Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
File: jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft (raw, json)
Hash identifier: DZUo/b0uCgYRYASi6MNRQ+3oUqNd0iTefR0dVNi7Evo=
Subject key identifier: 6D:93:67:80:DD:1D:2C:7C:BC:35:D6:AD:CB:6E:AD:8E:7A:18:E2:CD
Authority key identifier: 8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A
Certificate issuer: /CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a
Certificate serial: 019A71807ECA64FAD4E29E2C4B3145A1234D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
Manifest number: 04D0
Signing time: Tue 11 Nov 2025 06:00:37 +0000
Manifest this update: Tue 11 Nov 2025 06:00:37 +0000
Manifest next update: Wed 12 Nov 2025 06:00:37 +0000
Files and hashes: 1: i8Bk_Z-8KSuz8vQ1jubTpKMT59M.roa (hash: v5GClXo0hTRItLv1LLR9D2MpJboOBKsEHK/lxMtobJ4=)
2: jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl (hash: aIAc3C9We6NckhXG+YHPDW2hvr3TmnHHsnGsZoQerE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:7e:ca:64:fa:d4:e2:9e:2c:4b:31:45:a1:23:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd56fb1d679473b1ae1c57b0fc2a323caf1709a
Validity
Not Before: Nov 11 06:00:37 2025 GMT
Not After : Nov 12 06:00:37 2025 GMT
Subject: CN=6d936780dd1d2c7cbc35d6adcb6ead8e7a18e2cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c8:6e:d8:c8:0a:ad:cf:db:2f:b9:97:8d:1f:
8b:13:78:5f:ed:1e:8e:5a:6d:57:21:6e:52:13:37:
cc:b3:f4:3b:58:ac:f0:50:62:43:c6:1b:6f:c1:60:
0e:03:36:54:84:5d:ab:5a:4d:3f:89:34:60:61:6d:
2d:be:94:9b:a5:90:0a:54:98:aa:bc:4c:28:1a:98:
42:1a:31:a7:0c:a3:7d:3a:25:94:b1:e6:c7:ba:53:
af:19:86:28:34:0c:26:16:fb:4e:7f:29:e5:9b:29:
65:69:e0:1e:ad:4e:09:fb:6b:ca:38:b9:48:fb:02:
a1:d1:44:42:bc:12:5b:0e:70:19:c9:78:2b:22:40:
60:2b:72:2d:b3:c6:91:a3:d3:03:47:35:8d:f0:2c:
67:b2:10:e3:6e:33:ae:ff:16:5b:35:43:da:f9:36:
13:ac:4b:8d:5f:41:fe:d3:7e:86:be:ac:d7:83:89:
0f:4c:27:36:05:31:81:31:18:de:65:72:66:ed:50:
a7:28:74:b5:c2:7c:cb:0b:f2:1f:06:70:92:ba:84:
c3:22:48:94:73:de:b7:c3:ab:0f:38:91:af:47:9f:
64:54:23:be:ab:3f:17:aa:d1:ac:fe:46:c4:3d:e9:
a8:13:e6:05:8a:07:36:97:07:58:df:b9:d3:59:89:
09:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:93:67:80:DD:1D:2C:7C:BC:35:D6:AD:CB:6E:AD:8E:7A:18:E2:CD
X509v3 Authority Key Identifier:
keyid:8C:D5:6F:B1:D6:79:47:3B:1A:E1:C5:7B:0F:C2:A3:23:CA:F1:70:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/a2209b-a918-4074-ba97-a792a88baf10/1/jNVvsdZ5Rzsa4cV7D8KjI8rxcJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:27:43:20:47:42:23:c9:47:e0:62:c0:9b:f6:10:a3:28:d0:
