Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft
File: JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft (raw, json)
Hash identifier: CGOyQdWZKIDfdHfgOzyH7yWCaePGb5JyRCuXw3boKAI=
Subject key identifier: B7:C4:90:51:DA:2E:E6:9A:D9:63:99:BE:F4:5E:29:09:87:8E:8B:9B
Authority key identifier: 26:25:1C:F7:D8:D6:D0:57:DC:64:71:5B:A8:36:29:9D:F3:9F:D8:5B
Certificate issuer: /CN=26251cf7d8d6d057dc64715ba836299df39fd85b
Certificate serial: 019A24AEA94CD965E9250A3DF41A3BA83A0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JiUc99jW0FfcZHFbqDYpnfOf2Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft
Manifest number: 5C
Signing time: Mon 27 Oct 2025 08:00:17 +0000
Manifest this update: Mon 27 Oct 2025 08:00:17 +0000
Manifest next update: Tue 28 Oct 2025 08:00:17 +0000
Files and hashes: 1: JiUc99jW0FfcZHFbqDYpnfOf2Fs.crl (hash: 8Cnxw5rkGZHrs/CSc6p9FQDx3svYpm4ACmsXOpZ6nos=)
2: yD4usZMSXbGkK2CBunEX74yn4QI.roa (hash: SizEhRkGwm4GTxXwCKgcYA/BLRuUEVBDL2+vReMYwzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JiUc99jW0FfcZHFbqDYpnfOf2Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:ae:a9:4c:d9:65:e9:25:0a:3d:f4:1a:3b:a8:3a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26251cf7d8d6d057dc64715ba836299df39fd85b
Validity
Not Before: Oct 27 08:00:17 2025 GMT
Not After : Oct 28 08:00:17 2025 GMT
Subject: CN=b7c49051da2ee69ad96399bef45e2909878e8b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0a:8c:b3:2c:6a:29:a3:ea:74:7d:73:c8:77:
27:2d:58:49:69:0b:9c:f6:12:24:c2:e4:ac:4f:32:
23:60:44:63:24:6c:9e:0b:80:85:43:53:bd:ed:4d:
8b:56:63:4e:30:5c:92:44:a0:8d:95:4c:0b:32:bd:
f3:6f:68:93:fc:4d:c0:a2:66:f4:47:c1:e5:3d:e9:
14:93:5e:ee:05:72:d6:36:dc:9a:65:f1:65:39:c3:
0c:1b:29:af:26:b2:bf:04:36:75:c6:08:32:4d:11:
2a:98:9a:dd:eb:e2:12:10:9b:17:51:79:5f:88:bf:
0f:98:36:49:17:e1:57:b9:14:80:ae:b3:6f:29:6b:
35:f1:63:bc:9e:3c:16:2f:79:5a:4e:f1:ae:e3:0a:
56:0b:22:ea:f8:a7:f6:91:02:ff:e0:17:77:b2:b5:
e2:c4:d4:bd:08:63:6b:36:37:c7:cb:3d:fd:bc:05:
fe:1b:c6:e5:4f:aa:8a:5b:f6:26:9b:37:68:cf:a4:
f8:bc:39:38:a2:71:c1:09:08:6c:53:06:2f:00:26:
a2:d7:f5:f2:de:cb:ed:1a:1a:5a:65:1a:e2:1c:e8:
43:f3:a7:0a:11:5a:7a:30:60:9b:0d:b9:a1:d1:0b:
da:de:ce:e3:54:0e:3c:23:88:43:d0:f9:80:69:0d:
ae:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C4:90:51:DA:2E:E6:9A:D9:63:99:BE:F4:5E:29:09:87:8E:8B:9B
X509v3 Authority Key Identifier:
keyid:26:25:1C:F7:D8:D6:D0:57:DC:64:71:5B:A8:36:29:9D:F3:9F:D8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiUc99jW0FfcZHFbqDYpnfOf2Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/48b52c-a045-409f-981b-9520549d7fd1/1/JiUc99jW0FfcZHFbqDYpnfOf2Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:89:26:46:77:00:29:39:fb:32:fb:95:44:63:4b:37:d7:4e:
