Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
File: Jd40sXxTewli5M272bxnKcix2Qo.mft (raw, json)
Hash identifier: 6wIqdbnKDf42LeNTCUp7KBBXChr8MMRzW7vRhtnpbok=
Subject key identifier: AF:F8:0D:B4:1D:70:D9:1B:C7:E8:3C:93:1F:73:7A:74:61:A4:C9:B4
Authority key identifier: 25:DE:34:B1:7C:53:7B:09:62:E4:CD:BB:D9:BC:67:29:C8:B1:D9:0A
Certificate issuer: /CN=25de34b17c537b0962e4cdbbd9bc6729c8b1d90a
Certificate serial: 019A221B8B1119A0B9DF66DFD32BD869A8A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
Manifest number: DA
Signing time: Sun 26 Oct 2025 20:00:21 +0000
Manifest this update: Sun 26 Oct 2025 20:00:21 +0000
Manifest next update: Mon 27 Oct 2025 20:00:21 +0000
Files and hashes: 1: Jd40sXxTewli5M272bxnKcix2Qo.crl (hash: Vsetlvz9De3z0qt/3r/KpUNFUlzbKjFm5PMh6mdZucA=)
2: h6iYTxkEjd04WV05dd6fQmp61L8.roa (hash: R2cWVyoWjWNVsdNIi8vnopbDtThlhMuHspPbR0pD3jU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:1b:8b:11:19:a0:b9:df:66:df:d3:2b:d8:69:a8:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25de34b17c537b0962e4cdbbd9bc6729c8b1d90a
Validity
Not Before: Oct 26 20:00:21 2025 GMT
Not After : Oct 27 20:00:21 2025 GMT
Subject: CN=aff80db41d70d91bc7e83c931f737a7461a4c9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c9:c2:3c:59:e0:55:b4:da:74:e5:15:49:2f:
21:bf:30:d1:c6:04:7e:c6:c8:d6:fb:2f:06:3e:78:
fc:55:9f:d6:00:25:7a:bc:4f:8a:ba:db:e3:bb:c1:
bb:71:e7:7c:c0:4e:1c:a8:5a:67:af:6c:d6:9d:57:
32:9b:46:e9:1e:10:00:74:59:2f:9b:d1:db:14:eb:
bf:cb:d6:aa:19:43:67:eb:38:4a:21:98:f5:e0:95:
c5:08:1a:ca:ef:ee:80:8e:17:c5:81:c5:e6:26:f5:
6a:95:07:62:71:e3:c6:cd:0f:8c:25:16:a7:73:bc:
60:b3:a1:87:d6:ec:81:ac:96:d6:34:9e:97:28:1c:
ac:86:c3:91:95:68:49:d6:66:c6:d6:d6:4e:01:23:
d9:a1:f7:f2:50:ef:6d:9e:b4:14:b6:b9:e0:2e:17:
b0:3a:2e:56:a5:f8:fb:10:31:04:44:26:79:41:a5:
14:46:af:ae:b3:a1:4d:4f:a2:0f:b1:a3:3d:ba:b5:
7c:cf:ef:97:dc:d1:d1:db:40:25:18:1d:b4:5a:d0:
57:e3:71:d3:68:52:72:bf:b2:10:5a:b1:0a:85:2f:
7f:53:b4:e2:7a:5a:57:dd:6e:84:be:98:ec:27:59:
21:fa:92:8f:51:5a:df:af:07:d7:6e:1b:9a:3f:87:
a1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F8:0D:B4:1D:70:D9:1B:C7:E8:3C:93:1F:73:7A:74:61:A4:C9:B4
X509v3 Authority Key Identifier:
keyid:25:DE:34:B1:7C:53:7B:09:62:E4:CD:BB:D9:BC:67:29:C8:B1:D9:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d8:ca:c3:c9:da:ca:0b:16:ec:34:58:51:e3:4c:88:0d:dc:
9e:b6:6c:20:49:cf:0a:1e:60:16:08:44:82:97:5c:82:8e:c1:
ee:fb:5b:b1:35:0d:64:cc:fa:ac:2b:07:26:7f:ab:9b:05:26:
ce:9c:92:4a:7c:f4:92:53:ab:91:dc:2f:9e:bc:d7:cf:b4:e4:
bf:43:f0:7a:62:3c:3e:fb:9f:db:ac:82:e9:b4:44:50:3f:92:
10:76:8a:a8:48:fa:89:12:b1:f4:dd:29:09:2b:13:dc:c9:be:
c3:9d:41:32:14:db:b2:3c:f8:37:6a:d3:db:2f:97:13:7a:dc:
90:9a:02:be:39:d5:30:c9:7a:f1:04:e7:fd:10:9c:9d:38:26:
20:01:91:89:60:12:d4:f9:8e:86:09:dd:e6:ae:34:7a:81:b6:
c1:a8:1b:cd:55:78:0e:aa:02:f4:e8:d6:f2:bc:07:aa:f3:c6:
61:06:8b:e3:ce:34:e4:03:89:9f:6f:a7:f4:7f:4f:1d:80:2d:
18:fb:8c:dd:26:bb:12:ba:ca:6a:a9:9c:45:88:7d:1b:82:0c:
dc:91:1e:bb:bc:d1:86:99:8f:13:4a:0a:9a:8a:e3:ad:8b:c0:
18:f1:4e:20:4e:27:7e:2b:61:46:d9:b6:2d:73:5f:b0:6f:87:
f7:b7:7b:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoiG4sRGaC532bf0yvYaailMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZGUzNGIxN2M1MzdiMDk2MmU0Y2RiYmQ5YmM2NzI5Yzhi
MWQ5MGEwHhcNMjUxMDI2MjAwMDIxWhcNMjUxMDI3MjAwMDIxWjAzMTEwLwYDVQQD
EyhhZmY4MGRiNDFkNzBkOTFiYzdlODNjOTMxZjczN2E3NDYxYTRjOWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsnCPFngVbTadOUVSS8hvzDRxgR+
xsjW+y8GPnj8VZ/WACV6vE+Kutvju8G7ced8wE4cqFpnr2zWnVcym0bpHhAAdFkv
m9HbFOu/y9aqGUNn6zhKIZj14JXFCBrK7+6AjhfFgcXmJvVqlQdicePGzQ+MJRan
c7xgs6GH1uyBrJbWNJ6XKByshsORlWhJ1mbG1tZOASPZoffyUO9tnrQUtrngLhew
Oi5Wpfj7EDEERCZ5QaUURq+us6FNT6IPsaM9urV8z++X3NHR20AlGB20WtBX43HT
aFJyv7IQWrEKhS9/U7TielpX3W6EvpjsJ1kh+pKPUVrfrwfXbhuaP4eh8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/4DbQdcNkbx+g8kx9zenRhpMm0MB8GA1UdIwQY
MBaAFCXeNLF8U3sJYuTNu9m8ZynIsdkKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmQ0MHNYeFRld2xpNU0yNzJieG5LY2l4MlFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy83ZmQzZTEtMzVjMC00NTI4LTk4NTQt
MDk4OTQ5NDU4OGJmLzEvSmQ0MHNYeFRld2xpNU0yNzJieG5LY2l4MlFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy83ZmQzZTEtMzVjMC00NTI4LTk4NTQtMDk4OTQ5NDU4OGJm
LzEvSmQ0MHNYeFRld2xpNU0yNzJieG5LY2l4MlFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb9jKw8na
ygsW7DRYUeNMiA3cnrZsIEnPCh5gFghEgpdcgo7B7vtbsTUNZMz6rCsHJn+rmwUm
zpySSnz0klOrkdwvnrzXz7Tkv0PwemI8Pvuf26yC6bREUD+SEHaKqEj6iRKx9N0p
CSsT3Mm+w51BMhTbsjz4N2rT2y+XE3rckJoCvjnVMMl68QTn/RCcnTgmIAGRiWAS
1PmOhgnd5q40eoG2wagbzVV4DqoC9OjW8rwHqvPGYQaL48405AOJn2+n9H9PHYAt
GPuM3Sa7ErrKaqmcRYh9G4IM3JEeu7zRhpmPE0oKmorjrYvAGPFOIE4nfithRtm2
LXNfsG+H97d7PA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 01:38:26 2025 by rpki-client