Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft
File: jV8GavgNDp8H6oeyS9r6WdH18m8.mft (raw, json)
Hash identifier: mvJrpUg53mp8n+6AqN3vydDLO3SYueMHgb4Cta8IBZM=
Subject key identifier: 0C:82:01:B6:4F:D8:F4:68:49:E4:EC:B1:E7:8C:23:38:47:76:16:9A
Authority key identifier: 8D:5F:06:6A:F8:0D:0E:9F:07:EA:87:B2:4B:DA:FA:59:D1:F5:F2:6F
Certificate issuer: /CN=8d5f066af80d0e9f07ea87b24bdafa59d1f5f26f
Certificate serial: 019A71EEE319505479171CD0F4A148DEAE67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jV8GavgNDp8H6oeyS9r6WdH18m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 08:01:12 +0000
Manifest this update: Tue 11 Nov 2025 08:01:12 +0000
Manifest next update: Wed 12 Nov 2025 08:01:12 +0000
Files and hashes: 1: Nu6PzktHZPkZpTfNWDAC1WQ31fs.roa (hash: 0olptWKqLuwlqgvdBxIZwPcl+HWoWf7gPYNB7LvpZJo=)
2: jV8GavgNDp8H6oeyS9r6WdH18m8.crl (hash: dK4nEpSsaA7Jxi2SWWtXQVhIqtGbZn/Gzee6LfeJC6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jV8GavgNDp8H6oeyS9r6WdH18m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:e3:19:50:54:79:17:1c:d0:f4:a1:48:de:ae:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d5f066af80d0e9f07ea87b24bdafa59d1f5f26f
Validity
Not Before: Nov 11 08:01:12 2025 GMT
Not After : Nov 12 08:01:12 2025 GMT
Subject: CN=0c8201b64fd8f46849e4ecb1e78c23384776169a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4e:46:3b:ad:2a:f0:62:cc:96:cf:e0:69:8e:
43:33:02:e9:58:49:1e:e5:13:60:d6:72:e7:79:a5:
78:32:19:e3:01:15:25:c6:ac:02:b6:1c:fb:7d:89:
81:70:11:1d:63:c0:08:17:3e:ad:3c:cd:d6:e9:00:
99:c2:e3:c8:b8:d9:7d:ba:fb:4c:8c:63:c9:7f:19:
ee:19:d5:00:59:63:79:f1:4b:8f:bc:90:91:5a:f3:
8b:29:6c:54:1e:d4:fb:05:52:5b:65:12:7f:0a:83:
a0:c6:f5:92:ab:07:ce:bf:9a:58:84:90:58:e1:7c:
47:33:81:e3:91:6e:dc:13:3a:a4:ae:a0:5a:7e:0f:
2b:c7:1e:1f:a0:e1:18:ff:09:32:9f:79:9c:12:2d:
05:a5:4c:5d:95:be:ad:8e:be:4d:d4:de:0c:2a:64:
33:05:8c:b7:bc:d3:6d:16:2e:a3:6f:1e:ba:0d:4a:
ac:a0:31:6c:ad:d5:c0:02:9f:97:ce:3f:ff:32:a1:
06:e1:14:0f:34:d0:87:5f:f9:3e:dc:a8:e3:37:8c:
97:b9:5e:09:23:80:88:35:65:3a:4b:3c:24:36:7e:
9b:3d:0d:53:4e:46:a0:4e:18:89:13:73:0c:83:fb:
63:97:54:ee:1a:e4:d1:f4:e7:74:5e:c0:e0:cf:2d:
86:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:82:01:B6:4F:D8:F4:68:49:E4:EC:B1:E7:8C:23:38:47:76:16:9A
X509v3 Authority Key Identifier:
keyid:8D:5F:06:6A:F8:0D:0E:9F:07:EA:87:B2:4B:DA:FA:59:D1:F5:F2:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jV8GavgNDp8H6oeyS9r6WdH18m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:50:ae:c8:72:88:63:92:d0:60:ac:2c:24:e6:f8:7a:f4:bc:
