Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft
File: j5-COvmTs5lcnl_0wii9-ZRR-4o.mft (raw, json)
Hash identifier: abiyZj/2/SCGvwhhfFCoiQiL+mepJ6ea6wCequjF+Ak=
Subject key identifier: 19:EF:9A:08:71:17:1E:A6:66:AF:34:54:49:7D:3A:34:EF:3D:5C:D4
Authority key identifier: 8F:9F:82:3A:F9:93:B3:99:5C:9E:5F:F4:C2:28:BD:F9:94:51:FB:8A
Certificate issuer: /CN=8f9f823af993b3995c9e5ff4c228bdf99451fb8a
Certificate serial: 0199391580EBD2045CC1F25FB2A3F688F51B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5-COvmTs5lcnl_0wii9-ZRR-4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft
Manifest number: 042D
Signing time: Thu 11 Sep 2025 14:02:14 +0000
Manifest this update: Thu 11 Sep 2025 14:02:14 +0000
Manifest next update: Fri 12 Sep 2025 14:02:14 +0000
Files and hashes: 1: 8KsjpNRaIZUXOi8DwLVHVI28dt8.roa (hash: SXYejuZAdmSHLj52AFM2feQKm4GSepnKMI2O57vhHV0=)
2: j5-COvmTs5lcnl_0wii9-ZRR-4o.crl (hash: ZtL421GA1XVTfK095OLMWTx8jksCcT145Ds6qy6tUx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5-COvmTs5lcnl_0wii9-ZRR-4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 14:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:15:80:eb:d2:04:5c:c1:f2:5f:b2:a3:f6:88:f5:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9f823af993b3995c9e5ff4c228bdf99451fb8a
Validity
Not Before: Sep 11 14:02:14 2025 GMT
Not After : Sep 12 14:02:14 2025 GMT
Subject: CN=19ef9a0871171ea666af3454497d3a34ef3d5cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c4:eb:19:fb:a4:26:78:00:0f:f8:8d:03:0c:
77:45:9d:ac:59:2c:58:f7:26:99:aa:20:93:ad:2f:
f9:5c:07:07:87:59:4a:31:92:ca:ae:2c:26:39:a7:
53:05:9f:5d:d4:b0:f0:aa:0b:d7:29:a2:f1:57:de:
66:63:6c:e3:56:d2:b4:f4:ee:f4:af:0f:b3:41:62:
72:d9:e4:86:a6:cb:b5:8a:5b:78:12:fc:06:a8:8e:
d6:32:db:b0:e7:71:b3:6f:2d:7d:0d:8d:f8:44:bf:
41:d2:96:e0:a4:c9:8b:73:bc:e4:d2:f9:f9:67:0f:
78:86:b6:39:06:75:a3:f4:18:ae:aa:18:9c:9b:c4:
2a:1d:f2:3a:a9:6a:41:2b:33:2e:44:a4:a8:b9:80:
14:89:aa:0e:46:c7:b4:73:03:99:23:e1:55:d9:fd:
f6:4b:d5:9a:88:69:1b:ce:f7:08:91:36:71:1c:5c:
da:ef:25:75:f8:2c:db:6e:d4:35:4e:ba:de:72:eb:
92:d0:f4:1c:00:ed:ff:1e:9b:67:e5:d6:56:0c:2b:
cb:91:ba:0d:f6:75:a6:84:31:72:cd:05:75:38:c7:
fb:ff:0a:6e:9d:61:cb:a5:09:b0:2c:1f:36:fd:cd:
8f:ea:f2:8a:87:17:5e:8e:ee:c6:1e:42:9a:ea:31:
d1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:EF:9A:08:71:17:1E:A6:66:AF:34:54:49:7D:3A:34:EF:3D:5C:D4
X509v3 Authority Key Identifier:
keyid:8F:9F:82:3A:F9:93:B3:99:5C:9E:5F:F4:C2:28:BD:F9:94:51:FB:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5-COvmTs5lcnl_0wii9-ZRR-4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:bc:8b:e9:cf:3b:a6:9c:ee:8a:20:fe:17:09:64:df:e9:c3:
