Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
File: Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft (raw, json)
Hash identifier: aE8XLkXtNMB/B27skx3rr5u7zG6kAc6uZldevUJv7Mo=
Subject key identifier: 2C:0F:67:F1:E7:3C:79:B3:24:7D:9F:51:5C:59:46:39:A0:57:31:88
Authority key identifier: 25:FD:57:81:57:6F:3D:42:25:AF:99:45:3E:93:A9:25:98:52:71:26
Certificate issuer: /CN=25fd5781576f3d4225af99453e93a92598527126
Certificate serial: 019A71B7A8C76C47F8BEF4F3782F0A2A14A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jf1XgVdvPUIlr5lFPpOpJZhScSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
Manifest number: 153A
Signing time: Tue 11 Nov 2025 07:00:52 +0000
Manifest this update: Tue 11 Nov 2025 07:00:52 +0000
Manifest next update: Wed 12 Nov 2025 07:00:52 +0000
Files and hashes: 1: Jf1XgVdvPUIlr5lFPpOpJZhScSY.crl (hash: LEsidr3A3oRgWkunkHhcOnORlFstvAy2+/YDddM1aQk=)
2: ShfkVecVvyoW3_YQq7LwcMaYmQs.roa (hash: BoQNVikNhGTcu9edVXF4u7v7ipMyHbA4n2LulfglPKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jf1XgVdvPUIlr5lFPpOpJZhScSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:a8:c7:6c:47:f8:be:f4:f3:78:2f:0a:2a:14:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25fd5781576f3d4225af99453e93a92598527126
Validity
Not Before: Nov 11 07:00:52 2025 GMT
Not After : Nov 12 07:00:52 2025 GMT
Subject: CN=2c0f67f1e73c79b3247d9f515c594639a0573188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:45:60:ae:09:f4:71:7b:a8:05:ad:4a:85:d5:
d1:be:d5:47:33:10:38:b5:72:51:84:74:c0:b0:d6:
94:ae:19:11:64:0f:75:d2:ce:5c:fd:b3:89:f7:30:
47:f1:a9:d4:97:41:48:30:87:d6:24:42:b5:c3:16:
6f:28:14:e2:2a:eb:a0:7d:f1:66:42:47:2b:1c:20:
a3:34:18:d9:5d:8f:2f:af:53:a0:d6:5c:14:f9:a9:
4a:e9:a7:d1:f9:77:d7:6a:71:95:c1:c9:0f:ca:b7:
4b:d1:2a:c0:e2:df:7e:29:33:ac:43:ed:dc:cc:0d:
f3:73:1f:1e:80:02:69:2e:b4:b3:87:e1:0f:10:86:
2d:6e:20:e2:3e:e2:8d:94:fc:d5:ae:8b:22:a0:f9:
3c:e1:55:e4:17:a8:e2:6d:a1:23:0f:5f:a8:09:89:
bf:42:e4:44:51:c3:7e:08:bb:c6:52:69:4f:26:fe:
92:3f:1d:23:47:ce:a1:09:e7:f1:82:04:57:a8:41:
85:20:0b:ec:43:08:8e:52:3b:af:d4:61:5d:33:a1:
54:30:87:ae:e2:9d:b8:3d:ab:bc:b2:72:eb:14:e9:
24:70:d8:81:2f:b1:5a:e5:85:89:58:6f:2c:c7:8a:
64:9f:e4:9e:7a:1f:c6:e3:55:42:b2:c6:fb:73:07:
aa:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0F:67:F1:E7:3C:79:B3:24:7D:9F:51:5C:59:46:39:A0:57:31:88
X509v3 Authority Key Identifier:
keyid:25:FD:57:81:57:6F:3D:42:25:AF:99:45:3E:93:A9:25:98:52:71:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jf1XgVdvPUIlr5lFPpOpJZhScSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/949dde-e814-4fb2-9f9b-59483fa09fe1/1/Jf1XgVdvPUIlr5lFPpOpJZhScSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:1a:2f:1b:38:c6:5a:c1:9f:f8:94:ba:62:e7:90:d2:b8:31:
