Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft
File: jEjc7LvMBSxln5cWCSKeNlaj2VY.mft (raw, json)
Hash identifier: OvVAyZ4qlHIbDqRMp+WtvmPmodSNez0StX/ZIYQ0Qgs=
Subject key identifier: D1:DA:6B:91:25:FE:6A:98:01:F0:3A:29:05:BD:4A:BF:84:46:E5:35
Authority key identifier: 8C:48:DC:EC:BB:CC:05:2C:65:9F:97:16:09:22:9E:36:56:A3:D9:56
Certificate issuer: /CN=8c48dcecbbcc052c659f971609229e3656a3d956
Certificate serial: 019A71B7DEA0B487EDD00D0D1BA517F5D359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jEjc7LvMBSxln5cWCSKeNlaj2VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft
Manifest number: 063C
Signing time: Tue 11 Nov 2025 07:01:06 +0000
Manifest this update: Tue 11 Nov 2025 07:01:06 +0000
Manifest next update: Wed 12 Nov 2025 07:01:06 +0000
Files and hashes: 1: 9Ikrgii6aWEfsxAWAi789vrE9wg.roa (hash: iLnyK1Sj4Jg60yb2gV/nuNI+npfH3YvqxRf21D1k0LY=)
2: jEjc7LvMBSxln5cWCSKeNlaj2VY.crl (hash: u1EgUHpZd4IwaUDL/b2qeJSY9eks9G/GEoltxjoiMK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jEjc7LvMBSxln5cWCSKeNlaj2VY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:de:a0:b4:87:ed:d0:0d:0d:1b:a5:17:f5:d3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c48dcecbbcc052c659f971609229e3656a3d956
Validity
Not Before: Nov 11 07:01:06 2025 GMT
Not After : Nov 12 07:01:06 2025 GMT
Subject: CN=d1da6b9125fe6a9801f03a2905bd4abf8446e535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:60:04:1e:8d:fb:41:55:c3:32:1e:79:fb:ed:
7d:e7:3a:0b:b2:76:b9:04:e4:7e:2e:b1:32:20:06:
6a:e2:98:7b:c9:c0:a7:87:0b:4f:38:75:fc:50:ed:
cd:f3:d1:2f:f2:74:19:91:26:a0:4a:33:b9:c7:68:
f3:41:a2:f4:60:8f:09:0c:9f:c7:e0:3c:d2:26:1b:
1a:b3:9e:d4:9d:11:55:57:4e:ac:49:bf:59:93:81:
62:2c:57:35:10:2e:d0:f0:3b:ce:4e:10:de:fd:52:
a7:38:ca:d5:e3:84:1f:f2:9c:a9:d0:59:c8:d4:17:
05:e1:18:7f:ac:a3:68:33:85:42:eb:7b:ec:f0:e5:
08:a5:e9:d5:94:13:57:9e:5c:5b:53:47:de:bf:43:
9f:ad:a0:d3:65:99:95:77:c1:63:f9:31:30:7b:32:
00:b6:17:48:e6:a5:ab:70:52:61:d6:29:b5:29:a3:
e5:16:e4:e7:21:9e:31:5f:f1:00:30:a3:42:18:99:
9a:68:11:7d:33:5d:fa:d5:95:00:a4:10:ff:6b:79:
ba:9f:31:8a:18:d3:5d:8a:03:23:14:79:cc:37:fd:
3d:80:4f:05:86:ea:62:a8:72:38:1b:57:0f:45:cd:
00:ab:4e:a7:3e:fc:48:fb:89:d4:f2:b0:78:a1:30:
77:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DA:6B:91:25:FE:6A:98:01:F0:3A:29:05:BD:4A:BF:84:46:E5:35
X509v3 Authority Key Identifier:
keyid:8C:48:DC:EC:BB:CC:05:2C:65:9F:97:16:09:22:9E:36:56:A3:D9:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jEjc7LvMBSxln5cWCSKeNlaj2VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0dd668-9725-48bc-80f6-15b0185e7a79/1/jEjc7LvMBSxln5cWCSKeNlaj2VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:11:5e:3d:da:e7:a9:62:4a:cc:53:70:54:ec:e2:2b:bd:8d:
