Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
File: JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft (raw, json)
Hash identifier: TI1gc0PRFS63W5lADSpENfhM6xUW/uAHsxPmBevy+fY=
Subject key identifier: 48:86:1C:84:9B:7B:6B:D1:C4:E8:19:3F:CE:19:97:AA:11:49:B5:BA
Authority key identifier: 25:B1:A2:23:B7:E7:3F:D2:34:62:C2:04:E6:0E:9D:48:15:CF:76:3F
Certificate issuer: /CN=25b1a223b7e73fd23462c204e60e9d4815cf763f
Certificate serial: 019A72CA5CC7D46B640B9EC174972795F3E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
Manifest number: 0307
Signing time: Tue 11 Nov 2025 12:00:55 +0000
Manifest this update: Tue 11 Nov 2025 12:00:55 +0000
Manifest next update: Wed 12 Nov 2025 12:00:55 +0000
Files and hashes: 1: 1-nkTyOMqH94a8OlfukcDf7YbkNc.roa (hash: Z6uvUYmhirGQlJwClrs+HtNhQJGa2PNo7VCbu68pXz8=)
2: JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl (hash: K2iZwZxfN5VAfpPZAEcR40ZX0rAHHAokkLe3POsBnZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:5c:c7:d4:6b:64:0b:9e:c1:74:97:27:95:f3:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25b1a223b7e73fd23462c204e60e9d4815cf763f
Validity
Not Before: Nov 11 12:00:55 2025 GMT
Not After : Nov 12 12:00:55 2025 GMT
Subject: CN=48861c849b7b6bd1c4e8193fce1997aa1149b5ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:80:a6:b8:11:57:6a:71:68:e3:e8:f7:63:2f:
fe:58:23:de:40:5c:c4:73:3a:c3:4f:2b:14:a4:20:
1d:fb:15:6e:2c:9f:05:ab:b6:02:83:b5:3b:3c:e0:
1d:19:60:7f:aa:c6:c5:a6:9f:d9:0c:71:00:13:39:
d0:0e:fa:39:6b:da:29:a6:e2:e3:4c:04:b0:ec:c9:
b1:d1:42:f2:95:e7:27:c3:3b:57:87:c7:48:38:ed:
e1:95:7d:26:e9:55:6b:30:e8:c5:5b:03:1b:e4:7c:
72:1e:89:c3:06:ec:83:16:64:13:03:a0:c6:b2:74:
bf:d5:3b:34:d5:11:75:f9:6c:b7:a2:c9:72:ec:1f:
09:03:0b:85:b0:7a:66:02:f4:11:f7:22:7c:8d:be:
11:1e:1f:a4:ce:2d:0e:96:02:4c:51:4a:1b:a7:7e:
bc:bf:38:9e:c2:48:12:e9:04:fb:bf:8e:a0:1b:72:
d2:de:aa:d9:a9:d6:26:52:02:74:33:47:9e:a1:37:
17:73:7e:c6:82:6a:f2:2e:f9:0f:f6:89:30:f3:25:
ea:3c:71:8f:92:c8:2d:8c:05:95:b2:45:50:81:cf:
24:91:6e:27:e5:1c:75:fe:81:d6:7e:98:e6:8b:3a:
d6:2f:56:b6:a2:43:13:e6:19:89:a2:c3:52:7c:ec:
66:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:86:1C:84:9B:7B:6B:D1:C4:E8:19:3F:CE:19:97:AA:11:49:B5:BA
X509v3 Authority Key Identifier:
keyid:25:B1:A2:23:B7:E7:3F:D2:34:62:C2:04:E6:0E:9D:48:15:CF:76:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:2e:29:86:7c:f0:e6:91:e7:fd:ee:3f:5c:e5:1b:1f:5f:a3:
6c:b4:9a:e2:2e:1a:9b:41:12:1a:7f:bb:3c:d6:a6:12:9f:72:
4d:fe:c7:94:bd:c7:03:49:21:0b:96:01:92:72:14:c2:7d:b0:
27:20:df:4a:0a:b8:e3:28:a7:85:80:e3:c1:bd:3d:ff:7c:6f:
a8:8e:d4:78:b4:b6:a6:87:e4:46:34:fc:30:fc:2b:40:76:77:
39:eb:9a:73:fc:d6:55:d6:ca:32:02:b6:1c:f8:9f:b0:0c:32:
f9:02:b8:58:04:58:df:11:06:85:8b:64:33:7c:1c:59:7d:39:
9f:72:7c:fa:95:04:c4:c8:aa:27:0f:64:d4:84:2f:d4:5b:4c:
40:4d:51:52:64:17:e6:93:03:08:b5:9a:b9:18:8d:32:23:32:
2c:10:bc:f4:66:3e:56:81:83:7b:f0:f8:fd:25:4d:cc:26:12:
44:b9:47:a6:c1:61:71:9a:03:f5:8c:99:18:b5:86:c3:1e:69:
d4:5e:05:01:85:f9:c2:2d:8e:da:45:df:6f:81:6f:41:ba:ec:
1d:e1:63:84:ef:8f:85:3d:a6:48:25:2f:a1:1b:67:e1:b4:4d:
66:e7:b2:18:a6:c7:ea:61:58:38:98:3f:84:18:8a:a2:2e:44:
f0:00:01:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyylzH1GtkC57BdJcnlfPjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YjFhMjIzYjdlNzNmZDIzNDYyYzIwNGU2MGU5ZDQ4MTVj
Zjc2M2YwHhcNMjUxMTExMTIwMDU1WhcNMjUxMTEyMTIwMDU1WjAzMTEwLwYDVQQD
Eyg0ODg2MWM4NDliN2I2YmQxYzRlODE5M2ZjZTE5OTdhYTExNDliNWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6YCmuBFXanFo4+j3Yy/+WCPeQFzE
czrDTysUpCAd+xVuLJ8Fq7YCg7U7POAdGWB/qsbFpp/ZDHEAEznQDvo5a9oppuLj
TASw7Mmx0ULylecnwztXh8dIOO3hlX0m6VVrMOjFWwMb5HxyHonDBuyDFmQTA6DG
snS/1Ts01RF1+Wy3osly7B8JAwuFsHpmAvQR9yJ8jb4RHh+kzi0OlgJMUUobp368
vziewkgS6QT7v46gG3LS3qrZqdYmUgJ0M0eeoTcXc37GgmryLvkP9okw8yXqPHGP
ksgtjAWVskVQgc8kkW4n5Rx1/oHWfpjmizrWL1a2okMT5hmJosNSfOxm4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEiGHISbe2vRxOgZP84Zl6oRSbW6MB8GA1UdIwQY
MBaAFCWxoiO35z/SNGLCBOYOnUgVz3Y/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmJHaUk3Zm5QOUkwWXNJRTVnNmRTQlhQZGo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8wZTkwYzgtMmI4My00NzE1LTk5MzMt
YTczZjBiNzQxOGFiLzEvSmJHaUk3Zm5QOUkwWXNJRTVnNmRTQlhQZGo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8wZTkwYzgtMmI4My00NzE1LTk5MzMtYTczZjBiNzQxOGFi
LzEvSmJHaUk3Zm5QOUkwWXNJRTVnNmRTQlhQZGo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhS4phnzw
5pHn/e4/XOUbH1+jbLSa4i4am0ESGn+7PNamEp9yTf7HlL3HA0khC5YBknIUwn2w
JyDfSgq44yinhYDjwb09/3xvqI7UeLS2pofkRjT8MPwrQHZ3Oeuac/zWVdbKMgK2
HPifsAwy+QK4WARY3xEGhYtkM3wcWX05n3J8+pUExMiqJw9k1IQv1FtMQE1RUmQX
5pMDCLWauRiNMiMyLBC89GY+VoGDe/D4/SVNzCYSRLlHpsFhcZoD9YyZGLWGwx5p
1F4FAYX5wi2O2kXfb4FvQbrsHeFjhO+PhT2mSCUvoRtn4bRNZueyGKbH6mFYOJg/
hBiKoi5E8AABew==
-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:10 2025 by rpki-client