Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.mft
File: j5voJHXSWAjiFOmlyieRNHwR2rY.mft (raw, json)
Hash identifier: 3T1GYW5zR3GuZntyTg58jGhjAAgqVnFsDc5sFFXgK1I=
Subject key identifier: 42:1A:70:6A:8E:F1:59:2D:71:C3:F7:85:A4:E4:DB:DD:46:30:1F:71
Authority key identifier: 8F:9B:E8:24:75:D2:58:08:E2:14:E9:A5:CA:27:91:34:7C:11:DA:B6
Certificate issuer: /CN=8f9be82475d25808e214e9a5ca2791347c11dab6
Certificate serial: 019A7112DAC00646F421392CD690192B02CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5voJHXSWAjiFOmlyieRNHwR2rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 04:00:52 +0000
Manifest this update: Tue 11 Nov 2025 04:00:52 +0000
Manifest next update: Wed 12 Nov 2025 04:00:52 +0000
Files and hashes: 1: j5voJHXSWAjiFOmlyieRNHwR2rY.crl (hash: GC/pkQvDOCv1uoiPKaJEypHXFRi5O+9JxQg4xzX6r4o=)
2: ys17eRZKf5P4ptEUO7CgY8DVnRY.roa (hash: CelwNs3p1o5270NUJj8ZM/1/+n0plK08szDLjDEXAmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5voJHXSWAjiFOmlyieRNHwR2rY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:da:c0:06:46:f4:21:39:2c:d6:90:19:2b:02:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9be82475d25808e214e9a5ca2791347c11dab6
Validity
Not Before: Nov 11 04:00:52 2025 GMT
Not After : Nov 12 04:00:52 2025 GMT
Subject: CN=421a706a8ef1592d71c3f785a4e4dbdd46301f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:83:c6:37:8e:4a:8c:1f:96:fc:56:91:1a:4c:
2c:6c:12:89:f2:4a:8e:d0:58:1e:e6:6a:5d:b2:de:
bc:2a:9e:37:b7:cb:e7:df:17:c7:51:cc:f6:65:d1:
9e:94:d8:d8:27:d6:0f:35:78:50:e0:a8:77:26:04:
31:da:c3:7e:d2:a8:31:90:0b:f5:5a:5b:97:e8:05:
69:a7:b9:07:81:18:38:04:d3:5b:8d:1d:e5:83:4f:
bf:c2:01:6e:08:6e:6e:16:91:54:8a:b4:19:20:98:
fe:be:26:1e:ca:e7:37:a7:c8:a9:ba:5c:db:45:4e:
ac:0d:a7:31:5f:f6:2f:58:3c:4b:e3:31:c9:a1:91:
b0:ef:00:1e:19:ad:78:9d:e2:68:a7:d7:2d:1a:81:
64:48:b6:21:d2:11:fa:16:84:c4:6c:7c:32:b7:41:
19:cb:70:14:00:fc:9c:85:28:cb:7f:27:a9:d8:3b:
ff:80:05:d1:50:43:7c:5c:ba:6e:30:0d:d2:46:08:
cc:59:7b:fd:ad:95:3f:01:3e:31:1a:07:d9:a1:c5:
bb:82:7e:e2:92:13:21:c7:d0:34:82:0e:37:cb:1a:
6d:33:c9:64:2a:39:ea:da:d5:27:13:ca:6f:4f:85:
0a:38:25:d8:f3:2a:a6:54:cf:40:43:6a:46:bd:be:
9d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1A:70:6A:8E:F1:59:2D:71:C3:F7:85:A4:E4:DB:DD:46:30:1F:71
X509v3 Authority Key Identifier:
keyid:8F:9B:E8:24:75:D2:58:08:E2:14:E9:A5:CA:27:91:34:7C:11:DA:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5voJHXSWAjiFOmlyieRNHwR2rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:45:0b:01:23:26:b3:1c:82:b7:d4:34:e1:07:b1:e8:df:5e:
c1:ea:ad:73:57:0a:6e:86:80:fc:01:7b:bb:f7:eb:b7:07:64:
74:bb:8f:c0:d1:4d:39:9e:a9:4e:dc:a9:d7:ca:19:6b:f7:0c:
fe:e8:f7:85:31:79:65:ff:12:13:cb:eb:6f:50:7e:55:26:b2:
a9:15:5c:d0:4b:87:a9:90:f3:1e:c9:eb:6f:5c:30:9e:14:be:
d7:35:db:3b:e9:53:31:44:d8:95:02:68:2e:af:ee:f5:b1:0d:
70:92:bd:be:b5:6e:6d:61:89:9e:18:fa:c8:05:01:ee:e9:32:
da:7c:42:c8:ee:fc:22:ec:e7:ca:6e:ac:bc:00:5e:f4:17:25:
45:fb:18:26:62:cc:cd:40:17:e1:57:ad:b9:74:5b:1e:fb:42:
6e:d0:e8:97:f1:2c:2f:53:dc:b3:ae:10:58:6c:d0:25:db:b3:
00:3a:56:91:15:0a:f1:55:67:8c:8d:01:2d:42:67:4c:a3:45:
52:34:33:c6:ba:d0:a9:5a:36:f0:90:55:dd:fe:21:46:58:8e:
6f:77:0d:8a:d5:45:35:99:e0:5b:c4:2c:17:55:84:35:7c:d7:
b6:e6:6e:dd:2b:8a:fa:1b:67:ac:dd:39:b7:84:45:05:d5:6f:
c9:67:29:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEtrABkb0ITks1pAZKwLPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmOWJlODI0NzVkMjU4MDhlMjE0ZTlhNWNhMjc5MTM0N2Mx
MWRhYjYwHhcNMjUxMTExMDQwMDUyWhcNMjUxMTEyMDQwMDUyWjAzMTEwLwYDVQQD
Eyg0MjFhNzA2YThlZjE1OTJkNzFjM2Y3ODVhNGU0ZGJkZDQ2MzAxZjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYPGN45KjB+W/FaRGkwsbBKJ8kqO
0Fge5mpdst68Kp43t8vn3xfHUcz2ZdGelNjYJ9YPNXhQ4Kh3JgQx2sN+0qgxkAv1
WluX6AVpp7kHgRg4BNNbjR3lg0+/wgFuCG5uFpFUirQZIJj+viYeyuc3p8ipulzb
RU6sDacxX/YvWDxL4zHJoZGw7wAeGa14neJop9ctGoFkSLYh0hH6FoTEbHwyt0EZ
y3AUAPychSjLfyep2Dv/gAXRUEN8XLpuMA3SRgjMWXv9rZU/AT4xGgfZocW7gn7i
khMhx9A0gg43yxptM8lkKjnq2tUnE8pvT4UKOCXY8yqmVM9AQ2pGvb6drwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIacGqO8VktccP3haTk291GMB9xMB8GA1UdIwQY
MBaAFI+b6CR10lgI4hTppconkTR8Edq2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajV2b0pIWFNXQWppRk9tbHlpZVJOSHdSMnJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9lMTNiMWMtNzU1My00MmNmLWI4YzUt
Y2ExMGE0ODhjNzE1LzEvajV2b0pIWFNXQWppRk9tbHlpZVJOSHdSMnJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9lMTNiMWMtNzU1My00MmNmLWI4YzUtY2ExMGE0ODhjNzE1
LzEvajV2b0pIWFNXQWppRk9tbHlpZVJOSHdSMnJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUUULASMm
sxyCt9Q04Qex6N9eweqtc1cKboaA/AF7u/frtwdkdLuPwNFNOZ6pTtyp18oZa/cM
/uj3hTF5Zf8SE8vrb1B+VSayqRVc0EuHqZDzHsnrb1wwnhS+1zXbO+lTMUTYlQJo
Lq/u9bENcJK9vrVubWGJnhj6yAUB7uky2nxCyO78Iuznym6svABe9BclRfsYJmLM
zUAX4VetuXRbHvtCbtDol/EsL1Pcs64QWGzQJduzADpWkRUK8VVnjI0BLUJnTKNF
UjQzxrrQqVo28JBV3f4hRliOb3cNitVFNZngW8QsF1WENXzXtuZu3SuK+htnrN05
t4RFBdVvyWcpVQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:48 2025 by rpki-client