Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
File: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft (raw, json)
Hash identifier: AwtCcI/zAnrxLvZCNgK7I3+6C2hoMVvoPgR42CER8P8=
Subject key identifier: 9F:BB:CF:A0:98:A7:93:D4:52:D3:10:28:EF:D3:A1:06:7F:D6:38:4F
Authority key identifier: 24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
Certificate issuer: /CN=24350aa8a94af666099fd073ec621cd15d04b316
Certificate serial: 019A4DE1E6C0C768749CB8713347F6F9935D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 08:00:41 +0000
Manifest this update: Tue 04 Nov 2025 08:00:41 +0000
Manifest next update: Wed 05 Nov 2025 08:00:41 +0000
Files and hashes: 1: Cg0yCK2kQVd5LZZHHCdBRelfy-8.roa (hash: EJ5qFjEdSIaKu0rEkfVQQqMjYA83tlJGweW9Y6wELDM=)
2: DOAjS6N6DDMCT5Gs48jEEQ8kKdo.roa (hash: RxOSt+nS2Pi/oAjRbiU1f0I2BGNusR2WMtoxS2juhtk=)
3: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl (hash: eHjZJnB73PZPy2T5puV0gSmTX14s+XjZqkPDDYKZu0k=)
4: NAFWH-6HZko-2jXV8t7oA0HzSIU.roa (hash: evlx0SvXozysnwaGLeRFiaf3O6MnrQAS3vJN/CS0+Og=)
5: ZDqkiej3KvbVcchBqYbs_m_58AA.roa (hash: WNRpgM2RfMTJF9WJxnTJzmUWmkHVlsXryqz1NtCqsaw=)
6: dtjkwOe--LCCK4SbfbTdSzg4V0w.roa (hash: DEavIckb2pS6VVqJFeMdsfbc6yjw9j8R9FNcBP297Fg=)
7: gvqSMksH9JFq1OfSJxdxmDTsBXc.roa (hash: osF872WgvjeWIvsXIp7+FXDCTfbIPesx6UeUql8Clms=)
8: pjBzn2Sy238yqyUOKntcgX57jHI.roa (hash: b3xbE8EnvkIkCdg8uGMMqz1ugaDBKhweBVSuxKKNfPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:e6:c0:c7:68:74:9c:b8:71:33:47:f6:f9:93:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24350aa8a94af666099fd073ec621cd15d04b316
Validity
Not Before: Nov 4 08:00:41 2025 GMT
Not After : Nov 5 08:00:41 2025 GMT
Subject: CN=9fbbcfa098a793d452d31028efd3a1067fd6384f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f8:70:6e:66:f5:7a:bd:80:7d:98:bb:83:96:
8a:85:44:88:bc:bf:9d:97:00:e2:7a:db:14:f3:6c:
5f:55:92:30:ee:fa:4c:7d:68:a4:ae:56:47:55:50:
58:56:40:54:55:c6:93:4b:71:2a:8d:b7:4b:64:f6:
1a:72:3e:9a:e6:63:e1:fa:79:79:99:81:34:93:96:
4c:69:e7:78:42:a7:59:3f:a0:61:4f:cc:ef:4d:de:
b5:c4:aa:bc:75:06:15:6c:97:2c:fc:e4:44:8d:a3:
7d:52:f3:04:e2:69:d2:c6:b5:86:f7:1b:81:94:4c:
d2:69:32:e6:94:8f:2f:6f:03:f8:b9:30:ff:bd:81:
07:d6:e3:e8:cd:4d:1b:f3:f0:e9:b0:57:50:65:cb:
62:6b:74:1d:40:cc:33:bd:80:90:3c:00:df:04:85:
ef:37:b1:ea:4e:3c:65:10:d8:48:be:42:69:95:d9:
c1:4e:f1:16:15:ca:33:7f:7d:56:e5:88:27:fe:74:
52:81:92:5b:3e:5b:85:61:45:7c:25:bd:63:57:70:
9e:2b:fd:ba:ed:c9:d8:12:60:da:dd:3d:2a:e9:aa:
9d:60:4d:a8:20:0e:ba:13:b5:fc:76:26:bd:aa:8f:
3f:30:a0:7c:af:d9:06:71:6c:4d:86:ba:4f:1f:27:
