Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
File: JbvtC_9__qtn8wK0EaAHAYVKbDA.mft (raw, json)
Hash identifier: c1i0Lr44/NqYsgEeO7RYuuKAFnWN9c/OiPEobSMy4KE=
Subject key identifier: 0F:64:25:F5:80:BE:F5:3A:D7:5C:38:61:2D:39:9E:26:B7:CB:C4:D5
Authority key identifier: 25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
Certificate issuer: /CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Certificate serial: 0199C5D84389BA5CC5781ED547AA4978E7F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
Manifest number: 0D19
Signing time: Wed 08 Oct 2025 22:01:48 +0000
Manifest this update: Wed 08 Oct 2025 22:01:48 +0000
Manifest next update: Thu 09 Oct 2025 22:01:48 +0000
Files and hashes: 1: JbvtC_9__qtn8wK0EaAHAYVKbDA.crl (hash: 6q0nP9iLCGybzMWDAPm7FpPASsHp93HZok4qL2oZNTo=)
2: T2qZTTFWVSNBNeXqRrv5AJne1B0.roa (hash: EWp0bMjXe6eEnMu430F2WwTP+lMlXpj/M+oOz9ex/1k=)
3: poXwpvkvRg633LYFGk-iWzlj3Rk.roa (hash: W5a6ZZcfOFTcK7kPUq/ojL8WGj2xf0i5VWR/Jf3A3hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:d8:43:89:ba:5c:c5:78:1e:d5:47:aa:49:78:e7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Validity
Not Before: Oct 8 22:01:48 2025 GMT
Not After : Oct 9 22:01:48 2025 GMT
Subject: CN=0f6425f580bef53ad75c38612d399e26b7cbc4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:eb:da:e0:d4:af:08:e0:ea:cb:20:d5:2d:79:
b5:b1:e3:10:96:c5:17:31:6c:ab:a3:3b:bb:c1:54:
1d:f6:24:9c:27:b5:01:b3:32:b1:ea:58:26:90:71:
79:05:2e:ce:0d:50:62:a9:f5:16:19:9f:06:2f:bd:
f6:d1:07:61:05:4d:83:9f:68:56:96:66:ee:b3:e0:
39:68:13:2f:84:7f:7b:59:54:18:80:2f:36:86:c6:
fe:85:0d:ec:99:d9:04:22:30:3d:78:ae:25:39:f5:
cf:4c:18:de:34:79:e9:4b:b4:69:d5:74:4e:25:de:
a6:fb:76:0c:f8:e0:47:33:30:36:72:d1:d7:0f:ad:
e8:a7:72:57:aa:36:cf:f7:50:f6:43:86:a6:28:0b:
60:13:04:ba:6c:29:63:cf:87:fb:00:5b:17:12:2b:
68:5d:45:13:f1:d0:78:f3:30:65:08:ea:81:3c:88:
53:29:29:ce:56:b8:1c:44:99:cf:d7:34:56:6a:c6:
8f:57:60:94:ba:07:f8:63:9b:74:15:59:cd:6f:a8:
86:b2:a8:58:5d:5d:4c:fd:1c:50:3f:a2:89:54:65:
1e:37:56:ee:67:14:ed:4d:bc:f0:ac:af:26:68:7d:
fc:d8:33:5e:9f:e5:7c:08:d4:36:a1:1e:7b:f1:0c:
a4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:64:25:F5:80:BE:F5:3A:D7:5C:38:61:2D:39:9E:26:B7:CB:C4:D5
X509v3 Authority Key Identifier:
keyid:25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:3e:d2:43:3a:09:e9:97:79:f1:f2:6d:ab:00:d5:ca:9c:37:
