Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft
File: jc5N9oBEmFoXezAy8A_G_iJK2LM.mft (raw, json)
Hash identifier: 8mD2NstkniSkLiXRwq3aQ9Uj1LoZXOqeEQwQRDrkFFs=
Subject key identifier: FC:6E:B1:4A:B6:CB:3F:81:1B:B4:E0:D3:06:61:E0:1B:77:48:C4:5F
Authority key identifier: 8D:CE:4D:F6:80:44:98:5A:17:7B:30:32:F0:0F:C6:FE:22:4A:D8:B3
Certificate issuer: /CN=8dce4df68044985a177b3032f00fc6fe224ad8b3
Certificate serial: 019A71B8B5345D14EEAFEE6686AE587BEA4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jc5N9oBEmFoXezAy8A_G_iJK2LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:02:01 +0000
Manifest this update: Tue 11 Nov 2025 07:02:01 +0000
Manifest next update: Wed 12 Nov 2025 07:02:01 +0000
Files and hashes: 1: QH9tbxKSp0iUql0lb1UYZe-9C60.roa (hash: j+EJALijkJNAty5MEqMWdkPqVKhawk2tfizWedc8Uwc=)
2: jc5N9oBEmFoXezAy8A_G_iJK2LM.crl (hash: 13Hp5oScHtT0SVrnDJJ/66417l3xT/VdjYUNXjChVaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jc5N9oBEmFoXezAy8A_G_iJK2LM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:b5:34:5d:14:ee:af:ee:66:86:ae:58:7b:ea:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dce4df68044985a177b3032f00fc6fe224ad8b3
Validity
Not Before: Nov 11 07:02:01 2025 GMT
Not After : Nov 12 07:02:01 2025 GMT
Subject: CN=fc6eb14ab6cb3f811bb4e0d30661e01b7748c45f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7b:64:b1:92:09:ea:5f:4e:52:27:65:de:02:
a4:29:46:33:28:87:63:d8:88:ad:6e:51:1c:96:be:
09:a8:48:11:8d:06:4e:4d:58:b3:11:99:59:ce:26:
fe:00:ab:e0:d6:bd:19:4f:87:31:a7:a7:36:86:54:
54:76:ab:94:d8:c9:58:9d:99:d0:2f:ca:15:25:d7:
f2:1b:78:54:17:48:d9:13:a8:89:1a:7b:ca:18:2f:
24:29:3e:82:77:85:bb:96:17:5f:bf:bf:f5:b1:b2:
81:d1:74:b6:37:d0:3a:6f:5c:af:c6:fb:fc:74:3a:
a0:ed:ee:3c:c3:6d:63:10:5e:ce:df:aa:5f:1b:8b:
2d:ca:c2:2a:e1:90:5c:28:36:4a:53:f4:04:32:29:
38:f2:e9:a1:07:be:b3:3a:33:fc:b8:be:ea:fe:31:
55:b0:57:53:cc:3d:ae:b7:ca:54:29:06:a6:71:6e:
aa:ed:74:23:e0:56:cf:c8:04:c6:f2:35:5d:6b:20:
1a:aa:45:90:36:19:a2:a6:fb:39:2e:d6:fb:bd:39:
af:ec:d6:e9:52:95:53:4e:fe:63:7d:b3:86:1b:ae:
ee:c0:c7:ca:f6:ee:77:96:04:16:d8:60:9e:3a:79:
9a:0b:b5:81:41:f1:2d:40:22:c3:94:25:33:52:aa:
a2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6E:B1:4A:B6:CB:3F:81:1B:B4:E0:D3:06:61:E0:1B:77:48:C4:5F
X509v3 Authority Key Identifier:
keyid:8D:CE:4D:F6:80:44:98:5A:17:7B:30:32:F0:0F:C6:FE:22:4A:D8:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jc5N9oBEmFoXezAy8A_G_iJK2LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5bda54-db7a-46d3-9cf9-16b1d2ee88a6/1/jc5N9oBEmFoXezAy8A_G_iJK2LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:73:7e:9b:4d:f3:51:36:9d:89:39:95:6e:05:02:ad:52:55:
8e:f3:56:c3:ad:02:04:4d:d5:5e:9d:57:3d:1c:e5:25:e7:e3:
34:79:0f:e2:ea:4a:5e:c9:ed:06:e6:1f:cc:46:88:46:70:4a:
25:23:00:b5:0a:59:0c:12:27:35:a8:6e:17:f6:22:73:d7:5b:
8e:bb:e4:f7:fc:3c:a9:68:59:a0:5d:2d:7e:40:39:a4:19:5f:
10:ab:86:91:9d:d8:b7:d1:df:bf:57:ed:21:2c:b3:8c:5a:06:
6f:63:2d:02:92:8c:f8:e9:8c:a1:5f:82:ce:8f:14:95:cf:68:
94:12:ae:8e:ab:f9:29:30:d7:7d:e3:31:3f:82:94:77:08:cd:
19:12:97:53:80:a1:f3:80:49:d3:8f:7f:3c:ea:23:02:5c:ef:
fe:b7:62:15:a4:90:1d:60:77:c0:c5:d8:c1:fb:b2:dc:cd:d6:
71:b1:ee:de:88:66:9e:f3:00:30:ff:8d:5f:12:40:da:e7:68:
06:0e:78:3f:a1:33:72:02:1f:06:41:80:ab:f0:3b:2b:57:db:
2d:59:fd:88:66:27:20:fd:a5:21:c7:65:47:e0:39:b9:73:31:
55:39:12:b7:db:fb:18:cd:49:39:2c:e0:74:ab:68:20:9b:00:
75:d6:76:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuLU0XRTur+5mhq5Ye+pOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkY2U0ZGY2ODA0NDk4NWExNzdiMzAzMmYwMGZjNmZlMjI0
YWQ4YjMwHhcNMjUxMTExMDcwMjAxWhcNMjUxMTEyMDcwMjAxWjAzMTEwLwYDVQQD
EyhmYzZlYjE0YWI2Y2IzZjgxMWJiNGUwZDMwNjYxZTAxYjc3NDhjNDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApntksZIJ6l9OUidl3gKkKUYzKIdj
2IitblEclr4JqEgRjQZOTVizEZlZzib+AKvg1r0ZT4cxp6c2hlRUdquU2MlYnZnQ
L8oVJdfyG3hUF0jZE6iJGnvKGC8kKT6Cd4W7lhdfv7/1sbKB0XS2N9A6b1yvxvv8
dDqg7e48w21jEF7O36pfG4stysIq4ZBcKDZKU/QEMik48umhB76zOjP8uL7q/jFV
sFdTzD2ut8pUKQamcW6q7XQj4FbPyATG8jVdayAaqkWQNhmipvs5Ltb7vTmv7Nbp
UpVTTv5jfbOGG67uwMfK9u53lgQW2GCeOnmaC7WBQfEtQCLDlCUzUqqicwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPxusUq2yz+BG7Tg0wZh4Bt3SMRfMB8GA1UdIwQY
MBaAFI3OTfaARJhaF3swMvAPxv4iStizMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamM1TjlvQkVtRm9YZXpBeThBX0dfaUpLMkxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS81YmRhNTQtZGI3YS00NmQzLTljZjkt
MTZiMWQyZWU4OGE2LzEvamM1TjlvQkVtRm9YZXpBeThBX0dfaUpLMkxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS81YmRhNTQtZGI3YS00NmQzLTljZjktMTZiMWQyZWU4OGE2
LzEvamM1TjlvQkVtRm9YZXpBeThBX0dfaUpLMkxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATXN+m03z
UTadiTmVbgUCrVJVjvNWw60CBE3VXp1XPRzlJefjNHkP4upKXsntBuYfzEaIRnBK
JSMAtQpZDBInNahuF/Yic9dbjrvk9/w8qWhZoF0tfkA5pBlfEKuGkZ3Yt9Hfv1ft
ISyzjFoGb2MtApKM+OmMoV+Czo8Ulc9olBKujqv5KTDXfeMxP4KUdwjNGRKXU4Ch
84BJ049/POojAlzv/rdiFaSQHWB3wMXYwfuy3M3WcbHu3ohmnvMAMP+NXxJA2udo
Bg54P6EzcgIfBkGAq/A7K1fbLVn9iGYnIP2lIcdlR+A5uXMxVTkSt9v7GM1JOSzg
dKtoIJsAddZ2EA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:41:49 2025 by rpki-client