Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/30c592-0ac6-4f73-95bf-ab5956b4d970/1/jljYxh9jNQx3vvHWaxzPpaAODds.mft
File: jljYxh9jNQx3vvHWaxzPpaAODds.mft (raw, json)
Hash identifier: ShzCCFDLqmd/NIf3Iq1ETMv6vetyUB02Goy1FJw6kU8=
Subject key identifier: 75:84:7C:78:C8:19:18:E1:A7:C7:4E:21:95:6A:69:39:4E:4B:A9:46
Authority key identifier: 8E:58:D8:C6:1F:63:35:0C:77:BE:F1:D6:6B:1C:CF:A5:A0:0E:0D:DB
Certificate issuer: /CN=8e58d8c61f63350c77bef1d66b1ccfa5a00e0ddb
Certificate serial: 019A7225A68FC1F5CE7B8D2F4D95C36757FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jljYxh9jNQx3vvHWaxzPpaAODds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/30c592-0ac6-4f73-95bf-ab5956b4d970/1/jljYxh9jNQx3vvHWaxzPpaAODds.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 09:01:01 +0000
Manifest this update: Tue 11 Nov 2025 09:01:01 +0000
Manifest next update: Wed 12 Nov 2025 09:01:01 +0000
Files and hashes: 1: 9xjHT2NwGMFvqCipLq9lJy9Nj6Q.roa (hash: CXZ0q1QVdxVDaPhOEyR1OpgzYZ+TJLJ3piBsRyEK14c=)
2: jljYxh9jNQx3vvHWaxzPpaAODds.crl (hash: QDaxExNGFDJ7RV6ffc5ybwAV8FjF0PkFBd+J0asN/p4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/30c592-0ac6-4f73-95bf-ab5956b4d970/1/jljYxh9jNQx3vvHWaxzPpaAODds.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/30c592-0ac6-4f73-95bf-ab5956b4d970/1/jljYxh9jNQx3vvHWaxzPpaAODds.mft
rsync://rpki.ripe.net/repository/DEFAULT/jljYxh9jNQx3vvHWaxzPpaAODds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:a6:8f:c1:f5:ce:7b:8d:2f:4d:95:c3:67:57:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e58d8c61f63350c77bef1d66b1ccfa5a00e0ddb
Validity
Not Before: Nov 11 09:01:01 2025 GMT
Not After : Nov 12 09:01:01 2025 GMT
Subject: CN=75847c78c81918e1a7c74e21956a69394e4ba946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9f:e1:11:66:0a:83:b8:13:ab:cf:77:bd:2c:
9c:33:fe:32:87:fa:fb:f9:0d:ab:1f:85:74:20:84:
8f:94:d2:25:8f:0c:7f:c3:a7:f7:33:9b:ba:85:d3:
ce:e9:8d:aa:82:ac:ae:bf:ea:44:e4:55:f7:8f:3a:
c5:90:42:18:a7:06:89:e0:67:85:55:9c:e7:ec:ea:
31:47:c1:4f:67:5f:db:29:7f:43:3f:82:45:19:fd:
75:80:da:55:aa:4a:1c:5c:49:c7:d1:cf:30:6b:c9:
72:ad:6a:f0:63:30:99:b8:85:01:16:a4:63:e7:7d:
64:53:4f:8b:aa:55:68:11:68:c7:e2:87:d0:48:89:
8c:42:f2:f1:98:48:1d:c6:ab:95:5a:24:fd:34:82:
3c:ab:09:b6:0c:50:9d:4b:a2:cf:72:79:66:0a:42:
30:f6:34:e4:e0:a0:17:5b:90:55:f4:30:54:c7:f3:
92:06:f0:b1:41:fe:70:3b:25:29:20:5f:f1:87:e3:
8d:9a:10:b1:1c:58:6a:21:38:24:f5:67:9e:f8:6c:
b5:e6:84:88:88:bb:bd:b8:2c:fc:b6:ee:4b:87:b6:
ca:dd:cf:1a:29:26:c4:d6:20:c3:78:d2:4f:53:32:
ff:d6:2e:75:81:be:f5:e3:3c:ef:cc:71:26:42:6a:
be:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:84:7C:78:C8:19:18:E1:A7:C7:4E:21:95:6A:69:39:4E:4B:A9:46
X509v3 Authority Key Identifier:
keyid:8E:58:D8:C6:1F:63:35:0C:77:BE:F1:D6:6B:1C:CF:A5:A0:0E:0D:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jljYxh9jNQx3vvHWaxzPpaAODds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/30c592-0ac6-4f73-95bf-ab5956b4d970/1/jljYxh9jNQx3vvHWaxzPpaAODds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/30c592-0ac6-4f73-95bf-ab5956b4d970/1/jljYxh9jNQx3vvHWaxzPpaAODds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:5e:1e:e3:fa:2e:10:f9:c1:5b:de:38:5d:6d:f1:d9:c0:0f:
b5:39:ad:d8:b6:85:87:88:28:d3:ba:23:b1:30:af:0a:87:6a:
ca:23:0b:9c:57:16:8a:11:c2:09:b0:94:fb:e0:0e:ca:48:23:
c9:25:4b:d2:20:b3:4a:5b:4a:79:44:64:6a:7a:ef:2b:85:04:
ca:bc:1d:11:73:6c:56:f0:86:dd:8e:f2:1c:26:f2:b2:fc:96:
7e:b5:50:05:05:0e:10:c6:27:4a:2a:db:e8:04:e2:ed:79:62:
c5:39:91:0f:5a:e8:3b:44:26:ad:06:12:40:a7:eb:d0:10:a9:
af:ec:76:5d:80:05:60:55:07:5a:46:76:77:3f:a4:70:d1:bb:
76:e3:9f:00:b5:5f:20:31:0e:9d:bd:8e:be:a4:71:8d:9e:f6:
12:c5:0a:a8:18:ba:e7:ce:49:fc:e9:67:cd:68:e0:68:e9:d8:
a3:25:95:bc:f1:ed:54:be:11:32:8e:f6:0d:3a:43:fa:64:e7:
21:39:08:ab:7e:75:51:4e:45:60:4b:44:79:2f:96:a8:cd:3a:
d3:28:16:65:d6:99:e5:36:d8:87:a4:3d:2c:b0:ea:6e:d3:03:
01:02:50:57:b6:57:4c:e5:4f:e7:6c:10:03:35:f9:ca:ca:f7:
96:3f:32:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJaaPwfXOe40vTZXDZ1f9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNThkOGM2MWY2MzM1MGM3N2JlZjFkNjZiMWNjZmE1YTAw
ZTBkZGIwHhcNMjUxMTExMDkwMTAxWhcNMjUxMTEyMDkwMTAxWjAzMTEwLwYDVQQD
Eyg3NTg0N2M3OGM4MTkxOGUxYTdjNzRlMjE5NTZhNjkzOTRlNGJhOTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZ/hEWYKg7gTq893vSycM/4yh/r7
+Q2rH4V0IISPlNIljwx/w6f3M5u6hdPO6Y2qgqyuv+pE5FX3jzrFkEIYpwaJ4GeF
VZzn7OoxR8FPZ1/bKX9DP4JFGf11gNpVqkocXEnH0c8wa8lyrWrwYzCZuIUBFqRj
531kU0+LqlVoEWjH4ofQSImMQvLxmEgdxquVWiT9NII8qwm2DFCdS6LPcnlmCkIw
9jTk4KAXW5BV9DBUx/OSBvCxQf5wOyUpIF/xh+ONmhCxHFhqITgk9Wee+Gy15oSI
iLu9uCz8tu5Lh7bK3c8aKSbE1iDDeNJPUzL/1i51gb714zzvzHEmQmq+uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHWEfHjIGRjhp8dOIZVqaTlOS6lGMB8GA1UdIwQY
MBaAFI5Y2MYfYzUMd77x1mscz6WgDg3bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamxqWXhoOWpOUXgzdnZIV2F4elBwYUFPRGRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8zMGM1OTItMGFjNi00ZjczLTk1YmYt
YWI1OTU2YjRkOTcwLzEvamxqWXhoOWpOUXgzdnZIV2F4elBwYUFPRGRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8zMGM1OTItMGFjNi00ZjczLTk1YmYtYWI1OTU2YjRkOTcw
LzEvamxqWXhoOWpOUXgzdnZIV2F4elBwYUFPRGRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoV4e4/ou
EPnBW944XW3x2cAPtTmt2LaFh4go07ojsTCvCodqyiMLnFcWihHCCbCU++AOykgj
ySVL0iCzSltKeURkanrvK4UEyrwdEXNsVvCG3Y7yHCbysvyWfrVQBQUOEMYnSirb
6ATi7XlixTmRD1roO0QmrQYSQKfr0BCpr+x2XYAFYFUHWkZ2dz+kcNG7duOfALVf
IDEOnb2OvqRxjZ72EsUKqBi6585J/OlnzWjgaOnYoyWVvPHtVL4RMo72DTpD+mTn
ITkIq351UU5FYEtEeS+WqM060ygWZdaZ5TbYh6Q9LLDqbtMDAQJQV7ZXTOVP52wQ
AzX5ysr3lj8yxA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:42 2025 by rpki-client