Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
File: jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft (raw, json)
Hash identifier: O3aDEomGl1xnEQdGXK5YokbZfSp3egBck2l/q2G/N7I=
Subject key identifier: B0:75:10:E7:65:9F:FF:D4:C4:A6:C5:FF:80:95:F1:CC:35:10:88:5E
Authority key identifier: 8D:24:3A:BB:7C:57:1A:AA:9C:E2:23:CF:61:C4:7E:54:F9:E1:CA:3B
Certificate issuer: /CN=8d243abb7c571aaa9ce223cf61c47e54f9e1ca3b
Certificate serial: 019A71B7B5B6370148DE103A9D0AE71A43CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
Manifest number: 09DB
Signing time: Tue 11 Nov 2025 07:00:56 +0000
Manifest this update: Tue 11 Nov 2025 07:00:56 +0000
Manifest next update: Wed 12 Nov 2025 07:00:56 +0000
Files and hashes: 1: _XanHjYNZTT-5X0sROOr4g4zRS4.roa (hash: BSdib09dS8aBenYj0m64OabQQ/2b6u37mA8nYmBf36k=)
2: jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl (hash: Ihpq498FxyuJlLdO2BCvHvdM5gl7Fk1oJ6NyCl+RVwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:b5:b6:37:01:48:de:10:3a:9d:0a:e7:1a:43:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d243abb7c571aaa9ce223cf61c47e54f9e1ca3b
Validity
Not Before: Nov 11 07:00:56 2025 GMT
Not After : Nov 12 07:00:56 2025 GMT
Subject: CN=b07510e7659fffd4c4a6c5ff8095f1cc3510885e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e3:59:c4:c9:4f:d2:35:e4:c2:80:03:6c:11:
5e:9e:9f:38:68:18:82:fa:7e:38:95:aa:d8:a9:2f:
b3:51:f5:48:ed:96:b2:67:ac:e8:36:63:66:32:97:
29:49:20:08:ae:a1:0e:66:17:a7:4d:6a:8b:c5:9b:
59:c5:cc:b1:78:81:c0:c1:b6:a7:64:cb:42:b4:8a:
87:2b:63:d3:23:cc:59:2b:6d:04:75:32:9e:37:ed:
51:45:02:a5:b3:a3:3b:4e:02:d5:14:0c:fa:8f:1c:
4d:54:33:29:12:24:be:1e:33:94:b8:c6:f3:47:fe:
42:13:2a:36:e2:b9:07:ba:69:24:a4:1f:3d:b6:13:
94:26:a1:0b:f6:7e:e5:c7:a8:a0:15:a2:5b:64:70:
39:14:ef:5f:f6:b1:b4:95:c4:65:72:3d:b4:82:cd:
1a:68:20:b9:78:85:18:77:68:b2:98:92:18:56:11:
af:bb:ec:bc:1d:6a:87:e5:a0:31:56:a6:90:23:f0:
db:90:3d:3e:44:89:19:5f:ca:bf:36:66:55:85:4c:
49:3d:9f:f7:df:e9:4d:03:f6:ce:26:9e:1f:f6:41:
a4:c9:b1:65:8c:1a:e8:a0:ef:65:fa:5c:f2:bd:a1:
0b:01:37:4b:c1:30:5b:ca:84:a5:e0:89:24:a2:af:
2f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:75:10:E7:65:9F:FF:D4:C4:A6:C5:FF:80:95:F1:CC:35:10:88:5E
X509v3 Authority Key Identifier:
keyid:8D:24:3A:BB:7C:57:1A:AA:9C:E2:23:CF:61:C4:7E:54:F9:E1:CA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e5:42:79:bf:20:b9:90:a6:78:29:fc:e6:93:70:df:98:ff:
