Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.mft
File: Jq19NWATTgqK5G_Fsyxay2Hd45w.mft (raw, json)
Hash identifier: 4UzvXp7NVxqvrd8mTKfxvy9KOnVQWkj7XvZ34K36QiU=
Subject key identifier: 25:DD:86:CD:5E:BC:DE:1F:2D:87:E2:12:EA:B6:B1:A5:9E:4C:96:83
Authority key identifier: 26:AD:7D:35:60:13:4E:0A:8A:E4:6F:C5:B3:2C:5A:CB:61:DD:E3:9C
Certificate issuer: /CN=26ad7d3560134e0a8ae46fc5b32c5acb61dde39c
Certificate serial: 019A722617ECDE5DD52E65E2799D51FD5A31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jq19NWATTgqK5G_Fsyxay2Hd45w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.mft
Manifest number: 1249
Signing time: Tue 11 Nov 2025 09:01:30 +0000
Manifest this update: Tue 11 Nov 2025 09:01:30 +0000
Manifest next update: Wed 12 Nov 2025 09:01:30 +0000
Files and hashes: 1: Jq19NWATTgqK5G_Fsyxay2Hd45w.crl (hash: zL047AbfsAQkHp7mMz45fwfGSKOSiptRTvgmZbPy1zg=)
2: roPnxkS_TI_SjXTipSKY7TP-VJU.roa (hash: CNJacRI5tOOEcZvKvjPl2ycQI2Rr4ol7MTIxvtqeEhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jq19NWATTgqK5G_Fsyxay2Hd45w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:17:ec:de:5d:d5:2e:65:e2:79:9d:51:fd:5a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26ad7d3560134e0a8ae46fc5b32c5acb61dde39c
Validity
Not Before: Nov 11 09:01:30 2025 GMT
Not After : Nov 12 09:01:30 2025 GMT
Subject: CN=25dd86cd5ebcde1f2d87e212eab6b1a59e4c9683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fc:b2:61:68:84:96:b7:2d:fa:d5:78:69:f7:
7f:f8:f4:2f:ea:1b:9d:3b:e1:69:b5:f1:83:6a:37:
33:ec:66:0c:d8:af:ef:88:90:5c:98:9e:1c:f1:b1:
d3:7b:bf:9d:f3:cf:21:af:b2:7d:23:f9:ad:be:37:
38:1d:3f:16:34:4c:39:81:08:d7:ad:e1:15:17:74:
ec:db:93:e0:23:a9:86:33:e3:4e:b3:36:12:f9:5d:
af:55:d8:2b:1f:84:83:66:88:43:78:06:3a:07:a3:
e8:d3:12:57:65:32:7f:08:aa:1a:1d:2d:e4:23:ae:
78:2c:84:ff:25:e8:06:4d:50:4c:94:33:2b:47:f6:
0d:64:6e:66:88:e1:0b:27:95:1f:ac:d6:42:fc:44:
c3:d8:82:ec:45:03:c8:9b:12:f9:df:ba:bc:51:aa:
a2:cb:bf:b0:b1:e6:f7:26:24:0e:28:a5:62:83:5d:
3e:91:39:fb:5c:82:bb:52:cc:13:55:17:7c:94:31:
07:6e:1b:2b:e8:61:33:f0:a7:d7:34:d5:c1:81:bf:
54:a9:cc:21:b8:f4:25:1d:c0:52:d5:a8:fc:ee:1a:
a7:69:b7:2f:a2:c9:25:c0:15:e0:61:03:d4:7f:63:
53:58:a1:7c:30:92:47:8c:bb:5d:b1:a1:5b:8b:51:
69:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DD:86:CD:5E:BC:DE:1F:2D:87:E2:12:EA:B6:B1:A5:9E:4C:96:83
X509v3 Authority Key Identifier:
keyid:26:AD:7D:35:60:13:4E:0A:8A:E4:6F:C5:B3:2C:5A:CB:61:DD:E3:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jq19NWATTgqK5G_Fsyxay2Hd45w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/98fcb5-87a7-4fde-9847-4902a66b2d95/1/Jq19NWATTgqK5G_Fsyxay2Hd45w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:6c:5f:27:35:63:0d:0c:50:08:15:6e:8a:81:d0:c1:85:67:
1b:2c:ac:27:1d:31:23:90:86:2b:70:62:da:ff:88:05:e2:c6:
2d:1a:85:82:2f:d3:1f:44:60:ab:7a:2c:21:37:39:57:96:3b:
fb:fb:af:c2:d1:a2:5e:ec:15:1f:71:c3:ec:4d:47:23:dd:03:
db:c7:7e:07:ca:ce:e0:f0:8a:7b:00:d1:80:d6:9a:87:d3:67:
4e:c4:63:7b:a6:27:22:b0:8d:ac:83:39:be:95:0b:4a:77:06:
90:72:25:4f:97:da:3b:80:f3:95:5b:e4:26:92:49:d5:38:a5:
27:18:b8:75:1f:aa:33:e2:a9:fb:df:46:90:65:a2:fe:0f:c0:
f7:2b:ac:9a:26:b0:94:63:47:ad:dd:9e:f1:25:39:eb:93:f6:
8f:d2:57:48:ab:fc:52:e8:f6:be:99:e4:95:b8:d8:a9:d8:02:
1b:fb:de:71:0b:0e:85:a0:6f:65:b6:ee:e3:19:f1:18:c2:f6:
3b:ff:5b:03:93:14:4a:f0:c7:93:79:8a:55:50:a8:56:96:6e:
be:bb:88:84:68:67:ed:df:1e:ac:aa:f4:84:c4:3b:d8:56:cd:
e0:c2:75:0a:ee:b7:70:8c:f6:c4:0a:af:19:af:59:49:c3:a7:
30:6c:3d:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJhfs3l3VLmXieZ1R/VoxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2YWQ3ZDM1NjAxMzRlMGE4YWU0NmZjNWIzMmM1YWNiNjFk
ZGUzOWMwHhcNMjUxMTExMDkwMTMwWhcNMjUxMTEyMDkwMTMwWjAzMTEwLwYDVQQD
EygyNWRkODZjZDVlYmNkZTFmMmQ4N2UyMTJlYWI2YjFhNTllNGM5NjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvyyYWiElrct+tV4afd/+PQv6hud
O+FptfGDajcz7GYM2K/viJBcmJ4c8bHTe7+d888hr7J9I/mtvjc4HT8WNEw5gQjX
reEVF3Ts25PgI6mGM+NOszYS+V2vVdgrH4SDZohDeAY6B6Po0xJXZTJ/CKoaHS3k
I654LIT/JegGTVBMlDMrR/YNZG5miOELJ5UfrNZC/ETD2ILsRQPImxL537q8Uaqi
y7+wseb3JiQOKKVig10+kTn7XIK7UswTVRd8lDEHbhsr6GEz8KfXNNXBgb9Uqcwh
uPQlHcBS1aj87hqnabcvosklwBXgYQPUf2NTWKF8MJJHjLtdsaFbi1FpVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXdhs1evN4fLYfiEuq2saWeTJaDMB8GA1UdIwQY
MBaAFCatfTVgE04KiuRvxbMsWsth3eOcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnExOU5XQVRUZ3FLNUdfRnN5eGF5MkhkNDV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni85OGZjYjUtODdhNy00ZmRlLTk4NDct
NDkwMmE2NmIyZDk1LzEvSnExOU5XQVRUZ3FLNUdfRnN5eGF5MkhkNDV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni85OGZjYjUtODdhNy00ZmRlLTk4NDctNDkwMmE2NmIyZDk1
LzEvSnExOU5XQVRUZ3FLNUdfRnN5eGF5MkhkNDV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsGxfJzVj
DQxQCBVuioHQwYVnGyysJx0xI5CGK3Bi2v+IBeLGLRqFgi/TH0Rgq3osITc5V5Y7
+/uvwtGiXuwVH3HD7E1HI90D28d+B8rO4PCKewDRgNaah9NnTsRje6YnIrCNrIM5
vpULSncGkHIlT5faO4DzlVvkJpJJ1TilJxi4dR+qM+Kp+99GkGWi/g/A9yusmiaw
lGNHrd2e8SU565P2j9JXSKv8Uuj2vpnklbjYqdgCG/vecQsOhaBvZbbu4xnxGML2
O/9bA5MUSvDHk3mKVVCoVpZuvruIhGhn7d8erKr0hMQ72FbN4MJ1Cu63cIz2xAqv
Ga9ZScOnMGw9GQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:16:42 2025 by rpki-client