Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
File: jDTik43WiEm7QG6et5yJPmwSx4o.mft (raw, json)
Hash identifier: EGYrXYKoAdAzBOsjXc1EB2g7iefGw+uIOrUUZPgRHQY=
Subject key identifier: 06:B2:F6:05:62:42:70:A1:F8:16:75:0E:7B:8E:E6:EA:F3:77:53:07
Authority key identifier: 8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A
Certificate issuer: /CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a
Certificate serial: 019A1D2BEB0AE619B6213B65BED043EA4A81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
Manifest number: 16F5
Signing time: Sat 25 Oct 2025 21:00:08 +0000
Manifest this update: Sat 25 Oct 2025 21:00:08 +0000
Manifest next update: Sun 26 Oct 2025 21:00:08 +0000
Files and hashes: 1: _xcIQcrm4noRq8C0ZoCPTZiOCWs.roa (hash: +umQkbTDLA3XudEv4u8EibqqHd0r0Zew/gszN5k+/5Y=)
2: jDTik43WiEm7QG6et5yJPmwSx4o.crl (hash: +yCUU7AXQGow/7WKEAR0bxEIu5Mgb+jRvjWyTgwQVf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:2b:eb:0a:e6:19:b6:21:3b:65:be:d0:43:ea:4a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a
Validity
Not Before: Oct 25 21:00:08 2025 GMT
Not After : Oct 26 21:00:08 2025 GMT
Subject: CN=06b2f605624270a1f816750e7b8ee6eaf3775307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7f:ec:64:92:7c:4c:c1:31:78:50:03:59:75:
cc:a2:7f:04:39:2e:7b:66:32:96:d9:47:d6:4c:a6:
b0:27:73:c2:28:cb:82:da:ef:e6:76:73:19:ac:ef:
b7:3b:56:2f:4b:1b:aa:af:53:9a:9b:82:f8:8f:a2:
5c:37:fa:c2:7f:00:2d:f9:c2:52:38:bc:d3:f5:cd:
1d:b5:1a:8f:90:da:e4:44:ee:e6:19:dd:70:4f:67:
e9:1f:60:6d:89:3b:ac:ed:84:0f:d5:58:6f:38:65:
a7:d1:cc:57:27:37:88:3f:ae:ec:ba:2c:4b:13:79:
ef:5e:59:0f:44:ed:78:76:34:db:e3:23:52:7c:fc:
dd:f2:00:7a:f7:fc:7c:2d:ef:63:69:b0:78:bd:56:
82:a1:83:71:70:81:e0:d9:fb:24:41:9c:44:4e:04:
05:9b:78:79:0a:78:05:50:1a:54:e2:d7:41:01:b2:
8d:dd:b4:4a:40:8f:c3:fb:63:09:2f:de:1d:31:c3:
f7:0a:48:c1:e1:52:44:aa:7c:c2:6e:a7:45:d2:19:
eb:ff:46:75:a7:7a:4b:6c:1e:77:b9:8b:34:81:54:
d3:6e:9e:ce:30:bd:58:65:12:60:5b:0a:2d:2d:f1:
70:b9:63:e3:c9:ac:6e:26:08:fd:21:eb:99:8b:fe:
b0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B2:F6:05:62:42:70:A1:F8:16:75:0E:7B:8E:E6:EA:F3:77:53:07
X509v3 Authority Key Identifier:
keyid:8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:8d:02:1b:85:23:a1:67:c8:bd:24:74:db:e9:bb:8f:92:03:
11:0a:dc:7d:ce:6f:0f:48:04:f9:b4:b8:5d:32:8c:86:60:a0:
94:57:3e:47:76:db:7b:a8:cf:ba:c2:d8:fa:01:64:01:6f:ee:
f4:3a:ae:86:24:3a:9f:f9:b8:70:fd:e1:1e:51:7f:70:db:36:
0d:04:10:6d:4f:49:46:db:37:2a:4a:44:67:33:d2:85:37:9e:
fe:14:6c:d6:8c:39:2e:7f:94:78:2a:ee:5d:ec:62:5b:96:05:
3c:8e:ff:3f:91:7b:c4:42:cb:cf:cb:e3:c9:40:45:e2:93:19:
4c:59:f0:47:60:1f:8d:7c:25:c7:59:c0:87:b6:10:67:55:4b:
fa:e8:ec:b5:10:3b:ab:fc:5e:df:20:a9:61:5a:fd:bf:33:df:
d2:60:bd:3f:b5:f4:04:b6:44:c5:05:1b:f2:1e:bf:34:1f:c6:
d2:b9:ae:95:37:0f:54:4c:53:b1:59:8a:b7:38:d0:23:3a:c1:
e2:39:00:c7:1f:f6:31:38:27:df:74:fc:cd:56:6a:dd:2d:ec:
6c:44:58:fa:66:77:43:d9:7d:de:e3:08:ec:8d:5f:71:65:75:
60:9e:f0:9c:66:f4:d3:f4:ff:55:e7:42:c9:f6:a1:96:91:94:
93:d1:12:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZodK+sK5hm2ITtlvtBD6kqBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMzRlMjkzOGRkNjg4NDliYjQwNmU5ZWI3OWM4OTNlNmMx
MmM3OGEwHhcNMjUxMDI1MjEwMDA4WhcNMjUxMDI2MjEwMDA4WjAzMTEwLwYDVQQD
EygwNmIyZjYwNTYyNDI3MGExZjgxNjc1MGU3YjhlZTZlYWYzNzc1MzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAun/sZJJ8TMExeFADWXXMon8EOS57
ZjKW2UfWTKawJ3PCKMuC2u/mdnMZrO+3O1YvSxuqr1Oam4L4j6JcN/rCfwAt+cJS
OLzT9c0dtRqPkNrkRO7mGd1wT2fpH2BtiTus7YQP1VhvOGWn0cxXJzeIP67suixL
E3nvXlkPRO14djTb4yNSfPzd8gB69/x8Le9jabB4vVaCoYNxcIHg2fskQZxETgQF
m3h5CngFUBpU4tdBAbKN3bRKQI/D+2MJL94dMcP3CkjB4VJEqnzCbqdF0hnr/0Z1
p3pLbB53uYs0gVTTbp7OML1YZRJgWwotLfFwuWPjyaxuJgj9IeuZi/6wBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAay9gViQnCh+BZ1DnuO5urzd1MHMB8GA1UdIwQY
MBaAFIw04pON1ohJu0BunreciT5sEseKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakRUaWs0M1dpRW03UUc2ZXQ1eUpQbXdTeDRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8zMjA3OTctYjgxMC00ZjhlLThlN2Mt
ODNjMzhiNzc3NDc4LzEvakRUaWs0M1dpRW03UUc2ZXQ1eUpQbXdTeDRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8zMjA3OTctYjgxMC00ZjhlLThlN2MtODNjMzhiNzc3NDc4
LzEvakRUaWs0M1dpRW03UUc2ZXQ1eUpQbXdTeDRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX40CG4Uj
oWfIvSR02+m7j5IDEQrcfc5vD0gE+bS4XTKMhmCglFc+R3bbe6jPusLY+gFkAW/u
9DquhiQ6n/m4cP3hHlF/cNs2DQQQbU9JRts3KkpEZzPShTee/hRs1ow5Ln+UeCru
XexiW5YFPI7/P5F7xELLz8vjyUBF4pMZTFnwR2AfjXwlx1nAh7YQZ1VL+ujstRA7
q/xe3yCpYVr9vzPf0mC9P7X0BLZExQUb8h6/NB/G0rmulTcPVExTsVmKtzjQIzrB
4jkAxx/2MTgn33T8zVZq3S3sbERY+mZ3Q9l93uMI7I1fcWV1YJ7wnGb00/T/VedC
yfahlpGUk9ES3w==
-----END CERTIFICATE-----
Generated at Sun Oct 26 03:18:49 2025 by rpki-client