Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
File: JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft (raw, json)
Hash identifier: NtsKn6eCRKRzY1Z9JC8m+TtU9eESGI2yTQP7irm4kDw=
Subject key identifier: B8:A2:64:1D:E8:5C:2B:8A:05:95:27:C4:A6:0E:05:E7:42:4D:EF:72
Authority key identifier: 25:C5:26:87:A5:FF:16:1D:2E:DA:BC:9F:8E:3A:48:76:C4:AD:8D:A2
Certificate issuer: /CN=25c52687a5ff161d2edabc9f8e3a4876c4ad8da2
Certificate serial: 019A4EF4AC22F0E7E169414E8772509FA551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
Manifest number: 04E1
Signing time: Tue 04 Nov 2025 13:00:48 +0000
Manifest this update: Tue 04 Nov 2025 13:00:48 +0000
Manifest next update: Wed 05 Nov 2025 13:00:48 +0000
Files and hashes: 1: JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl (hash: e9IMIJhgCyHK+LDIBMd4JWAGkBiugOYVqg1VyLyhO80=)
2: K6bM5601EY4aWoYwlB_yWaSAYWg.roa (hash: q1/+kZ6yqPL4e9VCBVnSxVBfdHwsRb33uiurUpP8SWw=)
3: Qp56EhXo02rtbXG9bpMugv8X2n0.roa (hash: TyqFIVR8sVZ/spucHhOleEaJbMKaFD4U+qZbekh1SEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:ac:22:f0:e7:e1:69:41:4e:87:72:50:9f:a5:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c52687a5ff161d2edabc9f8e3a4876c4ad8da2
Validity
Not Before: Nov 4 13:00:48 2025 GMT
Not After : Nov 5 13:00:48 2025 GMT
Subject: CN=b8a2641de85c2b8a059527c4a60e05e7424def72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6f:57:2b:e1:f6:6b:65:c2:f0:5e:69:51:38:
d3:a5:04:86:2c:fe:3a:fc:6e:d0:13:1e:fa:86:95:
f2:e7:3c:1b:20:10:fd:07:40:d9:4e:c3:c8:ff:c9:
e1:93:c8:08:86:7f:81:3e:34:7d:2e:71:6f:63:a6:
89:ec:e5:9f:8d:74:2f:05:b7:c6:d6:8f:df:66:97:
c6:61:ad:db:9f:2b:0c:19:86:d4:1a:0f:4d:be:03:
84:14:a8:fb:28:b6:25:00:47:9f:0c:ca:27:9f:13:
dc:e1:b4:8c:71:a3:db:fb:5a:5f:b4:35:a8:61:47:
f0:1d:7a:97:f8:55:d3:da:bf:b4:ec:7c:1e:36:1a:
58:ac:c2:c1:06:a6:b7:c7:d2:b0:4f:ce:3c:41:ad:
bd:5a:d6:66:72:73:71:55:80:e7:fe:16:7b:11:69:
54:71:f2:6b:dc:ea:a9:4c:5c:77:0d:bd:3f:38:60:
4d:e7:9b:0d:4a:cc:d9:c2:53:c2:2b:0c:75:d7:23:
65:2b:1a:82:49:05:8d:d3:fe:53:23:83:cf:be:53:
59:81:f9:2b:db:d5:5b:db:3f:f1:57:a9:7e:4f:95:
6b:71:85:ca:46:7a:88:4c:f5:77:ff:12:3b:93:c1:
a9:5c:f4:c1:79:ff:5f:0f:4b:85:24:a6:e9:6f:9b:
a8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A2:64:1D:E8:5C:2B:8A:05:95:27:C4:A6:0E:05:E7:42:4D:EF:72
X509v3 Authority Key Identifier:
keyid:25:C5:26:87:A5:FF:16:1D:2E:DA:BC:9F:8E:3A:48:76:C4:AD:8D:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:bc:18:21:4e:a5:5f:ad:ac:24:be:63:d6:33:0e:c8:94:0a:
e8:a3:59:07:1e:91:7c:6f:76:8f:2c:4d:be:bc:b5:f9:b5:79:
01:30:49:30:e0:41:19:fc:6f:d9:1f:5b:e5:e3:8e:e7:e2:41:
70:31:d7:71:e1:aa:05:de:d9:d6:b2:b3:0c:3a:04:82:5a:c6:
64:34:ce:92:3c:d2:01:1d:e8:74:bf:bb:65:b5:cd:db:49:b5:
cc:f7:08:c0:b7:3f:42:05:0d:e4:50:e4:97:7b:35:16:19:dc:
01:84:f1:14:fe:7a:42:b8:6f:69:a7:0b:30:f1:2a:15:d6:9e:
57:b5:c5:72:7a:e5:9f:64:0f:5b:b3:ab:fc:a8:6a:ba:f5:85:
11:d7:6d:8d:a7:fe:6a:fa:dd:33:63:c5:7e:74:92:00:83:8d:
c0:13:c5:6a:89:db:1b:6c:96:62:e6:e1:d3:e9:a9:18:a8:68:
97:26:be:e6:b7:30:64:64:80:eb:14:81:04:9d:2c:1b:7d:57:
81:b0:4b:cf:94:81:c6:13:18:15:b2:9b:5b:d9:e2:1a:56:a8:
7e:9c:76:ec:e5:3f:4b:ea:2b:51:71:be:6d:dc:bf:9d:db:bd:
96:18:80:9a:8f:d0:f7:b8:87:8f:9d:f6:b5:20:b5:25:7a:dd:
ca:01:be:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9Kwi8OfhaUFOh3JQn6VRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YzUyNjg3YTVmZjE2MWQyZWRhYmM5ZjhlM2E0ODc2YzRh
ZDhkYTIwHhcNMjUxMTA0MTMwMDQ4WhcNMjUxMTA1MTMwMDQ4WjAzMTEwLwYDVQQD
EyhiOGEyNjQxZGU4NWMyYjhhMDU5NTI3YzRhNjBlMDVlNzQyNGRlZjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnm9XK+H2a2XC8F5pUTjTpQSGLP46
/G7QEx76hpXy5zwbIBD9B0DZTsPI/8nhk8gIhn+BPjR9LnFvY6aJ7OWfjXQvBbfG
1o/fZpfGYa3bnysMGYbUGg9NvgOEFKj7KLYlAEefDMonnxPc4bSMcaPb+1pftDWo
YUfwHXqX+FXT2r+07HweNhpYrMLBBqa3x9KwT848Qa29WtZmcnNxVYDn/hZ7EWlU
cfJr3OqpTFx3Db0/OGBN55sNSszZwlPCKwx11yNlKxqCSQWN0/5TI4PPvlNZgfkr
29Vb2z/xV6l+T5VrcYXKRnqITPV3/xI7k8GpXPTBef9fD0uFJKbpb5uokwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLiiZB3oXCuKBZUnxKYOBedCTe9yMB8GA1UdIwQY
MBaAFCXFJoel/xYdLtq8n446SHbErY2iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmNVbWg2WF9GaDB1MnJ5ZmpqcElkc1N0amFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81OTY1MDYtNWFjNi00OWIzLWJkNzAt
NzVkYWU1ZGRmZWQzLzEvSmNVbWg2WF9GaDB1MnJ5ZmpqcElkc1N0amFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy81OTY1MDYtNWFjNi00OWIzLWJkNzAtNzVkYWU1ZGRmZWQz
LzEvSmNVbWg2WF9GaDB1MnJ5ZmpqcElkc1N0amFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGLwYIU6l
X62sJL5j1jMOyJQK6KNZBx6RfG92jyxNvry1+bV5ATBJMOBBGfxv2R9b5eOO5+JB
cDHXceGqBd7Z1rKzDDoEglrGZDTOkjzSAR3odL+7ZbXN20m1zPcIwLc/QgUN5FDk
l3s1FhncAYTxFP56QrhvaacLMPEqFdaeV7XFcnrln2QPW7Or/KhquvWFEddtjaf+
avrdM2PFfnSSAIONwBPFaonbG2yWYubh0+mpGKholya+5rcwZGSA6xSBBJ0sG31X
gbBLz5SBxhMYFbKbW9niGlaofpx27OU/S+orUXG+bdy/ndu9lhiAmo/Q97iHj532
tSC1JXrdygG+0g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:36 2025 by rpki-client