Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
File: jHSEmpcKkwTfRfjii264f_CeC-o.mft (raw, json)
Hash identifier: HGAxOf+HHQgf2Bh0tDDu5oh9JTtsD/2o2zZ4vZ7Z850=
Subject key identifier: 2B:71:28:DC:FD:C9:C5:CC:3B:71:F7:C0:17:08:53:45:CD:3C:82:C1
Authority key identifier: 8C:74:84:9A:97:0A:93:04:DF:45:F8:E2:8B:6E:B8:7F:F0:9E:0B:EA
Certificate issuer: /CN=8c74849a970a9304df45f8e28b6eb87ff09e0bea
Certificate serial: 019A4DE22A0752D3D54E0095416B810FAC4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
Manifest number: 0934
Signing time: Tue 04 Nov 2025 08:00:58 +0000
Manifest this update: Tue 04 Nov 2025 08:00:58 +0000
Manifest next update: Wed 05 Nov 2025 08:00:58 +0000
Files and hashes: 1: Irr-r9qiqixIuYCUoqwg3jTCOlQ.roa (hash: Da8fMzEd6ZdZtBJZunslR4v5JrpLeUfmPOL3PB5KGc4=)
2: jHSEmpcKkwTfRfjii264f_CeC-o.crl (hash: nOF27W1w9K8pnq3Kf2mbpMcS1RTLwydwp7swmS+X29M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:2a:07:52:d3:d5:4e:00:95:41:6b:81:0f:ac:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c74849a970a9304df45f8e28b6eb87ff09e0bea
Validity
Not Before: Nov 4 08:00:58 2025 GMT
Not After : Nov 5 08:00:58 2025 GMT
Subject: CN=2b7128dcfdc9c5cc3b71f7c017085345cd3c82c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:69:70:14:2a:c2:50:06:94:8e:5d:63:f6:bb:
1b:a0:7b:e2:f2:7b:e5:55:79:6c:07:a3:16:03:34:
7b:1e:3c:1e:5b:49:c0:f2:73:e4:40:81:a3:5d:74:
f4:a3:e3:42:f6:20:48:87:cb:b4:30:1c:99:17:3d:
f7:70:1f:88:02:9c:ed:88:77:27:82:4c:01:1d:b5:
9d:72:cb:33:31:dc:4a:77:a5:e3:63:85:0c:0d:6d:
18:81:ba:0f:11:00:12:ad:e8:22:6d:c6:90:6a:3e:
27:c4:b0:bf:16:88:45:26:64:13:b1:0f:4b:b2:13:
0a:3f:3c:b0:72:29:d8:9a:98:cf:04:fa:f6:2e:dd:
1f:80:d5:8d:7f:47:a8:b2:e5:e0:a0:37:14:7a:0f:
11:d0:e3:86:2c:51:1d:04:44:bc:7c:80:08:ce:09:
2c:fe:f4:b4:fa:e9:ea:07:27:81:ee:c3:b1:08:d5:
55:c7:9b:dd:58:7a:f1:9e:d3:56:e8:4b:ed:23:0e:
e1:27:ca:91:c6:e5:91:fd:f9:fa:3d:a0:5e:ef:c7:
32:a9:d4:de:85:52:fc:60:1e:3d:65:e6:25:11:cd:
27:28:85:05:68:68:e0:c2:3e:7b:e8:4f:cb:46:cf:
69:4e:32:1b:69:53:1b:9c:1d:e0:c1:c6:6b:2a:c7:
a4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:71:28:DC:FD:C9:C5:CC:3B:71:F7:C0:17:08:53:45:CD:3C:82:C1
X509v3 Authority Key Identifier:
keyid:8C:74:84:9A:97:0A:93:04:DF:45:F8:E2:8B:6E:B8:7F:F0:9E:0B:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:72:25:32:73:37:e0:b3:e9:be:94:42:28:1f:db:06:9f:45:
