Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft
File: JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft (raw, json)
Hash identifier: RKF84tdBadhT0+jIqoG3TzcaNUrpBOVF+T1eEMWQrN0=
Subject key identifier: 50:D9:75:99:EA:BD:C4:2A:56:37:44:31:78:21:EC:91:B4:74:72:C2
Authority key identifier: 24:05:10:80:40:09:40:FF:47:C8:07:DD:67:42:BE:CB:B4:ED:F2:2D
Certificate issuer: /CN=24051080400940ff47c807dd6742becbb4edf22d
Certificate serial: 019A71B8814CD6A1158ED9948C4360252D0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft
Manifest number: 127B
Signing time: Tue 11 Nov 2025 07:01:48 +0000
Manifest this update: Tue 11 Nov 2025 07:01:48 +0000
Manifest next update: Wed 12 Nov 2025 07:01:48 +0000
Files and hashes: 1: 1JuBh8lEOH4Gv_TiAGmh3QPTdd8.roa (hash: 9L83yVwb1Uhqks9DMbgSsnxXYkHLF9CsQEa0PBHMdEI=)
2: JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl (hash: KaTrIf+jzR+BnBw0zJkYTN9RZhNo+SXTRzecjIf4SsA=)
3: uLY7R20m1_heAxActPUiDlUOF_k.roa (hash: VJ9ob+iUB471t51KlgloGG8TLFxOURW4UvaYAdbWSCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:81:4c:d6:a1:15:8e:d9:94:8c:43:60:25:2d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24051080400940ff47c807dd6742becbb4edf22d
Validity
Not Before: Nov 11 07:01:48 2025 GMT
Not After : Nov 12 07:01:48 2025 GMT
Subject: CN=50d97599eabdc42a563744317821ec91b47472c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:62:90:09:6e:7c:f0:65:e4:9f:3b:ef:85:21:
05:32:1e:8b:ba:3e:ba:1f:a6:ab:e7:cb:69:08:d3:
36:03:b4:0e:3a:f8:93:e9:e0:41:98:d7:30:ae:6b:
63:ec:66:fe:93:6b:e8:00:fa:b5:c7:e1:64:f6:4c:
ba:f6:25:03:4a:93:af:e5:1f:ac:d6:0b:cd:c7:b6:
ea:f9:fb:83:ed:3a:4c:02:7c:a9:e8:57:fc:70:c4:
7c:cc:38:3f:25:4f:80:e8:17:ac:d8:e8:b5:d5:4d:
4c:06:ec:62:31:00:63:43:27:1f:44:6d:42:99:ca:
bc:21:46:3c:e7:8c:ce:6d:03:62:d0:06:9e:e3:de:
88:5f:a2:dc:3c:27:d7:fc:6d:51:8d:17:9b:36:e5:
d2:2f:7c:6b:d3:3b:48:93:ef:09:ee:8b:e2:9f:86:
c3:c0:59:d7:28:00:01:cf:0c:d5:3d:5c:1e:00:30:
74:7e:5f:fb:2c:08:ca:ba:c9:f1:33:d9:52:da:5b:
8f:fa:c7:6d:4f:c3:24:20:3a:3d:68:2b:14:91:aa:
7f:ce:7c:3e:e9:7c:d1:69:fe:be:d4:6c:31:54:d6:
76:6a:3b:6a:7c:4a:43:03:9a:c1:e6:75:7b:a0:ff:
9f:08:74:23:b0:d3:6d:fa:dd:98:77:83:85:e0:24:
ef:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:D9:75:99:EA:BD:C4:2A:56:37:44:31:78:21:EC:91:B4:74:72:C2
X509v3 Authority Key Identifier:
keyid:24:05:10:80:40:09:40:FF:47:C8:07:DD:67:42:BE:CB:B4:ED:F2:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:97:80:15:9d:88:60:1d:dd:03:03:55:47:6c:4f:52:3e:ff:
98:40:3b:f4:d0:27:8d:f3:75:7f:a4:16:30:ec:c1:35:6e:63:
b4:5c:33:8b:ec:e6:a4:ab:a5:a6:9b:6d:ae:7e:3e:dc:2d:bd:
8c:48:0d:0a:5b:b1:dd:5c:af:2e:8e:d5:5b:44:65:ef:e2:a5:
02:5d:74:42:a7:fe:11:7e:03:4c:fa:25:8c:66:bd:ff:86:2f:
33:a0:d3:83:04:74:ed:73:3c:a1:3d:68:42:d6:4f:ca:97:16:
ba:6c:2e:1d:f9:1a:06:6e:96:ff:81:74:43:4c:b1:ec:c6:16:
21:c8:6f:de:98:ea:00:5e:fd:b4:b6:98:79:b5:aa:74:00:b4:
64:fa:c6:5b:c7:47:54:b6:c0:6b:2c:5e:a5:8a:0d:6f:78:41:
e3:7e:d3:09:87:44:13:ad:30:51:28:ff:58:45:33:64:54:cd:
26:cb:23:d6:9c:3c:3b:a3:ef:13:97:88:ca:64:93:36:f2:83:
a4:3b:f8:53:34:7b:e2:0c:38:3f:d2:03:32:42:18:7a:9f:1d:
db:5d:c5:5e:40:d5:6a:eb:71:ec:0c:6c:5f:95:35:b1:25:d8:
d9:f9:58:5b:a0:ad:97:be:67:23:90:a1:98:5b:9d:e3:1f:af:
69:40:12:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuIFM1qEVjtmUjENgJS0MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MDUxMDgwNDAwOTQwZmY0N2M4MDdkZDY3NDJiZWNiYjRl
ZGYyMmQwHhcNMjUxMTExMDcwMTQ4WhcNMjUxMTEyMDcwMTQ4WjAzMTEwLwYDVQQD
Eyg1MGQ5NzU5OWVhYmRjNDJhNTYzNzQ0MzE3ODIxZWM5MWI0NzQ3MmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWKQCW588GXknzvvhSEFMh6Luj66
H6ar58tpCNM2A7QOOviT6eBBmNcwrmtj7Gb+k2voAPq1x+Fk9ky69iUDSpOv5R+s
1gvNx7bq+fuD7TpMAnyp6Ff8cMR8zDg/JU+A6Bes2Oi11U1MBuxiMQBjQycfRG1C
mcq8IUY854zObQNi0Aae496IX6LcPCfX/G1RjRebNuXSL3xr0ztIk+8J7ovin4bD
wFnXKAABzwzVPVweADB0fl/7LAjKusnxM9lS2luP+sdtT8MkIDo9aCsUkap/znw+
6XzRaf6+1GwxVNZ2ajtqfEpDA5rB5nV7oP+fCHQjsNNt+t2Yd4OF4CTvZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFDZdZnqvcQqVjdEMXgh7JG0dHLCMB8GA1UdIwQY
MBaAFCQFEIBACUD/R8gH3WdCvsu07fItMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkFVUWdFQUpRUDlIeUFmZFowSy15N1R0OGkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8wYmY1ZTktZDkxMC00MDM3LThkMzct
NWQzOWQ1MDE4Zjc4LzEvSkFVUWdFQUpRUDlIeUFmZFowSy15N1R0OGkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8wYmY1ZTktZDkxMC00MDM3LThkMzctNWQzOWQ1MDE4Zjc4
LzEvSkFVUWdFQUpRUDlIeUFmZFowSy15N1R0OGkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVJeAFZ2I
YB3dAwNVR2xPUj7/mEA79NAnjfN1f6QWMOzBNW5jtFwzi+zmpKulppttrn4+3C29
jEgNClux3VyvLo7VW0Rl7+KlAl10Qqf+EX4DTPoljGa9/4YvM6DTgwR07XM8oT1o
QtZPypcWumwuHfkaBm6W/4F0Q0yx7MYWIchv3pjqAF79tLaYebWqdAC0ZPrGW8dH
VLbAayxepYoNb3hB437TCYdEE60wUSj/WEUzZFTNJssj1pw8O6PvE5eIymSTNvKD
pDv4UzR74gw4P9IDMkIYep8d213FXkDVautx7AxsX5U1sSXY2flYW6Ctl75nI5Ch
mFud4x+vaUASFQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:30 2025 by rpki-client