Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
File: JQ599DyC0SChPTyGXx8G9JZEseE.mft (raw, json)
Hash identifier: Dy0+d+LFQenifFaIKD/9Fcj2Ke9eXENS4uFeGM/z5n0=
Subject key identifier: 79:58:93:83:35:4E:14:B8:B6:45:EC:96:91:87:8D:8D:47:E2:29:EB
Authority key identifier: 25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1
Certificate issuer: /CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
Certificate serial: 0199C532BD7670BF53B258124B62D8BB79F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
Manifest number: 0EAB
Signing time: Wed 08 Oct 2025 19:01:00 +0000
Manifest this update: Wed 08 Oct 2025 19:01:00 +0000
Manifest next update: Thu 09 Oct 2025 19:01:00 +0000
Files and hashes: 1: JQ599DyC0SChPTyGXx8G9JZEseE.crl (hash: qeuBFZEzmxstJF2/7vKB014U9rnxPF/DcXLdcAIKZVY=)
2: NxEFYabQ1De2D9MRDvZOgIu0R4g.roa (hash: lAojMYDzIDb75W7SBnvnLzGQZua9BCv398UHDwqthXo=)
3: uBhMU8FaL6yzEgI8KXo0amRkPt0.roa (hash: rZaJZ+vs9poyZNeTB4YM94eOiwwWluQ2wWx8JrMOGHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:32:bd:76:70:bf:53:b2:58:12:4b:62:d8:bb:79:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
Validity
Not Before: Oct 8 19:01:00 2025 GMT
Not After : Oct 9 19:01:00 2025 GMT
Subject: CN=79589383354e14b8b645ec9691878d8d47e229eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a9:a5:b7:1f:68:96:7c:9a:6f:e9:94:af:85:
75:d3:b2:e3:40:79:97:79:a8:d8:ff:ba:8e:55:c5:
5d:95:25:5a:71:30:66:5b:2a:73:0b:da:26:6c:b1:
98:a9:6c:da:13:85:69:61:a4:8a:43:9d:e9:b1:6e:
03:1e:87:c6:44:5f:1f:2e:2e:6b:a7:92:ad:da:6e:
f7:df:f3:f9:65:18:33:30:27:f0:3b:f7:1a:52:5b:
35:4a:4c:ed:da:81:fa:77:5e:d3:5c:1e:f1:28:35:
6b:2d:23:71:0d:78:fe:0e:87:ab:f5:5e:1f:86:70:
d6:29:77:04:df:ce:16:3c:10:a8:76:51:4a:db:ad:
85:b8:d7:59:8a:72:b9:70:62:36:62:7b:4e:17:06:
b0:d1:65:6e:52:76:f9:13:09:45:e8:76:d0:2b:48:
f3:da:41:c6:9f:f3:55:44:3b:b7:5f:40:61:d5:62:
ee:c0:7e:7c:b9:78:a1:7f:37:5b:03:40:6b:85:02:
d3:aa:2f:18:99:b5:4f:58:c5:66:ab:46:a9:26:ed:
5c:24:8a:08:ec:23:21:e5:ee:3f:dd:41:40:1d:f8:
cb:d5:7d:fc:c9:d9:9c:b3:82:b8:a9:2d:28:76:34:
76:8a:fc:15:5b:ae:de:1b:0b:38:0c:87:88:99:66:
8a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:58:93:83:35:4E:14:B8:B6:45:EC:96:91:87:8D:8D:47:E2:29:EB
X509v3 Authority Key Identifier:
keyid:25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:b6:12:67:7d:1a:81:5c:8c:e9:6e:a0:de:19:b0:73:2e:2d:
20:12:55:11:22:96:70:fc:7a:2e:3b:06:60:b4:f1:d5:1c:93:
e2:d6:e7:b5:48:27:fe:0b:a6:86:cf:cd:d1:dc:d5:14:58:60:
4a:74:06:f0:d7:76:e8:84:d8:0a:d6:ec:e4:ac:cd:bf:06:7c:
37:9f:4a:a9:69:95:ed:39:1b:d1:a9:c7:ce:c6:e7:d1:53:32:
03:85:42:26:f1:1d:2f:f7:2c:5d:b7:b1:26:02:4c:10:5a:77:
07:d5:ef:d0:20:b5:a0:7d:82:28:ca:5c:ee:b7:7d:5d:ee:9b:
d5:90:dc:00:d3:af:a9:fc:2f:b9:02:d6:56:63:98:7b:ed:67:
b7:e8:0c:4b:08:09:08:06:9d:c4:f0:16:92:42:79:aa:dd:ba:
6f:03:8b:a2:a3:ff:a2:86:fb:4d:13:db:57:74:89:6c:bc:18:
09:e2:25:50:aa:e7:22:1a:70:c4:0f:90:37:0c:d4:bd:e6:1a:
3d:5a:7b:d5:f0:df:b0:56:b5:af:d6:25:17:27:be:68:52:18:
79:a7:02:39:60:10:1e:22:3e:8a:0f:f7:b3:f1:00:89:8b:46:
b1:2a:c5:70:29:ef:0c:e8:86:68:18:8f:24:f5:3c:a5:aa:70:
4d:de:34:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnFMr12cL9TslgSS2LYu3nyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1MGU3ZGY0M2M4MmQxMjBhMTNkM2M4NjVmMWYwNmY0OTY0
NGIxZTEwHhcNMjUxMDA4MTkwMTAwWhcNMjUxMDA5MTkwMTAwWjAzMTEwLwYDVQQD
Eyg3OTU4OTM4MzM1NGUxNGI4YjY0NWVjOTY5MTg3OGQ4ZDQ3ZTIyOWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqmltx9olnyab+mUr4V107LjQHmX
eajY/7qOVcVdlSVacTBmWypzC9ombLGYqWzaE4VpYaSKQ53psW4DHofGRF8fLi5r
p5Kt2m733/P5ZRgzMCfwO/caUls1Skzt2oH6d17TXB7xKDVrLSNxDXj+Doer9V4f
hnDWKXcE384WPBCodlFK262FuNdZinK5cGI2YntOFwaw0WVuUnb5EwlF6HbQK0jz
2kHGn/NVRDu3X0Bh1WLuwH58uXihfzdbA0BrhQLTqi8YmbVPWMVmq0apJu1cJIoI
7CMh5e4/3UFAHfjL1X38ydmcs4K4qS0odjR2ivwVW67eGws4DIeImWaKwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHlYk4M1ThS4tkXslpGHjY1H4inrMB8GA1UdIwQY
MBaAFCUOffQ8gtEgoT08hl8fBvSWRLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlE1OTlEeUMwU0NoUFR5R1h4OEc5SlpFc2VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS83ZDJlNjQtMTBkOS00YTRlLWE0YzYt
NGE5YmIyZmU3MzMxLzEvSlE1OTlEeUMwU0NoUFR5R1h4OEc5SlpFc2VFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS83ZDJlNjQtMTBkOS00YTRlLWE0YzYtNGE5YmIyZmU3MzMx
LzEvSlE1OTlEeUMwU0NoUFR5R1h4OEc5SlpFc2VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmbYSZ30a
gVyM6W6g3hmwcy4tIBJVESKWcPx6LjsGYLTx1RyT4tbntUgn/gumhs/N0dzVFFhg
SnQG8Nd26ITYCtbs5KzNvwZ8N59KqWmV7Tkb0anHzsbn0VMyA4VCJvEdL/csXbex
JgJMEFp3B9Xv0CC1oH2CKMpc7rd9Xe6b1ZDcANOvqfwvuQLWVmOYe+1nt+gMSwgJ
CAadxPAWkkJ5qt26bwOLoqP/oob7TRPbV3SJbLwYCeIlUKrnIhpwxA+QNwzUveYa
PVp71fDfsFa1r9YlFye+aFIYeacCOWAQHiI+ig/3s/EAiYtGsSrFcCnvDOiGaBiP
JPU8papwTd40SA==
-----END CERTIFICATE-----
Generated at Wed Oct 8 21:22:44 2025 by rpki-client