70:3d:a3:df:08:85:67:15:34:e7:36:b9:08:8a:b5:9b:b0:27:
25:f5:8b:4d:c4:ec:22:a6:83:f0:57:5b:8e:56:7c:e6:5b:88:
72:b5:38:ac:6f:8a:27:12:d1:d5:e1:25:56:b8:23:7f:e7:3c:
4d:ae:4d:58:fc:fd:5f:e9:9b:73:37:d0:ec:1e:32:02:03:60:
8d:0a:f5:02:1f:51:6e:4b:2e:a2:89:55:cb:fd:e5:25:83:0e:
80:e0:12:c2:a4:c9:af:5e:c1:e1:81:4a:76:47:6e:55:e5:7c:
57:bc:2b:3a:05:ee:47:6d:f1:59:12:6b:44:16:8a:58:55:d0:
c0:32:60:d7:dd:8d:d6:60:34:67:f6:fe:1c:69:7e:ba:df:64:
91:15:bb:3f:1c:a3:f2:0d:b4:58:aa:2a:fe:7c:69:c2:07:1b:
56:8f:3e:43:ac:4b:30:5f:f7:0e:61:dc:69:55:d7:6b:25:91:
50:8a:2b:db:c3:ef:8b:25:6e:85:4a:ae:11:75:9c:51:0e:50:
4b:d0:80:76:d9:48:7c:24:8d:42:65:94:c6:0d:ca:9f:b5:76:
5a:20:cc:96:bf:60:7f:4c:0f:71:35:51:10:bf:20:c9:23:95:
cf:e1:1f:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk5FYDr0gRcwfJfsqP2iPUbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmOWY4MjNhZjk5M2IzOTk1YzllNWZmNGMyMjhiZGY5OTQ1
MWZiOGEwHhcNMjUwOTExMTQwMjE0WhcNMjUwOTEyMTQwMjE0WjAzMTEwLwYDVQQD
EygxOWVmOWEwODcxMTcxZWE2NjZhZjM0NTQ0OTdkM2EzNGVmM2Q1Y2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMTrGfukJngAD/iNAwx3RZ2sWSxY
9yaZqiCTrS/5XAcHh1lKMZLKriwmOadTBZ9d1LDwqgvXKaLxV95mY2zjVtK09O70
rw+zQWJy2eSGpsu1ilt4EvwGqI7WMtuw53Gzby19DY34RL9B0pbgpMmLc7zk0vn5
Zw94hrY5BnWj9Biuqhicm8QqHfI6qWpBKzMuRKSouYAUiaoORse0cwOZI+FV2f32
S9WaiGkbzvcIkTZxHFza7yV1+CzbbtQ1TrrecuuS0PQcAO3/Hptn5dZWDCvLkboN
9nWmhDFyzQV1OMf7/wpunWHLpQmwLB82/c2P6vKKhxdeju7GHkKa6jHR6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBnvmghxFx6mZq80VEl9OjTvPVzUMB8GA1UdIwQY
MBaAFI+fgjr5k7OZXJ5f9MIovfmUUfuKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajUtQ092bVRzNWxjbmxfMHdpaTktWlJSLTRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9jZTRkODEtZWM1NC00OTJlLWE3NTEt
MTUxMTY4OWMzYzhhLzEvajUtQ092bVRzNWxjbmxfMHdpaTktWlJSLTRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9jZTRkODEtZWM1NC00OTJlLWE3NTEtMTUxMTY4OWMzYzhh
LzEvajUtQ092bVRzNWxjbmxfMHdpaTktWlJSLTRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEryL6c87
ppzuiiD+Fwlk3+nDcD2j3wiFZxU05za5CIq1m7AnJfWLTcTsIqaD8FdbjlZ85luI
crU4rG+KJxLR1eElVrgjf+c8Ta5NWPz9X+mbczfQ7B4yAgNgjQr1Ah9RbksuoolV
y/3lJYMOgOASwqTJr17B4YFKdkduVeV8V7wrOgXuR23xWRJrRBaKWFXQwDJg192N
1mA0Z/b+HGl+ut9kkRW7Pxyj8g20WKoq/nxpwgcbVo8+Q6xLMF/3DmHcaVXXayWR
UIor28PviyVuhUquEXWcUQ5QS9CAdtlIfCSNQmWUxg3Kn7V2WiDMlr9gf0wPcTVR
EL8gySOVz+EfmQ==
-----END CERTIFICATE-----
Generated at Thu Sep 11 17:47:42 2025 by rpki-client