Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
File: j9OPtNO5osfI__WXcYyQW54vhM0.mft (raw, json)
Hash identifier: XVpYxlJpHWtUhWuWlBNrj7FzHAKq7pv/FB8jwsSvOJg=
Subject key identifier: 73:0E:89:EA:8D:D9:4B:DE:6D:47:E1:E0:F7:E6:21:DD:E1:21:7B:A6
Authority key identifier: 8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD
Certificate issuer: /CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
Certificate serial: 019A0781315441A27C5518A44D938AF5B0A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
Manifest number: 16E7
Signing time: Tue 21 Oct 2025 16:01:38 +0000
Manifest this update: Tue 21 Oct 2025 16:01:38 +0000
Manifest next update: Wed 22 Oct 2025 16:01:38 +0000
Files and hashes: 1: j9OPtNO5osfI__WXcYyQW54vhM0.crl (hash: fZLPKvOIuPEYF3Eed3BSbNKMVdnk2KVdbAHxexmwTOE=)
2: vckMl2OKOufIYLA6xJgut9gT3f0.roa (hash: onDVG2ZFT5wXt5G5Co8mfB4Yy/QhekuAbPP/p4mZSXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:81:31:54:41:a2:7c:55:18:a4:4d:93:8a:f5:b0:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
Validity
Not Before: Oct 21 16:01:38 2025 GMT
Not After : Oct 22 16:01:38 2025 GMT
Subject: CN=730e89ea8dd94bde6d47e1e0f7e621dde1217ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:53:07:3a:35:23:ed:9d:9a:94:03:b0:95:27:
0f:bd:81:02:f0:0f:3a:a8:8e:88:ee:15:c8:07:e3:
54:5f:30:dd:f9:90:cb:db:4c:a8:a4:fb:44:b3:1c:
8f:c3:5e:66:19:9e:6b:29:a6:fd:3e:6a:ee:09:a4:
7a:83:3b:00:6a:61:32:99:8e:c8:e3:b5:ca:41:99:
2f:c1:29:32:52:a1:4f:0a:28:aa:c1:37:14:5f:41:
dd:13:ac:10:ce:8d:14:7a:4c:bd:0f:4e:43:42:ae:
07:f7:06:ec:c1:35:a6:51:a1:29:fa:01:05:39:74:
ab:56:cd:ca:f3:72:8a:e4:6d:27:ab:88:18:b2:67:
7e:d0:93:1b:ff:dc:60:02:2b:5c:19:fa:21:16:20:
27:63:3e:fe:1a:fd:b7:f7:fc:7e:ca:38:dd:61:11:
fc:dc:86:36:81:fb:83:a0:f3:14:7d:86:91:c0:6c:
f0:25:d6:56:3f:27:ee:73:85:37:6b:53:87:a4:01:
89:b4:19:bc:2b:98:ca:a3:3f:ff:12:b5:c2:ff:d1:
82:6c:3e:14:9d:64:47:cc:f3:8d:f5:66:19:53:19:
e5:bc:d0:a1:2f:64:c9:f1:b5:84:2f:cf:ae:0b:45:
57:aa:cd:60:54:59:47:9e:9b:b7:44:b3:fe:37:f0:
0d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:0E:89:EA:8D:D9:4B:DE:6D:47:E1:E0:F7:E6:21:DD:E1:21:7B:A6
X509v3 Authority Key Identifier:
keyid:8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:8b:94:10:62:9b:01:72:8e:4b:67:00:f3:2e:7d:93:f9:e1:
89:10:1d:2d:1f:07:52:48:81:42:d9:59:d0:06:ea:1a:60:07:
