Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.mft
File: jYQmVhd7QmerVeS6FlpewA9QhLw.mft (raw, json)
Hash identifier: d1K9f/bum6UK2qWkyE5BLSXKeLz0QDipZn990olTRv4=
Subject key identifier: AA:94:A7:E4:84:2F:17:D2:F6:35:1C:63:43:4B:98:6A:B7:0B:8A:85
Authority key identifier: 8D:84:26:56:17:7B:42:67:AB:55:E4:BA:16:5A:5E:C0:0F:50:84:BC
Certificate issuer: /CN=8d842656177b4267ab55e4ba165a5ec00f5084bc
Certificate serial: 019A71B80F7C40B4E1AD883F92452AD11280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYQmVhd7QmerVeS6FlpewA9QhLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 07:01:19 +0000
Manifest this update: Tue 11 Nov 2025 07:01:19 +0000
Manifest next update: Wed 12 Nov 2025 07:01:19 +0000
Files and hashes: 1: RJ12iqBIGMdg63G0MMvg2LDMix8.roa (hash: sESw+q0gARk5gtp41IohBHW+APoentCrsvNrV3WWi+U=)
2: aUmaQEWRoE1QO_xmwTCfYrd0iAI.roa (hash: KmZy81mfy9sZbmzpjyQc2GLJJhLJJJePfwOXkxp6EMc=)
3: h17YXZJyvSVJKfuRPJwacmnQTko.roa (hash: gCm2d2N9654aioOcioiAbPWA94RRy8WmG63hHdr1o54=)
4: jYQmVhd7QmerVeS6FlpewA9QhLw.crl (hash: b4/s5gqwzn5Nm/zMptcWTdLdIaMY8wMid/mmAbpQx4A=)
5: vum5ModJUNyeXtPPKIV3l7J0g94.roa (hash: zPI/RZhzXTNYTyqGgKwTajtQQ1UJGC+Yon4LK77IQPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYQmVhd7QmerVeS6FlpewA9QhLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:0f:7c:40:b4:e1:ad:88:3f:92:45:2a:d1:12:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d842656177b4267ab55e4ba165a5ec00f5084bc
Validity
Not Before: Nov 11 07:01:19 2025 GMT
Not After : Nov 12 07:01:19 2025 GMT
Subject: CN=aa94a7e4842f17d2f6351c63434b986ab70b8a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2d:fb:3f:b0:79:49:6b:df:ee:1f:20:ba:a9:
01:2f:18:6c:a6:6b:5b:b7:52:3b:3e:0f:44:2b:10:
69:e8:ca:a3:38:2e:8f:36:76:72:71:26:4a:18:0e:
80:da:27:d7:f5:8e:f5:33:b1:8c:21:33:4f:d2:49:
c7:5f:10:e2:4a:7f:55:8a:54:c1:58:c3:ec:5f:f0:
66:36:b5:bc:7e:8e:ba:55:d3:ac:62:b7:73:a6:99:
94:c2:04:9f:2d:0b:42:0b:ca:a5:47:66:16:03:16:
c1:e2:8f:be:3b:b6:c3:53:a9:33:8c:99:c6:2c:32:
ce:75:46:61:82:09:ae:91:eb:65:a7:b8:27:f0:df:
41:57:80:59:ea:de:dd:cf:be:ce:fb:80:ea:0c:88:
a7:45:51:ec:0d:1e:ef:7e:b5:0e:59:10:c2:a9:5b:
24:b0:4c:4c:6c:c8:c3:a8:9b:7f:30:7d:9c:d5:51:
af:6c:c2:25:3e:1f:b4:28:4c:3a:96:11:c7:15:82:
c3:98:e7:d4:28:78:23:80:81:97:d3:13:3d:7a:16:
67:2a:fd:a3:cd:48:00:fa:09:46:15:78:22:36:29:
e9:6c:75:1f:28:31:97:85:47:ae:0b:2c:b9:6e:26:
b3:37:35:71:b8:13:bf:60:4e:2a:55:6c:52:cf:35:
63:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:94:A7:E4:84:2F:17:D2:F6:35:1C:63:43:4B:98:6A:B7:0B:8A:85
X509v3 Authority Key Identifier:
keyid:8D:84:26:56:17:7B:42:67:AB:55:E4:BA:16:5A:5E:C0:0F:50:84:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYQmVhd7QmerVeS6FlpewA9QhLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:20:ea:dc:be:b9:d3:e4:b5:47:e4:fd:4f:c3:e4:b0:53:a9:
12:79:b1:71:b6:d5:74:e1:85:3c:63:52:6f:a9:4b:93:94:72:
ed:1e:8f:6e:0d:a4:b5:1e:7c:5a:20:b0:29:0f:91:c8:d9:83:
eb:5f:75:c1:4a:d8:3c:03:25:b2:c0:0f:a2:96:82:b0:c1:1d:
2d:f6:07:76:45:d7:f8:3d:3c:48:68:e6:d3:43:54:1d:a3:aa:
ab:85:9a:e2:96:1a:a7:e3:3b:78:72:a7:c6:e0:8b:32:d9:4a:
73:8a:18:ca:17:13:7d:d1:16:ad:04:14:e4:fc:ff:06:3f:b1:
f6:76:61:28:6f:35:e6:d5:c3:eb:f4:b8:30:11:e1:97:38:d8:
a2:c9:2e:23:4c:9c:15:f2:60:b7:7f:8f:0d:98:49:ef:92:86:
97:ba:19:c2:2f:82:94:a6:6f:0d:fb:f7:fd:b2:c2:bb:53:c9:
5c:47:3d:71:da:bd:7e:ea:23:91:87:ec:7e:eb:bd:32:bb:3a:
ab:90:76:08:d5:80:a9:0c:2b:2d:b6:ce:1c:f2:a3:47:2a:89:
3d:f6:cf:e3:29:55:24:00:92:15:31:d0:ad:29:29:87:cc:2a:
2c:d0:1a:05:d7:0c:ab:ba:29:c5:4d:60:b8:b3:4a:cf:30:6a:
c8:c8:57:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuA98QLThrYg/kkUq0RKAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkODQyNjU2MTc3YjQyNjdhYjU1ZTRiYTE2NWE1ZWMwMGY1
MDg0YmMwHhcNMjUxMTExMDcwMTE5WhcNMjUxMTEyMDcwMTE5WjAzMTEwLwYDVQQD
EyhhYTk0YTdlNDg0MmYxN2QyZjYzNTFjNjM0MzRiOTg2YWI3MGI4YTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApS37P7B5SWvf7h8guqkBLxhspmtb
t1I7Pg9EKxBp6MqjOC6PNnZycSZKGA6A2ifX9Y71M7GMITNP0knHXxDiSn9VilTB
WMPsX/BmNrW8fo66VdOsYrdzppmUwgSfLQtCC8qlR2YWAxbB4o++O7bDU6kzjJnG
LDLOdUZhggmuketlp7gn8N9BV4BZ6t7dz77O+4DqDIinRVHsDR7vfrUOWRDCqVsk
sExMbMjDqJt/MH2c1VGvbMIlPh+0KEw6lhHHFYLDmOfUKHgjgIGX0xM9ehZnKv2j
zUgA+glGFXgiNinpbHUfKDGXhUeuCyy5biazNzVxuBO/YE4qVWxSzzVjVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKqUp+SELxfS9jUcY0NLmGq3C4qFMB8GA1UdIwQY
MBaAFI2EJlYXe0Jnq1XkuhZaXsAPUIS8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvallRbVZoZDdRbWVyVmVTNkZscGV3QTlRaEx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS85MzYwZWMtOWNkMS00YzAwLTg2Njgt
OTRjMmY4MjY5ZTljLzEvallRbVZoZDdRbWVyVmVTNkZscGV3QTlRaEx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS85MzYwZWMtOWNkMS00YzAwLTg2NjgtOTRjMmY4MjY5ZTlj
LzEvallRbVZoZDdRbWVyVmVTNkZscGV3QTlRaEx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAICDq3L65
0+S1R+T9T8PksFOpEnmxcbbVdOGFPGNSb6lLk5Ry7R6Pbg2ktR58WiCwKQ+RyNmD
6191wUrYPAMlssAPopaCsMEdLfYHdkXX+D08SGjm00NUHaOqq4Wa4pYap+M7eHKn
xuCLMtlKc4oYyhcTfdEWrQQU5Pz/Bj+x9nZhKG815tXD6/S4MBHhlzjYoskuI0yc
FfJgt3+PDZhJ75KGl7oZwi+ClKZvDfv3/bLCu1PJXEc9cdq9fuojkYfsfuu9Mrs6
q5B2CNWAqQwrLbbOHPKjRyqJPfbP4ylVJACSFTHQrSkph8wqLNAaBdcMq7opxU1g
uLNKzzBqyMhX1g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:17 2025 by rpki-client