Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9ddafd-0346-49a1-ac3d-f1002f548615/1/jVqxQkxBKz-_Tvrprh5o42wr7oE.mft
File: jVqxQkxBKz-_Tvrprh5o42wr7oE.mft (raw, json)
Hash identifier: gEfT/NQyGf5GY+jVpBZAADzkwo+OSD3EFwzBDNbPrGc=
Subject key identifier: BC:88:38:F1:1F:DC:E1:06:8A:39:5C:01:15:AC:D2:98:62:A8:D5:01
Authority key identifier: 8D:5A:B1:42:4C:41:2B:3F:BF:4E:FA:E9:AE:1E:68:E3:6C:2B:EE:81
Certificate issuer: /CN=8d5ab1424c412b3fbf4efae9ae1e68e36c2bee81
Certificate serial: 019A706E79B6D49F8FC35B92DA8C0747CFA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVqxQkxBKz-_Tvrprh5o42wr7oE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9ddafd-0346-49a1-ac3d-f1002f548615/1/jVqxQkxBKz-_Tvrprh5o42wr7oE.mft
Manifest number: 86
Signing time: Tue 11 Nov 2025 01:01:19 +0000
Manifest this update: Tue 11 Nov 2025 01:01:19 +0000
Manifest next update: Wed 12 Nov 2025 01:01:19 +0000
Files and hashes: 1: A4nvWxPWlzAQ5MyQBKFam5tqK2Y.roa (hash: uB+mrGBEprFri2JMpN/r8bicbt8/Y9Un0gqpGX/41SY=)
2: jVqxQkxBKz-_Tvrprh5o42wr7oE.crl (hash: oq6waMCL5PyejEywHflwfQ2/9/xeYm4KegZyhJY31sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9ddafd-0346-49a1-ac3d-f1002f548615/1/jVqxQkxBKz-_Tvrprh5o42wr7oE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9ddafd-0346-49a1-ac3d-f1002f548615/1/jVqxQkxBKz-_Tvrprh5o42wr7oE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVqxQkxBKz-_Tvrprh5o42wr7oE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:79:b6:d4:9f:8f:c3:5b:92:da:8c:07:47:cf:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d5ab1424c412b3fbf4efae9ae1e68e36c2bee81
Validity
Not Before: Nov 11 01:01:19 2025 GMT
Not After : Nov 12 01:01:19 2025 GMT
Subject: CN=bc8838f11fdce1068a395c0115acd29862a8d501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:27:2f:9c:4e:64:ae:70:ba:6b:8f:d5:c1:d6:
db:54:86:07:ee:85:81:30:cc:fd:22:7f:30:f8:00:
60:79:dc:c8:3c:4b:7c:b3:90:37:66:ee:77:9a:29:
a7:f4:7b:74:94:ee:51:d0:bd:8d:ed:3b:12:a3:24:
a4:f6:44:0d:eb:e9:9b:1b:c9:1d:19:8d:3e:ac:43:
ff:4a:ec:54:a9:45:66:aa:94:81:1b:70:8d:ee:e3:
7f:aa:f9:ae:eb:13:eb:f5:08:12:6f:4c:c2:b2:21:
ea:06:dd:fb:14:61:96:e6:c5:1a:70:1e:fe:3d:b5:
0d:6e:62:85:5a:b9:1b:18:74:86:fe:a5:4b:de:da:
38:12:fb:7b:dd:4b:98:77:2c:45:4b:b5:35:e4:28:
80:e9:af:c4:8a:22:0a:ca:c4:40:1d:4e:93:b0:d3:
44:41:e0:68:64:7b:70:ac:7c:ef:1b:ea:8a:f9:06:
fd:e5:55:1a:fe:bd:a9:9e:38:72:dd:1b:c7:9a:fb:
7a:ce:d4:6c:e9:9e:22:0e:0f:2a:b2:18:d0:6c:91:
96:b0:a8:cb:32:30:3e:48:a8:1b:2b:15:9a:26:28:
77:ed:9c:b1:7f:3d:2d:50:53:b7:7b:dd:01:7b:29:
50:6d:de:2b:3a:8d:83:f8:9d:cb:16:12:b7:5e:bf:
79:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:88:38:F1:1F:DC:E1:06:8A:39:5C:01:15:AC:D2:98:62:A8:D5:01
X509v3 Authority Key Identifier:
keyid:8D:5A:B1:42:4C:41:2B:3F:BF:4E:FA:E9:AE:1E:68:E3:6C:2B:EE:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVqxQkxBKz-_Tvrprh5o42wr7oE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9ddafd-0346-49a1-ac3d-f1002f548615/1/jVqxQkxBKz-_Tvrprh5o42wr7oE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9ddafd-0346-49a1-ac3d-f1002f548615/1/jVqxQkxBKz-_Tvrprh5o42wr7oE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ef:1f:5b:91:91:7d:9d:a5:59:3e:c3:5d:dc:1b:6a:73:4a:
f3:c3:75:5d:c1:2a:75:3d:98:8c:ff:70:8e:1d:94:ff:e1:e8:
ad:41:7f:e5:f8:9f:44:69:9f:d9:f4:7f:a1:ab:73:5a:39:61:
20:2c:ff:fa:f1:f4:1c:09:d0:b9:6e:ec:12:fb:81:28:11:d7:
c0:4a:a2:31:f4:2a:c3:bd:8d:ab:d4:1b:11:7d:b3:e3:eb:84:
1b:70:65:2a:ed:1e:b5:f6:d1:fa:fd:9a:aa:c6:fc:3a:e8:12:
ea:8b:2d:8b:e8:de:11:bd:e0:a6:de:fc:86:98:de:e2:ab:5d:
c2:2d:41:57:54:11:31:be:2d:62:11:06:85:29:57:dd:da:59:
73:5a:1d:9b:d2:35:65:34:82:46:5f:69:88:6d:23:4f:48:af:
6d:83:d0:13:1b:bf:3d:ba:0d:c4:cf:79:8e:ac:4e:79:76:d6:
5b:87:54:6f:ea:cc:e4:98:cc:12:52:ef:d4:04:50:c3:9a:f2:
98:e8:e1:2a:0d:8d:54:b8:2c:c2:fc:5a:cd:e2:92:b6:c3:f9:
22:b5:77:f7:7b:de:fb:86:d5:6c:e2:29:d2:91:be:7c:08:8e:
7a:51:26:c6:1d:e9:a4:e3:d5:9a:ed:19:d1:a3:9d:d4:10:20:
bc:fd:e0:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwbnm21J+Pw1uS2owHR8+pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNWFiMTQyNGM0MTJiM2ZiZjRlZmFlOWFlMWU2OGUzNmMy
YmVlODEwHhcNMjUxMTExMDEwMTE5WhcNMjUxMTEyMDEwMTE5WjAzMTEwLwYDVQQD
EyhiYzg4MzhmMTFmZGNlMTA2OGEzOTVjMDExNWFjZDI5ODYyYThkNTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCcvnE5krnC6a4/VwdbbVIYH7oWB
MMz9In8w+ABgedzIPEt8s5A3Zu53mimn9Ht0lO5R0L2N7TsSoySk9kQN6+mbG8kd
GY0+rEP/SuxUqUVmqpSBG3CN7uN/qvmu6xPr9QgSb0zCsiHqBt37FGGW5sUacB7+
PbUNbmKFWrkbGHSG/qVL3to4Evt73UuYdyxFS7U15CiA6a/EiiIKysRAHU6TsNNE
QeBoZHtwrHzvG+qK+Qb95VUa/r2pnjhy3RvHmvt6ztRs6Z4iDg8qshjQbJGWsKjL
MjA+SKgbKxWaJih37Zyxfz0tUFO3e90BeylQbd4rOo2D+J3LFhK3Xr95qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLyIOPEf3OEGijlcARWs0phiqNUBMB8GA1UdIwQY
MBaAFI1asUJMQSs/v0766a4eaONsK+6BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalZxeFFreEJLei1fVHZycHJoNW80MndyN29FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC85ZGRhZmQtMDM0Ni00OWExLWFjM2Qt
ZjEwMDJmNTQ4NjE1LzEvalZxeFFreEJLei1fVHZycHJoNW80MndyN29FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC85ZGRhZmQtMDM0Ni00OWExLWFjM2QtZjEwMDJmNTQ4NjE1
LzEvalZxeFFreEJLei1fVHZycHJoNW80MndyN29FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMe8fW5GR
fZ2lWT7DXdwbanNK88N1XcEqdT2YjP9wjh2U/+HorUF/5fifRGmf2fR/oatzWjlh
ICz/+vH0HAnQuW7sEvuBKBHXwEqiMfQqw72Nq9QbEX2z4+uEG3BlKu0etfbR+v2a
qsb8OugS6osti+jeEb3gpt78hpje4qtdwi1BV1QRMb4tYhEGhSlX3dpZc1odm9I1
ZTSCRl9piG0jT0ivbYPQExu/PboNxM95jqxOeXbWW4dUb+rM5JjMElLv1ARQw5ry
mOjhKg2NVLgswvxazeKStsP5IrV393ve+4bVbOIp0pG+fAiOelEmxh3ppOPVmu0Z
0aOd1BAgvP3g3Q==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:25:02 2025 by rpki-client