Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
File: jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft (raw, json)
Hash identifier: NsAuuPb/5NMzQHXP7EhG66JNiCQ4moIVIF7er1QCHGY=
Subject key identifier: 25:A4:5A:F9:00:4E:B4:8E:12:55:1D:86:FD:51:A4:CC:10:C4:1D:E7
Authority key identifier: 8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
Certificate issuer: /CN=8df893edf33208d7a2cf62268613769fb4967c66
Certificate serial: 019A153BED81E4E28314CBA05936476E7DC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
Manifest number: 0BEC
Signing time: Fri 24 Oct 2025 08:00:40 +0000
Manifest this update: Fri 24 Oct 2025 08:00:40 +0000
Manifest next update: Sat 25 Oct 2025 08:00:40 +0000
Files and hashes: 1: 1-wj9KbOyvPovdcQ24AKqmBV9kwI.roa (hash: A1jBMdG8oJ+zW7emB0AaCdyXMT8pXNRo6ZTMw78BX48=)
2: jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl (hash: 373CssLwyIyxARIwhGS0fqQ5AnABAYb8lfJqEvBL9eU=)
3: xX18f0QhZJoiEow8nw2LUDhmqQM.roa (hash: k5giKs19OfeOUjTUdyDT60F99ypulvNFJ0A81IYMscQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:15:3b:ed:81:e4:e2:83:14:cb:a0:59:36:47:6e:7d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df893edf33208d7a2cf62268613769fb4967c66
Validity
Not Before: Oct 24 08:00:40 2025 GMT
Not After : Oct 25 08:00:40 2025 GMT
Subject: CN=25a45af9004eb48e12551d86fd51a4cc10c41de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:da:b3:8d:96:c0:33:f6:8d:d4:19:09:b0:9c:
48:8b:62:76:17:aa:e1:59:1c:25:6d:07:6e:a5:90:
f6:f7:86:13:85:59:9a:5b:24:ab:ab:bc:7f:aa:76:
07:54:d1:5a:ac:c4:e5:60:29:9f:fa:3e:49:38:24:
68:35:2c:68:37:c8:37:97:1f:67:6a:2b:e9:55:71:
0a:ce:a3:9a:69:71:a1:b9:58:e2:2c:a7:09:ee:24:
9e:18:30:bc:06:28:cd:91:f1:3b:fc:90:a2:3c:92:
cd:13:ea:8a:22:4e:b8:49:15:fd:07:a2:89:a9:ce:
c5:06:07:e7:3b:16:b1:0a:f3:9f:6f:30:84:5f:59:
39:06:de:2c:96:8f:cd:d2:f7:6f:75:05:f2:55:e1:
1b:08:63:f1:d3:a0:73:ea:33:0a:e0:56:6d:60:70:
00:e4:4d:8b:76:57:be:c3:c0:8c:58:f4:da:72:76:
42:a1:cc:14:8e:99:68:38:87:77:2d:5c:4b:6a:64:
76:4e:14:d3:7f:47:ea:01:d3:01:77:a5:08:f8:6e:
6a:3e:33:55:ce:ac:4c:9f:2b:f5:91:85:28:25:31:
a2:05:9d:6b:e0:72:6b:7f:83:e8:17:18:f2:a5:60:
f7:0a:a4:f5:80:c6:24:77:10:e1:74:38:68:0c:b3:
62:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A4:5A:F9:00:4E:B4:8E:12:55:1D:86:FD:51:A4:CC:10:C4:1D:E7
X509v3 Authority Key Identifier:
keyid:8D:F8:93:ED:F3:32:08:D7:A2:CF:62:26:86:13:76:9F:B4:96:7C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfiT7fMyCNeiz2ImhhN2n7SWfGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/00a95d-937c-473c-a85f-f87787b1d03c/1/jfiT7fMyCNeiz2ImhhN2n7SWfGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:18:6a:e5:dd:02:98:71:ac:d3:58:be:df:01:cb:58:17:b6:
49:78:b9:d7:4b:de:fa:e3:48:69:a8:99:6a:83:0c:71:f1:8a:
56:f0:36:36:25:b5:28:74:07:1c:e1:fa:c8:b1:b8:32:77:c6:
12:7f:7b:69:1e:58:e7:f4:f3:8e:49:0a:e5:28:2e:4c:b7:71:
65:90:34:05:9a:32:89:0a:60:67:2d:0c:1e:04:b1:e0:15:4d:
1b:0b:ea:bf:1f:77:69:af:82:9f:b4:5f:a0:da:af:75:52:f0:
71:75:e5:35:b8:40:11:d7:36:0b:63:6b:81:0c:c2:38:44:06:
dc:85:f4:ba:11:7f:43:67:90:f7:aa:26:86:3a:dc:fd:0f:15:
e7:19:2d:31:c0:12:87:ba:09:b8:78:5e:e4:5a:62:e8:2f:1c:
06:c9:ca:e1:3d:79:7c:85:3f:76:0b:9c:84:d2:3c:3c:b0:d3:
89:27:e2:e8:2c:f7:50:f1:e3:86:85:4d:12:37:22:5b:f5:78:
e8:1d:05:62:1a:2b:ec:d0:12:f3:44:70:cc:06:44:46:2c:31:
e3:93:f5:d0:6d:e3:0d:f9:8c:74:9a:a0:40:14:5e:df:4c:af:
14:0e:dc:66:ff:08:40:da:ab:71:5b:ec:75:09:09:db:d8:24:
e0:3d:18:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoVO+2B5OKDFMugWTZHbn3FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkZjg5M2VkZjMzMjA4ZDdhMmNmNjIyNjg2MTM3NjlmYjQ5
NjdjNjYwHhcNMjUxMDI0MDgwMDQwWhcNMjUxMDI1MDgwMDQwWjAzMTEwLwYDVQQD
EygyNWE0NWFmOTAwNGViNDhlMTI1NTFkODZmZDUxYTRjYzEwYzQxZGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tqzjZbAM/aN1BkJsJxIi2J2F6rh
WRwlbQdupZD294YThVmaWySrq7x/qnYHVNFarMTlYCmf+j5JOCRoNSxoN8g3lx9n
aivpVXEKzqOaaXGhuVjiLKcJ7iSeGDC8BijNkfE7/JCiPJLNE+qKIk64SRX9B6KJ
qc7FBgfnOxaxCvOfbzCEX1k5Bt4slo/N0vdvdQXyVeEbCGPx06Bz6jMK4FZtYHAA
5E2Ldle+w8CMWPTacnZCocwUjploOId3LVxLamR2ThTTf0fqAdMBd6UI+G5qPjNV
zqxMnyv1kYUoJTGiBZ1r4HJrf4PoFxjypWD3CqT1gMYkdxDhdDhoDLNixwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCWkWvkATrSOElUdhv1RpMwQxB3nMB8GA1UdIwQY
MBaAFI34k+3zMgjXos9iJoYTdp+0lnxmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamZpVDdmTXlDTmVpejJJbWhoTjJuN1NXZkdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8wMGE5NWQtOTM3Yy00NzNjLWE4NWYt
Zjg3Nzg3YjFkMDNjLzEvamZpVDdmTXlDTmVpejJJbWhoTjJuN1NXZkdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8wMGE5NWQtOTM3Yy00NzNjLWE4NWYtZjg3Nzg3YjFkMDNj
LzEvamZpVDdmTXlDTmVpejJJbWhoTjJuN1NXZkdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACBhq5d0C
mHGs01i+3wHLWBe2SXi510ve+uNIaaiZaoMMcfGKVvA2NiW1KHQHHOH6yLG4MnfG
En97aR5Y5/TzjkkK5SguTLdxZZA0BZoyiQpgZy0MHgSx4BVNGwvqvx93aa+Cn7Rf
oNqvdVLwcXXlNbhAEdc2C2NrgQzCOEQG3IX0uhF/Q2eQ96omhjrc/Q8V5xktMcAS
h7oJuHhe5Fpi6C8cBsnK4T15fIU/dguchNI8PLDTiSfi6Cz3UPHjhoVNEjciW/V4
6B0FYhor7NAS80RwzAZERiwx45P10G3jDfmMdJqgQBRe30yvFA7cZv8IQNqrcVvs
dQkJ29gk4D0YGw==
-----END CERTIFICATE-----
Generated at Fri Oct 24 10:10:38 2025 by rpki-client