Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
File: j5h_qG-uztjKekRir38AXqsneag.mft (raw, json)
Hash identifier: 8nvY+dRw3tY0vTS4zBkS9SLdjFJQgCQkfw36lexxZ68=
Subject key identifier: CA:EF:CF:CB:06:A2:0F:03:50:F0:FE:7B:45:B2:0A:DF:CE:E4:17:52
Authority key identifier: 8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8
Certificate issuer: /CN=8f987fa86faeced8ca7a4462af7f005eab2779a8
Certificate serial: 019A4D3D4EA31AC194C7D75338E383E6F507
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
Manifest number: 0DED
Signing time: Tue 04 Nov 2025 05:00:54 +0000
Manifest this update: Tue 04 Nov 2025 05:00:54 +0000
Manifest next update: Wed 05 Nov 2025 05:00:54 +0000
Files and hashes: 1: TZNlzSisEozO9bUPt3Ymc1srv8E.roa (hash: wa8v9NsgWL1gYj2sgVAPeIrXdGt5FFoRvprZhnIr4yo=)
2: j5h_qG-uztjKekRir38AXqsneag.crl (hash: 3ReQal3KF6JBeRHOjuFDXuTDwaU9GBPvbNbUu1mefek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:4e:a3:1a:c1:94:c7:d7:53:38:e3:83:e6:f5:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f987fa86faeced8ca7a4462af7f005eab2779a8
Validity
Not Before: Nov 4 05:00:54 2025 GMT
Not After : Nov 5 05:00:54 2025 GMT
Subject: CN=caefcfcb06a20f0350f0fe7b45b20adfcee41752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3e:a6:2a:c2:ec:5e:6b:cb:4c:d4:ff:57:0d:
35:10:2d:1b:7e:32:88:8e:33:92:cc:a4:f1:a9:b6:
01:2a:2e:07:b9:14:8a:b5:02:cb:9f:b1:b0:3a:5d:
7a:f4:d9:09:2d:e6:ec:f3:03:29:b9:1a:94:f5:74:
d3:24:73:17:0e:13:49:20:48:03:7c:65:74:4a:75:
50:e7:78:18:97:6f:06:c2:81:c0:bc:7d:08:53:18:
51:9a:bd:98:41:29:f8:ec:2f:11:1b:5e:14:32:c4:
85:20:c6:b6:6e:b7:a0:54:6c:3d:51:af:66:41:0b:
52:b2:44:ee:88:f0:b9:59:75:c3:72:b1:91:45:bb:
e8:78:96:96:e4:81:02:dd:44:0d:4e:95:38:ba:a8:
c1:ab:f7:16:16:be:f8:e9:3b:55:f2:5c:d4:10:b7:
92:4c:76:1b:a4:7f:3e:18:89:0a:5b:86:24:bc:79:
02:75:dc:d4:71:f2:67:d7:27:1d:7d:3d:5d:8e:3e:
0e:be:08:9c:33:36:08:75:44:aa:12:60:12:88:96:
fc:eb:69:10:bd:d1:14:3e:af:d4:79:aa:e1:6d:0d:
83:92:49:67:b0:79:bf:a8:6e:48:ac:cd:eb:b8:0c:
71:58:76:45:7b:8e:24:05:1f:3b:82:76:cd:11:7d:
2d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:EF:CF:CB:06:A2:0F:03:50:F0:FE:7B:45:B2:0A:DF:CE:E4:17:52
X509v3 Authority Key Identifier:
keyid:8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:05:ae:53:8f:b9:4e:66:c0:15:94:dc:cd:90:56:6a:37:48:
bd:5e:c6:3e:bf:25:06:22:9b:1e:7a:ee:cb:27:11:30:c0:c0:
