Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
File: jcRYczXCkP-PKzdN8kq-IzO87V4.mft (raw, json)
Hash identifier: /Lg4UL7NN4dePYEnk9go17N5hnOmjhdvAnr1gLub0Jc=
Subject key identifier: D7:87:49:53:EE:49:24:9B:58:6F:16:9F:AB:47:4D:56:D0:2D:98:3D
Authority key identifier: 8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E
Certificate issuer: /CN=8dc4587335c290ff8f2b374df24abe2333bced5e
Certificate serial: 019A72257E249CE0DB29DFE94D8CCC362850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
Manifest number: 0809
Signing time: Tue 11 Nov 2025 09:00:50 +0000
Manifest this update: Tue 11 Nov 2025 09:00:50 +0000
Manifest next update: Wed 12 Nov 2025 09:00:50 +0000
Files and hashes: 1: 1JbOtzxYDWM2qenUOTdlSY3fd5Q.roa (hash: 29iS50bByv5wLzXr4K0Csf8RD3fhTCBvX8TAVNzMbwo=)
2: GF6qwIhn7BKx8zVT1r1ZzDDltcs.roa (hash: oGf8wMfqUF8JdbLvtQMA0kJ00Y8rIVvgSBkLwNEB5B4=)
3: QN0VQCuu6Ab4ghDCzRAtiDK4bpU.roa (hash: fQG7ZPM5zlZX7+zBrxZiv3xKwkw7FH8PXLjSY5ZQtDI=)
4: jcRYczXCkP-PKzdN8kq-IzO87V4.crl (hash: pwa8poKpq6v/3foMLhC9iPpwKPm6AcIBsfAbIo4Ijhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:7e:24:9c:e0:db:29:df:e9:4d:8c:cc:36:28:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc4587335c290ff8f2b374df24abe2333bced5e
Validity
Not Before: Nov 11 09:00:50 2025 GMT
Not After : Nov 12 09:00:50 2025 GMT
Subject: CN=d7874953ee49249b586f169fab474d56d02d983d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:63:e1:67:9f:aa:45:ce:26:01:35:23:77:65:
5d:e4:d1:ea:19:4f:3b:9d:9c:73:00:54:7f:e5:46:
6d:81:42:09:b7:e3:5e:eb:d8:b7:79:87:13:0d:26:
d9:6a:4e:ea:01:d7:6a:3b:68:0a:7d:cf:73:2a:fe:
e6:a6:a7:8e:cc:11:9c:e0:26:bc:35:9b:6c:a5:bd:
7a:0a:13:00:3a:8b:95:e9:bc:cf:88:fa:aa:cd:bb:
8d:71:7d:dd:2a:77:3b:3a:68:de:e2:ce:1a:dd:e4:
d5:d4:17:22:15:f4:3b:ef:a2:9c:eb:f9:e7:f9:39:
01:63:44:49:d6:b8:6e:d6:e5:71:6e:c7:38:8d:5d:
00:34:45:d7:c7:4d:a4:a5:a9:b1:2a:43:74:af:5a:
52:3b:97:15:07:d0:f1:92:17:71:08:14:e7:5a:d3:
10:b5:e8:8e:e9:d8:a3:d1:5d:6d:53:04:1a:69:ea:
fa:5c:e7:7b:08:0b:4f:6e:3e:ee:a0:27:78:fd:fb:
78:45:1a:37:27:cc:01:4c:2d:e3:98:d5:64:a6:29:
f3:8e:28:68:49:40:88:d3:3c:f5:22:98:66:0e:52:
80:0b:ef:6d:03:3b:58:16:af:5a:46:3b:7e:93:7e:
12:d3:9e:2a:06:3b:da:3d:23:42:af:31:a4:9b:f7:
17:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:87:49:53:EE:49:24:9B:58:6F:16:9F:AB:47:4D:56:D0:2D:98:3D
X509v3 Authority Key Identifier:
keyid:8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:9e:16:48:58:17:0f:d5:01:df:23:91:e9:d3:61:8b:5f:65:
15:41:70:1e:4b:cb:69:6e:e7:2b:eb:28:4f:f1:48:a6:6b:e0:
7f:de:d8:5d:fd:22:cf:32:9d:b5:c1:89:db:ca:1f:bd:f9:0e:
de:d3:a5:49:be:40:47:0d:14:ef:1b:95:e8:22:ad:b9:72:3e:
bb:fa:93:70:4c:e7:c0:38:d1:4a:dc:4b:c9:ba:c7:3f:ab:d3:
96:b7:1b:68:f2:88:f3:c2:df:63:6a:e5:3e:43:4b:e9:dd:04:
b9:ad:96:b0:89:84:ab:cb:dc:db:53:cf:59:b4:2b:7a:3b:db:
ce:1e:0f:a7:c2:ed:34:1e:73:f0:65:63:83:86:93:57:53:48:
29:e9:75:ea:4f:81:a9:76:56:e9:12:b9:3c:17:e3:eb:54:38:
0e:8f:4e:d1:95:f1:47:47:cd:1d:f0:9a:8a:28:ef:04:30:9e:
c5:8e:18:25:b6:d4:7e:37:9a:dd:09:07:1f:6b:17:09:bb:3d:
7a:5f:f4:19:89:bf:c3:1e:10:e2:53:5f:5b:7a:56:38:93:70:
11:43:43:96:57:33:1f:12:4c:b0:3b:00:af:9f:46:65:c5:c5:
5f:20:f5:4b:d3:83:3f:cc:da:93:5d:cc:5c:9a:50:48:04:0b:
3b:6d:9c:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJX4knODbKd/pTYzMNihQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYzQ1ODczMzVjMjkwZmY4ZjJiMzc0ZGYyNGFiZTIzMzNi
Y2VkNWUwHhcNMjUxMTExMDkwMDUwWhcNMjUxMTEyMDkwMDUwWjAzMTEwLwYDVQQD
EyhkNzg3NDk1M2VlNDkyNDliNTg2ZjE2OWZhYjQ3NGQ1NmQwMmQ5ODNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWPhZ5+qRc4mATUjd2Vd5NHqGU87
nZxzAFR/5UZtgUIJt+Ne69i3eYcTDSbZak7qAddqO2gKfc9zKv7mpqeOzBGc4Ca8
NZtspb16ChMAOouV6bzPiPqqzbuNcX3dKnc7Omje4s4a3eTV1BciFfQ776Kc6/nn
+TkBY0RJ1rhu1uVxbsc4jV0ANEXXx02kpamxKkN0r1pSO5cVB9DxkhdxCBTnWtMQ
teiO6dij0V1tUwQaaer6XOd7CAtPbj7uoCd4/ft4RRo3J8wBTC3jmNVkpinzjiho
SUCI0zz1IphmDlKAC+9tAztYFq9aRjt+k34S054qBjvaPSNCrzGkm/cXywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNeHSVPuSSSbWG8Wn6tHTVbQLZg9MB8GA1UdIwQY
MBaAFI3EWHM1wpD/jys3TfJKviMzvO1eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamNSWWN6WENrUC1QS3pkTjhrcS1Jek84N1Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNDgwMTctNTlkNC00MDk1LWJlZWYt
ZDYwNmQ5OTI1YWI3LzEvamNSWWN6WENrUC1QS3pkTjhrcS1Jek84N1Y0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hNDgwMTctNTlkNC00MDk1LWJlZWYtZDYwNmQ5OTI1YWI3
LzEvamNSWWN6WENrUC1QS3pkTjhrcS1Jek84N1Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIp4WSFgX
D9UB3yOR6dNhi19lFUFwHkvLaW7nK+soT/FIpmvgf97YXf0izzKdtcGJ28ofvfkO
3tOlSb5ARw0U7xuV6CKtuXI+u/qTcEznwDjRStxLybrHP6vTlrcbaPKI88LfY2rl
PkNL6d0Eua2WsImEq8vc21PPWbQrejvbzh4Pp8LtNB5z8GVjg4aTV1NIKel16k+B
qXZW6RK5PBfj61Q4Do9O0ZXxR0fNHfCaiijvBDCexY4YJbbUfjea3QkHH2sXCbs9
el/0GYm/wx4Q4lNfW3pWOJNwEUNDllczHxJMsDsAr59GZcXFXyD1S9ODP8zak13M
XJpQSAQLO22c0A==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:27 2025 by rpki-client