Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft
File: _JvrAZLQ00al5oWKp0SwQ0_tMYk.mft (raw, json)
Hash identifier: HG7eZPWf3hm7VZcRqPwtWLcNn61GKiwv8ABdq0fItI4=
Subject key identifier: CE:3C:F8:4E:71:26:F0:53:DB:FD:6F:CF:0A:19:4D:A9:4B:94:01:2A
Authority key identifier: FC:9B:EB:01:92:D0:D3:46:A5:E6:85:8A:A7:44:B0:43:4F:ED:31:89
Certificate issuer: /CN=fc9beb0192d0d346a5e6858aa744b0434fed3189
Certificate serial: 019A7149CA36507BD99BC6F1E85D619F8D1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft
Manifest number: 16DF
Signing time: Tue 11 Nov 2025 05:00:52 +0000
Manifest this update: Tue 11 Nov 2025 05:00:52 +0000
Manifest next update: Wed 12 Nov 2025 05:00:52 +0000
Files and hashes: 1: FasPE0L4fE1899bsu_j-7tmu6ok.roa (hash: Qhda7nOss3uAhstVaL86g/VtZIZV1OO3A8B7YvZv5Tg=)
2: _JvrAZLQ00al5oWKp0SwQ0_tMYk.crl (hash: kkMpldjKfCR24ZaJETsHunp4JMKU5Vn6Od5VI1wvn5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:ca:36:50:7b:d9:9b:c6:f1:e8:5d:61:9f:8d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9beb0192d0d346a5e6858aa744b0434fed3189
Validity
Not Before: Nov 11 05:00:52 2025 GMT
Not After : Nov 12 05:00:52 2025 GMT
Subject: CN=ce3cf84e7126f053dbfd6fcf0a194da94b94012a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d4:67:bc:3d:b5:3d:c4:46:b0:66:05:1c:cd:
d8:46:e2:26:1a:b7:22:86:1e:81:c5:7e:55:0e:a9:
ba:ad:59:cb:0e:0d:2c:0a:5a:44:25:03:2e:c9:1c:
3f:a4:db:eb:68:35:c6:ef:c6:d1:fc:0a:ee:8e:85:
94:8e:f5:1f:64:6a:54:13:b9:e0:54:f6:a3:e7:9b:
e3:17:37:51:aa:f3:22:3a:03:84:9d:a6:28:4e:95:
84:05:eb:2c:1e:c7:d9:d6:ab:93:3b:ca:0f:8e:42:
d3:19:a9:96:f8:65:53:1e:5d:57:c4:0a:64:fe:25:
87:ce:e1:f8:fe:89:1b:5c:e3:9f:75:01:da:e9:b7:
47:0b:c0:2e:a0:58:58:27:81:1b:66:f7:0e:a3:04:
45:c5:e8:49:1a:df:6b:9f:11:16:cd:a0:c4:44:1b:
9d:50:0e:ff:f1:08:9f:5c:46:a1:fd:86:e4:4b:e6:
2c:01:0a:92:50:bd:0f:9b:9c:59:38:e7:e5:a6:44:
24:dd:6b:88:be:8d:d0:42:06:8b:bd:4e:d5:af:fe:
c7:1d:98:1a:2c:2a:0a:a4:a2:74:fc:2b:c1:03:6c:
22:de:c8:0f:28:be:3d:a0:83:d3:7d:10:67:d3:4d:
96:08:ce:d5:91:a8:42:5b:14:03:50:b1:05:f8:2e:
c2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3C:F8:4E:71:26:F0:53:DB:FD:6F:CF:0A:19:4D:A9:4B:94:01:2A
X509v3 Authority Key Identifier:
keyid:FC:9B:EB:01:92:D0:D3:46:A5:E6:85:8A:A7:44:B0:43:4F:ED:31:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:7f:b3:83:34:19:ae:3c:0c:25:74:52:0d:46:8a:a5:9c:3f:
76:3f:7b:0f:01:80:30:6a:63:72:95:ee:63:58:6d:e4:7e:75:
a1:75:4a:d1:65:b6:36:fc:5e:c1:58:56:cc:f8:14:c5:be:fa:
3f:03:6f:4d:46:14:27:e5:f4:04:e0:69:40:ce:26:e5:6f:c4:
07:58:aa:cb:58:d2:1d:84:e9:a9:75:93:1f:c8:f9:84:2e:31:
b9:d0:71:a4:5d:c6:42:a2:cd:de:0e:aa:6c:55:68:1a:27:93:
a9:5c:21:c2:0e:54:12:09:6b:eb:f2:58:30:c3:04:b6:e2:6b:
1c:cd:0a:d1:8b:19:bf:6f:b2:89:48:53:71:72:29:fb:19:58:
35:d8:d7:67:f7:12:a3:35:db:30:b8:7d:07:a5:ba:ee:f6:16:
f3:9a:ac:38:8e:a5:32:07:1e:4e:96:cf:14:ad:88:a3:2a:f8:
d8:4a:7e:8c:1a:3e:1b:5d:ec:04:bc:11:5a:fa:21:c4:d9:a8:
bd:a6:f7:20:fe:dc:ba:06:a2:80:51:18:c4:0e:7c:0f:6e:43:
ad:82:2e:e6:34:23:c5:2a:81:35:04:08:6b:ae:6b:42:e6:c6:
f6:22:8c:ff:43:fe:9f:79:6e:ae:90:e4:f4:c7:c6:dc:87:59:
64:19:81:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxSco2UHvZm8bx6F1hn40eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjOWJlYjAxOTJkMGQzNDZhNWU2ODU4YWE3NDRiMDQzNGZl
ZDMxODkwHhcNMjUxMTExMDUwMDUyWhcNMjUxMTEyMDUwMDUyWjAzMTEwLwYDVQQD
EyhjZTNjZjg0ZTcxMjZmMDUzZGJmZDZmY2YwYTE5NGRhOTRiOTQwMTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9RnvD21PcRGsGYFHM3YRuImGrci
hh6BxX5VDqm6rVnLDg0sClpEJQMuyRw/pNvraDXG78bR/ArujoWUjvUfZGpUE7ng
VPaj55vjFzdRqvMiOgOEnaYoTpWEBessHsfZ1quTO8oPjkLTGamW+GVTHl1XxApk
/iWHzuH4/okbXOOfdQHa6bdHC8AuoFhYJ4EbZvcOowRFxehJGt9rnxEWzaDERBud
UA7/8QifXEah/YbkS+YsAQqSUL0Pm5xZOOflpkQk3WuIvo3QQgaLvU7Vr/7HHZga
LCoKpKJ0/CvBA2wi3sgPKL49oIPTfRBn002WCM7VkahCWxQDULEF+C7C2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM48+E5xJvBT2/1vzwoZTalLlAEqMB8GA1UdIwQY
MBaAFPyb6wGS0NNGpeaFiqdEsENP7TGJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0p2ckFaTFEwMGFsNW9XS3AwU3dRMF90TVlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8yMTVkZTYtNDE3Ni00MmQyLThkYTIt
NmI3MDE2OWNkYTFiLzEvX0p2ckFaTFEwMGFsNW9XS3AwU3dRMF90TVlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8yMTVkZTYtNDE3Ni00MmQyLThkYTItNmI3MDE2OWNkYTFi
LzEvX0p2ckFaTFEwMGFsNW9XS3AwU3dRMF90TVlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcH+zgzQZ
rjwMJXRSDUaKpZw/dj97DwGAMGpjcpXuY1ht5H51oXVK0WW2NvxewVhWzPgUxb76
PwNvTUYUJ+X0BOBpQM4m5W/EB1iqy1jSHYTpqXWTH8j5hC4xudBxpF3GQqLN3g6q
bFVoGieTqVwhwg5UEglr6/JYMMMEtuJrHM0K0YsZv2+yiUhTcXIp+xlYNdjXZ/cS
ozXbMLh9B6W67vYW85qsOI6lMgceTpbPFK2Ioyr42Ep+jBo+G13sBLwRWvohxNmo
vab3IP7cugaigFEYxA58D25DrYIu5jQjxSqBNQQIa65rQubG9iKM/0P+n3lurpDk
9MfG3IdZZBmBeg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:11:19 2025 by rpki-client