Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft
File: jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft (raw, json)
Hash identifier: OxHcuAbn7hsZNirC7YOR6OMwIUOEabGwXEErpJkV9+Q=
Subject key identifier: 25:9A:8D:86:03:52:67:38:4B:36:58:29:6F:55:78:5A:3A:E6:9A:F9
Authority key identifier: 8C:69:2D:29:AC:31:2D:2A:B6:06:1E:44:A9:DE:0E:D3:75:1A:EA:7E
Certificate issuer: /CN=8c692d29ac312d2ab6061e44a9de0ed3751aea7e
Certificate serial: 019A4C610BD2AA0B1E0F8E819B18E10C3D2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jGktKawxLSq2Bh5Eqd4O03Ua6n4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft
Manifest number: 1106
Signing time: Tue 04 Nov 2025 01:00:19 +0000
Manifest this update: Tue 04 Nov 2025 01:00:19 +0000
Manifest next update: Wed 05 Nov 2025 01:00:19 +0000
Files and hashes: 1: 7IomEO57DDrl4ZBLVKDC6qP3KEE.roa (hash: AwCfU2h4jJPaAJIb84vSAgUR4ElWsWxd3ZUQNOuBkOc=)
2: jGktKawxLSq2Bh5Eqd4O03Ua6n4.crl (hash: WJh2M2BqSzskX30Q6pztB1pkv3Tg6MRFM7k/88lc75U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jGktKawxLSq2Bh5Eqd4O03Ua6n4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:0b:d2:aa:0b:1e:0f:8e:81:9b:18:e1:0c:3d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c692d29ac312d2ab6061e44a9de0ed3751aea7e
Validity
Not Before: Nov 4 01:00:19 2025 GMT
Not After : Nov 5 01:00:19 2025 GMT
Subject: CN=259a8d86035267384b3658296f55785a3ae69af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bc:6c:84:74:6e:5d:73:ff:3a:d8:c7:a8:12:
9a:10:89:5c:a2:32:b8:e2:a9:71:fd:89:d2:a9:38:
ff:00:95:6c:6c:a7:d0:0c:bc:51:19:4d:7c:e0:f4:
cc:bc:18:f8:96:9c:9d:49:d9:9b:d6:a5:ff:a0:e1:
a3:ee:f0:bb:38:d9:8d:7c:46:cf:7c:2f:e0:7b:c0:
95:59:86:d2:c9:74:d9:9d:1f:b1:5e:1f:ba:d2:54:
8b:6d:26:76:9e:a1:67:dc:0b:d7:0e:8c:82:87:e8:
f3:ff:c7:fd:74:fc:ce:a8:6e:7f:59:61:33:e8:1f:
1d:4d:db:1e:36:d8:ba:a5:69:f9:bf:45:d2:d4:b6:
06:97:29:55:24:de:dd:ba:e2:d3:85:a3:03:cc:a4:
45:8f:f2:a8:bb:3e:60:3e:ae:fa:28:72:e5:5a:6f:
07:d1:ea:7b:bd:6c:a4:19:00:9d:ac:ca:9a:5a:2e:
e6:6c:f1:88:43:c6:eb:99:c4:25:bf:f1:31:bf:e3:
ca:39:5d:bf:ce:4e:4c:16:d5:ee:81:db:29:b1:84:
08:b8:0f:d2:5b:3d:88:e9:65:8a:db:0b:6b:51:2a:
2f:d0:ee:21:85:53:8c:62:6a:76:b6:a2:21:b2:a6:
fe:cd:af:30:6d:b2:44:40:03:da:42:15:a5:24:f8:
83:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9A:8D:86:03:52:67:38:4B:36:58:29:6F:55:78:5A:3A:E6:9A:F9
X509v3 Authority Key Identifier:
keyid:8C:69:2D:29:AC:31:2D:2A:B6:06:1E:44:A9:DE:0E:D3:75:1A:EA:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jGktKawxLSq2Bh5Eqd4O03Ua6n4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/bb7556-9fc7-406e-b38a-9262e53e1d10/1/jGktKawxLSq2Bh5Eqd4O03Ua6n4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:48:f8:c0:dd:0d:0a:aa:88:49:cc:70:4b:4d:4e:23:82:50:
6d:0a:67:e7:58:b6:e5:d2:23:37:d9:88:3a:c5:42:d8:45:30:
a8:46:d8:21:d6:31:63:a3:62:65:65:77:69:20:05:7b:44:c9:
82:47:f5:a6:5c:01:98:f7:01:85:d5:5d:4e:bd:76:f0:96:bf:
a2:bc:3b:1c:4f:39:3d:6b:09:46:62:3b:ea:49:bb:ed:e5:53:
a2:27:61:12:71:2d:36:c5:87:01:77:fe:05:f9:0f:5f:44:12:
b7:c4:fe:00:b7:88:a2:7c:61:d6:cf:86:0b:24:10:f7:62:d6:
5b:8e:9e:f4:81:7c:bd:65:eb:0c:9d:fe:40:c1:c0:98:ff:51:
5e:fc:ba:5d:e4:ff:79:31:6c:10:0e:28:0d:35:e9:64:be:34:
6e:68:2b:01:96:d1:68:94:eb:92:d1:7e:b4:89:5f:e6:38:22:
9f:10:a7:d3:70:48:ad:d6:13:fb:0c:f4:0c:54:af:a2:91:fa:
19:1b:1c:82:0c:1e:9b:e9:1d:89:bf:33:78:ed:9a:90:2b:9c:
12:14:a6:fd:8f:6c:71:e7:04:32:bc:3d:88:be:b1:bc:bd:7e:
86:a3:c7:90:c5:5a:b8:3f:be:d0:d6:6a:67:01:09:9f:bb:af:
5a:e4:b1:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpMYQvSqgseD46BmxjhDD0qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjNjkyZDI5YWMzMTJkMmFiNjA2MWU0NGE5ZGUwZWQzNzUx
YWVhN2UwHhcNMjUxMTA0MDEwMDE5WhcNMjUxMTA1MDEwMDE5WjAzMTEwLwYDVQQD
EygyNTlhOGQ4NjAzNTI2NzM4NGIzNjU4Mjk2ZjU1Nzg1YTNhZTY5YWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrxshHRuXXP/OtjHqBKaEIlcojK4
4qlx/YnSqTj/AJVsbKfQDLxRGU184PTMvBj4lpydSdmb1qX/oOGj7vC7ONmNfEbP
fC/ge8CVWYbSyXTZnR+xXh+60lSLbSZ2nqFn3AvXDoyCh+jz/8f9dPzOqG5/WWEz
6B8dTdseNti6pWn5v0XS1LYGlylVJN7duuLThaMDzKRFj/Kouz5gPq76KHLlWm8H
0ep7vWykGQCdrMqaWi7mbPGIQ8brmcQlv/Exv+PKOV2/zk5MFtXugdspsYQIuA/S
Wz2I6WWK2wtrUSov0O4hhVOMYmp2tqIhsqb+za8wbbJEQAPaQhWlJPiDJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCWajYYDUmc4SzZYKW9VeFo65pr5MB8GA1UdIwQY
MBaAFIxpLSmsMS0qtgYeRKneDtN1Gup+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakdrdEthd3hMU3EyQmg1RXFkNE8wM1VhNm40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9iYjc1NTYtOWZjNy00MDZlLWIzOGEt
OTI2MmU1M2UxZDEwLzEvakdrdEthd3hMU3EyQmg1RXFkNE8wM1VhNm40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC9iYjc1NTYtOWZjNy00MDZlLWIzOGEtOTI2MmU1M2UxZDEw
LzEvakdrdEthd3hMU3EyQmg1RXFkNE8wM1VhNm40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmUj4wN0N
CqqIScxwS01OI4JQbQpn51i25dIjN9mIOsVC2EUwqEbYIdYxY6NiZWV3aSAFe0TJ
gkf1plwBmPcBhdVdTr128Ja/orw7HE85PWsJRmI76km77eVToidhEnEtNsWHAXf+
BfkPX0QSt8T+ALeIonxh1s+GCyQQ92LWW46e9IF8vWXrDJ3+QMHAmP9RXvy6XeT/
eTFsEA4oDTXpZL40bmgrAZbRaJTrktF+tIlf5jginxCn03BIrdYT+wz0DFSvopH6
GRscggwem+kdib8zeO2akCucEhSm/Y9scecEMrw9iL6xvL1+hqPHkMVauD++0NZq
ZwEJn7uvWuSxNw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:51:22 2025 by rpki-client