Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
File: JACyBgYxSFins_Kpdejp2RnsdTo.mft (raw, json)
Hash identifier: ecKUA39R5GLrcyqNYmR7yCZwrDsTVEvODrpBdSAqBHw=
Subject key identifier: CA:60:03:2C:94:E9:08:B4:66:FA:98:81:6A:7A:BC:FD:7C:BF:4A:14
Authority key identifier: 24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A
Certificate issuer: /CN=2400b20606314858a7b3f2a975e8e9d919ec753a
Certificate serial: 019A24785D17E32E6F1B7A1E6C569B9A25D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
Manifest number: 16F9
Signing time: Mon 27 Oct 2025 07:00:59 +0000
Manifest this update: Mon 27 Oct 2025 07:00:59 +0000
Manifest next update: Tue 28 Oct 2025 07:00:59 +0000
Files and hashes: 1: 1-GD2nsdz766uiKd1MTwnY1cAKLQ.roa (hash: NdaepvhGF4pwe1Tt+1kTP6lm7HfWQTHyJYxXLIGTqdM=)
2: 9WIEFZ14AFCy-NAdOjUVvXXdBBU.roa (hash: deLRvQCHRdLJ8rvzbnCEvy+iMK3pZ70ZA7pKsNUc6Aw=)
3: JACyBgYxSFins_Kpdejp2RnsdTo.crl (hash: 4kYpnzUc+f7y8fojLOA8rK+oFjlRb5Gb7PRQL+aWY+U=)
4: p8vANLQB0ph98njf_Ufjt4LTAPo.roa (hash: hC+vbzkDFnGFdm53OE/ymTBfwEaU7iAHH3KtWlLJ+q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:5d:17:e3:2e:6f:1b:7a:1e:6c:56:9b:9a:25:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2400b20606314858a7b3f2a975e8e9d919ec753a
Validity
Not Before: Oct 27 07:00:59 2025 GMT
Not After : Oct 28 07:00:59 2025 GMT
Subject: CN=ca60032c94e908b466fa98816a7abcfd7cbf4a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:08:e9:10:9c:d3:af:4b:de:8a:25:a4:18:ff:
71:46:fd:6b:7f:6d:61:db:99:c0:e5:d1:fd:db:0d:
98:eb:1c:74:47:0a:71:e4:7e:0e:b7:e1:4f:aa:16:
50:62:21:52:7e:97:c5:59:fd:5c:38:2e:1a:37:5d:
97:92:b7:2e:5b:6e:b7:56:b2:bd:85:84:84:16:85:
99:54:78:ea:74:3d:c6:ee:8c:c4:02:96:43:51:5d:
52:e7:f6:13:e0:32:71:2f:54:01:ce:e6:3d:98:2a:
5c:77:8b:91:f2:85:4c:2a:47:da:22:68:75:d0:b7:
08:26:e6:43:da:5c:4f:1b:0a:81:54:ee:55:e1:eb:
18:c4:0a:e9:07:13:db:f1:6d:5e:b9:fb:80:3f:9f:
32:fb:bb:d0:af:06:8b:82:b5:85:2f:68:bb:90:af:
d1:a2:4f:dd:52:46:12:8b:d3:27:54:1e:46:56:fb:
fd:51:8a:8f:63:82:98:b2:84:43:95:0a:25:c0:56:
f8:7c:9e:16:4b:f3:f2:7c:09:cd:51:ad:82:5d:fe:
37:6c:64:47:26:11:f8:f1:2e:16:ca:6c:32:d6:ef:
1c:ff:04:43:5d:39:a0:ab:42:49:e1:b6:9e:b9:52:
15:9e:4e:15:8d:77:2a:fe:12:99:07:6f:49:d9:2c:
33:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:60:03:2C:94:E9:08:B4:66:FA:98:81:6A:7A:BC:FD:7C:BF:4A:14
X509v3 Authority Key Identifier:
keyid:24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:70:d9:47:c0:5a:70:9a:ac:74:16:0d:37:c7:ef:7d:43:a2:
b2:48:40:97:bc:e5:8f:c5:d7:85:87:ae:4d:59:a9:ac:6f:fc:
f6:3d:ea:0c:ef:1c:7b:86:d5:60:c3:de:f9:af:3b:12:f5:2d:
d8:18:43:ef:62:00:ea:53:59:5b:b2:89:a7:38:6c:ba:25:f8:
35:d3:b1:cc:17:7e:7c:7f:33:31:a4:20:d6:9b:c4:70:84:54:
b0:d1:4c:c3:ef:91:f1:d9:bb:13:d7:99:85:39:42:3d:b0:aa:
13:cf:bc:e4:6c:1e:10:f4:34:df:5d:94:3b:65:7b:a0:0b:26:
66:ce:d4:81:5a:1d:5a:bd:aa:59:de:b9:dd:65:8e:38:5f:f7:
10:70:95:7d:be:32:e8:da:bb:0a:c4:be:8f:b8:f7:fc:99:14:
92:5b:c5:18:3d:8f:9b:41:cf:3e:04:f0:32:4a:bf:6b:0a:31:
9c:50:e6:13:37:36:19:23:2e:62:44:9c:c3:8a:92:63:19:dd:
10:7e:b0:b3:bc:9d:67:ef:2d:4a:81:c6:43:61:26:24:76:1d:
02:3f:c0:0c:dc:3a:ec:a2:2e:21:4a:6f:b3:b2:4d:1c:aa:d6:
31:e0:b2:b6:0c:e3:4f:3b:bc:e1:de:12:d4:b4:1c:25:77:5a:
15:4e:fa:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZokeF0X4y5vG3oebFabmiXXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MDBiMjA2MDYzMTQ4NThhN2IzZjJhOTc1ZThlOWQ5MTll
Yzc1M2EwHhcNMjUxMDI3MDcwMDU5WhcNMjUxMDI4MDcwMDU5WjAzMTEwLwYDVQQD
EyhjYTYwMDMyYzk0ZTkwOGI0NjZmYTk4ODE2YTdhYmNmZDdjYmY0YTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAjpEJzTr0veiiWkGP9xRv1rf21h
25nA5dH92w2Y6xx0Rwpx5H4Ot+FPqhZQYiFSfpfFWf1cOC4aN12XkrcuW263VrK9
hYSEFoWZVHjqdD3G7ozEApZDUV1S5/YT4DJxL1QBzuY9mCpcd4uR8oVMKkfaImh1
0LcIJuZD2lxPGwqBVO5V4esYxArpBxPb8W1eufuAP58y+7vQrwaLgrWFL2i7kK/R
ok/dUkYSi9MnVB5GVvv9UYqPY4KYsoRDlQolwFb4fJ4WS/PyfAnNUa2CXf43bGRH
JhH48S4Wymwy1u8c/wRDXTmgq0JJ4baeuVIVnk4VjXcq/hKZB29J2SwzCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpgAyyU6Qi0ZvqYgWp6vP18v0oUMB8GA1UdIwQY
MBaAFCQAsgYGMUhYp7PyqXXo6dkZ7HU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkFDeUJnWXhTRmluc19LcGRlanAyUm5zZFRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9kYmQ5NTEtMjU5Yi00NzU5LWE1MTkt
OWM1ZTFkZWIyYzMzLzEvSkFDeUJnWXhTRmluc19LcGRlanAyUm5zZFRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9kYmQ5NTEtMjU5Yi00NzU5LWE1MTktOWM1ZTFkZWIyYzMz
LzEvSkFDeUJnWXhTRmluc19LcGRlanAyUm5zZFRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAonDZR8Ba
cJqsdBYNN8fvfUOiskhAl7zlj8XXhYeuTVmprG/89j3qDO8ce4bVYMPe+a87EvUt
2BhD72IA6lNZW7KJpzhsuiX4NdOxzBd+fH8zMaQg1pvEcIRUsNFMw++R8dm7E9eZ
hTlCPbCqE8+85GweEPQ0312UO2V7oAsmZs7UgVodWr2qWd653WWOOF/3EHCVfb4y
6Nq7CsS+j7j3/JkUklvFGD2Pm0HPPgTwMkq/awoxnFDmEzc2GSMuYkScw4qSYxnd
EH6ws7ydZ+8tSoHGQ2EmJHYdAj/ADNw67KIuIUpvs7JNHKrWMeCytgzjTzu84d4S
1LQcJXdaFU76MQ==
-----END CERTIFICATE-----
Generated at Mon Oct 27 17:03:34 2025 by rpki-client