Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.mft
File: jgRb_s0rviTTP1MJ20fIqnejsQw.mft (raw, json)
Hash identifier: tgQhalTI7yid9vAYzccW1fq2cESgTxpvLxQL8ET2sag=
Subject key identifier: 4C:F4:5E:88:8D:E6:91:A8:63:E3:5C:BB:B4:61:DF:90:95:8F:99:DE
Authority key identifier: 8E:04:5B:FE:CD:2B:BE:24:D3:3F:53:09:DB:47:C8:AA:77:A3:B1:0C
Certificate issuer: /CN=8e045bfecd2bbe24d33f5309db47c8aa77a3b10c
Certificate serial: 019A725C900CCB39FFC009BE1D69C70F1B71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgRb_s0rviTTP1MJ20fIqnejsQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.mft
Manifest number: 13D5
Signing time: Tue 11 Nov 2025 10:01:00 +0000
Manifest this update: Tue 11 Nov 2025 10:01:00 +0000
Manifest next update: Wed 12 Nov 2025 10:01:00 +0000
Files and hashes: 1: gdU2cKMCd_BtDDJgSD2HY00mPGM.roa (hash: RJwgl5pMoPPfHnsTPxLoSvX0DBqj4aREjSsl8MZfpXk=)
2: jgRb_s0rviTTP1MJ20fIqnejsQw.crl (hash: ss8YwikZOgwqp7XiIcttPnjVNqAbsrKY5cLsZWq5C9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jgRb_s0rviTTP1MJ20fIqnejsQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:90:0c:cb:39:ff:c0:09:be:1d:69:c7:0f:1b:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e045bfecd2bbe24d33f5309db47c8aa77a3b10c
Validity
Not Before: Nov 11 10:01:00 2025 GMT
Not After : Nov 12 10:01:00 2025 GMT
Subject: CN=4cf45e888de691a863e35cbbb461df90958f99de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0c:bd:fa:3d:cc:31:8d:35:a6:1b:5d:b3:d8:
a5:8b:4d:de:86:47:c5:67:34:39:44:2e:10:f3:ae:
91:1c:de:58:f7:2d:76:18:60:a1:c0:3f:c0:eb:23:
74:5d:60:eb:5e:99:ea:4d:9d:d1:08:80:a9:70:2f:
77:03:55:19:5c:c0:ca:bd:79:2c:1a:85:45:eb:c8:
89:a0:3c:17:6f:b1:2d:8e:7f:05:a6:59:30:24:45:
59:c4:8c:89:6e:25:ca:f0:a0:92:ca:04:de:65:ac:
51:03:40:c6:b0:c3:33:e9:e3:76:a0:f4:61:c9:dc:
e8:1f:b6:f2:83:ab:0f:02:99:84:74:f8:dd:9a:15:
1e:fa:5a:7b:63:c2:26:6a:a5:7b:f0:3f:87:35:af:
49:9b:99:eb:9c:8d:0d:e6:2d:93:4a:20:00:f7:2d:
62:75:8c:24:83:09:83:0e:e5:7e:82:53:d8:4b:7b:
6e:78:6f:aa:d1:de:3e:f7:99:e1:cc:5d:cc:c4:0f:
7c:f6:f1:26:b5:d2:b6:14:6a:4f:4c:be:68:9e:b6:
e7:b0:9d:c6:a5:9e:83:d7:da:8f:b9:73:d7:f4:3c:
75:f4:31:74:37:60:9f:df:31:e9:9e:25:7e:30:7d:
dd:7b:45:39:45:9b:bd:66:78:b1:db:87:45:95:4b:
93:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F4:5E:88:8D:E6:91:A8:63:E3:5C:BB:B4:61:DF:90:95:8F:99:DE
X509v3 Authority Key Identifier:
keyid:8E:04:5B:FE:CD:2B:BE:24:D3:3F:53:09:DB:47:C8:AA:77:A3:B1:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgRb_s0rviTTP1MJ20fIqnejsQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fe59a1-2a56-4694-b4c7-d80b3c1f9d73/1/jgRb_s0rviTTP1MJ20fIqnejsQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f5:0c:90:0d:59:7f:b4:a7:f2:fd:00:ea:e4:52:5d:66:4b:
cf:d5:8e:67:f8:80:4a:22:c1:60:bf:9b:6e:f8:65:b0:29:5a:
cd:07:08:2d:4a:b5:88:3d:08:4a:6e:17:62:eb:c0:7c:db:0d:
8f:48:d8:ee:f1:ed:ff:1a:34:93:f7:cb:79:ce:49:8e:72:aa:
19:78:bb:0b:aa:45:8b:f4:61:4d:26:0f:fc:1d:36:c3:33:12:
1b:b9:01:ad:86:a1:82:c5:2c:40:a1:2d:0e:ce:34:ee:d7:b1:
b4:54:f4:09:61:70:c5:c4:14:00:91:90:46:c2:e5:51:14:03:
af:4a:cc:d0:30:e7:6b:48:6b:04:9a:bb:31:1f:ea:9e:c6:7a:
87:e0:4f:75:a7:cb:3f:d4:81:2b:db:0b:54:3a:63:e1:43:00:
21:f5:16:47:69:99:17:61:8e:d7:18:13:6a:10:a2:3a:38:27:
c8:2a:3b:92:31:a1:03:57:f0:3e:f1:95:4c:ca:24:7e:14:3e:
6d:76:20:18:ce:e9:99:62:83:97:52:97:71:c5:b5:f4:26:42:
36:ed:92:57:76:87:af:b9:10:65:d5:11:be:39:9b:49:ed:4f:
75:72:79:99:db:a5:eb:af:d3:33:8b:e2:e3:00:99:32:c4:1d:
79:1b:df:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXJAMyzn/wAm+HWnHDxtxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMDQ1YmZlY2QyYmJlMjRkMzNmNTMwOWRiNDdjOGFhNzdh
M2IxMGMwHhcNMjUxMTExMTAwMTAwWhcNMjUxMTEyMTAwMTAwWjAzMTEwLwYDVQQD
Eyg0Y2Y0NWU4ODhkZTY5MWE4NjNlMzVjYmJiNDYxZGY5MDk1OGY5OWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigy9+j3MMY01phtds9ili03ehkfF
ZzQ5RC4Q866RHN5Y9y12GGChwD/A6yN0XWDrXpnqTZ3RCICpcC93A1UZXMDKvXks
GoVF68iJoDwXb7Etjn8FplkwJEVZxIyJbiXK8KCSygTeZaxRA0DGsMMz6eN2oPRh
ydzoH7byg6sPApmEdPjdmhUe+lp7Y8ImaqV78D+HNa9Jm5nrnI0N5i2TSiAA9y1i
dYwkgwmDDuV+glPYS3tueG+q0d4+95nhzF3MxA989vEmtdK2FGpPTL5onrbnsJ3G
pZ6D19qPuXPX9Dx19DF0N2Cf3zHpniV+MH3de0U5RZu9Znix24dFlUuTjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEz0XoiN5pGoY+Ncu7Rh35CVj5neMB8GA1UdIwQY
MBaAFI4EW/7NK74k0z9TCdtHyKp3o7EMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamdSYl9zMHJ2aVRUUDFNSjIwZklxbmVqc1F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mZTU5YTEtMmE1Ni00Njk0LWI0Yzct
ZDgwYjNjMWY5ZDczLzEvamdSYl9zMHJ2aVRUUDFNSjIwZklxbmVqc1F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9mZTU5YTEtMmE1Ni00Njk0LWI0YzctZDgwYjNjMWY5ZDcz
LzEvamdSYl9zMHJ2aVRUUDFNSjIwZklxbmVqc1F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbfUMkA1Z
f7Sn8v0A6uRSXWZLz9WOZ/iASiLBYL+bbvhlsClazQcILUq1iD0ISm4XYuvAfNsN
j0jY7vHt/xo0k/fLec5JjnKqGXi7C6pFi/RhTSYP/B02wzMSG7kBrYahgsUsQKEt
Ds407textFT0CWFwxcQUAJGQRsLlURQDr0rM0DDna0hrBJq7MR/qnsZ6h+BPdafL
P9SBK9sLVDpj4UMAIfUWR2mZF2GO1xgTahCiOjgnyCo7kjGhA1fwPvGVTMokfhQ+
bXYgGM7pmWKDl1KXccW19CZCNu2SV3aHr7kQZdURvjmbSe1PdXJ5mdul66/TM4vi
4wCZMsQdeRvfeQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:13 2025 by rpki-client