7c:e5:09:d0:6f:21:41:6f:c9:b0:fe:08:d8:
7f:1b:c8:3a:02:3a:a4:e7:58:ea:a8:9f:6e:00:25:2e:aa:ce:
cb:5d:be:55:7e:26:e5:49:28:41:59:fb:21:dc:4c:17:40:c1:
69:37:7c:46:07:b6:23:18:84:b9:d6:7a:c5:70:5a:1d:08:da:
0c:27:0d:b6:a0:f7:b7:f5:44:0e:c0:7d:f0:5f:cb:35:5c:ac:
4f:41:51:11:b9:a8:92:e6:b9:40:74:8f:92:f2:34:38:de:4b:
51:4c:1b:d3:a0:0d:c6:7b:8c:1e:10:00:b0:9f:7a:25:f1:79:
ad:03:e2:ff:d3:53:10:9c:69:43:97:05:6c:02:98:e6:18:72:
7e:0d:c2:99:df:e7:12:41:b3:f5:d8:3f:37:9d:59:5d:47:3b:
15:56:3e:6e:a3:b6:ab:fb:b2:4a:9e:cb:ca:76:3a:80:e0:63:
f6:dc:07:4d:d6:29:01:0f:f4:09:df:36:bd:c9:e9:bd:b6:ac:
91:17:7b:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPSf02rlNL9TDdyDDDu7WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YmIzMmFhOGM5ZjhkMDVjNTE3YmUyYWQ2NjUyZjY2NTUw
YThkNTcwHhcNMjUxMTA0MDUwMDQ0WhcNMjUxMTA1MDUwMDQ0WjAzMTEwLwYDVQQD
Eyg5NThjM2NiN2I1YjAyZmQ4YzFmZDFjZGRmZWEyYWRlNmE2MmNmNjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZF9p81ifoqfO31f+v89n1Tg252S
136PR38/2fff0ox3iwg1UYES/ReX6/Dw/AbxbuK7FC84BvdCKKVJy13ocscIMdjD
ioxNaiESCG6hV1WZTgNic0OMd77Mb7aHfGr/pbwIhUHSoOrwboGSCnD78Z4G9FWF
kY2vLTiD/dQPHN9wUrK4VrGo4OwKJK7clO/EvzcE04TlrZo/pz8DR1UzC+Gd5TsN
neILBEVS3oGR53iLQC1EZz38zqitmRCS0Cvui1EMVn0I/Rb2ACvdpu1RGR5gLCsh
mFXB7Q1w7RtN/58tlVjvubVwr4iJKThj9chwolncCx2DyciDGUKZnrbs8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWMPLe1sC/Ywf0c3f6ireamLPYrMB8GA1UdIwQY
MBaAFCe7MqqMn40FxRe+KtZlL2ZVCo1XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjdzeXFveWZqUVhGRjc0cTFtVXZabFVLalZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9hN2RjZWItZmY1NC00MzZhLTk0MTUt
NDg0MjIxYTFmMjg1LzEvSjdzeXFveWZqUVhGRjc0cTFtVXZabFVLalZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9hN2RjZWItZmY1NC00MzZhLTk0MTUtNDg0MjIxYTFmMjg1
LzEvSjdzeXFveWZqUVhGRjc0cTFtVXZabFVLalZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPD7M+d+6
DqNhl1dRmR3guyzWYaE2sDE100kftYcKrh811aOJkeQ5jPV69Boqzf9PabRGLYMn
Ntw4JNt85QnQbyFBb8mw/gjYfxvIOgI6pOdY6qifbgAlLqrOy12+VX4m5UkoQVn7
IdxMF0DBaTd8Rge2IxiEudZ6xXBaHQjaDCcNtqD3t/VEDsB98F/LNVysT0FREbmo
kua5QHSPkvI0ON5LUUwb06ANxnuMHhAAsJ96JfF5rQPi/9NTEJxpQ5cFbAKY5hhy
fg3Cmd/nEkGz9dg/N51ZXUc7FVY+bqO2q/uySp7LynY6gOBj9twHTdYpAQ/0Cd82
vcnpvbaskRd7Yg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:36 2025 by rpki-client