ae:13:ce:b3:c7:0f:59:7c:1d:c6:cc:7c:1a:97:7b:22:8a:a3:
f8:be:9a:d4:41:14:d0:93:49:bd:59:55:6e:ce:c7:d2:e9:5a:
7b:bd:1e:37:17:2b:d5:38:11:11:06:7f:26:12:d6:52:29:65:
a5:eb:70:30:0e:23:da:12:f1:91:07:0b:2b:87:f3:c4:56:e6:
b2:bc:8d:fe:c3:26:78:aa:e9:1d:49:09:9d:b8:0a:db:bf:f8:
05:45:ea:c4:88:3b:2b:c4:a1:c1:c8:34:a8:cd:8f:6d:b2:12:
fd:63:77:c1:44:34:9f:85:05:2e:a8:88:57:21:9e:d8:7e:e2:
ff:63:ba:51:35:b9:86:68:22:c5:64:ca:72:63:a1:24:f7:cb:
83:c9:1a:1e:15:58:f0:cd:10:ba:d8:80:d1:74:8b:52:6b:bd:
48:73:ac:e4:8b:91:f7:60:0d:50:40:b0:6b:0c:15:22:45:6f:
92:6d:de:c4:40:a2:56:02:06:f1:1a:ed:16:97:03:46:c7:8a:
bd:c2:38:ec:92:0f:4a:c9:41:03:d2:1e:31:8e:99:53:a1:0a:
6b:5d:9c:cf:2a:52:67:66:ac:88:00:6a:22:7f:cc:39:2c:cc:
e0:01:dc:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7uMZUFR5FxzQ9KFI3q5nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNWYwNjZhZjgwZDBlOWYwN2VhODdiMjRiZGFmYTU5ZDFm
NWYyNmYwHhcNMjUxMTExMDgwMTEyWhcNMjUxMTEyMDgwMTEyWjAzMTEwLwYDVQQD
EygwYzgyMDFiNjRmZDhmNDY4NDllNGVjYjFlNzhjMjMzODQ3NzYxNjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp05GO60q8GLMls/gaY5DMwLpWEke
5RNg1nLneaV4MhnjARUlxqwCthz7fYmBcBEdY8AIFz6tPM3W6QCZwuPIuNl9uvtM
jGPJfxnuGdUAWWN58UuPvJCRWvOLKWxUHtT7BVJbZRJ/CoOgxvWSqwfOv5pYhJBY
4XxHM4HjkW7cEzqkrqBafg8rxx4foOEY/wkyn3mcEi0FpUxdlb6tjr5N1N4MKmQz
BYy3vNNtFi6jbx66DUqsoDFsrdXAAp+Xzj//MqEG4RQPNNCHX/k+3KjjN4yXuV4J
I4CINWU6SzwkNn6bPQ1TTkagThiJE3MMg/tjl1TuGuTR9Od0XsDgzy2GUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAyCAbZP2PRoSeTsseeMIzhHdhaaMB8GA1UdIwQY
MBaAFI1fBmr4DQ6fB+qHskva+lnR9fJvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalY4R2F2Z05EcDhINm9leVM5cjZXZEgxOG04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zMzBlNGQtYTlkOS00YjdlLTg2M2Mt
NmYzYWE4OTQzZTY4LzEvalY4R2F2Z05EcDhINm9leVM5cjZXZEgxOG04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8zMzBlNGQtYTlkOS00YjdlLTg2M2MtNmYzYWE4OTQzZTY4
LzEvalY4R2F2Z05EcDhINm9leVM5cjZXZEgxOG04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ1CuyHKI
Y5LQYKwsJOb4evS8rhPOs8cPWXwdxsx8Gpd7Ioqj+L6a1EEU0JNJvVlVbs7H0ula
e70eNxcr1TgREQZ/JhLWUillpetwMA4j2hLxkQcLK4fzxFbmsryN/sMmeKrpHUkJ
nbgK27/4BUXqxIg7K8Shwcg0qM2PbbIS/WN3wUQ0n4UFLqiIVyGe2H7i/2O6UTW5
hmgixWTKcmOhJPfLg8kaHhVY8M0QutiA0XSLUmu9SHOs5IuR92ANUECwawwVIkVv
km3exECiVgIG8RrtFpcDRseKvcI47JIPSslBA9IeMY6ZU6EKa12czypSZ2asiABq
In/MOSzM4AHc1A==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:49 2025 by rpki-client