Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
File: jsSmfb7XRE3dJ-gA-2whATpbEcY.mft (raw, json)
Hash identifier: GY/TFahwgqNOvSQ6zQ2fRR4NQS5QWmFzD1ZKiqMD3kA=
Subject key identifier: FF:F8:04:93:0D:26:3B:B4:64:49:8B:B8:9E:39:58:9C:19:E8:91:1F
Authority key identifier: 8E:C4:A6:7D:BE:D7:44:4D:DD:27:E8:00:FB:6C:21:01:3A:5B:11:C6
Certificate issuer: /CN=8ec4a67dbed7444ddd27e800fb6c21013a5b11c6
Certificate serial: 019A25F81ED91A04DB888AE7FCDF674C700A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
Manifest number: 1429
Signing time: Mon 27 Oct 2025 14:00:09 +0000
Manifest this update: Mon 27 Oct 2025 14:00:09 +0000
Manifest next update: Tue 28 Oct 2025 14:00:09 +0000
Files and hashes: 1: V9xIuDHmhh7U3tTkSVryBJA5CVk.roa (hash: eyLpVtUoY/mctnpBoqtxHHGp6ollciBlit2BNgnLLmE=)
2: jsSmfb7XRE3dJ-gA-2whATpbEcY.crl (hash: fQ58Gsisvqbgg5Xk/Ckgwyj4PN7fivBXo2kOCf5lo4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 14:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:f8:1e:d9:1a:04:db:88:8a:e7:fc:df:67:4c:70:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec4a67dbed7444ddd27e800fb6c21013a5b11c6
Validity
Not Before: Oct 27 14:00:09 2025 GMT
Not After : Oct 28 14:00:09 2025 GMT
Subject: CN=fff804930d263bb464498bb89e39589c19e8911f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d9:63:1c:02:a8:ee:99:9d:fe:38:d7:e6:95:
0e:6f:f9:d4:5e:42:0b:2f:9f:50:d2:04:8e:7b:ce:
30:0f:58:81:03:00:fc:32:62:2d:31:32:97:a5:04:
72:5d:7a:bf:93:b0:fa:20:10:c3:ae:6a:f6:56:0b:
6f:58:04:eb:ca:07:f4:48:b4:73:2c:71:b7:55:fe:
c9:7d:8e:3c:df:75:59:d1:10:ad:d7:02:a9:85:c6:
6c:ad:3a:84:be:82:fe:4c:c8:20:ab:2d:47:14:71:
a2:0c:35:53:37:62:31:82:2d:08:5e:04:48:b5:69:
e2:47:5b:78:b9:51:cc:4a:ae:a6:ac:42:04:c9:6c:
57:63:a8:3f:4f:3b:3b:56:32:b1:72:a0:33:da:63:
34:12:08:7a:6e:89:7b:3f:42:43:5b:a1:6f:51:5a:
da:38:68:39:e6:c9:1e:0b:de:9e:aa:16:ff:27:08:
6a:0e:99:02:48:ac:00:ca:fd:7e:60:30:0b:7c:24:
e9:69:af:69:c9:fb:41:85:2f:f6:49:8d:7e:6f:82:
96:34:6d:e3:9a:1f:6d:bd:a3:ab:d2:ed:4d:e1:dc:
44:ac:cb:c3:b8:91:79:e9:c0:86:6a:8e:e9:43:1d:
3a:66:8a:31:46:e3:a9:a5:43:70:36:cc:1d:77:1a:
26:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F8:04:93:0D:26:3B:B4:64:49:8B:B8:9E:39:58:9C:19:E8:91:1F
X509v3 Authority Key Identifier:
keyid:8E:C4:A6:7D:BE:D7:44:4D:DD:27:E8:00:FB:6C:21:01:3A:5B:11:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:21:d0:80:82:8c:5f:6f:7e:75:59:aa:21:5b:7b:56:eb:03:
d4:09:79:14:f3:3f:a3:7f:da:ff:6b:ce:64:48:1c:49:bd:03:
d5:9e:c9:d7:44:ff:3f:a4:57:14:52:4c:cb:cc:12:63:24:62:
b0:e2:c3:a2:df:82:79:98:37:e7:ac:d7:de:4d:12:28:8a:91:
0c:e6:f6:84:f3:3d:36:c9:d1:cf:56:5e:43:a7:a0:79:f8:bd:
44:da:fa:f1:34:01:05:b2:8b:11:81:14:95:76:d2:ec:54:a4:
f3:e6:81:59:ef:92:f9:9e:2a:e6:db:43:ec:4f:97:f3:62:33:
c3:e8:b3:d3:94:e4:12:ec:33:5f:fb:e4:c0:bf:aa:65:18:75:
46:71:81:70:1a:b5:91:c0:f3:0c:c8:23:e8:4e:f2:02:70:91:
2c:c9:5e:be:c1:11:5a:64:0c:3b:6d:32:da:a6:a9:07:1e:ae:
e1:4f:d8:df:20:b5:6d:70:b0:14:a7:ac:db:41:5c:81:4b:26:
9a:b2:62:f0:92:d8:0e:e8:5d:dc:25:c8:66:b2:7e:5c:81:16:
ed:b8:1f:7a:47:78:fc:80:3b:30:fe:0f:c4:18:45:a4:9f:b1:
38:63:7f:89:33:77:1d:12:94:a3:3c:2c:6b:db:ac:23:e6:66:
d2:8b:e3:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZol+B7ZGgTbiIrn/N9nTHAKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYzRhNjdkYmVkNzQ0NGRkZDI3ZTgwMGZiNmMyMTAxM2E1
YjExYzYwHhcNMjUxMDI3MTQwMDA5WhcNMjUxMDI4MTQwMDA5WjAzMTEwLwYDVQQD
EyhmZmY4MDQ5MzBkMjYzYmI0NjQ0OThiYjg5ZTM5NTg5YzE5ZTg5MTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdljHAKo7pmd/jjX5pUOb/nUXkIL
L59Q0gSOe84wD1iBAwD8MmItMTKXpQRyXXq/k7D6IBDDrmr2VgtvWATrygf0SLRz
LHG3Vf7JfY4833VZ0RCt1wKphcZsrTqEvoL+TMggqy1HFHGiDDVTN2Ixgi0IXgRI
tWniR1t4uVHMSq6mrEIEyWxXY6g/Tzs7VjKxcqAz2mM0Egh6bol7P0JDW6FvUVra
OGg55skeC96eqhb/JwhqDpkCSKwAyv1+YDALfCTpaa9pyftBhS/2SY1+b4KWNG3j
mh9tvaOr0u1N4dxErMvDuJF56cCGao7pQx06ZooxRuOppUNwNswddxomEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/4BJMNJju0ZEmLuJ45WJwZ6JEfMB8GA1UdIwQY
MBaAFI7Epn2+10RN3SfoAPtsIQE6WxHGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanNTbWZiN1hSRTNkSi1nQS0yd2hBVHBiRWNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9lN2EyZjEtMmUxMC00ZWJlLTkxYjMt
MGNlZjUxMmY1MDA5LzEvanNTbWZiN1hSRTNkSi1nQS0yd2hBVHBiRWNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9lN2EyZjEtMmUxMC00ZWJlLTkxYjMtMGNlZjUxMmY1MDA5
LzEvanNTbWZiN1hSRTNkSi1nQS0yd2hBVHBiRWNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEyHQgIKM
X29+dVmqIVt7VusD1Al5FPM/o3/a/2vOZEgcSb0D1Z7J10T/P6RXFFJMy8wSYyRi
sOLDot+CeZg356zX3k0SKIqRDOb2hPM9NsnRz1ZeQ6egefi9RNr68TQBBbKLEYEU
lXbS7FSk8+aBWe+S+Z4q5ttD7E+X82Izw+iz05TkEuwzX/vkwL+qZRh1RnGBcBq1
kcDzDMgj6E7yAnCRLMlevsERWmQMO20y2qapBx6u4U/Y3yC1bXCwFKes20FcgUsm
mrJi8JLYDuhd3CXIZrJ+XIEW7bgfekd4/IA7MP4PxBhFpJ+xOGN/iTN3HRKUozws
a9usI+Zm0ovj4Q==
-----END CERTIFICATE-----
Generated at Mon Oct 27 22:47:21 2025 by rpki-client