Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
File: rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft (raw, json)
Hash identifier: rnKIrqujsmcdVCLntSkICvwyGLG6iaK+xfBTAbhOd8E=
Subject key identifier: 42:11:BA:43:C9:14:93:8B:14:10:9F:82:83:57:EE:98:A6:A3:49:7F
Authority key identifier: AC:9B:BF:9F:62:33:13:EB:2B:18:27:35:0B:45:A9:BA:1F:D9:DA:5F
Certificate issuer: /CN=ac9bbf9f623313eb2b1827350b45a9ba1fd9da5f
Certificate serial: 019A149701B418744B0D447F49E8E9FEAF11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
Manifest number: 09B8
Signing time: Fri 24 Oct 2025 05:00:31 +0000
Manifest this update: Fri 24 Oct 2025 05:00:31 +0000
Manifest next update: Sat 25 Oct 2025 05:00:31 +0000
Files and hashes: 1: _b7M-LJZ_tgzm06q310PQK8P-dc.roa (hash: EU4c1+xBQnsr3M4TasO9azjbcbW1du8HvfbmrR1EzRQ=)
2: rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl (hash: C1jCs9yjUE8nM5i9EGsziCGIEgLGAoLvfP1TX42Ns40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:14:97:01:b4:18:74:4b:0d:44:7f:49:e8:e9:fe:af:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9bbf9f623313eb2b1827350b45a9ba1fd9da5f
Validity
Not Before: Oct 24 05:00:31 2025 GMT
Not After : Oct 25 05:00:31 2025 GMT
Subject: CN=4211ba43c914938b14109f828357ee98a6a3497f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3e:ee:75:c4:1d:17:7f:c8:a5:d9:bd:b0:49:
3c:45:44:2e:ef:23:67:71:a7:c1:f9:84:89:89:18:
03:e8:84:da:04:5d:c5:72:05:2e:b9:86:4a:c4:55:
9e:65:26:e6:e9:ce:75:35:fa:a1:5d:d5:b8:32:86:
69:0c:73:08:80:47:c3:ea:98:72:92:eb:22:c6:29:
b0:2d:bf:bf:70:e7:a9:05:cf:78:1e:f5:a4:cf:04:
e8:42:84:f6:00:71:b0:9c:a9:72:ef:79:5a:c8:60:
c2:3a:72:88:05:6b:c6:56:17:3c:32:a3:bb:16:4c:
be:06:73:4f:96:63:ae:8d:4b:48:9c:a7:d8:5f:8c:
d9:c1:b5:ea:7e:32:88:fe:7f:a4:bf:bc:a3:61:c8:
35:fe:bc:30:c0:53:fa:bc:b3:51:df:2f:86:73:1d:
3d:a2:d9:07:b0:09:31:89:7a:04:7c:03:7f:79:6d:
f2:07:eb:d6:0d:ef:67:e2:df:da:35:e0:99:5d:1c:
58:2e:29:f2:aa:88:81:08:af:dc:c9:b4:de:1c:e9:
50:29:6c:8e:c6:aa:ba:9a:fc:06:5d:74:67:e6:7f:
55:d2:78:2a:0f:48:52:9d:0a:73:9c:96:f3:01:95:
00:f3:f1:ba:dd:9c:4e:53:2a:92:45:42:6c:68:28:
ca:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:11:BA:43:C9:14:93:8B:14:10:9F:82:83:57:EE:98:A6:A3:49:7F
X509v3 Authority Key Identifier:
keyid:AC:9B:BF:9F:62:33:13:EB:2B:18:27:35:0B:45:A9:BA:1F:D9:DA:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c7b573-2768-473c-a5c4-57ef7fee759c/1/rJu_n2IzE-srGCc1C0Wpuh_Z2l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:5a:41:3e:0f:c1:49:44:a8:07:a2:91:98:fe:f1:9f:5d:05:
90:19:44:ae:3d:93:27:f3:d1:fb:1e:73:1c:d5:11:49:35:0f:
6c:d4:d4:6c:eb:df:97:9a:9f:1a:1e:f3:ec:c9:31:72:c2:e1:
7f:be:e9:7b:de:f7:7d:76:27:78:da:d3:43:23:c6:c8:4d:d2:
55:33:23:e1:5d:9d:35:5e:42:62:63:46:af:6d:77:dd:c0:87:
a7:d6:60:6a:fe:07:23:ac:b5:e7:c7:d3:69:62:f1:18:30:c3:
2b:fc:50:ff:6b:aa:03:08:2c:58:97:e2:7c:8c:d8:ca:65:1b:
6a:14:00:b2:b4:1e:f7:55:0f:f8:54:e7:57:6d:10:3d:a3:d7:
a6:16:24:e8:2f:ba:9a:de:a2:34:21:18:75:86:e5:20:8b:1a:
d3:a5:ea:a3:fe:4b:27:03:98:15:11:0d:5a:e4:68:17:f6:1a:
b0:48:04:f5:a5:41:5b:2c:f5:6f:a4:60:1a:ba:a8:88:7e:6c:
5b:9b:6d:bb:85:f6:7b:ae:46:74:6b:1d:e0:78:98:ab:80:13:
46:f7:b7:07:ac:3a:3e:f4:c3:cc:c0:b5:2a:74:fe:13:e6:04:
46:55:ca:b4:9c:67:bc:6e:8c:26:f1:7e:9e:f0:8c:36:e4:19:
ae:98:3d:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoUlwG0GHRLDUR/Sejp/q8RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjOWJiZjlmNjIzMzEzZWIyYjE4MjczNTBiNDVhOWJhMWZk
OWRhNWYwHhcNMjUxMDI0MDUwMDMxWhcNMjUxMDI1MDUwMDMxWjAzMTEwLwYDVQQD
Eyg0MjExYmE0M2M5MTQ5MzhiMTQxMDlmODI4MzU3ZWU5OGE2YTM0OTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtT7udcQdF3/Ipdm9sEk8RUQu7yNn
cafB+YSJiRgD6ITaBF3FcgUuuYZKxFWeZSbm6c51NfqhXdW4MoZpDHMIgEfD6phy
kusiximwLb+/cOepBc94HvWkzwToQoT2AHGwnKly73layGDCOnKIBWvGVhc8MqO7
Fky+BnNPlmOujUtInKfYX4zZwbXqfjKI/n+kv7yjYcg1/rwwwFP6vLNR3y+Gcx09
otkHsAkxiXoEfAN/eW3yB+vWDe9n4t/aNeCZXRxYLinyqoiBCK/cybTeHOlQKWyO
xqq6mvwGXXRn5n9V0ngqD0hSnQpznJbzAZUA8/G63ZxOUyqSRUJsaCjKcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIRukPJFJOLFBCfgoNX7pimo0l/MB8GA1UdIwQY
MBaAFKybv59iMxPrKxgnNQtFqbof2dpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckp1X24ySXpFLXNyR0NjMUMwV3B1aF9aMmw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jN2I1NzMtMjc2OC00NzNjLWE1YzQt
NTdlZjdmZWU3NTljLzEvckp1X24ySXpFLXNyR0NjMUMwV3B1aF9aMmw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9jN2I1NzMtMjc2OC00NzNjLWE1YzQtNTdlZjdmZWU3NTlj
LzEvckp1X24ySXpFLXNyR0NjMUMwV3B1aF9aMmw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZlpBPg/B
SUSoB6KRmP7xn10FkBlErj2TJ/PR+x5zHNURSTUPbNTUbOvfl5qfGh7z7MkxcsLh
f77pe973fXYneNrTQyPGyE3SVTMj4V2dNV5CYmNGr2133cCHp9Zgav4HI6y158fT
aWLxGDDDK/xQ/2uqAwgsWJfifIzYymUbahQAsrQe91UP+FTnV20QPaPXphYk6C+6
mt6iNCEYdYblIIsa06Xqo/5LJwOYFRENWuRoF/YasEgE9aVBWyz1b6RgGrqoiH5s
W5ttu4X2e65GdGsd4HiYq4ATRve3B6w6PvTDzMC1KnT+E+YERlXKtJxnvG6MJvF+
nvCMNuQZrpg9jQ==
-----END CERTIFICATE-----
Generated at Fri Oct 24 11:45:35 2025 by rpki-client