99:e4:e9:bb:9d:21:52:ae:6d:03:6d:75:6a:0f:5f:67:62:95:
4a:2b:50:8d:96:77:db:51:c9:9f:d3:e6:4b:d4:ee:b4:24:8f:
63:c9:e1:de:38:13:e6:9b:95:1e:e1:00:27:d7:b8:43:90:86:
6e:be:46:e8:2d:ee:66:d7:b6:05:7e:a3:39:58:ad:c2:d2:e6:
0d:56:78:07:83:04:5e:7c:e9:3f:f9:3a:33:a4:08:61:ec:f1:
66:07:5a:79:92:29:aa:a1:2a:15:26:c4:f1:a1:6a:db:55:70:
0c:22:19:0d:1b:eb:d3:68:82:67:bc:bf:4e:13:da:f2:6a:3c:
77:3f:a2:12:33:a7:d9:bf:03:e0:e1:ee:8f:88:6a:5f:60:07:
74:71:6e:5c:9c:e5:c1:d0:7e:00:85:da:5c:e4:32:1d:ef:ca:
19:d5:79:e9:56:2f:1c:8b:13:11:04:da:c5:47:41:0c:78:3f:
ba:0a:5e:98:78:72:53:c6:23:a8:31:fd:89:1e:78:f6:d8:0d:
61:18:31:78:86:c2:2a:64:df:46:e5:0a:9e:d9:49:b6:3f:f7:
92:91:6b:d7:09:e5:a0:83:a6:46:9a:a5:8f:29:aa:dc:53:7d:
07:3f:13:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZokrqlM2WXpJQo99Bo7qDoOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MjUxY2Y3ZDhkNmQwNTdkYzY0NzE1YmE4MzYyOTlkZjM5
ZmQ4NWIwHhcNMjUxMDI3MDgwMDE3WhcNMjUxMDI4MDgwMDE3WjAzMTEwLwYDVQQD
EyhiN2M0OTA1MWRhMmVlNjlhZDk2Mzk5YmVmNDVlMjkwOTg3OGU4YjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQqMsyxqKaPqdH1zyHcnLVhJaQuc
9hIkwuSsTzIjYERjJGyeC4CFQ1O97U2LVmNOMFySRKCNlUwLMr3zb2iT/E3Aomb0
R8HlPekUk17uBXLWNtyaZfFlOcMMGymvJrK/BDZ1xggyTREqmJrd6+ISEJsXUXlf
iL8PmDZJF+FXuRSArrNvKWs18WO8njwWL3laTvGu4wpWCyLq+Kf2kQL/4Bd3srXi
xNS9CGNrNjfHyz39vAX+G8blT6qKW/Ymmzdoz6T4vDk4onHBCQhsUwYvACai1/Xy
3svtGhpaZRriHOhD86cKEVp6MGCbDbmh0Qva3s7jVA48I4hD0PmAaQ2uPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLfEkFHaLuaa2WOZvvReKQmHjoubMB8GA1UdIwQY
MBaAFCYlHPfY1tBX3GRxW6g2KZ3zn9hbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmlVYzk5alcwRmZjWkhGYnFEWXBuZk9mMkZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80OGI1MmMtYTA0NS00MDlmLTk4MWIt
OTUyMDU0OWQ3ZmQxLzEvSmlVYzk5alcwRmZjWkhGYnFEWXBuZk9mMkZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi80OGI1MmMtYTA0NS00MDlmLTk4MWItOTUyMDU0OWQ3ZmQx
LzEvSmlVYzk5alcwRmZjWkhGYnFEWXBuZk9mMkZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfYkmRncA
KTn7MvuVRGNLN9dOmeTpu50hUq5tA211ag9fZ2KVSitQjZZ321HJn9PmS9TutCSP
Y8nh3jgT5puVHuEAJ9e4Q5CGbr5G6C3uZte2BX6jOVitwtLmDVZ4B4MEXnzpP/k6
M6QIYezxZgdaeZIpqqEqFSbE8aFq21VwDCIZDRvr02iCZ7y/ThPa8mo8dz+iEjOn
2b8D4OHuj4hqX2AHdHFuXJzlwdB+AIXaXOQyHe/KGdV56VYvHIsTEQTaxUdBDHg/
ugpemHhyU8YjqDH9iR549tgNYRgxeIbCKmTfRuUKntlJtj/3kpFr1wnloIOmRpql
jymq3FN9Bz8TIw==
-----END CERTIFICATE-----
Generated at Mon Oct 27 14:52:09 2025 by rpki-client