Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
File: jJbGavMxyYW4WdQDs2l0wGMuHvI.mft (raw, json)
Hash identifier: bNsCrRYs3wLDlu928TRN/qYecrDbLxIPklwx/quaFfY=
Subject key identifier: 0F:72:69:6D:47:77:ED:8C:E5:49:55:37:DE:BF:1F:AC:3F:06:06:93
Authority key identifier: 8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2
Certificate issuer: /CN=8c96c66af331c985b859d403b36974c0632e1ef2
Certificate serial: 019A07B71590FF1C92E109548B0D698A5419
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
Manifest number: 16CE
Signing time: Tue 21 Oct 2025 17:00:30 +0000
Manifest this update: Tue 21 Oct 2025 17:00:30 +0000
Manifest next update: Wed 22 Oct 2025 17:00:30 +0000
Files and hashes: 1: OV-AMO3Wew1LOASAO_xSAQJuMvc.roa (hash: pDYao8tFGgol2DLvIqm+Rs+SsksTdM4poXB//8rVKls=)
2: jJbGavMxyYW4WdQDs2l0wGMuHvI.crl (hash: +BdYmdb+0i4W2owLem8JOc/WORk04jS6uq5nf5Zd890=)
3: rBSzUOINd2m6Fe0adonryiHnJmQ.roa (hash: 7uuLF1A7YhEI7aXW9wxB80gtnkWtzrOwm2g4cLYcmzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:b7:15:90:ff:1c:92:e1:09:54:8b:0d:69:8a:54:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c96c66af331c985b859d403b36974c0632e1ef2
Validity
Not Before: Oct 21 17:00:30 2025 GMT
Not After : Oct 22 17:00:30 2025 GMT
Subject: CN=0f72696d4777ed8ce5495537debf1fac3f060693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c6:e7:b3:6b:8b:a4:d6:28:cb:e6:db:4f:c6:
21:e3:b7:b7:d9:09:cc:12:96:de:78:e9:38:cf:c9:
22:98:1b:85:69:bf:8c:ef:88:c3:93:77:db:44:91:
9d:d1:05:e9:46:15:45:96:94:27:6a:17:90:ac:52:
e9:81:35:c0:fd:9a:81:eb:36:49:16:79:16:09:ba:
c3:2b:35:08:42:61:4e:6d:f8:cd:28:15:74:2c:7d:
82:fa:8e:7c:c7:00:71:49:8b:8e:14:8e:1a:2e:bc:
88:42:63:cb:e4:b5:92:d6:6b:ea:3f:d3:08:98:83:
0c:1a:30:8d:e9:7b:af:2b:db:b6:81:73:d7:75:28:
58:58:d0:3e:08:6d:d0:4f:86:37:4a:9f:a4:4c:41:
38:f3:57:ef:2b:e7:b0:0a:25:b1:df:8f:65:c2:1e:
11:0a:4d:f5:5c:4b:41:69:93:6a:94:4b:8a:db:7c:
0e:94:20:ea:d5:e8:37:33:13:17:e7:d1:09:e8:c5:
fc:c8:0e:2d:11:fd:86:ff:f1:b6:9e:ae:cb:78:30:
3a:d1:f0:9c:ef:ed:e5:38:32:2a:d1:02:61:16:41:
ac:dd:42:c0:39:19:d3:b2:68:a1:6f:84:ca:15:94:
1d:0a:0a:59:a2:58:1d:d8:29:4f:88:04:b3:b9:2e:
62:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:72:69:6D:47:77:ED:8C:E5:49:55:37:DE:BF:1F:AC:3F:06:06:93
X509v3 Authority Key Identifier:
keyid:8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:8c:cf:74:05:f8:c5:21:c7:24:00:a5:ff:35:73:4c:bc:7e:
57:35:90:ff:4d:e4:92:41:67:b2:11:a9:cb:23:87:95:2a:9d:
9e:88:5d:6d:cb:17:9f:e9:39:80:d6:4c:91:5a:fa:a4:3b:eb:
68:e8:2a:10:0a:6f:6e:43:24:20:63:b6:80:72:5c:f6:61:07:
84:37:5f:08:3d:bf:dc:89:fe:4d:eb:1e:8d:fe:fb:42:ee:20:
19:5f:1b:09:16:8b:d9:0a:9a:a5:9e:2e:6a:45:98:e5:68:ba:
2f:00:c4:98:cf:93:ec:11:7e:82:b5:08:39:3c:08:23:e7:ec:
a6:54:64:e2:b9:ad:96:e1:8d:55:9d:51:19:07:62:5f:a1:7d:
41:23:80:b7:4c:74:59:b3:4d:4b:0a:99:5c:e1:3a:8d:57:3a:
82:3b:b3:c8:bd:e8:0d:c5:2d:9e:a4:dd:48:34:4e:e7:4c:95:
31:32:cf:03:73:2c:01:c2:68:eb:98:63:1e:ac:5f:ed:98:cf:
36:0f:44:18:d4:bc:c4:f3:12:7d:46:3b:15:84:41:a7:5f:9f:
8e:1d:8e:24:81:d6:06:36:db:59:36:d0:90:55:6d:5d:11:bd:
8c:18:d5:33:60:3a:53:c8:4c:75:3e:7d:f2:e3:17:c2:38:81:
c6:d3:2c:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoHtxWQ/xyS4QlUiw1pilQZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjOTZjNjZhZjMzMWM5ODViODU5ZDQwM2IzNjk3NGMwNjMy
ZTFlZjIwHhcNMjUxMDIxMTcwMDMwWhcNMjUxMDIyMTcwMDMwWjAzMTEwLwYDVQQD
EygwZjcyNjk2ZDQ3NzdlZDhjZTU0OTU1MzdkZWJmMWZhYzNmMDYwNjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsbns2uLpNYoy+bbT8Yh47e32QnM
EpbeeOk4z8kimBuFab+M74jDk3fbRJGd0QXpRhVFlpQnaheQrFLpgTXA/ZqB6zZJ
FnkWCbrDKzUIQmFObfjNKBV0LH2C+o58xwBxSYuOFI4aLryIQmPL5LWS1mvqP9MI
mIMMGjCN6XuvK9u2gXPXdShYWNA+CG3QT4Y3Sp+kTEE481fvK+ewCiWx349lwh4R
Ck31XEtBaZNqlEuK23wOlCDq1eg3MxMX59EJ6MX8yA4tEf2G//G2nq7LeDA60fCc
7+3lODIq0QJhFkGs3ULAORnTsmihb4TKFZQdCgpZolgd2ClPiASzuS5izQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA9yaW1Hd+2M5UlVN96/H6w/BgaTMB8GA1UdIwQY
MBaAFIyWxmrzMcmFuFnUA7NpdMBjLh7yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakpiR2F2TXh5WVc0V2RRRHMybDB3R011SHZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC85N2UwNTctMGY2MC00YWFmLTlhNDgt
ODNhNDQzMTBhOTY0LzEvakpiR2F2TXh5WVc0V2RRRHMybDB3R011SHZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC85N2UwNTctMGY2MC00YWFmLTlhNDgtODNhNDQzMTBhOTY0
LzEvakpiR2F2TXh5WVc0V2RRRHMybDB3R011SHZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJYzPdAX4
xSHHJACl/zVzTLx+VzWQ/03kkkFnshGpyyOHlSqdnohdbcsXn+k5gNZMkVr6pDvr
aOgqEApvbkMkIGO2gHJc9mEHhDdfCD2/3In+Tesejf77Qu4gGV8bCRaL2QqapZ4u
akWY5Wi6LwDEmM+T7BF+grUIOTwII+fsplRk4rmtluGNVZ1RGQdiX6F9QSOAt0x0
WbNNSwqZXOE6jVc6gjuzyL3oDcUtnqTdSDRO50yVMTLPA3MsAcJo65hjHqxf7ZjP
Ng9EGNS8xPMSfUY7FYRBp1+fjh2OJIHWBjbbWTbQkFVtXRG9jBjVM2A6U8hMdT59
8uMXwjiBxtMsDA==
-----END CERTIFICATE-----
Generated at Tue Oct 21 21:20:46 2025 by rpki-client