Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft
File: J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft (raw, json)
Hash identifier: dTsW/kj/3GL5guQkeymXll7Lac8ZA3y72ydjNozSDSQ=
Subject key identifier: 17:33:66:96:9E:34:6E:9D:C1:6F:F3:D3:A0:80:6A:A6:01:C5:C2:E5
Authority key identifier: 27:F1:30:B6:F4:5F:00:F7:C1:D1:35:B6:C9:3B:20:E6:90:41:2C:FC
Certificate issuer: /CN=27f130b6f45f00f7c1d135b6c93b20e690412cfc
Certificate serial: 019A4F2B78D626602DC0A265B0241137FD90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 14:00:40 +0000
Manifest this update: Tue 04 Nov 2025 14:00:40 +0000
Manifest next update: Wed 05 Nov 2025 14:00:40 +0000
Files and hashes: 1: AvcqCbLU9IeYKmCw3WGJQWXmG28.roa (hash: /7yETboJPz5IcxWS6MR6CkKHKNZg1KvC+Zyvk1bhENA=)
2: J_EwtvRfAPfB0TW2yTsg5pBBLPw.crl (hash: nP5UPuNdtBHiLWecsf7Atwd99IF2OJgtrdDUFc965i8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:78:d6:26:60:2d:c0:a2:65:b0:24:11:37:fd:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27f130b6f45f00f7c1d135b6c93b20e690412cfc
Validity
Not Before: Nov 4 14:00:40 2025 GMT
Not After : Nov 5 14:00:40 2025 GMT
Subject: CN=173366969e346e9dc16ff3d3a0806aa601c5c2e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9d:9a:bc:35:d5:fd:93:e0:5e:6d:f9:30:b8:
f8:af:ba:82:d5:52:e2:c8:71:eb:47:72:a2:3a:86:
4d:e1:2f:cb:4b:21:b3:e0:81:8a:e9:90:8e:d2:bb:
25:ad:1d:c4:f8:2c:95:1f:d5:70:5e:4d:0c:e5:49:
27:e6:36:75:56:0d:71:22:a3:e5:5c:c6:05:9c:98:
9c:71:0b:ba:dc:75:77:a0:88:d2:02:79:9d:24:dc:
33:9e:e5:57:91:50:9b:02:12:61:82:f1:4a:7c:11:
c7:c0:70:cd:f0:df:40:5e:c3:71:f5:ab:a3:7d:3b:
88:7c:d5:25:44:99:f5:db:99:6a:f7:34:db:26:58:
72:7b:30:65:b3:c4:c2:f4:b8:39:4c:ec:c7:95:21:
71:65:4f:dd:a6:45:6c:51:a6:f3:90:aa:1b:7b:f4:
13:aa:fd:9d:6d:db:d8:bf:fb:2f:d2:24:f9:65:97:
50:a5:2a:41:8b:02:97:84:f7:02:9a:49:b9:fa:e6:
8f:97:18:84:41:08:c6:e4:fc:62:f1:fe:c4:61:29:
c1:05:91:96:ed:64:bf:c0:2d:41:6b:01:59:e4:81:
aa:50:5a:48:e9:b0:33:09:08:e6:ea:e6:94:f8:cb:
0e:d3:e3:4a:d4:6a:9d:94:d3:34:94:f9:9f:86:63:
83:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:33:66:96:9E:34:6E:9D:C1:6F:F3:D3:A0:80:6A:A6:01:C5:C2:E5
X509v3 Authority Key Identifier:
keyid:27:F1:30:B6:F4:5F:00:F7:C1:D1:35:B6:C9:3B:20:E6:90:41:2C:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:14:be:45:89:d3:57:e9:a2:6b:20:22:8e:c7:32:a4:d8:1e:
e4:57:80:28:49:61:63:97:5d:e0:3f:c1:f4:c2:8a:d5:08:09:
