Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft
File: jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft (raw, json)
Hash identifier: O5gMWMjEldcq2K24yaaUDTL25BRf5XhQPJJ37/ZpdDU=
Subject key identifier: 80:D8:22:97:C6:B4:C5:59:3A:89:3B:80:96:05:FC:CD:0C:35:7F:9F
Authority key identifier: 8D:3B:C9:B3:A7:42:4D:95:74:24:27:F9:96:33:D9:C0:B0:0F:67:F0
Certificate issuer: /CN=8d3bc9b3a7424d95742427f99633d9c0b00f67f0
Certificate serial: 019A70DBEE419154996D5DDB95B1D1F46273
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft
Manifest number: 09D4
Signing time: Tue 11 Nov 2025 03:00:52 +0000
Manifest this update: Tue 11 Nov 2025 03:00:52 +0000
Manifest next update: Wed 12 Nov 2025 03:00:52 +0000
Files and hashes: 1: J6N10mOHco_CHrghtNkJ8CZXfhU.roa (hash: 30kmxFBnSaCLifn+bmjA1t+lSi7TIa3l00vfDKtB59Y=)
2: jTvJs6dCTZV0JCf5ljPZwLAPZ_A.crl (hash: Cfw7vZjHMKDdYr2oOX/1wcLEluwnBciU1kXeFJMNJuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:ee:41:91:54:99:6d:5d:db:95:b1:d1:f4:62:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3bc9b3a7424d95742427f99633d9c0b00f67f0
Validity
Not Before: Nov 11 03:00:52 2025 GMT
Not After : Nov 12 03:00:52 2025 GMT
Subject: CN=80d82297c6b4c5593a893b809605fccd0c357f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:08:e1:13:a4:57:53:c5:3d:14:23:64:fe:e8:
43:0b:67:8e:1e:ab:cc:ba:e5:37:a7:5b:bf:12:63:
95:44:ce:ef:2d:3f:17:6d:57:8c:2b:24:ab:8c:77:
7d:19:e8:94:13:80:53:ac:da:ec:e3:97:00:a0:e0:
25:49:d2:68:2c:6c:e1:c3:b5:8e:c8:20:68:5d:d6:
92:b5:02:5d:9e:c8:85:4b:ef:42:ff:ec:6c:6a:db:
5e:44:80:2c:bd:a8:8e:42:48:ac:65:89:67:7a:44:
50:75:82:8a:6f:e2:e1:3a:a8:9c:86:bd:69:26:61:
6f:97:ac:8e:8b:24:72:69:fe:67:e4:03:60:86:85:
1a:ed:43:2f:8d:23:a2:44:c1:5a:99:ac:17:7a:ae:
91:8f:38:04:27:cf:c3:d3:46:36:e3:b9:e3:7c:8f:
1d:11:ae:1a:8f:66:e1:ce:44:4c:d5:1b:1a:d5:bb:
87:09:24:77:97:a2:a4:60:05:64:32:e6:96:66:f2:
07:8a:d1:8c:33:f6:29:e0:b6:ab:e4:1d:7d:69:1c:
22:64:17:28:f9:4b:38:29:9d:2c:5d:e6:f0:91:01:
2f:d1:8e:33:89:48:81:49:a7:8a:28:77:28:88:95:
fd:d3:63:09:25:63:2f:18:93:6a:9d:ab:5a:22:b1:
65:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D8:22:97:C6:B4:C5:59:3A:89:3B:80:96:05:FC:CD:0C:35:7F:9F
X509v3 Authority Key Identifier:
keyid:8D:3B:C9:B3:A7:42:4D:95:74:24:27:F9:96:33:D9:C0:B0:0F:67:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/caa5e2-085f-4d67-b9b0-5ca510f67f72/1/jTvJs6dCTZV0JCf5ljPZwLAPZ_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ee:23:7a:f9:8a:cb:af:db:12:26:46:da:30:9b:86:f9:0a:
fb:fc:ca:2f:a1:a4:94:34:20:27:a3:26:53:f7:b9:07:65:e6:
5d:84:ca:e0:27:36:e0:22:5b:3e:ea:ab:e8:8f:39:61:ab:b2:
c2:19:ed:b2:0c:19:06:84:ee:6d:01:78:53:16:df:cf:d9:4e:
94:4c:81:f3:ef:98:a0:96:f9:3b:2b:e7:8c:fc:8d:ba:fa:5a:
79:60:8e:45:ee:4d:77:70:a6:9d:5d:7e:75:09:d8:eb:0e:06:
26:f7:00:2c:80:37:1d:5a:8e:32:17:4b:ac:ce:9a:7c:ec:7d:
9b:a6:ba:03:ba:1b:68:72:31:10:dc:86:d8:06:be:53:c6:6f:
c0:14:8a:42:e4:cd:75:2e:66:cf:a1:02:54:e1:94:ab:b3:94:
0b:52:ca:39:95:50:50:77:75:d3:14:07:e8:7c:34:92:64:13:
be:37:df:06:2f:51:10:15:41:66:a4:82:e3:29:06:79:87:59:
ab:c1:59:89:7d:0c:dd:ef:37:46:e1:74:8c:e5:cd:40:37:76:
ab:24:30:53:94:4b:aa:67:a4:f4:64:52:34:3c:19:c6:12:21:
42:e9:fb:0b:4a:c7:2a:b9:48:25:a7:47:e7:5e:5b:50:f3:d1:
ab:37:61:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw2+5BkVSZbV3blbHR9GJzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkM2JjOWIzYTc0MjRkOTU3NDI0MjdmOTk2MzNkOWMwYjAw
ZjY3ZjAwHhcNMjUxMTExMDMwMDUyWhcNMjUxMTEyMDMwMDUyWjAzMTEwLwYDVQQD
Eyg4MGQ4MjI5N2M2YjRjNTU5M2E4OTNiODA5NjA1ZmNjZDBjMzU3ZjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQjhE6RXU8U9FCNk/uhDC2eOHqvM
uuU3p1u/EmOVRM7vLT8XbVeMKySrjHd9GeiUE4BTrNrs45cAoOAlSdJoLGzhw7WO
yCBoXdaStQJdnsiFS+9C/+xsatteRIAsvaiOQkisZYlnekRQdYKKb+LhOqichr1p
JmFvl6yOiyRyaf5n5ANghoUa7UMvjSOiRMFamawXeq6RjzgEJ8/D00Y247njfI8d
Ea4aj2bhzkRM1Rsa1buHCSR3l6KkYAVkMuaWZvIHitGMM/Yp4Lar5B19aRwiZBco
+Us4KZ0sXebwkQEv0Y4ziUiBSaeKKHcoiJX902MJJWMvGJNqnataIrFl5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIDYIpfGtMVZOok7gJYF/M0MNX+fMB8GA1UdIwQY
MBaAFI07ybOnQk2VdCQn+ZYz2cCwD2fwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalR2SnM2ZENUWlYwSkNmNWxqUFp3TEFQWl9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9jYWE1ZTItMDg1Zi00ZDY3LWI5YjAt
NWNhNTEwZjY3ZjcyLzEvalR2SnM2ZENUWlYwSkNmNWxqUFp3TEFQWl9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9jYWE1ZTItMDg1Zi00ZDY3LWI5YjAtNWNhNTEwZjY3Zjcy
LzEvalR2SnM2ZENUWlYwSkNmNWxqUFp3TEFQWl9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmO4jevmK
y6/bEiZG2jCbhvkK+/zKL6GklDQgJ6MmU/e5B2XmXYTK4Cc24CJbPuqr6I85Yauy
whntsgwZBoTubQF4Uxbfz9lOlEyB8++YoJb5OyvnjPyNuvpaeWCORe5Nd3CmnV1+
dQnY6w4GJvcALIA3HVqOMhdLrM6afOx9m6a6A7obaHIxENyG2Aa+U8ZvwBSKQuTN
dS5mz6ECVOGUq7OUC1LKOZVQUHd10xQH6Hw0kmQTvjffBi9REBVBZqSC4ykGeYdZ
q8FZiX0M3e83RuF0jOXNQDd2qyQwU5RLqmek9GRSNDwZxhIhQun7C0rHKrlIJadH
515bUPPRqzdhrA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:18 2025 by rpki-client