b8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BB:CF:A0:98:A7:93:D4:52:D3:10:28:EF:D3:A1:06:7F:D6:38:4F
X509v3 Authority Key Identifier:
keyid:24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:05:ae:61:e3:7d:54:60:ae:aa:5a:0a:a7:2c:e2:d6:b7:e6:
a1:8f:e4:be:6c:e1:b5:79:53:70:bf:27:e3:21:22:d4:43:24:
7b:c6:1a:91:95:c4:39:5b:3b:c6:60:99:e9:72:4d:d3:66:3f:
37:79:e9:2a:34:15:33:f8:54:da:5a:b4:84:be:4c:d2:06:7f:
78:8c:5a:c9:a8:59:f1:43:56:30:f1:41:87:e9:9e:33:6f:c1:
95:95:6c:f5:a9:14:24:76:85:da:2a:d0:eb:0e:03:69:97:19:
59:d8:8a:a1:2a:01:f9:09:73:79:00:ac:ab:d0:14:df:bd:34:
f7:05:c6:71:54:43:d4:d1:23:e8:a0:aa:c1:6d:55:c8:8a:44:
2c:37:c0:44:17:d5:cb:16:d0:3a:47:7d:ed:bd:e0:4f:5c:41:
c1:8c:de:59:3b:df:03:bb:fc:66:d4:ef:8c:4e:2f:1e:79:da:
86:92:f9:f0:fb:f8:d6:05:43:5c:31:eb:4a:c3:65:de:1a:fc:
20:40:9d:0d:7b:60:61:ba:6f:b3:74:80:dd:4d:42:e3:28:fc:
3b:8a:5d:b6:77:a9:ba:85:3f:64:a7:6a:81:96:d5:3c:05:b1:
f4:7c:85:84:bc:08:dc:e1:c8:00:54:11:93:f6:6a:48:2a:36:
ee:12:f3:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4ebAx2h0nLhxM0f2+ZNdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MzUwYWE4YTk0YWY2NjYwOTlmZDA3M2VjNjIxY2QxNWQw
NGIzMTYwHhcNMjUxMTA0MDgwMDQxWhcNMjUxMTA1MDgwMDQxWjAzMTEwLwYDVQQD
Eyg5ZmJiY2ZhMDk4YTc5M2Q0NTJkMzEwMjhlZmQzYTEwNjdmZDYzODRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfhwbmb1er2AfZi7g5aKhUSIvL+d
lwDietsU82xfVZIw7vpMfWikrlZHVVBYVkBUVcaTS3EqjbdLZPYacj6a5mPh+nl5
mYE0k5ZMaed4QqdZP6BhT8zvTd61xKq8dQYVbJcs/OREjaN9UvME4mnSxrWG9xuB
lEzSaTLmlI8vbwP4uTD/vYEH1uPozU0b8/DpsFdQZctia3QdQMwzvYCQPADfBIXv
N7HqTjxlENhIvkJpldnBTvEWFcozf31W5Ygn/nRSgZJbPluFYUV8Jb1jV3CeK/26
7cnYEmDa3T0q6aqdYE2oIA66E7X8dia9qo8/MKB8r9kGcWxNhrpPHye4dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+7z6CYp5PUUtMQKO/ToQZ/1jhPMB8GA1UdIwQY
MBaAFCQ1CqipSvZmCZ/Qc+xiHNFdBLMWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkRVS3FLbEs5bVlKbjlCejdHSWMwVjBFc3hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9hYjYyZTctNzM2Ny00YmRlLTkzNGEt
YjQyNTIyZDA1ODk1LzEvSkRVS3FLbEs5bVlKbjlCejdHSWMwVjBFc3hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9hYjYyZTctNzM2Ny00YmRlLTkzNGEtYjQyNTIyZDA1ODk1
LzEvSkRVS3FLbEs5bVlKbjlCejdHSWMwVjBFc3hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAewWuYeN9
VGCuqloKpyzi1rfmoY/kvmzhtXlTcL8n4yEi1EMke8YakZXEOVs7xmCZ6XJN02Y/
N3npKjQVM/hU2lq0hL5M0gZ/eIxayahZ8UNWMPFBh+meM2/BlZVs9akUJHaF2irQ
6w4DaZcZWdiKoSoB+QlzeQCsq9AU37009wXGcVRD1NEj6KCqwW1VyIpELDfARBfV
yxbQOkd97b3gT1xBwYzeWTvfA7v8ZtTvjE4vHnnahpL58Pv41gVDXDHrSsNl3hr8
IECdDXtgYbpvs3SA3U1C4yj8O4pdtnepuoU/ZKdqgZbVPAWx9HyFhLwI3OHIAFQR
k/ZqSCo27hLzLg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:26 2025 by rpki-client