81:cc:b6:da:85:28:22:cf:42:48:1a:d5:72:ee:52:67:bb:9b:
de:72:5b:be:9e:e9:00:53:23:7f:66:4c:4e:63:ba:c1:02:51:
6b:81:7e:d0:7c:42:79:f5:10:e2:c3:74:70:fa:0d:b1:31:90:
e7:93:ac:17:cc:0e:bf:a7:0d:1e:db:51:2c:1a:08:3e:2d:4f:
b9:35:0b:fa:f3:12:78:a0:cd:1e:98:de:cc:07:3e:23:21:9a:
e3:17:b0:ea:94:cd:ac:d2:98:25:4e:72:56:b7:3a:f6:f4:d2:
a8:51:31:41:62:03:7b:fa:3c:48:73:7e:2d:13:1c:44:f8:25:
d5:d8:82:c3:a7:55:11:6b:01:12:8b:43:e5:91:2d:74:fe:ae:
d3:17:4a:9b:62:9e:f6:12:4c:2f:ad:85:54:05:df:6d:a3:ca:
b4:ec:d5:e9:04:df:58:a1:9e:c8:c6:55:f5:df:2d:f2:2d:98:
ad:36:a7:e4:dd:8c:49:a0:0f:d7:d5:14:bb:96:05:a4:59:27:
47:c9:ec:91:c9:ef:46:28:3f:b1:8a:6b:06:57:15:8a:d6:71:
51:ee:b7:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPK3jWJmAtwKJlsCQRN/2QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZjEzMGI2ZjQ1ZjAwZjdjMWQxMzViNmM5M2IyMGU2OTA0
MTJjZmMwHhcNMjUxMTA0MTQwMDQwWhcNMjUxMTA1MTQwMDQwWjAzMTEwLwYDVQQD
EygxNzMzNjY5NjllMzQ2ZTlkYzE2ZmYzZDNhMDgwNmFhNjAxYzVjMmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJ2avDXV/ZPgXm35MLj4r7qC1VLi
yHHrR3KiOoZN4S/LSyGz4IGK6ZCO0rslrR3E+CyVH9VwXk0M5Ukn5jZ1Vg1xIqPl
XMYFnJiccQu63HV3oIjSAnmdJNwznuVXkVCbAhJhgvFKfBHHwHDN8N9AXsNx9auj
fTuIfNUlRJn125lq9zTbJlhyezBls8TC9Lg5TOzHlSFxZU/dpkVsUabzkKobe/QT
qv2dbdvYv/sv0iT5ZZdQpSpBiwKXhPcCmkm5+uaPlxiEQQjG5Pxi8f7EYSnBBZGW
7WS/wC1BawFZ5IGqUFpI6bAzCQjm6uaU+MsO0+NK1GqdlNM0lPmfhmODBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBczZpaeNG6dwW/z06CAaqYBxcLlMB8GA1UdIwQY
MBaAFCfxMLb0XwD3wdE1tsk7IOaQQSz8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSl9Fd3R2UmZBUGZCMFRXMnlUc2c1cEJCTFB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9lYWQ0YTAtMjUyMS00YWJiLWFjMmQt
MDdkYmQ5MDBjNGFkLzEvSl9Fd3R2UmZBUGZCMFRXMnlUc2c1cEJCTFB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9lYWQ0YTAtMjUyMS00YWJiLWFjMmQtMDdkYmQ5MDBjNGFk
LzEvSl9Fd3R2UmZBUGZCMFRXMnlUc2c1cEJCTFB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbBS+RYnT
V+miayAijscypNge5FeAKElhY5dd4D/B9MKK1QgJgcy22oUoIs9CSBrVcu5SZ7ub
3nJbvp7pAFMjf2ZMTmO6wQJRa4F+0HxCefUQ4sN0cPoNsTGQ55OsF8wOv6cNHttR
LBoIPi1PuTUL+vMSeKDNHpjezAc+IyGa4xew6pTNrNKYJU5yVrc69vTSqFExQWID
e/o8SHN+LRMcRPgl1diCw6dVEWsBEotD5ZEtdP6u0xdKm2Ke9hJML62FVAXfbaPK
tOzV6QTfWKGeyMZV9d8t8i2YrTan5N2MSaAP19UUu5YFpFknR8nskcnvRig/sYpr
BlcVitZxUe63ig==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:28 2025 by rpki-client