Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
File: _jQJESdDd6icofnBXxgNqYbXRLc.mft (raw, json)
Hash identifier: bly+6GveEzhNhCDEokRPh81/jnHBFcZ4EsP9H1jN3Xc=
Subject key identifier: 27:F1:7C:F1:BD:82:AE:2E:78:A1:67:23:19:6D:51:E2:3E:8D:AB:C6
Authority key identifier: FE:34:09:11:27:43:77:A8:9C:A1:F9:C1:5F:18:0D:A9:86:D7:44:B7
Certificate issuer: /CN=fe340911274377a89ca1f9c15f180da986d744b7
Certificate serial: 019A293054694A0612842D9BA02CFE270D20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
Manifest number: 038C
Signing time: Tue 28 Oct 2025 05:00:24 +0000
Manifest this update: Tue 28 Oct 2025 05:00:24 +0000
Manifest next update: Wed 29 Oct 2025 05:00:24 +0000
Files and hashes: 1: 7qFS32WykIo9De6woWK_a4zI6AE.roa (hash: 2dnjawr1HUy6D3OjqGMisdNqLiSRoZxYXLiFU07VYtM=)
2: _jQJESdDd6icofnBXxgNqYbXRLc.crl (hash: 4JvWOlpL23xVAQmLxtltp+3yiH6jUempK+y6sSluCS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:30:54:69:4a:06:12:84:2d:9b:a0:2c:fe:27:0d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe340911274377a89ca1f9c15f180da986d744b7
Validity
Not Before: Oct 28 05:00:24 2025 GMT
Not After : Oct 29 05:00:24 2025 GMT
Subject: CN=27f17cf1bd82ae2e78a16723196d51e23e8dabc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f4:81:c1:23:4e:ac:9b:8d:44:e1:d1:ba:57:
84:02:e1:f7:15:73:31:5e:db:14:83:bb:c9:4b:83:
2b:5a:7b:cf:d0:72:a9:85:74:46:75:02:0e:34:f7:
0e:c7:87:a5:72:aa:26:42:3f:39:88:47:6b:3a:8b:
21:aa:89:ae:ae:2d:fd:2f:89:47:da:84:cb:83:92:
45:c2:7f:d3:98:87:7f:69:8c:ac:da:ce:c5:25:51:
11:c2:d5:cc:5b:b3:c9:0f:d5:74:58:e9:f7:5b:d8:
cf:f3:3f:ed:63:88:a1:d9:55:1a:48:af:c0:84:2d:
0a:4a:aa:ec:34:55:c1:ab:cd:f9:58:5f:fc:58:5e:
58:4e:5c:30:e0:11:cb:65:a6:d7:29:d5:a9:c5:67:
b5:d9:a2:b9:ac:a4:2e:2b:64:1a:ad:10:d9:d6:4d:
a2:de:26:e9:2a:bf:9e:6e:0a:8e:44:c9:fa:41:a3:
40:7b:c8:fe:2b:e8:64:d0:4b:03:1d:6f:6b:7e:9a:
ce:f2:ba:e7:a5:f0:56:09:f7:cb:b1:da:6f:85:fa:
06:84:c6:2c:06:a4:40:96:e0:5d:fc:cf:96:fb:d8:
2d:dc:56:de:38:b7:3c:7a:80:a8:bd:e3:ad:92:f7:
21:32:2c:ae:bc:67:5d:83:1a:ac:1f:01:b2:cf:e2:
8a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F1:7C:F1:BD:82:AE:2E:78:A1:67:23:19:6D:51:E2:3E:8D:AB:C6
X509v3 Authority Key Identifier:
keyid:FE:34:09:11:27:43:77:A8:9C:A1:F9:C1:5F:18:0D:A9:86:D7:44:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e1:7f:be:3f:2c:da:fc:eb:29:c1:be:45:f2:2c:d3:7e:17:
0c:44:57:22:d0:8c:db:d0:76:19:a7:77:b9:28:c4:56:e8:3d:
92:10:c9:5c:c6:01:70:a7:fa:59:90:d8:8f:89:90:fd:2c:5a:
2f:36:2b:59:b3:28:90:90:0e:56:cf:d6:15:ed:ff:a5:7e:ef:
e1:db:45:8b:38:56:7d:5d:eb:66:ff:40:e7:61:96:b3:b3:b9:
34:f3:1a:35:65:23:74:18:3f:cf:f8:4f:c3:3e:ea:8f:04:e6:
7f:46:7f:2e:3f:4a:fa:e9:19:43:ba:44:9b:a8:7e:97:ce:96:
9f:59:dd:b4:a0:78:3a:b3:a0:2c:51:de:14:a8:61:6a:f7:1a:
17:c2:10:d8:0d:7e:67:92:c9:3a:04:77:93:33:55:8d:bc:68:
6a:c1:c0:ba:97:38:50:15:d7:f2:9b:e7:da:e9:78:a0:93:3f:
72:39:79:d7:3b:29:2f:d8:a4:56:d0:35:45:aa:24:d6:44:3d:
47:08:c3:2a:19:5f:02:18:52:93:3b:15:62:08:cb:62:3b:e2:
51:57:7a:e3:2b:62:be:67:4f:34:e1:1a:9c:47:ef:48:4f:ef:
88:42:2d:41:a4:1a:90:9d:9a:5d:df:d6:6a:a9:d4:60:11:87:
48:bb:a9:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZopMFRpSgYShC2boCz+Jw0gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMzQwOTExMjc0Mzc3YTg5Y2ExZjljMTVmMTgwZGE5ODZk
NzQ0YjcwHhcNMjUxMDI4MDUwMDI0WhcNMjUxMDI5MDUwMDI0WjAzMTEwLwYDVQQD
EygyN2YxN2NmMWJkODJhZTJlNzhhMTY3MjMxOTZkNTFlMjNlOGRhYmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/SBwSNOrJuNROHRuleEAuH3FXMx
XtsUg7vJS4MrWnvP0HKphXRGdQIONPcOx4elcqomQj85iEdrOoshqomuri39L4lH
2oTLg5JFwn/TmId/aYys2s7FJVERwtXMW7PJD9V0WOn3W9jP8z/tY4ih2VUaSK/A
hC0KSqrsNFXBq835WF/8WF5YTlww4BHLZabXKdWpxWe12aK5rKQuK2QarRDZ1k2i
3ibpKr+ebgqORMn6QaNAe8j+K+hk0EsDHW9rfprO8rrnpfBWCffLsdpvhfoGhMYs
BqRAluBd/M+W+9gt3FbeOLc8eoCoveOtkvchMiyuvGddgxqsHwGyz+KKKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfxfPG9gq4ueKFnIxltUeI+javGMB8GA1UdIwQY
MBaAFP40CREnQ3eonKH5wV8YDamG10S3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2pRSkVTZERkNmljb2ZuQlh4Z05xWWJYUkxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85ZGFmMmYtNDZkMi00ZDA1LTkyNmIt
YThiZjIxNGVkMTY2LzEvX2pRSkVTZERkNmljb2ZuQlh4Z05xWWJYUkxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85ZGFmMmYtNDZkMi00ZDA1LTkyNmItYThiZjIxNGVkMTY2
LzEvX2pRSkVTZERkNmljb2ZuQlh4Z05xWWJYUkxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ+F/vj8s
2vzrKcG+RfIs034XDERXItCM29B2Gad3uSjEVug9khDJXMYBcKf6WZDYj4mQ/Sxa
LzYrWbMokJAOVs/WFe3/pX7v4dtFizhWfV3rZv9A52GWs7O5NPMaNWUjdBg/z/hP
wz7qjwTmf0Z/Lj9K+ukZQ7pEm6h+l86Wn1ndtKB4OrOgLFHeFKhhavcaF8IQ2A1+
Z5LJOgR3kzNVjbxoasHAupc4UBXX8pvn2ul4oJM/cjl51zspL9ikVtA1Raok1kQ9
RwjDKhlfAhhSkzsVYgjLYjviUVd64ytivmdPNOEanEfvSE/viEItQaQakJ2aXd/W
aqnUYBGHSLupSg==
-----END CERTIFICATE-----
Generated at Tue Oct 28 13:00:58 2025 by rpki-client