1a:2c:4b:46:0c:93:09:44:ae:0d:16:91:73:ed:8c:5f:db:48:
0c:be:3f:8f:65:8c:31:27:62:9a:97:2b:fa:c4:fe:cf:4d:02:
f1:9d:b7:41:46:33:00:c0:07:cd:a7:a2:3a:9b:11:f0:51:b4:
6c:c4:1d:17:d0:da:7f:c0:5f:ca:df:46:7d:5c:16:e2:f5:39:
ec:54:6b:a2:f6:09:d6:a6:8e:a7:a4:a7:33:b6:da:47:c5:9b:
87:c8:30:96:11:b7:a5:36:46:76:a5:df:ee:2c:5d:18:03:04:
11:36:34:9a:4d:b9:ff:0f:9c:12:cd:23:d4:74:20:b2:fa:c0:
d8:2d:85:fb:93:f5:6e:aa:15:a2:b0:6d:39:76:1e:53:0d:ed:
d9:1e:79:71:bd:bb:14:f0:89:5c:a9:7c:11:ba:91:21:e4:47:
55:36:f2:a7:e5:bb:95:6b:79:80:79:02:81:a4:4c:ee:3b:56:
8a:19:98:64:ad:73:30:fa:45:25:ef:6c:4e:41:23:be:bb:a8:
81:a9:61:90:3a:43:ca:29:64:d1:36:48:eb:32:ff:90:fe:06:
74:3b:87:01:4e:b8:69:96:29:36:60:09:18:ed:64:3e:a6:72:
f3:30:02:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxgH7KZPrU4p4sSzFFoSNNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZDU2ZmIxZDY3OTQ3M2IxYWUxYzU3YjBmYzJhMzIzY2Fm
MTcwOWEwHhcNMjUxMTExMDYwMDM3WhcNMjUxMTEyMDYwMDM3WjAzMTEwLwYDVQQD
Eyg2ZDkzNjc4MGRkMWQyYzdjYmMzNWQ2YWRjYjZlYWQ4ZTdhMThlMmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMhu2MgKrc/bL7mXjR+LE3hf7R6O
Wm1XIW5SEzfMs/Q7WKzwUGJDxhtvwWAOAzZUhF2rWk0/iTRgYW0tvpSbpZAKVJiq
vEwoGphCGjGnDKN9OiWUsebHulOvGYYoNAwmFvtOfynlmyllaeAerU4J+2vKOLlI
+wKh0URCvBJbDnAZyXgrIkBgK3Its8aRo9MDRzWN8CxnshDjbjOu/xZbNUPa+TYT
rEuNX0H+036GvqzXg4kPTCc2BTGBMRjeZXJm7VCnKHS1wnzLC/IfBnCSuoTDIkiU
c963w6sPOJGvR59kVCO+qz8XqtGs/kbEPemoE+YFigc2lwdY37nTWYkJ7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG2TZ4DdHSx8vDXWrcturY56GOLNMB8GA1UdIwQY
MBaAFIzVb7HWeUc7GuHFew/CoyPK8XCaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak5WdnNkWjVSenNhNGNWN0Q4S2pJOHJ4Y0pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9hMjIwOWItYTkxOC00MDc0LWJhOTct
YTc5MmE4OGJhZjEwLzEvak5WdnNkWjVSenNhNGNWN0Q4S2pJOHJ4Y0pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9hMjIwOWItYTkxOC00MDc0LWJhOTctYTc5MmE4OGJhZjEw
LzEvak5WdnNkWjVSenNhNGNWN0Q4S2pJOHJ4Y0pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaCdDIEdC
I8lH4GLAm/YQoyjQGixLRgyTCUSuDRaRc+2MX9tIDL4/j2WMMSdimpcr+sT+z00C
8Z23QUYzAMAHzaeiOpsR8FG0bMQdF9Daf8Bfyt9GfVwW4vU57FRrovYJ1qaOp6Sn
M7baR8Wbh8gwlhG3pTZGdqXf7ixdGAMEETY0mk25/w+cEs0j1HQgsvrA2C2F+5P1
bqoVorBtOXYeUw3t2R55cb27FPCJXKl8EbqRIeRHVTbyp+W7lWt5gHkCgaRM7jtW
ihmYZK1zMPpFJe9sTkEjvruogalhkDpDyilk0TZI6zL/kP4GdDuHAU64aZYpNmAJ
GO1kPqZy8zACsg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:37:35 2025 by rpki-client