88:fd:45:36:80:91:73:01:e6:3c:ff:99:ff:60:79:9c:31:69:
9d:f5:2e:dc:7e:dc:8a:b4:06:99:a9:bb:b1:34:a4:8b:45:48:
4d:55:9f:78:af:f0:90:ef:41:6f:86:26:9e:f8:f9:01:b9:9f:
b8:ef:40:f1:71:71:60:3d:20:e2:9c:43:88:a4:23:89:51:b0:
00:1c:e6:6b:ab:30:2d:9e:9a:05:21:95:30:81:1d:eb:3a:76:
13:f0:8b:a8:57:71:69:eb:9d:d3:6f:f3:72:25:26:64:04:03:
38:d4:ae:ba:df:fa:de:a0:d5:a7:50:ca:3f:11:4d:cb:a9:2c:
39:04:bb:34:31:c5:09:6b:27:7b:50:d9:5b:dc:c0:2b:fa:f1:
e4:1e:42:ce:9b:e4:5f:5d:da:fd:7a:f4:d3:ab:e0:8d:64:e1:
74:22:1b:ae:11:33:ec:2b:c0:a9:45:62:fc:cb:4b:3d:5f:f7:
6f:bc:1c:69:d7:c4:5a:78:7f:0f:c9:3d:5a:66:3f:9f:d0:44:
06:bf:c6:11:1f:22:e4:d0:92:fc:3b:1b:4b:cd:80:7a:b0:aa:
cc:75:07:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNPU6jGsGUx9dTOOOD5vUHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmOTg3ZmE4NmZhZWNlZDhjYTdhNDQ2MmFmN2YwMDVlYWIy
Nzc5YTgwHhcNMjUxMTA0MDUwMDU0WhcNMjUxMTA1MDUwMDU0WjAzMTEwLwYDVQQD
EyhjYWVmY2ZjYjA2YTIwZjAzNTBmMGZlN2I0NWIyMGFkZmNlZTQxNzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuD6mKsLsXmvLTNT/Vw01EC0bfjKI
jjOSzKTxqbYBKi4HuRSKtQLLn7GwOl169NkJLebs8wMpuRqU9XTTJHMXDhNJIEgD
fGV0SnVQ53gYl28GwoHAvH0IUxhRmr2YQSn47C8RG14UMsSFIMa2bregVGw9Ua9m
QQtSskTuiPC5WXXDcrGRRbvoeJaW5IEC3UQNTpU4uqjBq/cWFr746TtV8lzUELeS
THYbpH8+GIkKW4YkvHkCddzUcfJn1ycdfT1djj4OvgicMzYIdUSqEmASiJb862kQ
vdEUPq/UearhbQ2DkklnsHm/qG5IrM3ruAxxWHZFe44kBR87gnbNEX0tYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMrvz8sGog8DUPD+e0WyCt/O5BdSMB8GA1UdIwQY
MBaAFI+Yf6hvrs7YynpEYq9/AF6rJ3moMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajVoX3FHLXV6dGpLZWtSaXIzOEFYcXNuZWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9mYjRjNjMtYmRiMy00Yjg1LTgyZjAt
NmY2YzZjODIxNzgxLzEvajVoX3FHLXV6dGpLZWtSaXIzOEFYcXNuZWFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9mYjRjNjMtYmRiMy00Yjg1LTgyZjAtNmY2YzZjODIxNzgx
LzEvajVoX3FHLXV6dGpLZWtSaXIzOEFYcXNuZWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADAWuU4+5
TmbAFZTczZBWajdIvV7GPr8lBiKbHnruyycRMMDAiP1FNoCRcwHmPP+Z/2B5nDFp
nfUu3H7cirQGmam7sTSki0VITVWfeK/wkO9Bb4Ymnvj5AbmfuO9A8XFxYD0g4pxD
iKQjiVGwABzma6swLZ6aBSGVMIEd6zp2E/CLqFdxaeud02/zciUmZAQDONSuut/6
3qDVp1DKPxFNy6ksOQS7NDHFCWsne1DZW9zAK/rx5B5CzpvkX13a/Xr006vgjWTh
dCIbrhEz7CvAqUVi/MtLPV/3b7wcadfEWnh/D8k9WmY/n9BEBr/GER8i5NCS/Dsb
S82AerCqzHUHPQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:25 2025 by rpki-client