Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/9b0ed7-9fd6-4ca6-a575-36aa91069cbd/1/jZCoyIbumsQjhhb5JjHruLx243E.mft
File: jZCoyIbumsQjhhb5JjHruLx243E.mft (raw, json)
Hash identifier: GXEHKDuSQNBuTFGripG1VLJLsWGpT9ll2GytcBRRHN8=
Subject key identifier: D8:54:D2:5A:E2:37:5E:6E:F8:75:DE:E7:DE:41:07:4E:6A:57:5F:5A
Authority key identifier: 8D:90:A8:C8:86:EE:9A:C4:23:86:16:F9:26:31:EB:B8:BC:76:E3:71
Certificate issuer: /CN=8d90a8c886ee9ac4238616f92631ebb8bc76e371
Certificate serial: 019A72938388E030582F6BEFA7EF114C263F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZCoyIbumsQjhhb5JjHruLx243E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/9b0ed7-9fd6-4ca6-a575-36aa91069cbd/1/jZCoyIbumsQjhhb5JjHruLx243E.mft
Manifest number: DD
Signing time: Tue 11 Nov 2025 11:01:01 +0000
Manifest this update: Tue 11 Nov 2025 11:01:01 +0000
Manifest next update: Wed 12 Nov 2025 11:01:01 +0000
Files and hashes: 1: jZCoyIbumsQjhhb5JjHruLx243E.crl (hash: 4OiAsZpk2eTOiwnhufSDZzW+70PQFMkpOV4jYOrqpmQ=)
2: usm9wn0ranV8cJoAdmlA0D2Pk2s.roa (hash: lnjChVLXxICPBgsN6v1LDI5Ki8JFy1bjGXMD/7hIN1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/9b0ed7-9fd6-4ca6-a575-36aa91069cbd/1/jZCoyIbumsQjhhb5JjHruLx243E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/9b0ed7-9fd6-4ca6-a575-36aa91069cbd/1/jZCoyIbumsQjhhb5JjHruLx243E.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZCoyIbumsQjhhb5JjHruLx243E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:83:88:e0:30:58:2f:6b:ef:a7:ef:11:4c:26:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d90a8c886ee9ac4238616f92631ebb8bc76e371
Validity
Not Before: Nov 11 11:01:01 2025 GMT
Not After : Nov 12 11:01:01 2025 GMT
Subject: CN=d854d25ae2375e6ef875dee7de41074e6a575f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d6:b3:cf:26:19:e5:07:bb:98:15:b5:3b:ef:
cb:d1:69:61:22:b6:0b:e4:0d:1b:65:a5:75:0d:d9:
6c:f7:d0:42:b6:e3:f6:49:2a:a4:52:9d:f9:7b:6a:
ec:76:60:ee:8c:63:0a:fa:30:c4:e4:b8:5f:c3:98:
88:d5:e1:b2:9e:eb:24:82:d8:76:a0:99:7c:ec:35:
b5:ae:5b:b6:6c:a5:1a:37:f4:da:6f:ab:6a:98:a4:
c0:fb:ad:e6:ac:65:da:ba:9a:78:57:7d:27:aa:82:
2e:6a:8a:ca:7d:c2:3d:82:fb:09:18:90:ca:82:02:
e9:d4:ce:48:24:72:e7:23:c7:08:6d:9d:9d:bf:73:
9f:a6:bd:e8:96:0c:3a:46:93:53:b6:b2:af:bf:bc:
bd:c6:7d:09:47:4e:21:98:f5:ac:ff:66:97:14:25:
4b:a2:ae:1f:52:8f:66:2f:d1:49:c1:c3:25:32:fa:
d3:ab:c5:dd:3b:f5:03:7b:0f:07:84:a8:38:ba:2c:
aa:7d:f2:e5:ee:40:80:a5:21:8c:a9:18:b0:78:3c:
f4:67:cb:44:32:0b:da:e1:60:a5:ef:4a:e6:8f:94:
f5:dd:ef:13:e3:60:72:45:6e:12:98:f6:20:ef:fb:
c4:c6:d3:5a:67:b7:f7:14:5f:42:ba:7e:29:e5:3f:
ed:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:54:D2:5A:E2:37:5E:6E:F8:75:DE:E7:DE:41:07:4E:6A:57:5F:5A
X509v3 Authority Key Identifier:
keyid:8D:90:A8:C8:86:EE:9A:C4:23:86:16:F9:26:31:EB:B8:BC:76:E3:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZCoyIbumsQjhhb5JjHruLx243E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9b0ed7-9fd6-4ca6-a575-36aa91069cbd/1/jZCoyIbumsQjhhb5JjHruLx243E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9b0ed7-9fd6-4ca6-a575-36aa91069cbd/1/jZCoyIbumsQjhhb5JjHruLx243E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:cf:f4:76:42:16:51:5b:75:56:e7:6b:f5:1b:26:47:4e:08:
4b:34:63:3a:bd:ad:19:1f:5e:0f:30:b6:d6:dd:a4:34:78:c0:
5b:d6:92:bd:eb:50:86:0f:4a:f1:39:37:e9:19:41:29:d6:c3:
fe:24:a0:db:db:77:b2:b4:59:7a:a2:3a:4d:81:27:00:89:cf:
26:6a:97:17:ee:8b:76:b5:1b:77:cf:55:d5:5b:db:36:f3:96:
84:ba:28:37:f5:b0:11:bd:8e:b2:c8:55:24:e9:c0:c2:31:ac:
39:77:53:55:99:f7:4d:7c:2c:05:5a:40:57:9b:62:8e:7e:a4:
60:0c:cf:04:f2:7c:ab:12:e5:5d:e4:dc:4f:6d:32:5b:90:72:
08:04:f5:a3:99:68:92:0c:5b:8b:9b:20:07:ca:de:4c:7d:9b:
85:27:b6:5b:43:35:4f:9a:12:bd:36:14:68:c8:1e:84:35:29:
f9:bb:83:cb:c8:47:a9:97:25:36:20:54:46:01:90:58:f9:d4:
36:9b:29:36:44:0f:af:a3:9d:95:4c:2b:c0:76:a1:46:b7:b7:
43:56:a5:53:38:a4:a4:53:4f:1b:58:d6:5d:47:33:87:6a:83:
50:54:2c:e1:ab:eb:af:a7:fd:c9:21:77:38:0f:9a:95:3a:e2:
33:d1:11:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk4OI4DBYL2vvp+8RTCY/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkOTBhOGM4ODZlZTlhYzQyMzg2MTZmOTI2MzFlYmI4YmM3
NmUzNzEwHhcNMjUxMTExMTEwMTAxWhcNMjUxMTEyMTEwMTAxWjAzMTEwLwYDVQQD
EyhkODU0ZDI1YWUyMzc1ZTZlZjg3NWRlZTdkZTQxMDc0ZTZhNTc1ZjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9azzyYZ5Qe7mBW1O+/L0WlhIrYL
5A0bZaV1Ddls99BCtuP2SSqkUp35e2rsdmDujGMK+jDE5Lhfw5iI1eGynuskgth2
oJl87DW1rlu2bKUaN/Tab6tqmKTA+63mrGXaupp4V30nqoIuaorKfcI9gvsJGJDK
ggLp1M5IJHLnI8cIbZ2dv3Ofpr3olgw6RpNTtrKvv7y9xn0JR04hmPWs/2aXFCVL
oq4fUo9mL9FJwcMlMvrTq8XdO/UDew8HhKg4uiyqffLl7kCApSGMqRiweDz0Z8tE
Mgva4WCl70rmj5T13e8T42ByRW4SmPYg7/vExtNaZ7f3FF9Cun4p5T/tBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNhU0lriN15u+HXe595BB05qV19aMB8GA1UdIwQY
MBaAFI2QqMiG7prEI4YW+SYx67i8duNxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalpDb3lJYnVtc1FqaGhiNUpqSHJ1THgyNDNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC85YjBlZDctOWZkNi00Y2E2LWE1NzUt
MzZhYTkxMDY5Y2JkLzEvalpDb3lJYnVtc1FqaGhiNUpqSHJ1THgyNDNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC85YjBlZDctOWZkNi00Y2E2LWE1NzUtMzZhYTkxMDY5Y2Jk
LzEvalpDb3lJYnVtc1FqaGhiNUpqSHJ1THgyNDNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf8/0dkIW
UVt1Vudr9RsmR04ISzRjOr2tGR9eDzC21t2kNHjAW9aSvetQhg9K8Tk36RlBKdbD
/iSg29t3srRZeqI6TYEnAInPJmqXF+6LdrUbd89V1VvbNvOWhLooN/WwEb2OsshV
JOnAwjGsOXdTVZn3TXwsBVpAV5tijn6kYAzPBPJ8qxLlXeTcT20yW5ByCAT1o5lo
kgxbi5sgB8reTH2bhSe2W0M1T5oSvTYUaMgehDUp+buDy8hHqZclNiBURgGQWPnU
NpspNkQPr6OdlUwrwHahRre3Q1alUzikpFNPG1jWXUczh2qDUFQs4avrr6f9ySF3
OA+alTriM9ERbw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:25 2025 by rpki-client