Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
File: jNzyb3SGBYjKxrrhf5neItvEmuY.mft (raw, json)
Hash identifier: PUjMPR9uF77rpGwwlLawBK6i6ceTeAMM+BiHUO3VhTk=
Subject key identifier: D7:49:D8:86:4F:7C:63:C7:34:83:19:DE:C3:DD:4A:E7:F5:99:B5:47
Authority key identifier: 8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
Certificate issuer: /CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Certificate serial: 019A70A4E902935EF9D08BBF80AC4BB62D96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 02:00:46 +0000
Manifest this update: Tue 11 Nov 2025 02:00:46 +0000
Manifest next update: Wed 12 Nov 2025 02:00:46 +0000
Files and hashes: 1: jNzyb3SGBYjKxrrhf5neItvEmuY.crl (hash: /51X3sdd5yxR03mBOkBWUx4RIZq4alPH6Xdl4rtKav4=)
2: nE8Xo_fpUw6ElJP9CBp37mVdbvg.roa (hash: dylbw9FFNOC/9ham5DxR+U09aH9ubZH/opQ+2bz68ow=)
3: nMDCAx4S7BvyRseCP1AtruhoXlQ.roa (hash: MzKXqieiYhEALeqU1AUv5CMaIkFtOJxEDtJDUquvAg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:e9:02:93:5e:f9:d0:8b:bf:80:ac:4b:b6:2d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cdcf26f74860588cac6bae17f99de22dbc49ae6
Validity
Not Before: Nov 11 02:00:46 2025 GMT
Not After : Nov 12 02:00:46 2025 GMT
Subject: CN=d749d8864f7c63c7348319dec3dd4ae7f599b547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fa:42:8e:09:cf:3d:48:60:1b:f0:ff:81:81:
53:43:13:79:c0:8c:c6:91:f2:32:7b:d7:7a:dc:3d:
ee:1d:4f:1a:4c:42:16:dc:1b:57:78:cb:3a:d5:dd:
5c:6d:5b:ad:a9:b7:5d:26:fa:0d:1e:c7:5a:a9:e0:
52:52:24:06:b0:8c:4c:42:73:81:16:99:9d:63:62:
0b:1b:0b:92:1b:37:9b:28:b0:05:ff:0d:6e:b8:1a:
a9:c0:db:ec:3e:53:de:b1:60:00:49:40:22:57:8d:
f9:0d:a6:fa:32:b3:80:c4:e6:f5:a5:ec:4d:d3:76:
5e:c4:3a:09:ea:93:28:11:15:81:ff:e8:17:d1:7c:
cd:1e:17:c6:db:4a:68:c6:cc:36:78:d3:df:42:36:
9c:b5:a9:e1:c5:a7:54:35:3f:f1:2b:d5:0b:00:5c:
56:01:7e:af:c8:89:bb:8e:da:f6:23:4f:85:e5:40:
cc:49:35:f7:ec:70:ff:94:a7:31:c0:b6:d9:e2:0c:
f9:fe:bf:1d:e2:e4:68:da:55:4d:87:79:77:81:59:
f2:4a:9f:f2:bd:7e:7c:3d:6b:90:01:2e:6f:4e:ed:
76:0f:00:0c:92:3c:90:af:43:d6:5e:4f:53:95:eb:
60:fa:77:c0:31:65:ac:cd:7a:04:6b:3f:c7:16:e6:
a4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:49:D8:86:4F:7C:63:C7:34:83:19:DE:C3:DD:4A:E7:F5:99:B5:47
X509v3 Authority Key Identifier:
keyid:8C:DC:F2:6F:74:86:05:88:CA:C6:BA:E1:7F:99:DE:22:DB:C4:9A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNzyb3SGBYjKxrrhf5neItvEmuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/d5b1a7-466d-471c-a70c-2fb25abfdc53/1/jNzyb3SGBYjKxrrhf5neItvEmuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:60:01:cd:2b:c9:1c:6d:e6:79:f9:ae:79:c5:76:93:8d:09:
8b:bb:40:f7:c9:8c:05:d7:87:5c:d4:24:ef:6a:cf:b4:e0:b8:
b6:95:c0:f1:06:7b:e1:54:9e:be:e9:79:4d:ca:7a:ca:fe:83:
e6:d5:b8:d7:9f:f4:28:ca:56:93:2a:94:29:d0:bc:48:96:f8:
d0:0f:9d:3f:5d:21:39:c7:87:83:f0:24:8a:32:3f:f9:e7:2d:
8c:90:0f:28:58:19:63:ff:cf:ee:59:20:b2:ca:fc:a9:83:8a:
e9:58:00:e1:c8:a8:dc:07:1c:a9:37:a9:51:73:d4:8f:fa:6c:
35:41:72:26:b9:d1:63:2f:3b:ec:a2:d2:78:e4:ef:96:b7:0d:
47:3c:f8:4b:56:9b:c8:d4:e0:33:41:9f:8a:4a:fc:93:47:16:
e4:c6:84:71:4c:59:9b:fc:e7:f1:63:33:3d:58:14:b3:c6:e7:
03:6b:74:3b:10:02:d9:2f:60:af:c3:fe:3f:ed:fc:0a:f3:27:
e7:90:2a:8f:8d:86:4e:71:0c:cd:ef:e9:ed:20:bd:9c:e6:5f:
25:89:5c:35:fa:96:26:ac:cf:21:88:b4:6c:bf:9d:b1:4d:7b:
f5:cd:10:32:83:84:8a:47:23:35:fa:7c:0a:b4:83:52:fa:ac:
5d:d1:11:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpOkCk1750Iu/gKxLti2WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZGNmMjZmNzQ4NjA1ODhjYWM2YmFlMTdmOTlkZTIyZGJj
NDlhZTYwHhcNMjUxMTExMDIwMDQ2WhcNMjUxMTEyMDIwMDQ2WjAzMTEwLwYDVQQD
EyhkNzQ5ZDg4NjRmN2M2M2M3MzQ4MzE5ZGVjM2RkNGFlN2Y1OTliNTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPpCjgnPPUhgG/D/gYFTQxN5wIzG
kfIye9d63D3uHU8aTEIW3BtXeMs61d1cbVutqbddJvoNHsdaqeBSUiQGsIxMQnOB
FpmdY2ILGwuSGzebKLAF/w1uuBqpwNvsPlPesWAASUAiV435Dab6MrOAxOb1pexN
03ZexDoJ6pMoERWB/+gX0XzNHhfG20poxsw2eNPfQjactanhxadUNT/xK9ULAFxW
AX6vyIm7jtr2I0+F5UDMSTX37HD/lKcxwLbZ4gz5/r8d4uRo2lVNh3l3gVnySp/y
vX58PWuQAS5vTu12DwAMkjyQr0PWXk9Tletg+nfAMWWszXoEaz/HFuakRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNdJ2IZPfGPHNIMZ3sPdSuf1mbVHMB8GA1UdIwQY
MBaAFIzc8m90hgWIysa64X+Z3iLbxJrmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak56eWIzU0dCWWpLeHJyaGY1bmVJdHZFbXVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9kNWIxYTctNDY2ZC00NzFjLWE3MGMt
MmZiMjVhYmZkYzUzLzEvak56eWIzU0dCWWpLeHJyaGY1bmVJdHZFbXVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9kNWIxYTctNDY2ZC00NzFjLWE3MGMtMmZiMjVhYmZkYzUz
LzEvak56eWIzU0dCWWpLeHJyaGY1bmVJdHZFbXVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAmABzSvJ
HG3mefmuecV2k40Ji7tA98mMBdeHXNQk72rPtOC4tpXA8QZ74VSevul5Tcp6yv6D
5tW415/0KMpWkyqUKdC8SJb40A+dP10hOceHg/AkijI/+ectjJAPKFgZY//P7lkg
ssr8qYOK6VgA4cio3AccqTepUXPUj/psNUFyJrnRYy877KLSeOTvlrcNRzz4S1ab
yNTgM0Gfikr8k0cW5MaEcUxZm/zn8WMzPVgUs8bnA2t0OxAC2S9gr8P+P+38CvMn
55Aqj42GTnEMze/p7SC9nOZfJYlcNfqWJqzPIYi0bL+dsU179c0QMoOEikcjNfp8
CrSDUvqsXdERKA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:25 2025 by rpki-client