Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
File: JFKrHS0pusnVLrR53mTAcA_Gck8.mft (raw, json)
Hash identifier: UWs01Tr+LRqKwxesoJmZLInZ5cBOg6UKjvTl+BIx+SU=
Subject key identifier: 38:77:F5:8F:43:C8:85:1F:34:62:53:E0:14:24:09:A2:86:BF:8C:F0
Authority key identifier: 24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F
Certificate issuer: /CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f
Certificate serial: 019A7112A373C1DCD6256EE441673E2EF968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
Manifest number: 147A
Signing time: Tue 11 Nov 2025 04:00:38 +0000
Manifest this update: Tue 11 Nov 2025 04:00:38 +0000
Manifest next update: Wed 12 Nov 2025 04:00:38 +0000
Files and hashes: 1: JFKrHS0pusnVLrR53mTAcA_Gck8.crl (hash: vB1Y55V527RZo5xUtZLN9HMYx4nQDJ/15hB9Dy4nXEc=)
2: RB71fE5v8RGGcKN579UUTlog13U.roa (hash: UN1kwnBlPArV0/xDWD7jjI+PopLvxSAGBUZUVl+Xi54=)
3: t_n8d9oI1aH-bEIOwJVaWHaCJBg.roa (hash: zQKAJ7WWLqDL9BuKcs6iIJKFW7l+LUz0khsopSEliO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:a3:73:c1:dc:d6:25:6e:e4:41:67:3e:2e:f9:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f
Validity
Not Before: Nov 11 04:00:38 2025 GMT
Not After : Nov 12 04:00:38 2025 GMT
Subject: CN=3877f58f43c8851f346253e0142409a286bf8cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cd:b6:38:e8:0f:d7:3e:4a:09:5c:d8:be:f2:
9e:ac:34:a6:5f:79:ee:61:c2:30:9a:31:a4:c1:c7:
7b:35:4d:c0:2f:85:f2:8f:b4:cc:7c:32:0c:f3:37:
45:35:58:b4:20:52:0f:c0:66:ff:83:e0:51:48:11:
4d:2f:e5:c2:e9:a7:ee:27:96:66:1e:20:6a:82:31:
aa:d3:db:79:d8:8a:a7:dd:7e:2c:c8:c0:29:6a:70:
aa:6c:8a:99:15:6f:a2:65:66:00:fc:0f:b4:3e:7d:
d6:0c:14:42:a6:4b:e7:2c:92:53:6f:08:50:48:42:
67:1f:30:c2:f8:99:51:be:3d:7f:20:c2:e3:0a:57:
89:f3:18:5f:f6:0b:e5:83:c4:58:64:32:d3:b5:0b:
fc:d2:bd:72:48:9a:40:20:67:1b:7d:7f:51:ed:ea:
e5:30:1c:2e:fb:ef:9f:d0:3c:31:b2:d2:41:fb:f2:
53:2a:b5:ca:87:80:6c:9c:5d:79:a7:e1:b7:e2:49:
91:b5:a7:23:da:bc:9e:bf:5e:c5:91:66:d6:4e:51:
2e:36:27:d8:73:c2:e3:cb:2f:50:c2:43:bf:fc:bb:
7d:da:08:32:e0:94:56:75:67:08:3c:43:ad:fc:09:
8c:80:86:a1:45:40:2f:33:ea:33:9f:35:33:a5:b7:
29:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:77:F5:8F:43:C8:85:1F:34:62:53:E0:14:24:09:A2:86:BF:8C:F0
X509v3 Authority Key Identifier:
keyid:24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:24:04:e5:de:5d:75:b6:4a:0b:8d:b6:64:cf:a4:fa:a2:e9:
22:be:b1:01:97:e5:c7:d7:81:0e:85:ca:75:71:21:f9:4d:e3:
5f:d1:f9:ca:8a:57:0d:73:bc:ab:46:2f:65:f6:54:19:d4:b6:
ee:2b:00:ab:66:0c:21:2d:4c:28:86:5d:79:57:a0:67:e4:8f:
3f:5f:66:13:c9:61:ac:09:bc:42:d7:b9:53:f5:51:11:e4:b1:
9e:42:36:86:b8:0b:46:fd:aa:30:6f:65:6b:9f:bb:f2:53:8d:
14:ee:f8:b8:aa:8c:f1:6c:e4:e5:97:f4:90:5d:77:43:e1:31:
1f:f7:99:41:bc:4a:44:76:70:c3:d9:8f:78:f7:68:f0:9f:f2:
cf:6a:84:cc:5a:7f:de:96:90:91:30:31:09:f9:ee:29:b2:ef:
5d:8e:f4:5b:b1:e7:49:c2:ea:22:90:11:5e:45:cf:84:a5:2f:
1a:ff:8b:63:52:a0:c0:30:c9:49:7d:84:8b:63:f9:42:4f:fb:
88:8d:a7:41:e1:5b:fa:cd:23:32:bd:01:58:30:21:ea:4a:18:
a9:e0:96:af:af:45:d4:70:37:26:63:3c:27:76:56:55:8b:55:
03:78:25:67:de:6b:b1:1f:f4:64:27:c6:64:6c:ca:66:79:07:
3d:99:2c:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxEqNzwdzWJW7kQWc+LvloMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NTJhYjFkMmQyOWJhYzlkNTJlYjQ3OWRlNjRjMDcwMGZj
NjcyNGYwHhcNMjUxMTExMDQwMDM4WhcNMjUxMTEyMDQwMDM4WjAzMTEwLwYDVQQD
EygzODc3ZjU4ZjQzYzg4NTFmMzQ2MjUzZTAxNDI0MDlhMjg2YmY4Y2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApc22OOgP1z5KCVzYvvKerDSmX3nu
YcIwmjGkwcd7NU3AL4Xyj7TMfDIM8zdFNVi0IFIPwGb/g+BRSBFNL+XC6afuJ5Zm
HiBqgjGq09t52Iqn3X4syMApanCqbIqZFW+iZWYA/A+0Pn3WDBRCpkvnLJJTbwhQ
SEJnHzDC+JlRvj1/IMLjCleJ8xhf9gvlg8RYZDLTtQv80r1ySJpAIGcbfX9R7erl
MBwu+++f0DwxstJB+/JTKrXKh4BsnF15p+G34kmRtacj2ryev17FkWbWTlEuNifY
c8Ljyy9QwkO//Lt92ggy4JRWdWcIPEOt/AmMgIahRUAvM+oznzUzpbcpIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDh39Y9DyIUfNGJT4BQkCaKGv4zwMB8GA1UdIwQY
MBaAFCRSqx0tKbrJ1S60ed5kwHAPxnJPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkZLckhTMHB1c25WTHJSNTNtVEFjQV9HY2s4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iYzFkMTQtMTVjOC00OGZkLTllYzMt
OTY5Yzk0ZGU4OWE1LzEvSkZLckhTMHB1c25WTHJSNTNtVEFjQV9HY2s4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9iYzFkMTQtMTVjOC00OGZkLTllYzMtOTY5Yzk0ZGU4OWE1
LzEvSkZLckhTMHB1c25WTHJSNTNtVEFjQV9HY2s4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATSQE5d5d
dbZKC422ZM+k+qLpIr6xAZflx9eBDoXKdXEh+U3jX9H5yopXDXO8q0YvZfZUGdS2
7isAq2YMIS1MKIZdeVegZ+SPP19mE8lhrAm8Qte5U/VREeSxnkI2hrgLRv2qMG9l
a5+78lONFO74uKqM8Wzk5Zf0kF13Q+ExH/eZQbxKRHZww9mPePdo8J/yz2qEzFp/
3paQkTAxCfnuKbLvXY70W7HnScLqIpARXkXPhKUvGv+LY1KgwDDJSX2Ei2P5Qk/7
iI2nQeFb+s0jMr0BWDAh6koYqeCWr69F1HA3JmM8J3ZWVYtVA3glZ95rsR/0ZCfG
ZGzKZnkHPZkseQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:34 2025 by rpki-client