Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
File: JClc5xJHPQ4-bap3fbiQb4AB33A.mft (raw, json)
Hash identifier: kMBQAfkTtrolERTExAJXK3ZTuJ1MlFjwGDkewzSYrsY=
Subject key identifier: D6:53:E3:EB:E3:29:BA:D3:50:23:AF:C9:DB:7C:6F:0E:AF:2D:E7:30
Authority key identifier: 24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
Certificate issuer: /CN=24295ce712473d0e3e6daa777db8906f8001df70
Certificate serial: 019A503DA109F026660F8F0AB1E5F89B2C28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
Manifest number: 12C5
Signing time: Tue 04 Nov 2025 19:00:07 +0000
Manifest this update: Tue 04 Nov 2025 19:00:07 +0000
Manifest next update: Wed 05 Nov 2025 19:00:07 +0000
Files and hashes: 1: 2f42Ui-pru7wNiS6tvX-43aKjFs.roa (hash: mtpDrlYTTPVwbZc60pOa8NtALeV5Jm4wS3DacId4T/Q=)
2: JClc5xJHPQ4-bap3fbiQb4AB33A.crl (hash: D75mX+hqf3yTBRgDn7EsO2mNoDJaQMsVK8hpHzeGYyA=)
3: Xhs8fAc0SGAyN4KDD0cOKWAqtow.roa (hash: 0rR/+YP0FGlnVR+donPj6Q3O2XueDV+VyXKsGyjN1KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:a1:09:f0:26:66:0f:8f:0a:b1:e5:f8:9b:2c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24295ce712473d0e3e6daa777db8906f8001df70
Validity
Not Before: Nov 4 19:00:07 2025 GMT
Not After : Nov 5 19:00:07 2025 GMT
Subject: CN=d653e3ebe329bad35023afc9db7c6f0eaf2de730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:29:f8:82:01:08:c3:1a:d2:20:0a:ee:e7:0e:
28:9d:4c:9a:c0:ec:ff:e0:65:89:9d:06:a3:d4:e2:
e8:f2:6c:94:32:96:d4:e4:e8:9f:01:19:6a:a3:f3:
a0:8e:28:b0:59:31:bf:4b:13:12:b2:dd:25:10:f1:
a4:b4:52:6d:38:d5:b2:11:3a:b8:12:ae:34:95:a6:
23:69:9c:4f:af:00:6f:e2:6d:96:8e:23:73:63:25:
4f:33:8a:45:86:1d:de:6d:bf:69:d1:2e:28:a0:cc:
f9:25:42:d9:7b:8e:73:3d:e6:ed:31:46:53:61:51:
68:81:0e:d1:24:88:7b:5a:a3:8c:4c:73:83:e4:3b:
00:e5:f6:61:43:e2:d5:6b:98:bf:07:37:a2:97:d8:
54:de:07:50:13:c8:dd:b0:72:78:a9:5b:11:8d:68:
0d:ec:a4:9a:84:9d:ec:6c:a1:4d:c3:99:c1:2b:3b:
5d:a5:c5:77:69:ad:e6:fe:aa:4a:a6:44:f3:38:0c:
c3:73:92:c1:08:c7:5b:a3:7b:75:6c:b2:72:de:f0:
3a:c7:48:f1:db:3f:21:31:92:d7:52:ad:23:c7:3e:
8e:59:0c:f9:e2:7f:c0:cb:38:90:23:a0:2b:69:0d:
4f:b0:da:a7:12:49:cf:f8:a0:8f:4e:05:2f:b2:18:
de:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:53:E3:EB:E3:29:BA:D3:50:23:AF:C9:DB:7C:6F:0E:AF:2D:E7:30
X509v3 Authority Key Identifier:
keyid:24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:05:5d:40:09:5e:f6:0a:8e:11:56:24:0a:b7:fb:e1:b9:22:
da:fe:b0:f0:17:29:3f:08:b0:45:06:62:55:62:98:9e:af:65:
80:f5:59:74:c6:73:0c:0d:61:09:3d:4f:5d:02:37:a3:ea:bd:
73:01:a6:8c:24:f2:3f:83:90:ec:78:62:46:65:07:1f:ed:9b:
b3:5b:5b:70:2c:a7:a1:12:6a:fd:3e:d6:cc:42:1a:d8:ba:59:
67:80:8f:04:32:ed:b1:88:cf:b5:c2:8d:60:55:b3:39:c1:9f:
18:3e:4a:14:dc:26:13:21:a6:4f:8e:1d:cd:2c:b3:12:50:66:
27:aa:3d:59:b9:2d:aa:ac:aa:be:c0:25:cc:15:a1:a8:1c:9e:
62:d9:c9:27:5a:c0:8a:f9:87:ce:7e:60:16:5a:fb:c1:a5:0f:
da:c3:2e:d7:2c:12:d6:a4:1f:d4:e2:31:a1:30:d2:d7:c9:bf:
c3:95:a0:4e:15:57:aa:9c:80:61:7d:d6:36:11:8a:9c:d9:9a:
6d:9c:a6:84:2c:eb:2d:11:f9:91:c4:4a:3d:6a:e1:a6:21:8b:
35:f2:7e:09:c3:29:86:45:f9:bd:72:51:8f:4b:58:88:45:a4:
db:9b:04:36:df:f0:4e:d7:be:82:52:23:fa:1a:87:66:cb:fa:
40:41:75:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQPaEJ8CZmD48KseX4mywoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0Mjk1Y2U3MTI0NzNkMGUzZTZkYWE3NzdkYjg5MDZmODAw
MWRmNzAwHhcNMjUxMTA0MTkwMDA3WhcNMjUxMTA1MTkwMDA3WjAzMTEwLwYDVQQD
EyhkNjUzZTNlYmUzMjliYWQzNTAyM2FmYzlkYjdjNmYwZWFmMmRlNzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryn4ggEIwxrSIAru5w4onUyawOz/
4GWJnQaj1OLo8myUMpbU5OifARlqo/OgjiiwWTG/SxMSst0lEPGktFJtONWyETq4
Eq40laYjaZxPrwBv4m2WjiNzYyVPM4pFhh3ebb9p0S4ooMz5JULZe45zPebtMUZT
YVFogQ7RJIh7WqOMTHOD5DsA5fZhQ+LVa5i/Bzeil9hU3gdQE8jdsHJ4qVsRjWgN
7KSahJ3sbKFNw5nBKztdpcV3aa3m/qpKpkTzOAzDc5LBCMdbo3t1bLJy3vA6x0jx
2z8hMZLXUq0jxz6OWQz54n/AyziQI6AraQ1PsNqnEknP+KCPTgUvshjeNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZT4+vjKbrTUCOvydt8bw6vLecwMB8GA1UdIwQY
MBaAFCQpXOcSRz0OPm2qd324kG+AAd9wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkNsYzV4SkhQUTQtYmFwM2ZiaVFiNEFCMzNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8xYTBjNmEtMWE1ZS00MjRiLTlhNjkt
OTk1NTMxODYyNDE5LzEvSkNsYzV4SkhQUTQtYmFwM2ZiaVFiNEFCMzNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8xYTBjNmEtMWE1ZS00MjRiLTlhNjktOTk1NTMxODYyNDE5
LzEvSkNsYzV4SkhQUTQtYmFwM2ZiaVFiNEFCMzNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlgVdQAle
9gqOEVYkCrf74bki2v6w8BcpPwiwRQZiVWKYnq9lgPVZdMZzDA1hCT1PXQI3o+q9
cwGmjCTyP4OQ7HhiRmUHH+2bs1tbcCynoRJq/T7WzEIa2LpZZ4CPBDLtsYjPtcKN
YFWzOcGfGD5KFNwmEyGmT44dzSyzElBmJ6o9WbktqqyqvsAlzBWhqByeYtnJJ1rA
ivmHzn5gFlr7waUP2sMu1ywS1qQf1OIxoTDS18m/w5WgThVXqpyAYX3WNhGKnNma
bZymhCzrLRH5kcRKPWrhpiGLNfJ+CcMphkX5vXJRj0tYiEWk25sENt/wTte+glIj
+hqHZsv6QEF1Vw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:41:41 2025 by rpki-client