20:4f:eb:2a:d7:8e:e7:75:dd:c1:f7:ef:c0:75:44:e3:87:67:
ba:48:cd:dd:ef:57:60:aa:a4:45:36:a8:65:bd:29:27:eb:d8:
9c:43:d7:eb:e6:55:31:82:f5:6f:f6:e2:61:d7:f8:35:67:b2:
84:e4:cb:82:b1:36:21:99:85:dd:81:11:1b:fe:cd:f1:a4:d5:
ff:56:9f:13:c5:c1:df:a0:c2:26:84:c7:c8:5e:80:36:c8:cd:
5f:a5:22:96:d7:16:35:ae:33:e2:29:91:31:43:31:fc:cc:c8:
64:4f:a8:3d:55:fa:61:e0:8a:39:59:f3:a7:24:a1:51:96:17:
44:23:b6:0b:15:e2:43:26:a9:9c:de:8b:48:b8:38:e2:18:50:
36:17:b8:64:97:e1:1c:97:0f:84:bb:e4:b6:8c:a6:0d:6a:0a:
3e:f5:a6:e3:00:18:5c:cf:84:59:95:c0:db:22:f4:1f:a6:38:
70:ad:1a:44:fb:e7:3d:c5:cc:c0:cb:5c:97:46:c5:70:d7:0d:
9e:a8:95:9a:61:ab:60:74:a6:95:4d:87:89:89:43:7d:a8:7d:
97:ca:f4:a8:ac:34:62:44:ff:e9:d0:90:8f:1d:6d:a8:f4:59:
9e:8d:18:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt96gtIft0A0NG6UX9dNZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjNDhkY2VjYmJjYzA1MmM2NTlmOTcxNjA5MjI5ZTM2NTZh
M2Q5NTYwHhcNMjUxMTExMDcwMTA2WhcNMjUxMTEyMDcwMTA2WjAzMTEwLwYDVQQD
EyhkMWRhNmI5MTI1ZmU2YTk4MDFmMDNhMjkwNWJkNGFiZjg0NDZlNTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mAEHo37QVXDMh55++195zoLsna5
BOR+LrEyIAZq4ph7ycCnhwtPOHX8UO3N89Ev8nQZkSagSjO5x2jzQaL0YI8JDJ/H
4DzSJhsas57UnRFVV06sSb9Zk4FiLFc1EC7Q8DvOThDe/VKnOMrV44Qf8pyp0FnI
1BcF4Rh/rKNoM4VC63vs8OUIpenVlBNXnlxbU0fev0OfraDTZZmVd8Fj+TEwezIA
thdI5qWrcFJh1im1KaPlFuTnIZ4xX/EAMKNCGJmaaBF9M1361ZUApBD/a3m6nzGK
GNNdigMjFHnMN/09gE8FhupiqHI4G1cPRc0Aq06nPvxI+4nU8rB4oTB3GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHaa5El/mqYAfA6KQW9Sr+ERuU1MB8GA1UdIwQY
MBaAFIxI3Oy7zAUsZZ+XFgkinjZWo9lWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakVqYzdMdk1CU3hsbjVjV0NTS2VObGFqMlZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wZGQ2NjgtOTcyNS00OGJjLTgwZjYt
MTViMDE4NWU3YTc5LzEvakVqYzdMdk1CU3hsbjVjV0NTS2VObGFqMlZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wZGQ2NjgtOTcyNS00OGJjLTgwZjYtMTViMDE4NWU3YTc5
LzEvakVqYzdMdk1CU3hsbjVjV0NTS2VObGFqMlZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfBFePdrn
qWJKzFNwVOziK72NIE/rKteO53XdwffvwHVE44dnukjN3e9XYKqkRTaoZb0pJ+vY
nEPX6+ZVMYL1b/biYdf4NWeyhOTLgrE2IZmF3YERG/7N8aTV/1afE8XB36DCJoTH
yF6ANsjNX6UiltcWNa4z4imRMUMx/MzIZE+oPVX6YeCKOVnzpyShUZYXRCO2CxXi
QyapnN6LSLg44hhQNhe4ZJfhHJcPhLvktoymDWoKPvWm4wAYXM+EWZXA2yL0H6Y4
cK0aRPvnPcXMwMtcl0bFcNcNnqiVmmGrYHSmlU2HiYlDfah9l8r0qKw0YkT/6dCQ
jx1tqPRZno0Yfg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:22 2025 by rpki-client