5d:23:7b:2d:01:0e:73:c5:52:b3:07:b6:55:d1:85:33:ff:db:
1a:5e:8e:0d:e0:2c:0d:34:fe:4b:61:3e:ac:10:44:c6:dd:48:
72:f6:b5:3e:72:9a:01:ba:3a:37:1d:97:17:89:2f:b6:8e:1e:
5c:06:2c:e3:36:7a:63:a6:32:b9:84:94:ce:5d:87:58:9d:86:
f8:a5:09:98:bd:bd:78:59:83:b1:8a:8e:56:0f:76:f7:67:d9:
91:69:ab:55:03:68:df:32:41:b1:3a:0c:c6:eb:c8:39:08:9b:
52:b0:69:0b:f9:09:8a:80:65:3d:9d:54:45:14:d4:fe:99:a6:
b4:65:7d:a3:dd:41:6e:1c:b5:ff:d1:fb:43:a3:71:a1:26:ac:
db:76:22:66:fa:ac:b8:66:86:75:f0:c8:e0:45:fe:fe:9e:da:
5c:ca:2e:4d:52:75:63:dc:90:73:e0:ed:1c:d3:1a:3a:c5:69:
f6:d1:c4:81:51:11:e6:3e:78:6e:a2:5b:42:1e:06:2a:f3:3c:
34:8a:c2:c3:b4:fd:50:06:0e:a6:7e:07:81:af:b6:d0:cc:77:
9d:14:30:62:13:ce:74:86:27:1c:c8:c1:61:6b:89:c0:39:c3:
1d:26:1f:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt6jHbEf4vvTzeC8KKhSiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZmQ1NzgxNTc2ZjNkNDIyNWFmOTk0NTNlOTNhOTI1OTg1
MjcxMjYwHhcNMjUxMTExMDcwMDUyWhcNMjUxMTEyMDcwMDUyWjAzMTEwLwYDVQQD
EygyYzBmNjdmMWU3M2M3OWIzMjQ3ZDlmNTE1YzU5NDYzOWEwNTczMTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEVgrgn0cXuoBa1KhdXRvtVHMxA4
tXJRhHTAsNaUrhkRZA910s5c/bOJ9zBH8anUl0FIMIfWJEK1wxZvKBTiKuugffFm
QkcrHCCjNBjZXY8vr1Og1lwU+alK6afR+XfXanGVwckPyrdL0SrA4t9+KTOsQ+3c
zA3zcx8egAJpLrSzh+EPEIYtbiDiPuKNlPzVrosioPk84VXkF6jibaEjD1+oCYm/
QuREUcN+CLvGUmlPJv6SPx0jR86hCefxggRXqEGFIAvsQwiOUjuv1GFdM6FUMIeu
4p24Pau8snLrFOkkcNiBL7Fa5YWJWG8sx4pkn+Seeh/G41VCssb7cweqzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCwPZ/HnPHmzJH2fUVxZRjmgVzGIMB8GA1UdIwQY
MBaAFCX9V4FXbz1CJa+ZRT6TqSWYUnEmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmYxWGdWZHZQVUlscjVsRlBwT3BKWmhTY1NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85NDlkZGUtZTgxNC00ZmIyLTlmOWIt
NTk0ODNmYTA5ZmUxLzEvSmYxWGdWZHZQVUlscjVsRlBwT3BKWmhTY1NZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni85NDlkZGUtZTgxNC00ZmIyLTlmOWItNTk0ODNmYTA5ZmUx
LzEvSmYxWGdWZHZQVUlscjVsRlBwT3BKWmhTY1NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1BovGzjG
WsGf+JS6YueQ0rgxXSN7LQEOc8VSswe2VdGFM//bGl6ODeAsDTT+S2E+rBBExt1I
cva1PnKaAbo6Nx2XF4kvto4eXAYs4zZ6Y6YyuYSUzl2HWJ2G+KUJmL29eFmDsYqO
Vg9292fZkWmrVQNo3zJBsToMxuvIOQibUrBpC/kJioBlPZ1URRTU/pmmtGV9o91B
bhy1/9H7Q6NxoSas23YiZvqsuGaGdfDI4EX+/p7aXMouTVJ1Y9yQc+DtHNMaOsVp
9tHEgVER5j54bqJbQh4GKvM8NIrCw7T9UAYOpn4Hga+20Mx3nRQwYhPOdIYnHMjB
YWuJwDnDHSYfvQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:00:58 2025 by rpki-client