Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
File: jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft (raw, json)
Hash identifier: Bd8XR9Rt4jIbDyRaWejTht1xCTlhOmEhUEA+CWmTe30=
Subject key identifier: CC:EE:67:81:71:BA:7B:F5:5D:15:25:58:40:8E:0C:17:1C:A2:33:37
Authority key identifier: 8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
Certificate issuer: /CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Certificate serial: 019A4FD013D07265928E2B468D90F7E814FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
Manifest number: 0324
Signing time: Tue 04 Nov 2025 17:00:27 +0000
Manifest this update: Tue 04 Nov 2025 17:00:27 +0000
Manifest next update: Wed 05 Nov 2025 17:00:27 +0000
Files and hashes: 1: 2a4uGqXqRLFwxkrNzW_s6-qnGXE.roa (hash: goHZck25hCom6tNMtTpOVgal0/zlXu42ccbA4cfzVE0=)
2: jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl (hash: RDBuUI71KE8Q3MxPFnX07+wx/Ncx57O5bm4RY9F7kgo=)
3: kFOw0UjGI7qti8qa1uAUEOsP1Y0.roa (hash: 3Ka4QMk7D3J6EIhtUeiuaJXa58kFmA+7bZN+m672Gvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:13:d0:72:65:92:8e:2b:46:8d:90:f7:e8:14:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Validity
Not Before: Nov 4 17:00:27 2025 GMT
Not After : Nov 5 17:00:27 2025 GMT
Subject: CN=ccee678171ba7bf55d152558408e0c171ca23337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:20:db:ce:1b:e4:62:48:9a:f4:c0:61:30:9a:
70:f7:d1:a2:09:a4:c4:11:91:56:24:46:9d:3d:11:
c5:ad:81:bf:74:ee:1a:2b:54:71:98:00:65:74:ed:
54:04:91:87:f0:91:f8:cd:c1:44:31:a6:40:b4:2e:
72:56:2b:28:41:21:fd:46:18:ca:ef:d2:02:c0:ad:
f7:c3:89:95:7a:5f:76:15:6f:55:db:d3:60:e9:c6:
ae:2c:15:55:a3:6c:89:85:f6:75:59:46:eb:0f:30:
fe:ee:03:b6:04:64:1d:e7:14:07:54:22:98:b5:4c:
7c:f6:0a:6b:66:97:2a:f7:b3:bb:dc:93:f0:97:37:
41:07:f2:df:06:60:4a:c3:0e:71:14:6e:5e:87:50:
05:ce:fd:c0:05:5c:13:5a:ef:0d:15:b9:76:d4:3c:
65:be:eb:d9:64:f4:28:1f:45:d8:25:96:bf:df:b8:
99:69:a6:ed:43:ec:29:55:65:e0:93:c4:aa:43:81:
ca:ee:0d:a8:d8:f6:41:ca:63:e0:47:5f:b0:23:7e:
5f:63:61:6e:c0:48:56:53:46:73:08:88:0a:fc:1d:
38:5f:1c:95:5a:e1:d5:d7:f8:3d:76:a4:50:35:77:
df:f2:57:e9:41:3b:43:3e:c7:5c:02:bb:52:b8:c0:
14:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:EE:67:81:71:BA:7B:F5:5D:15:25:58:40:8E:0C:17:1C:A2:33:37
X509v3 Authority Key Identifier:
keyid:8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:f8:c3:8c:76:91:e6:e9:90:a3:9d:d4:de:7b:de:61:27:67:
0f:88:c0:ad:b1:8c:f9:e1:de:94:6d:7f:43:ff:66:c8:8d:98:
75:c7:52:c7:8f:93:36:b9:ff:60:2b:d7:a3:36:3b:03:ee:82:
be:61:97:ca:4f:b0:1c:be:e7:c9:e0:f7:d1:fe:01:1e:c9:0e:
ec:98:c8:c3:17:08:10:18:4c:97:39:a1:12:46:6f:ca:6c:dd:
99:4f:af:4f:ad:5a:2b:3a:86:2e:33:61:c9:b5:04:7a:ed:6e:
8d:e8:3c:45:7e:d0:8a:ab:8c:62:28:bc:51:e0:08:b8:4d:e5:
ac:c4:cb:55:25:60:ef:59:36:df:9e:22:06:56:ea:6a:a0:30:
fb:52:22:a9:ad:0b:01:89:d0:4c:c4:9b:97:93:eb:a9:28:93:
93:e3:a8:e1:f7:80:90:a6:09:c9:b2:42:e2:ae:10:59:31:4a:
48:9c:67:cf:26:df:2c:aa:ef:c0:76:08:42:39:64:3d:33:4f:
0a:be:8f:63:36:7b:cc:ba:e4:99:8e:96:e9:db:4c:4a:48:98:
18:c1:fd:9e:3a:99:e9:da:c7:0c:3a:aa:69:c5:56:93:58:83:
99:f0:74:32:3e:76:e3:93:c4:30:0e:99:e1:5b:6a:fa:a4:bb:
dd:d1:97:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpP0BPQcmWSjitGjZD36BT8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMzRmYWI5YWEzM2ViNTVkOTg1NDIzN2JkMGQyMjUyNzky
MTMyZTYwHhcNMjUxMTA0MTcwMDI3WhcNMjUxMTA1MTcwMDI3WjAzMTEwLwYDVQQD
EyhjY2VlNjc4MTcxYmE3YmY1NWQxNTI1NTg0MDhlMGMxNzFjYTIzMzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCDbzhvkYkia9MBhMJpw99GiCaTE
EZFWJEadPRHFrYG/dO4aK1RxmABldO1UBJGH8JH4zcFEMaZAtC5yVisoQSH9RhjK
79ICwK33w4mVel92FW9V29Ng6cauLBVVo2yJhfZ1WUbrDzD+7gO2BGQd5xQHVCKY
tUx89gprZpcq97O73JPwlzdBB/LfBmBKww5xFG5eh1AFzv3ABVwTWu8NFbl21Dxl
vuvZZPQoH0XYJZa/37iZaabtQ+wpVWXgk8SqQ4HK7g2o2PZBymPgR1+wI35fY2Fu
wEhWU0ZzCIgK/B04XxyVWuHV1/g9dqRQNXff8lfpQTtDPsdcArtSuMAUjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMzuZ4Fxunv1XRUlWECODBccojM3MB8GA1UdIwQY
MBaAFI00+rmqM+tV2YVCN70NIlJ5ITLmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalRUNnVhb3o2MVhaaFVJM3ZRMGlVbmtoTXVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC82ZGU3ZmYtMzIxZS00YjQ3LWIzYzUt
NmRiMDg2YzAwZjZhLzEvalRUNnVhb3o2MVhaaFVJM3ZRMGlVbmtoTXVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC82ZGU3ZmYtMzIxZS00YjQ3LWIzYzUtNmRiMDg2YzAwZjZh
LzEvalRUNnVhb3o2MVhaaFVJM3ZRMGlVbmtoTXVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC/jDjHaR
5umQo53U3nveYSdnD4jArbGM+eHelG1/Q/9myI2YdcdSx4+TNrn/YCvXozY7A+6C
vmGXyk+wHL7nyeD30f4BHskO7JjIwxcIEBhMlzmhEkZvymzdmU+vT61aKzqGLjNh
ybUEeu1ujeg8RX7QiquMYii8UeAIuE3lrMTLVSVg71k2354iBlbqaqAw+1Iiqa0L
AYnQTMSbl5PrqSiTk+Oo4feAkKYJybJC4q4QWTFKSJxnzybfLKrvwHYIQjlkPTNP
Cr6PYzZ7zLrkmY6W6dtMSkiYGMH9njqZ6drHDDqqacVWk1iDmfB0Mj5245PEMA6Z
4Vtq+qS73dGX3Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:20 2025 by rpki-client