Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
File: JcX73HIgV6ZfqduxF_xL33LtwKc.mft (raw, json)
Hash identifier: VqH0gWS0qlzAwi4uWEg+p53SVvYoapY/35gCXjWbbk8=
Subject key identifier: 84:32:88:D3:53:C9:BE:94:B5:DF:D7:5A:A3:DF:55:6C:78:DC:4B:7A
Authority key identifier: 25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
Certificate issuer: /CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Certificate serial: 0199C41FE642B75AA26D9F54B22834725268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
Manifest number: 1647
Signing time: Wed 08 Oct 2025 14:00:48 +0000
Manifest this update: Wed 08 Oct 2025 14:00:48 +0000
Manifest next update: Thu 09 Oct 2025 14:00:48 +0000
Files and hashes: 1: FcPnx9NX1kH5RYqBRj5NJyCtJeY.roa (hash: O/Wex6DgjEsk/AVu9hB9e1DPWw/FwSgD3IoluP19PJM=)
2: JcX73HIgV6ZfqduxF_xL33LtwKc.crl (hash: A0I076lIhrk1lHo588V1akjYohaoV+Y0/W+d1r98Q8Y=)
3: WuDdHOb-0ajIhQAb_bev4tWYHyY.roa (hash: zmi6poZ6GsB58gk/yWshjgBBh9ru+rdC1Ii/B8DXWy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:1f:e6:42:b7:5a:a2:6d:9f:54:b2:28:34:72:52:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Validity
Not Before: Oct 8 14:00:48 2025 GMT
Not After : Oct 9 14:00:48 2025 GMT
Subject: CN=843288d353c9be94b5dfd75aa3df556c78dc4b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:73:ae:f3:ee:07:73:c1:60:18:2b:36:0d:2d:
3d:fc:c9:32:9b:98:b6:87:51:a8:b4:49:4a:6e:5f:
fa:cb:c1:40:aa:f1:64:14:2f:44:92:40:dd:95:af:
4b:b3:3d:ff:6b:49:af:e8:29:72:ac:83:e1:37:1c:
42:b9:6f:24:ef:4c:b4:17:3c:4c:37:78:33:a9:eb:
ba:25:98:98:c9:41:36:cd:68:56:06:e1:d3:a5:5e:
c8:9c:59:5e:57:b0:e6:cd:2c:27:ea:c7:6e:af:9b:
4d:47:85:64:e1:bc:24:b4:48:77:5b:64:42:77:16:
4b:7a:e8:2d:c4:19:c5:f3:c5:f9:41:12:2c:e5:c1:
c8:39:ab:27:8f:99:15:f7:ce:8a:37:90:d4:45:13:
b6:b7:86:82:cb:39:37:49:97:54:23:c0:c1:48:76:
65:b2:1b:78:d9:96:5f:6b:df:0b:b8:8f:35:2d:ca:
c0:76:d5:3b:9b:66:e0:35:c6:f4:72:48:3a:72:5a:
be:73:12:28:ea:0c:ff:97:2b:87:55:6b:0d:20:87:
7e:35:2e:4e:f6:dc:3e:ca:09:3f:63:6c:41:6f:c0:
ba:93:39:b0:72:b5:de:c2:db:59:b7:83:ea:e6:17:
8a:de:ed:d1:42:dd:81:fc:88:9a:95:15:34:cd:dd:
0f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:32:88:D3:53:C9:BE:94:B5:DF:D7:5A:A3:DF:55:6C:78:DC:4B:7A
X509v3 Authority Key Identifier:
keyid:25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:a4:a0:e8:36:cc:75:2a:4e:01:ce:e3:f1:a5:73:d8:6b:36:
ed:ba:f4:70:b1:e1:85:e9:7d:16:be:82:a4:d1:c7:a9:9c:95:
22:bf:64:fd:55:ab:af:6b:dd:c7:e0:b8:b7:21:c4:0b:b7:03:
dc:8a:66:b7:18:2b:cb:70:df:ba:d0:e8:7f:aa:e8:57:7e:f3:
75:92:f9:13:0c:90:eb:81:ee:b0:cc:42:f6:29:ab:7d:b1:54:
30:32:ad:27:c3:f0:a9:4a:22:e8:e4:b5:ab:4e:d2:9a:56:c4:
83:b1:2e:2e:69:f4:e7:8f:bc:f1:08:4f:02:0c:6a:da:4c:2a:
6b:cd:e4:4e:6f:de:9c:b5:a6:e6:36:70:ff:6f:8f:ca:25:3f:
95:34:49:5c:c4:f2:f6:30:b8:05:9d:0c:47:16:96:3e:dd:d5:
de:00:8f:7b:53:cb:d5:26:2e:4b:3b:84:d1:fb:61:71:83:3b:
22:06:f8:48:fa:9b:13:ef:d0:c1:d9:c5:71:f6:a7:2b:05:c9:
fc:8d:d1:53:25:db:96:94:ad:e1:61:22:11:6d:2b:e8:53:41:
80:74:cd:59:68:41:4b:76:9c:c4:d5:0b:39:a7:d8:31:39:96:
2d:67:0c:e5:b1:c9:58:31:82:9d:e8:4e:6e:39:e4:97:07:d1:
c0:e7:e1:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnEH+ZCt1qibZ9Usig0clJoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YzVmYmRjNzIyMDU3YTY1ZmE5ZGJiMTE3ZmM0YmRmNzJl
ZGMwYTcwHhcNMjUxMDA4MTQwMDQ4WhcNMjUxMDA5MTQwMDQ4WjAzMTEwLwYDVQQD
Eyg4NDMyODhkMzUzYzliZTk0YjVkZmQ3NWFhM2RmNTU2Yzc4ZGM0YjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33Ou8+4Hc8FgGCs2DS09/Mkym5i2
h1GotElKbl/6y8FAqvFkFC9EkkDdla9Lsz3/a0mv6ClyrIPhNxxCuW8k70y0FzxM
N3gzqeu6JZiYyUE2zWhWBuHTpV7InFleV7DmzSwn6sdur5tNR4Vk4bwktEh3W2RC
dxZLeugtxBnF88X5QRIs5cHIOasnj5kV986KN5DURRO2t4aCyzk3SZdUI8DBSHZl
sht42ZZfa98LuI81LcrAdtU7m2bgNcb0ckg6clq+cxIo6gz/lyuHVWsNIId+NS5O
9tw+ygk/Y2xBb8C6kzmwcrXewttZt4Pq5heK3u3RQt2B/IialRU0zd0PnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQyiNNTyb6Utd/XWqPfVWx43Et6MB8GA1UdIwQY
MBaAFCXF+9xyIFemX6nbsRf8S99y7cCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmNYNzNISWdWNlpmcWR1eEZfeEwzM0x0d0tjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8wMWNmYzQtYTM5Zi00YjNiLTkwYmUt
Y2U2OTU1Njc2MWJkLzEvSmNYNzNISWdWNlpmcWR1eEZfeEwzM0x0d0tjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8wMWNmYzQtYTM5Zi00YjNiLTkwYmUtY2U2OTU1Njc2MWJk
LzEvSmNYNzNISWdWNlpmcWR1eEZfeEwzM0x0d0tjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoqSg6DbM
dSpOAc7j8aVz2Gs27br0cLHhhel9Fr6CpNHHqZyVIr9k/VWrr2vdx+C4tyHEC7cD
3Ipmtxgry3DfutDof6roV37zdZL5EwyQ64HusMxC9imrfbFUMDKtJ8PwqUoi6OS1
q07SmlbEg7EuLmn054+88QhPAgxq2kwqa83kTm/enLWm5jZw/2+PyiU/lTRJXMTy
9jC4BZ0MRxaWPt3V3gCPe1PL1SYuSzuE0fthcYM7Igb4SPqbE+/QwdnFcfanKwXJ
/I3RUyXblpSt4WEiEW0r6FNBgHTNWWhBS3acxNULOafYMTmWLWcM5bHJWDGCnehO
bjnklwfRwOfhCg==
-----END CERTIFICATE-----
Generated at Wed Oct 8 21:27:14 2025 by rpki-client