76:65:e5:d7:81:e1:43:72:2b:7f:2d:bf:f2:63:3c:d5:5d:6c:
e6:da:3d:63:78:a7:cf:09:4b:35:3a:32:f3:f8:9f:a4:ae:6a:
4d:3d:91:1e:37:07:bc:4d:f8:8c:7f:2e:0f:7e:81:f9:ce:67:
af:5c:ba:b1:35:29:1a:3c:56:84:b8:c0:c5:54:30:da:fe:5c:
bb:42:d2:c8:de:a2:ba:13:67:8f:5a:09:ce:93:4c:4c:ee:ad:
61:d2:09:2d:8c:64:8a:56:25:3f:52:3d:43:66:fb:46:1d:1a:
d4:6f:a9:9d:66:16:1b:8e:0e:3d:7e:d2:fd:42:e7:c1:43:54:
0a:14:9f:ba:e2:87:51:d1:2c:e2:1c:64:32:12:f1:d2:a4:83:
d2:74:92:1b:4b:0a:a7:49:0a:9a:f6:76:ad:a9:2e:0f:6f:86:
20:2f:5d:9c:2a:25:e5:0c:fb:18:ff:9d:66:5e:08:ba:39:89:
73:11:f5:a6:34:8d:79:1e:e8:fb:2f:82:18:08:7c:00:e8:20:
e1:f5:80:06:53:40:74:f2:db:1b:d4:c0:58:1a:77:9d:b5:16:
75:08:b0:a2:7d:4b:26:49:fb:37:a4:6b:63:49:74:a6:55:22:
f5:c9:09:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4ioHUtPVTgCVQWuBD6xLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjNzQ4NDlhOTcwYTkzMDRkZjQ1ZjhlMjhiNmViODdmZjA5
ZTBiZWEwHhcNMjUxMTA0MDgwMDU4WhcNMjUxMTA1MDgwMDU4WjAzMTEwLwYDVQQD
EygyYjcxMjhkY2ZkYzljNWNjM2I3MWY3YzAxNzA4NTM0NWNkM2M4MmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2lwFCrCUAaUjl1j9rsboHvi8nvl
VXlsB6MWAzR7HjweW0nA8nPkQIGjXXT0o+NC9iBIh8u0MByZFz33cB+IApztiHcn
gkwBHbWdcsszMdxKd6XjY4UMDW0YgboPEQASregibcaQaj4nxLC/FohFJmQTsQ9L
shMKPzywcinYmpjPBPr2Lt0fgNWNf0eosuXgoDcUeg8R0OOGLFEdBES8fIAIzgks
/vS0+unqByeB7sOxCNVVx5vdWHrxntNW6EvtIw7hJ8qRxuWR/fn6PaBe78cyqdTe
hVL8YB49ZeYlEc0nKIUFaGjgwj576E/LRs9pTjIbaVMbnB3gwcZrKsekSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtxKNz9ycXMO3H3wBcIU0XNPILBMB8GA1UdIwQY
MBaAFIx0hJqXCpME30X44otuuH/wngvqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakhTRW1wY0trd1RmUmZqaWkyNjRmX0NlQy1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yY2I5NWQtOGYwYy00MmRkLTkxYjkt
MjlmZmQwZWY1NjBhLzEvakhTRW1wY0trd1RmUmZqaWkyNjRmX0NlQy1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8yY2I5NWQtOGYwYy00MmRkLTkxYjktMjlmZmQwZWY1NjBh
LzEvakhTRW1wY0trd1RmUmZqaWkyNjRmX0NlQy1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWXIlMnM3
4LPpvpRCKB/bBp9FdmXl14HhQ3Irfy2/8mM81V1s5to9Y3inzwlLNToy8/ifpK5q
TT2RHjcHvE34jH8uD36B+c5nr1y6sTUpGjxWhLjAxVQw2v5cu0LSyN6iuhNnj1oJ
zpNMTO6tYdIJLYxkilYlP1I9Q2b7Rh0a1G+pnWYWG44OPX7S/ULnwUNUChSfuuKH
UdEs4hxkMhLx0qSD0nSSG0sKp0kKmvZ2rakuD2+GIC9dnCol5Qz7GP+dZl4IujmJ
cxH1pjSNeR7o+y+CGAh8AOgg4fWABlNAdPLbG9TAWBp3nbUWdQiwon1LJkn7N6Rr
Y0l0plUi9ckJ8Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:24 2025 by rpki-client