24:67:17:57:74:4f:28:95:d9:4b:3b:46:06:f0:71:d0:83:11:
81:9c:11:16:d0:d3:cf:c2:7e:c6:b9:ae:fa:cb:e8:10:36:49:
fd:17:b6:47:bb:d2:33:b4:29:c7:d3:f0:37:67:13:27:f8:7d:
87:a1:ab:f6:58:d9:77:31:79:49:ec:0f:48:09:a2:40:6e:67:
22:fd:0c:cb:19:a4:1f:3c:0b:ec:0c:2a:c8:82:e4:4c:cc:93:
a9:bf:db:bb:89:8d:94:01:e9:10:10:f6:c7:c5:29:e9:31:8e:
2f:81:85:3c:4d:d8:5f:e5:b9:5c:78:71:09:c5:70:ec:81:d9:
40:46:86:38:c9:ae:20:45:3f:29:40:07:f0:a4:a8:31:03:74:
6a:cd:ac:23:67:6c:5a:60:30:6b:0d:d0:66:bb:c7:02:d5:6d:
1e:bd:74:86:3a:00:ac:cd:8f:5f:de:ef:bf:a9:77:91:ea:13:
15:0c:13:20:f9:d7:7a:b9:ec:72:69:fe:6b:a5:20:fa:87:2b:
5b:e6:f5:6a:e0:d8:3a:2c:2d:cd:7d:5b:e7:a8:0e:a1:1d:3c:
a6:98:fe:85:15:11:13:8f:dd:49:35:f1:b5:bb:dd:30:11:ab:
a1:36:79:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnF2EOJulzFeB7VR6pJeOf1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YmJlZDBiZmY3ZmZlYWI2N2YzMDJiNDExYTAwNzAxODU0
YTZjMzAwHhcNMjUxMDA4MjIwMTQ4WhcNMjUxMDA5MjIwMTQ4WjAzMTEwLwYDVQQD
EygwZjY0MjVmNTgwYmVmNTNhZDc1YzM4NjEyZDM5OWUyNmI3Y2JjNGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuva4NSvCODqyyDVLXm1seMQlsUX
MWyrozu7wVQd9iScJ7UBszKx6lgmkHF5BS7ODVBiqfUWGZ8GL7320QdhBU2Dn2hW
lmbus+A5aBMvhH97WVQYgC82hsb+hQ3smdkEIjA9eK4lOfXPTBjeNHnpS7Rp1XRO
Jd6m+3YM+OBHMzA2ctHXD63op3JXqjbP91D2Q4amKAtgEwS6bCljz4f7AFsXEito
XUUT8dB48zBlCOqBPIhTKSnOVrgcRJnP1zRWasaPV2CUugf4Y5t0FVnNb6iGsqhY
XV1M/RxQP6KJVGUeN1buZxTtTbzwrK8maH382DNen+V8CNQ2oR578QykZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA9kJfWAvvU611w4YS05nia3y8TVMB8GA1UdIwQY
MBaAFCW77Qv/f/6rZ/MCtBGgBwGFSmwwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmJ2dENfOV9fcXRuOHdLMEVhQUhBWVZLYkRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zYjlhZmYtZjAwZC00MTg3LWFmOTQt
NTcxN2I0NTQ0MjM3LzEvSmJ2dENfOV9fcXRuOHdLMEVhQUhBWVZLYkRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8zYjlhZmYtZjAwZC00MTg3LWFmOTQtNTcxN2I0NTQ0MjM3
LzEvSmJ2dENfOV9fcXRuOHdLMEVhQUhBWVZLYkRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQj7SQzoJ
6Zd58fJtqwDVypw3JGcXV3RPKJXZSztGBvBx0IMRgZwRFtDTz8J+xrmu+svoEDZJ
/Re2R7vSM7Qpx9PwN2cTJ/h9h6Gr9ljZdzF5SewPSAmiQG5nIv0MyxmkHzwL7Awq
yILkTMyTqb/bu4mNlAHpEBD2x8Up6TGOL4GFPE3YX+W5XHhxCcVw7IHZQEaGOMmu
IEU/KUAH8KSoMQN0as2sI2dsWmAwaw3QZrvHAtVtHr10hjoArM2PX97vv6l3keoT
FQwTIPnXernscmn+a6Ug+ocrW+b1auDYOiwtzX1b56gOoR08ppj+hRURE4/dSTXx
tbvdMBGroTZ5nw==
-----END CERTIFICATE-----
Generated at Thu Oct 9 06:23:53 2025 by rpki-client