Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
File: JvFwsZuX7hfecyobaK4iuo5fVuQ.mft (raw, json)
Hash identifier: 3MNJls2iE/4v3mh47BiMPQCBXRj/HJJ+HwTWFvT5aVk=
Subject key identifier: 42:3B:C9:73:E3:75:5D:0A:8E:DD:92:D8:1B:C6:1E:4D:A5:E1:4C:44
Authority key identifier: 26:F1:70:B1:9B:97:EE:17:DE:73:2A:1B:68:AE:22:BA:8E:5F:56:E4
Certificate issuer: /CN=26f170b19b97ee17de732a1b68ae22ba8e5f56e4
Certificate serial: 019A33468B19D06F2C18776BAD6C01688306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
Manifest number: 09DE
Signing time: Thu 30 Oct 2025 04:00:52 +0000
Manifest this update: Thu 30 Oct 2025 04:00:52 +0000
Manifest next update: Fri 31 Oct 2025 04:00:52 +0000
Files and hashes: 1: JvFwsZuX7hfecyobaK4iuo5fVuQ.crl (hash: ByJXAT51z4CxKo5LoanJj8qgsdCGo/yMbbYLl2gD0U8=)
2: RWXc7pnERNYQOvO9AHteTOA-BLs.roa (hash: whYuVMgGb8/hVbcAtfyqAHTJ95yBC0XXSwdfBmwhSDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 01:21:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:33:46:8b:19:d0:6f:2c:18:77:6b:ad:6c:01:68:83:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26f170b19b97ee17de732a1b68ae22ba8e5f56e4
Validity
Not Before: Oct 30 04:00:52 2025 GMT
Not After : Oct 31 04:00:52 2025 GMT
Subject: CN=423bc973e3755d0a8edd92d81bc61e4da5e14c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:18:18:05:88:f2:46:9d:29:45:af:8f:20:47:
f2:e7:3b:62:ae:24:a4:3f:45:20:02:15:33:e6:52:
a0:76:44:f7:32:5c:2f:e8:d4:a8:c4:c2:34:d7:5a:
70:bd:ed:77:f4:88:73:b3:bb:76:c3:0c:84:8b:e0:
e0:fc:41:46:a3:b2:ca:79:52:38:b5:4e:02:8f:7d:
cf:7a:6c:01:68:bd:bc:1a:ee:67:0f:97:a3:7d:c4:
cb:c1:d6:7d:01:40:d7:ce:cb:f5:00:0b:fe:01:47:
93:c8:1b:09:5e:10:58:55:e5:93:11:b6:84:8b:3d:
22:f4:50:e3:6b:f3:c7:24:39:ee:56:ca:7b:1f:49:
e5:73:9e:50:8c:57:6a:51:2f:1d:bf:e5:05:36:57:
f6:05:5c:5f:f6:20:83:e7:2a:fa:33:26:95:9f:84:
37:5a:87:b0:d3:e3:35:e6:16:2c:6e:f0:df:80:f0:
8a:fe:ad:81:70:11:65:a3:ce:f3:54:30:2e:ad:ce:
28:94:bc:b9:1d:18:84:52:d7:49:58:ef:af:cb:9d:
26:61:af:da:28:ca:69:97:31:69:c1:3b:a5:7f:ed:
a2:3a:2e:56:9c:15:45:d7:2d:f8:c9:3d:7d:98:93:
eb:d6:fa:3c:1a:35:fb:e6:f8:b9:47:80:84:c4:1f:
2c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:3B:C9:73:E3:75:5D:0A:8E:DD:92:D8:1B:C6:1E:4D:A5:E1:4C:44
X509v3 Authority Key Identifier:
keyid:26:F1:70:B1:9B:97:EE:17:DE:73:2A:1B:68:AE:22:BA:8E:5F:56:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d4:58:7f:bb:6c:68:9b:94:48:ff:f9:ff:b1:60:06:d9:f9:
28:c9:e3:70:a2:6d:8b:13:12:76:de:53:0c:94:ea:e4:ec:4c:
c2:40:a2:2d:31:4e:26:93:c5:8e:c1:af:43:f1:32:a2:70:ed:
4c:84:0b:7e:8f:5f:7a:3d:88:2c:ad:99:7e:24:48:0c:df:d1:
7b:e8:6e:7e:96:81:fa:d9:ee:e7:3a:e7:5f:31:67:5d:e6:ca:
14:05:bd:b5:bd:20:58:d8:f2:06:de:d8:84:72:b6:a0:66:be:
c0:18:1a:82:19:14:87:e3:2f:36:e3:a1:fc:2a:78:bc:20:d6:
89:d7:1f:b9:4e:07:12:60:52:0e:ee:b1:e4:57:a1:3c:85:fb:
84:2e:b7:fb:a7:c9:95:d9:b5:ad:b8:28:ae:ad:3e:7d:63:6a:
a1:da:d7:35:16:82:a0:52:e3:6e:d3:58:8f:17:6c:32:31:d4:
b0:13:8f:cc:19:d9:f1:14:cc:c6:15:7c:35:69:e2:7c:13:38:
5b:1d:4a:e9:15:29:3f:db:03:0e:0b:f8:2f:66:6c:23:81:8e:
a1:a3:db:22:dc:1b:40:45:73:72:49:d9:a2:c2:97:cc:a5:81:
d8:24:60:01:bc:5d:2c:7b:75:9b:38:20:df:ec:c1:a7:c0:19:
3c:0e:8e:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZozRosZ0G8sGHdrrWwBaIMGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2ZjE3MGIxOWI5N2VlMTdkZTczMmExYjY4YWUyMmJhOGU1
ZjU2ZTQwHhcNMjUxMDMwMDQwMDUyWhcNMjUxMDMxMDQwMDUyWjAzMTEwLwYDVQQD
Eyg0MjNiYzk3M2UzNzU1ZDBhOGVkZDkyZDgxYmM2MWU0ZGE1ZTE0YzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RgYBYjyRp0pRa+PIEfy5ztiriSk
P0UgAhUz5lKgdkT3Mlwv6NSoxMI011pwve139Ihzs7t2wwyEi+Dg/EFGo7LKeVI4
tU4Cj33PemwBaL28Gu5nD5ejfcTLwdZ9AUDXzsv1AAv+AUeTyBsJXhBYVeWTEbaE
iz0i9FDja/PHJDnuVsp7H0nlc55QjFdqUS8dv+UFNlf2BVxf9iCD5yr6MyaVn4Q3
Woew0+M15hYsbvDfgPCK/q2BcBFlo87zVDAurc4olLy5HRiEUtdJWO+vy50mYa/a
KMpplzFpwTulf+2iOi5WnBVF1y34yT19mJPr1vo8GjX75vi5R4CExB8sgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEI7yXPjdV0Kjt2S2BvGHk2l4UxEMB8GA1UdIwQY
MBaAFCbxcLGbl+4X3nMqG2iuIrqOX1bkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnZGd3NadVg3aGZlY3lvYmFLNGl1bzVmVnVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8yYzY3ZWQtOGQ0MS00ZjlmLWFkZWQt
MDY2NzZiZTEzOGZhLzEvSnZGd3NadVg3aGZlY3lvYmFLNGl1bzVmVnVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8yYzY3ZWQtOGQ0MS00ZjlmLWFkZWQtMDY2NzZiZTEzOGZh
LzEvSnZGd3NadVg3aGZlY3lvYmFLNGl1bzVmVnVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASdRYf7ts
aJuUSP/5/7FgBtn5KMnjcKJtixMSdt5TDJTq5OxMwkCiLTFOJpPFjsGvQ/EyonDt
TIQLfo9fej2ILK2ZfiRIDN/Re+hufpaB+tnu5zrnXzFnXebKFAW9tb0gWNjyBt7Y
hHK2oGa+wBgaghkUh+MvNuOh/Cp4vCDWidcfuU4HEmBSDu6x5FehPIX7hC63+6fJ
ldm1rbgorq0+fWNqodrXNRaCoFLjbtNYjxdsMjHUsBOPzBnZ8RTMxhV8NWnifBM4
Wx1K6RUpP9sDDgv4L2ZsI4GOoaPbItwbQEVzcknZosKXzKWB2CRgAbxdLHt1mzgg
3+zBp8AZPA6O0A==
-----END CERTIFICATE-----
Generated at Thu Oct 30 07:13:43 2025 by rpki-client