d8:17:7d:f2:8f:f6:25:5d:be:bb:f4:01:2e:50:5a:90:56:8f:
f7:ec:39:c9:bb:c6:3e:1d:3a:a2:6a:b7:49:28:53:31:eb:c0:
b6:d7:5a:52:05:02:55:77:55:2f:0b:78:a0:9e:a0:7e:3f:8c:
15:05:0c:4a:af:25:69:d2:aa:be:b2:fa:6b:c9:7f:a3:8d:d2:
3f:74:3d:31:10:2e:d6:a8:25:9a:a4:29:96:a1:b7:3b:d0:6c:
6b:99:4b:a8:87:1f:56:84:1b:0d:19:8d:b0:65:f6:6e:9a:e5:
c0:73:4b:63:41:63:90:22:14:5d:e3:3c:a4:52:89:5d:d9:27:
58:b9:4b:33:80:7e:18:37:59:9c:cf:6b:ae:9e:17:1c:23:41:
9d:7e:2a:80:c3:75:6e:f7:e8:b0:4e:7d:11:44:f2:3f:cb:59:
9f:b2:d2:f0:34:67:17:14:1f:eb:b1:4e:08:e6:9a:1c:55:8e:
ea:51:19:a5:7e:3d:f7:80:0a:52:59:82:cd:64:98:29:df:16:
03:c6:e1:42:63:1a:35:70:63:3e:fc:ce:ed:ca:e3:10:da:3a:
51:d6:92:a5:16:f4:5c:a6:ae:38:50:8a:a6:10:ce:8a:03:cd:
e6:88:9e:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt7W2NwFI3hA6nQrnGkPOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMjQzYWJiN2M1NzFhYWE5Y2UyMjNjZjYxYzQ3ZTU0Zjll
MWNhM2IwHhcNMjUxMTExMDcwMDU2WhcNMjUxMTEyMDcwMDU2WjAzMTEwLwYDVQQD
EyhiMDc1MTBlNzY1OWZmZmQ0YzRhNmM1ZmY4MDk1ZjFjYzM1MTA4ODVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjONZxMlP0jXkwoADbBFenp84aBiC
+n44larYqS+zUfVI7ZayZ6zoNmNmMpcpSSAIrqEOZhenTWqLxZtZxcyxeIHAwban
ZMtCtIqHK2PTI8xZK20EdTKeN+1RRQKls6M7TgLVFAz6jxxNVDMpEiS+HjOUuMbz
R/5CEyo24rkHumkkpB89thOUJqEL9n7lx6igFaJbZHA5FO9f9rG0lcRlcj20gs0a
aCC5eIUYd2iymJIYVhGvu+y8HWqH5aAxVqaQI/DbkD0+RIkZX8q/NmZVhUxJPZ/3
3+lNA/bOJp4f9kGkybFljBrooO9l+lzyvaELATdLwTBbyoSl4Ikkoq8v7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLB1EOdln//UxKbF/4CV8cw1EIheMB8GA1UdIwQY
MBaAFI0kOrt8VxqqnOIjz2HEflT54co7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalNRNnUzeFhHcXFjNGlQUFljUi1WUG5oeWpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8xN2E3YWYtOTg1My00ZWU4LWE3Nzgt
MTUxODVmNGRkOTU1LzEvalNRNnUzeFhHcXFjNGlQUFljUi1WUG5oeWpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8xN2E3YWYtOTg1My00ZWU4LWE3NzgtMTUxODVmNGRkOTU1
LzEvalNRNnUzeFhHcXFjNGlQUFljUi1WUG5oeWpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeeVCeb8g
uZCmeCn85pNw35j/2Bd98o/2JV2+u/QBLlBakFaP9+w5ybvGPh06omq3SShTMevA
ttdaUgUCVXdVLwt4oJ6gfj+MFQUMSq8ladKqvrL6a8l/o43SP3Q9MRAu1qglmqQp
lqG3O9Bsa5lLqIcfVoQbDRmNsGX2bprlwHNLY0FjkCIUXeM8pFKJXdknWLlLM4B+
GDdZnM9rrp4XHCNBnX4qgMN1bvfosE59EUTyP8tZn7LS8DRnFxQf67FOCOaaHFWO
6lEZpX4994AKUlmCzWSYKd8WA8bhQmMaNXBjPvzO7crjENo6UdaSpRb0XKauOFCK
phDOigPN5oie5A==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:23 2025 by rpki-client