Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
File: JNClyizxvZEvQsyM9lH2_ojnJqQ.mft (raw, json)
Hash identifier: fsBxTjBCNOL2wp8P75KnRiTYeaytPsfgZPPAX8sjbMo=
Subject key identifier: 13:D5:02:ED:CC:86:8C:44:1B:5B:AC:36:10:5D:96:CA:83:74:08:64
Authority key identifier: 24:D0:A5:CA:2C:F1:BD:91:2F:42:CC:8C:F6:51:F6:FE:88:E7:26:A4
Certificate issuer: /CN=24d0a5ca2cf1bd912f42cc8cf651f6fe88e726a4
Certificate serial: 019A718095E797F1C59F74E845AF60C97952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNClyizxvZEvQsyM9lH2_ojnJqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
Manifest number: 0333
Signing time: Tue 11 Nov 2025 06:00:43 +0000
Manifest this update: Tue 11 Nov 2025 06:00:43 +0000
Manifest next update: Wed 12 Nov 2025 06:00:43 +0000
Files and hashes: 1: 5mE6WJ9C1aVlmVoIkqUjqUKu6GA.roa (hash: iW1w4Z2DczRn4meCeEiq3QUgbwsTpwLpy6/um6q5LvU=)
2: JNClyizxvZEvQsyM9lH2_ojnJqQ.crl (hash: F+lAO4TowK5VyGCf/BL8PY+OTCEQjLyy0+rwT3f4TAY=)
3: UABXDisY7UIcuu729SEVeaTHi9g.roa (hash: OYLFe1eOiXjeIqPxbtFA6YEKDGNFPpOrX8ZmLcir4vI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNClyizxvZEvQsyM9lH2_ojnJqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:95:e7:97:f1:c5:9f:74:e8:45:af:60:c9:79:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d0a5ca2cf1bd912f42cc8cf651f6fe88e726a4
Validity
Not Before: Nov 11 06:00:43 2025 GMT
Not After : Nov 12 06:00:43 2025 GMT
Subject: CN=13d502edcc868c441b5bac36105d96ca83740864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7f:1f:aa:7b:e5:39:76:6b:30:1f:f3:38:a7:
b0:7e:ca:fc:72:a9:90:d0:53:ef:09:a7:34:3a:85:
f6:c7:1b:ca:bb:00:95:49:d1:1c:53:e6:df:b9:30:
e5:cb:e9:33:85:85:da:3e:77:b7:7f:44:31:99:ca:
31:b4:63:fb:b4:f9:f9:e9:63:ac:11:36:3b:3e:2f:
e8:a4:14:41:53:e4:e0:a9:42:44:ee:60:e5:a8:87:
45:82:81:a4:6c:05:06:64:02:82:64:c3:89:4d:a7:
21:98:d1:ca:af:3e:18:7d:0a:be:8f:00:6b:f8:f8:
58:37:63:fd:39:5a:24:58:0a:77:00:c1:a0:4b:9f:
14:fc:39:2a:77:86:57:26:d3:b3:cc:bd:0e:e9:a2:
4a:2c:18:05:9e:a2:5f:99:50:fd:86:82:b7:3b:e6:
ac:12:02:b6:8a:8b:b8:1b:2f:3f:67:42:30:53:e5:
3e:34:1b:7d:57:95:c9:5b:0f:13:34:57:16:a4:98:
46:4a:3c:d6:db:dd:87:43:4b:0e:31:57:24:f1:2a:
7c:c2:dd:77:a5:77:6b:70:58:ed:a8:ff:a2:a6:3b:
f8:f7:c0:ed:b6:9a:fa:19:e0:49:a6:85:e2:72:83:
b1:8e:f0:8d:bc:69:be:f4:60:7c:3d:e4:e9:42:83:
28:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D5:02:ED:CC:86:8C:44:1B:5B:AC:36:10:5D:96:CA:83:74:08:64
X509v3 Authority Key Identifier:
keyid:24:D0:A5:CA:2C:F1:BD:91:2F:42:CC:8C:F6:51:F6:FE:88:E7:26:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNClyizxvZEvQsyM9lH2_ojnJqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:2b:3c:d8:1d:b9:51:63:22:80:79:60:5b:cf:af:c9:20:5a:
6d:31:dc:4d:ab:d9:de:f1:94:72:8f:46:4f:99:a7:1f:a2:55:
d9:e3:0f:bc:cf:53:41:25:b6:ec:0d:70:e5:d8:7a:50:31:d6:
cf:ed:c3:27:e9:45:d2:90:77:03:c7:5d:08:5e:9a:80:30:b2:
80:82:a9:3e:95:b5:ee:a5:c7:4b:d4:aa:a5:0f:a6:ea:99:38:
53:8e:38:ba:65:82:c2:f4:b8:de:06:31:fe:5f:3f:f9:73:3e:
f8:ad:2c:ff:72:b8:27:99:cf:30:e5:46:3d:ac:5e:e7:79:d0:
41:f9:ff:c3:94:ce:d1:ac:77:62:3f:f2:ca:85:7c:fe:70:1d:
6a:c2:1b:78:25:c7:da:64:61:14:eb:3c:81:b9:e8:09:ce:09:
2e:f5:fd:c4:19:c6:21:76:96:34:ef:68:46:8b:76:25:f4:b0:
86:db:d7:ff:88:43:b7:ba:58:5e:0e:b3:36:09:00:83:dc:d1:
44:66:ad:34:20:e1:80:bc:17:44:57:94:76:78:bd:f6:5b:68:
31:d3:87:50:a7:75:8d:f3:c2:3f:c7:5c:89:6d:82:2f:af:3f:
76:10:45:51:a3:74:f2:00:27:6f:1b:1f:72:68:b1:62:82:53:
86:c8:60:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxgJXnl/HFn3ToRa9gyXlSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZDBhNWNhMmNmMWJkOTEyZjQyY2M4Y2Y2NTFmNmZlODhl
NzI2YTQwHhcNMjUxMTExMDYwMDQzWhcNMjUxMTEyMDYwMDQzWjAzMTEwLwYDVQQD
EygxM2Q1MDJlZGNjODY4YzQ0MWI1YmFjMzYxMDVkOTZjYTgzNzQwODY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtH8fqnvlOXZrMB/zOKewfsr8cqmQ
0FPvCac0OoX2xxvKuwCVSdEcU+bfuTDly+kzhYXaPne3f0QxmcoxtGP7tPn56WOs
ETY7Pi/opBRBU+TgqUJE7mDlqIdFgoGkbAUGZAKCZMOJTachmNHKrz4YfQq+jwBr
+PhYN2P9OVokWAp3AMGgS58U/Dkqd4ZXJtOzzL0O6aJKLBgFnqJfmVD9hoK3O+as
EgK2iou4Gy8/Z0IwU+U+NBt9V5XJWw8TNFcWpJhGSjzW292HQ0sOMVck8Sp8wt13
pXdrcFjtqP+ipjv498Dttpr6GeBJpoXicoOxjvCNvGm+9GB8PeTpQoMouQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBPVAu3MhoxEG1usNhBdlsqDdAhkMB8GA1UdIwQY
MBaAFCTQpcos8b2RL0LMjPZR9v6I5yakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk5DbHlpenh2WkV2UXN5TTlsSDJfb2puSnFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9iMzE5MzUtZWZjMC00Y2M4LWI4NWQt
ZGIxM2NjM2YxZGI2LzEvSk5DbHlpenh2WkV2UXN5TTlsSDJfb2puSnFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9iMzE5MzUtZWZjMC00Y2M4LWI4NWQtZGIxM2NjM2YxZGI2
LzEvSk5DbHlpenh2WkV2UXN5TTlsSDJfb2puSnFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQCs82B25
UWMigHlgW8+vySBabTHcTavZ3vGUco9GT5mnH6JV2eMPvM9TQSW27A1w5dh6UDHW
z+3DJ+lF0pB3A8ddCF6agDCygIKpPpW17qXHS9SqpQ+m6pk4U444umWCwvS43gYx
/l8/+XM++K0s/3K4J5nPMOVGPaxe53nQQfn/w5TO0ax3Yj/yyoV8/nAdasIbeCXH
2mRhFOs8gbnoCc4JLvX9xBnGIXaWNO9oRot2JfSwhtvX/4hDt7pYXg6zNgkAg9zR
RGatNCDhgLwXRFeUdni99ltoMdOHUKd1jfPCP8dciW2CL68/dhBFUaN08gAnbxsf
cmixYoJThshgaQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:37:36 2025 by rpki-client