Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
File: jIVlV8QUaotQ3E2UQksGaAzvdVs.mft (raw, json)
Hash identifier: AEkKTD3UeGD10OQxGZljSXsAw4WaGX2OEXhf209B+Ik=
Subject key identifier: 4B:B4:BE:8A:EC:60:9E:7E:BE:28:F9:EE:52:3D:F3:29:50:21:CC:E7
Authority key identifier: 8C:85:65:57:C4:14:6A:8B:50:DC:4D:94:42:4B:06:68:0C:EF:75:5B
Certificate issuer: /CN=8c856557c4146a8b50dc4d94424b06680cef755b
Certificate serial: 019A1AD05A77761B5755835A12E94B0FD6CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
Manifest number: 16F4
Signing time: Sat 25 Oct 2025 10:00:53 +0000
Manifest this update: Sat 25 Oct 2025 10:00:53 +0000
Manifest next update: Sun 26 Oct 2025 10:00:53 +0000
Files and hashes: 1: LMeAQnqXAno2ePthwCoJjGfcb2A.roa (hash: No1WA2LE8faZkFieSxcHhVUWaXGzU/xeEQ1/oG4+fLo=)
2: VTn6EUtQCO3oepKWF0k0ld0XSjA.roa (hash: Tq2gVAAnQassaUGQuCNSlznhLVZoKruMbeiYe+SNasU=)
3: duhqaZfDGitvRaokNyqOu5bk0v8.roa (hash: BL1fv/RwGJqefrtoFnvmlovZ7pP8X3nS9B+9usaWWNI=)
4: jIVlV8QUaotQ3E2UQksGaAzvdVs.crl (hash: 56KVviUWmzeYaNvPRgX6lu/yqqnusV/F4kOUheZG1NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 10:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:d0:5a:77:76:1b:57:55:83:5a:12:e9:4b:0f:d6:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c856557c4146a8b50dc4d94424b06680cef755b
Validity
Not Before: Oct 25 10:00:53 2025 GMT
Not After : Oct 26 10:00:53 2025 GMT
Subject: CN=4bb4be8aec609e7ebe28f9ee523df3295021cce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0d:b4:5f:b9:ea:ad:16:d2:8c:7a:77:da:1c:
4b:b5:d6:1f:3d:b7:72:4a:fb:37:06:30:1b:d9:60:
32:40:fb:c5:2b:f8:0f:fe:13:8b:20:b1:5e:14:a6:
b8:c0:33:47:44:db:bf:fd:30:ff:85:0f:69:e8:44:
73:b4:11:54:d5:0d:37:86:ff:31:26:2e:4f:94:0e:
1f:e6:6f:7c:5f:84:50:67:0b:af:84:e9:72:c7:05:
b4:96:97:5b:92:ce:4e:04:e9:18:83:16:c7:70:fa:
d3:63:09:02:76:5e:e3:e0:1b:a8:35:1c:86:25:1c:
fc:66:0a:b8:9e:1a:80:cd:9c:66:53:b5:d1:9e:1a:
b4:b6:f8:bb:50:89:6d:ce:04:cc:eb:af:0d:f8:5d:
0a:4c:d9:aa:80:bc:d8:8b:6a:1f:b6:ce:c5:ec:ea:
f2:3b:f7:bb:98:b0:65:49:74:9a:2a:be:98:9f:39:
25:f2:f5:22:b7:c3:07:46:ed:30:ba:de:60:b3:dc:
68:d3:2b:3b:0b:32:f2:c1:02:53:ed:bf:db:3f:bd:
25:89:66:10:b5:09:59:60:13:30:97:34:61:c5:11:
04:61:51:25:bc:6a:88:e1:de:38:37:8f:0f:c8:49:
fc:fa:8e:45:ae:4e:1e:68:af:6b:0a:b3:97:f1:73:
12:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B4:BE:8A:EC:60:9E:7E:BE:28:F9:EE:52:3D:F3:29:50:21:CC:E7
X509v3 Authority Key Identifier:
keyid:8C:85:65:57:C4:14:6A:8B:50:DC:4D:94:42:4B:06:68:0C:EF:75:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:4a:56:16:d7:44:55:d7:ac:d9:59:94:8f:fc:f5:2d:30:50:
4b:e9:b2:7c:83:d0:84:bf:54:73:92:fc:45:bb:b1:24:4a:be:
87:42:27:11:7c:33:aa:0c:51:86:c7:48:db:8e:4f:d2:b0:96:
28:99:68:90:a3:34:7f:10:59:2d:df:b7:e4:e0:7d:9e:f3:34:
e0:8e:eb:3f:c7:51:83:ab:ae:47:1d:54:cd:5b:d3:b9:90:ab:
de:3f:a5:cf:55:28:b7:0c:a0:e2:a2:c5:17:f9:07:b5:e1:70:
ae:92:7f:5b:7b:d8:06:e1:09:e1:0f:72:29:46:b8:f6:d5:65:
61:5c:59:fd:0d:7f:3d:27:f4:58:19:04:94:70:22:88:4c:3e:
62:55:34:7c:13:9a:26:7d:be:bd:88:bc:82:4d:dc:a4:66:67:
34:ad:dd:f5:fd:0f:7c:46:fb:bf:71:1e:d3:9a:1d:97:c2:9b:
96:48:52:63:df:cd:7f:46:b7:1d:14:07:be:74:69:e8:84:d7:
4c:3b:2e:64:34:eb:dd:6a:50:a2:91:68:69:81:b6:0e:7f:81:
7d:a8:8a:d2:31:c1:a2:14:85:c2:70:c5:fb:09:e6:f6:3b:5d:
ba:15:c7:57:5b:9c:48:f6:17:b2:c0:53:53:de:3c:92:b9:4c:
66:6b:11:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoa0Fp3dhtXVYNaEulLD9bMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjODU2NTU3YzQxNDZhOGI1MGRjNGQ5NDQyNGIwNjY4MGNl
Zjc1NWIwHhcNMjUxMDI1MTAwMDUzWhcNMjUxMDI2MTAwMDUzWjAzMTEwLwYDVQQD
Eyg0YmI0YmU4YWVjNjA5ZTdlYmUyOGY5ZWU1MjNkZjMyOTUwMjFjY2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoA20X7nqrRbSjHp32hxLtdYfPbdy
Svs3BjAb2WAyQPvFK/gP/hOLILFeFKa4wDNHRNu//TD/hQ9p6ERztBFU1Q03hv8x
Ji5PlA4f5m98X4RQZwuvhOlyxwW0lpdbks5OBOkYgxbHcPrTYwkCdl7j4BuoNRyG
JRz8Zgq4nhqAzZxmU7XRnhq0tvi7UIltzgTM668N+F0KTNmqgLzYi2ofts7F7Ory
O/e7mLBlSXSaKr6Ynzkl8vUit8MHRu0wut5gs9xo0ys7CzLywQJT7b/bP70liWYQ
tQlZYBMwlzRhxREEYVElvGqI4d44N48PyEn8+o5Frk4eaK9rCrOX8XMS8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEu0vorsYJ5+vij57lI98ylQIcznMB8GA1UdIwQY
MBaAFIyFZVfEFGqLUNxNlEJLBmgM73VbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaklWbFY4UVVhb3RRM0UyVVFrc0dhQXp2ZFZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8zMDZhZGItN2FhNy00YjgyLWIwNWEt
MmE2YjlhMGNjYWJkLzEvaklWbFY4UVVhb3RRM0UyVVFrc0dhQXp2ZFZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8zMDZhZGItN2FhNy00YjgyLWIwNWEtMmE2YjlhMGNjYWJk
LzEvaklWbFY4UVVhb3RRM0UyVVFrc0dhQXp2ZFZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi0pWFtdE
Vdes2VmUj/z1LTBQS+myfIPQhL9Uc5L8RbuxJEq+h0InEXwzqgxRhsdI245P0rCW
KJlokKM0fxBZLd+35OB9nvM04I7rP8dRg6uuRx1UzVvTuZCr3j+lz1Uotwyg4qLF
F/kHteFwrpJ/W3vYBuEJ4Q9yKUa49tVlYVxZ/Q1/PSf0WBkElHAiiEw+YlU0fBOa
Jn2+vYi8gk3cpGZnNK3d9f0PfEb7v3Ee05odl8KblkhSY9/Nf0a3HRQHvnRp6ITX
TDsuZDTr3WpQopFoaYG2Dn+BfaiK0jHBohSFwnDF+wnm9jtduhXHV1ucSPYXssBT
U948krlMZmsRJA==
-----END CERTIFICATE-----
Generated at Sat Oct 25 19:33:16 2025 by rpki-client