b9:5c:02:2b:a9:fa:2c:b0:a7:2e:bb:aa:19:fa:de:24:f8:a6:
94:4b:9d:d1:fd:f0:fe:ca:49:21:cb:32:cc:5f:ac:a8:63:7a:
c0:d2:7b:b5:9a:9e:82:57:3b:af:2a:42:ef:bd:7b:5d:9e:49:
99:93:9a:d3:0e:a3:a8:77:27:2a:dc:92:19:e2:f9:f9:bb:a3:
fe:1a:59:b8:66:00:c3:fa:02:f9:ef:fb:29:50:82:ef:f4:5c:
51:af:24:97:88:e9:4f:6f:cc:47:4a:70:89:b8:a3:cb:d4:a2:
8a:43:e9:b8:4c:26:5d:dc:c6:25:62:66:ed:f8:6e:f9:9f:52:
73:4e:3e:ec:11:53:e9:1c:d8:f8:ca:0f:82:b0:aa:ed:49:90:
8b:e3:92:94:21:f8:0e:26:80:82:1b:e0:99:12:b0:0f:47:2f:
7c:0b:5c:52:0c:3c:89:83:0f:40:76:8b:37:b5:6a:6b:a6:90:
78:9d:30:75:9f:68:5f:75:fc:45:66:04:03:26:be:60:c7:1d:
67:0c:07:12:4b:ee:05:d0:5c:a7:a3:d4:98:dc:55:a0:29:43:
fb:1b:49:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoHgTFUQaJ8VRikTZOK9bCjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmZDM4ZmI0ZDNiOWEyYzdjOGZmZjU5NzcxOGM5MDViOWUy
Zjg0Y2QwHhcNMjUxMDIxMTYwMTM4WhcNMjUxMDIyMTYwMTM4WjAzMTEwLwYDVQQD
Eyg3MzBlODllYThkZDk0YmRlNmQ0N2UxZTBmN2U2MjFkZGUxMjE3YmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lMHOjUj7Z2alAOwlScPvYEC8A86
qI6I7hXIB+NUXzDd+ZDL20yopPtEsxyPw15mGZ5rKab9PmruCaR6gzsAamEymY7I
47XKQZkvwSkyUqFPCiiqwTcUX0HdE6wQzo0Ueky9D05DQq4H9wbswTWmUaEp+gEF
OXSrVs3K83KK5G0nq4gYsmd+0JMb/9xgAitcGfohFiAnYz7+Gv239/x+yjjdYRH8
3IY2gfuDoPMUfYaRwGzwJdZWPyfuc4U3a1OHpAGJtBm8K5jKoz//ErXC/9GCbD4U
nWRHzPON9WYZUxnlvNChL2TJ8bWEL8+uC0VXqs1gVFlHnpu3RLP+N/ANIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHMOieqN2UvebUfh4PfmId3hIXumMB8GA1UdIwQY
MBaAFI/Tj7TTuaLHyP/1l3GMkFueL4TNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajlPUHROTzVvc2ZJX19XWGNZeVFXNTR2aE0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9iZWFmOWQtNWIyOC00ZGY0LWI2N2Qt
NmE3ZmE4MjI5NmM5LzEvajlPUHROTzVvc2ZJX19XWGNZeVFXNTR2aE0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9iZWFmOWQtNWIyOC00ZGY0LWI2N2QtNmE3ZmE4MjI5NmM5
LzEvajlPUHROTzVvc2ZJX19XWGNZeVFXNTR2aE0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWYuUEGKb
AXKOS2cA8y59k/nhiRAdLR8HUkiBQtlZ0AbqGmAHuVwCK6n6LLCnLruqGfreJPim
lEud0f3w/spJIcsyzF+sqGN6wNJ7tZqeglc7rypC7717XZ5JmZOa0w6jqHcnKtyS
GeL5+buj/hpZuGYAw/oC+e/7KVCC7/RcUa8kl4jpT2/MR0pwibijy9SiikPpuEwm
XdzGJWJm7fhu+Z9Sc04+7BFT6RzY+MoPgrCq7UmQi+OSlCH4DiaAghvgmRKwD0cv
fAtcUgw8iYMPQHaLN7Vqa6aQeJ0wdZ9oX3X8RWYEAya+YMcdZwwHEkvuBdBcp6PU
mNxVoClD+xtJVQ==
-----END CERTIFICATE-----
Generated at Tue Oct 21 18:17:29 2025 by rpki-client