Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/344b60-889d-41f2-b9f2-be15df99b11d/1/J0zEEJs00UTL604gpr08B1kYIbU.mft
File: J0zEEJs00UTL604gpr08B1kYIbU.mft (raw, json)
Hash identifier: APIsw/nLy++ISZUEtFaL6vMdH02AjC/+wAAjOQxwQCA=
Subject key identifier: 83:C3:E6:3D:41:85:80:7C:FC:DD:A4:CF:7E:CB:7F:42:67:27:3C:FA
Authority key identifier: 27:4C:C4:10:9B:34:D1:44:CB:EB:4E:20:A6:BD:3C:07:59:18:21:B5
Certificate issuer: /CN=274cc4109b34d144cbeb4e20a6bd3c07591821b5
Certificate serial: 0199C86A95CF748598F0F65F212E0F6C6831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0zEEJs00UTL604gpr08B1kYIbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/344b60-889d-41f2-b9f2-be15df99b11d/1/J0zEEJs00UTL604gpr08B1kYIbU.mft
Manifest number: 16C6
Signing time: Thu 09 Oct 2025 10:00:52 +0000
Manifest this update: Thu 09 Oct 2025 10:00:52 +0000
Manifest next update: Fri 10 Oct 2025 10:00:52 +0000
Files and hashes: 1: J0zEEJs00UTL604gpr08B1kYIbU.crl (hash: sfX8hiyv5Tl1QhainZoFfHGnEZWbSC3nHiHd8gGgJ8Q=)
2: W2Bt5n75RL1yPisK5n22fF2D8bI.roa (hash: paOvg+wgSlBKgewYZP5vibp/Ng8VGrHC/AvIdfss8fE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/344b60-889d-41f2-b9f2-be15df99b11d/1/J0zEEJs00UTL604gpr08B1kYIbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/344b60-889d-41f2-b9f2-be15df99b11d/1/J0zEEJs00UTL604gpr08B1kYIbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0zEEJs00UTL604gpr08B1kYIbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Oct 2025 07:06:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c8:6a:95:cf:74:85:98:f0:f6:5f:21:2e:0f:6c:68:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=274cc4109b34d144cbeb4e20a6bd3c07591821b5
Validity
Not Before: Oct 9 10:00:52 2025 GMT
Not After : Oct 10 10:00:52 2025 GMT
Subject: CN=83c3e63d4185807cfcdda4cf7ecb7f4267273cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a7:a0:80:1a:17:6e:ab:81:73:e0:00:64:bc:
ad:f0:08:97:26:c0:58:9e:3c:8e:82:e2:b2:72:40:
9c:c2:d7:f1:5b:da:ee:c6:bc:78:03:5d:97:e9:53:
0e:eb:f6:10:0c:f0:ec:41:5f:16:04:3a:f1:db:3f:
37:c8:10:82:39:38:62:43:b3:25:e3:ac:7f:e2:50:
04:a2:e0:9e:8a:10:58:79:9b:6b:b1:f3:31:35:43:
6d:f0:d6:ec:92:41:4f:a8:0e:eb:a1:7d:37:04:88:
2d:b2:a3:4a:a2:92:05:e7:78:f8:6d:bd:99:54:2c:
47:5e:a1:4b:f7:61:a8:b3:4c:8d:ce:58:7e:be:55:
60:bb:75:26:0c:13:25:0f:2d:46:09:09:3f:48:35:
66:d0:25:64:a9:92:11:d0:3f:00:91:eb:00:63:d4:
cf:83:2b:34:2f:6d:90:72:cc:7e:d2:ba:b5:69:51:
d7:10:34:2d:cf:80:e5:af:a7:4a:9d:52:06:be:24:
8f:63:24:c6:ac:84:40:42:35:61:fa:9f:73:55:7b:
e0:77:bc:ff:c3:fd:50:b4:0f:ce:e2:0e:7e:67:e9:
32:e4:4a:74:7a:77:f7:08:7e:16:a0:24:1a:10:2f:
8b:fe:af:b0:bf:9d:86:95:f3:4f:48:74:2f:7b:9a:
44:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C3:E6:3D:41:85:80:7C:FC:DD:A4:CF:7E:CB:7F:42:67:27:3C:FA
X509v3 Authority Key Identifier:
keyid:27:4C:C4:10:9B:34:D1:44:CB:EB:4E:20:A6:BD:3C:07:59:18:21:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0zEEJs00UTL604gpr08B1kYIbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/344b60-889d-41f2-b9f2-be15df99b11d/1/J0zEEJs00UTL604gpr08B1kYIbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/344b60-889d-41f2-b9f2-be15df99b11d/1/J0zEEJs00UTL604gpr08B1kYIbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:7b:04:28:c9:55:64:d6:3b:b2:d5:d1:0b:3c:ca:7a:9c:c0:
01:f8:d9:e9:73:5e:21:9f:dd:4a:05:a0:ce:71:dd:e1:4b:56:
5d:86:08:4b:11:2d:c8:98:ca:cf:3f:8c:0d:f6:92:82:41:cb:
34:92:2d:fa:80:3d:3c:ee:e1:e6:48:f2:72:b4:3f:b4:18:aa:
e8:ec:b8:0d:ce:3e:90:da:92:1b:8a:10:22:fc:17:98:cf:e6:
18:c7:45:9d:d6:32:fd:c6:61:fa:a1:76:79:8c:94:63:98:ec:
77:75:b3:b8:83:c3:32:b5:f1:6f:17:0b:b4:29:65:87:7f:42:
4f:16:d7:4b:19:42:39:fe:fa:a4:dc:55:84:d3:eb:fb:11:51:
ee:13:e7:38:3d:f6:b8:fa:b7:d3:36:13:2d:7d:20:58:b9:ce:
12:af:7a:69:c7:00:30:0c:c5:62:fe:06:60:16:ae:2b:4d:00:
f6:c5:63:1a:89:e3:65:65:9e:21:7e:fb:e4:4f:33:b8:5b:f6:
1e:c6:7b:24:f3:2a:ac:4c:c9:78:cb:fd:e4:e2:89:16:78:ce:
1d:c6:85:74:78:15:98:1a:cc:3a:bf:fd:63:61:5e:86:b6:4e:
f7:3e:0a:0b:34:c9:d8:e8:47:19:c3:42:48:57:13:c2:88:5d:
89:04:09:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnIapXPdIWY8PZfIS4PbGgxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NGNjNDEwOWIzNGQxNDRjYmViNGUyMGE2YmQzYzA3NTkx
ODIxYjUwHhcNMjUxMDA5MTAwMDUyWhcNMjUxMDEwMTAwMDUyWjAzMTEwLwYDVQQD
Eyg4M2MzZTYzZDQxODU4MDdjZmNkZGE0Y2Y3ZWNiN2Y0MjY3MjczY2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKeggBoXbquBc+AAZLyt8AiXJsBY
njyOguKyckCcwtfxW9ruxrx4A12X6VMO6/YQDPDsQV8WBDrx2z83yBCCOThiQ7Ml
46x/4lAEouCeihBYeZtrsfMxNUNt8NbskkFPqA7roX03BIgtsqNKopIF53j4bb2Z
VCxHXqFL92Gos0yNzlh+vlVgu3UmDBMlDy1GCQk/SDVm0CVkqZIR0D8AkesAY9TP
gys0L22Qcsx+0rq1aVHXEDQtz4Dlr6dKnVIGviSPYyTGrIRAQjVh+p9zVXvgd7z/
w/1QtA/O4g5+Z+ky5Ep0enf3CH4WoCQaEC+L/q+wv52GlfNPSHQve5pESwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIPD5j1BhYB8/N2kz37Lf0JnJzz6MB8GA1UdIwQY
MBaAFCdMxBCbNNFEy+tOIKa9PAdZGCG1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjB6RUVKczAwVVRMNjA0Z3ByMDhCMWtZSWJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zNDRiNjAtODg5ZC00MWYyLWI5ZjIt
YmUxNWRmOTliMTFkLzEvSjB6RUVKczAwVVRMNjA0Z3ByMDhCMWtZSWJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8zNDRiNjAtODg5ZC00MWYyLWI5ZjItYmUxNWRmOTliMTFk
LzEvSjB6RUVKczAwVVRMNjA0Z3ByMDhCMWtZSWJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnnsEKMlV
ZNY7stXRCzzKepzAAfjZ6XNeIZ/dSgWgznHd4UtWXYYISxEtyJjKzz+MDfaSgkHL
NJIt+oA9PO7h5kjycrQ/tBiq6Oy4Dc4+kNqSG4oQIvwXmM/mGMdFndYy/cZh+qF2
eYyUY5jsd3WzuIPDMrXxbxcLtCllh39CTxbXSxlCOf76pNxVhNPr+xFR7hPnOD32
uPq30zYTLX0gWLnOEq96accAMAzFYv4GYBauK00A9sVjGonjZWWeIX775E8zuFv2
HsZ7JPMqrEzJeMv95OKJFnjOHcaFdHgVmBrMOr/9Y2FehrZO9z4KCzTJ2OhHGcNC
SFcTwohdiQQJfA==
-----END CERTIFICATE-----
Generated at Thu Oct 9 11:38:26 2025 by rpki-client