Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
File: Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft (raw, json)
Hash identifier: F1bgri94FaBzPeCrr0vMx7nnqMx7Euijj12z26HSefc=
Subject key identifier: FD:57:74:54:E5:BF:6B:7C:1D:F9:4F:79:37:56:B0:3A:3F:15:BA:B0
Authority key identifier: 26:7D:9E:CB:99:64:82:5D:44:DD:26:6B:BD:32:AA:08:04:BC:10:F7
Certificate issuer: /CN=267d9ecb9964825d44dd266bbd32aa0804bc10f7
Certificate serial: 019A7226420C91E2825652486D6F469B5C13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
Manifest number: 1671
Signing time: Tue 11 Nov 2025 09:01:41 +0000
Manifest this update: Tue 11 Nov 2025 09:01:41 +0000
Manifest next update: Wed 12 Nov 2025 09:01:41 +0000
Files and hashes: 1: Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl (hash: L5+BOZJDDyvi661ztnWj5FCZQGEaTlSTEgz5JR40IrU=)
2: ifTKeL7Q3yOfbgGQD-O0V2FKxJg.roa (hash: JhNUlPYthTeXHHV7LF1Jgo8sCxuBA07GISDC2g5jYXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:42:0c:91:e2:82:56:52:48:6d:6f:46:9b:5c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=267d9ecb9964825d44dd266bbd32aa0804bc10f7
Validity
Not Before: Nov 11 09:01:41 2025 GMT
Not After : Nov 12 09:01:41 2025 GMT
Subject: CN=fd577454e5bf6b7c1df94f793756b03a3f15bab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b2:42:96:8a:7c:1e:a7:51:1b:5e:a6:52:98:
a0:13:9c:ad:b9:35:89:9c:2f:0e:7d:99:8b:97:ac:
42:b7:bf:45:e9:c1:15:1d:45:23:97:aa:b7:a0:36:
e5:eb:f8:01:b2:04:61:2c:a2:ac:26:fe:ca:73:42:
da:74:44:38:72:a3:e2:8c:3e:87:1d:76:d6:e9:ed:
9c:6a:08:bb:64:fc:c5:d3:f7:af:e0:bb:cd:54:05:
64:ce:80:d6:7b:c7:9d:5e:ce:b5:07:b7:e2:19:a7:
bb:e5:b8:d9:43:d8:31:a6:79:fc:d8:20:e0:77:a7:
aa:85:5f:27:fb:d8:ed:8b:f5:d8:63:e4:4a:91:a9:
da:c3:c4:53:45:ba:ff:c5:ed:ee:78:89:b1:80:c3:
db:c7:e6:30:62:bb:1f:fe:9a:20:35:93:cc:18:26:
03:3b:f0:7c:d6:cc:13:dd:d3:c0:c6:38:ab:b5:4e:
7d:ef:79:53:67:01:0a:cc:84:e3:99:98:0a:56:d8:
a6:1b:e6:65:5b:51:8b:45:94:26:bd:e8:cb:1d:eb:
33:b4:c4:34:a7:5f:cf:4b:01:45:3f:03:ca:d7:a5:
df:c1:03:c8:da:d4:3f:a0:f3:68:65:90:ef:fd:40:
75:2b:e6:4d:23:3c:1a:d5:a8:5a:22:c2:b5:60:04:
5c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:57:74:54:E5:BF:6B:7C:1D:F9:4F:79:37:56:B0:3A:3F:15:BA:B0
X509v3 Authority Key Identifier:
keyid:26:7D:9E:CB:99:64:82:5D:44:DD:26:6B:BD:32:AA:08:04:BC:10:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ed:3b:15:45:63:06:53:51:f6:88:ef:cd:a5:ea:db:d7:cf:
73:8c:a0:af:bf:bd:c5:f7:91:f8:84:ef:ba:94:ea:d4:04:2d:
bc:42:ab:b5:cc:51:dd:7b:c8:f9:40:3f:2a:ec:52:5c:72:e1:
00:27:4d:b7:e3:f9:ae:ee:fc:56:ae:04:e8:ac:be:6f:7d:35:
81:f1:50:a9:d8:fb:fb:8b:37:2f:78:78:aa:37:8b:ac:e3:e6:
b5:9b:de:48:07:e7:24:7e:04:de:41:fb:90:b4:4b:1c:f6:28:
d7:fb:5d:3e:79:3f:25:b5:a5:16:79:af:28:66:e4:bf:20:ae:
74:35:8d:3d:fa:2a:68:b2:76:32:cd:e2:94:50:a4:be:84:5a:
d2:6b:3d:a9:34:c1:08:dd:d0:98:f4:3a:0f:83:ad:4c:4b:e8:
c9:f0:a8:75:83:2e:3d:f4:1e:9a:45:ea:85:79:0f:41:f9:ea:
1a:45:f1:b2:50:78:7e:88:cc:dc:0a:f9:81:2c:5a:ac:21:ce:
b5:3e:af:99:0f:cd:e3:9b:42:17:49:97:b4:57:9a:dc:2c:77:
df:59:f8:3c:bb:eb:a9:23:f7:02:e3:97:96:07:81:14:fa:1b:
64:9e:9f:11:45:c8:8f:53:98:0e:80:f5:be:ac:ba:57:8a:7d:
b8:73:34:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJkIMkeKCVlJIbW9Gm1wTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2N2Q5ZWNiOTk2NDgyNWQ0NGRkMjY2YmJkMzJhYTA4MDRi
YzEwZjcwHhcNMjUxMTExMDkwMTQxWhcNMjUxMTEyMDkwMTQxWjAzMTEwLwYDVQQD
EyhmZDU3NzQ1NGU1YmY2YjdjMWRmOTRmNzkzNzU2YjAzYTNmMTViYWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7JClop8HqdRG16mUpigE5ytuTWJ
nC8OfZmLl6xCt79F6cEVHUUjl6q3oDbl6/gBsgRhLKKsJv7Kc0LadEQ4cqPijD6H
HXbW6e2cagi7ZPzF0/ev4LvNVAVkzoDWe8edXs61B7fiGae75bjZQ9gxpnn82CDg
d6eqhV8n+9jti/XYY+RKkanaw8RTRbr/xe3ueImxgMPbx+YwYrsf/pogNZPMGCYD
O/B81swT3dPAxjirtU5973lTZwEKzITjmZgKVtimG+ZlW1GLRZQmvejLHesztMQ0
p1/PSwFFPwPK16XfwQPI2tQ/oPNoZZDv/UB1K+ZNIzwa1ahaIsK1YARc7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1XdFTlv2t8HflPeTdWsDo/FbqwMB8GA1UdIwQY
MBaAFCZ9nsuZZIJdRN0ma70yqggEvBD3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm4yZXk1bGtnbDFFM1NacnZUS3FDQVM4RVBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8yOWFjODQtNDM2NS00ZWJhLTk4NzMt
MzkxYmNlNzFmZWExLzEvSm4yZXk1bGtnbDFFM1NacnZUS3FDQVM4RVBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8yOWFjODQtNDM2NS00ZWJhLTk4NzMtMzkxYmNlNzFmZWEx
LzEvSm4yZXk1bGtnbDFFM1NacnZUS3FDQVM4RVBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFO07FUVj
BlNR9ojvzaXq29fPc4ygr7+9xfeR+ITvupTq1AQtvEKrtcxR3XvI+UA/KuxSXHLh
ACdNt+P5ru78Vq4E6Ky+b301gfFQqdj7+4s3L3h4qjeLrOPmtZveSAfnJH4E3kH7
kLRLHPYo1/tdPnk/JbWlFnmvKGbkvyCudDWNPfoqaLJ2Ms3ilFCkvoRa0ms9qTTB
CN3QmPQ6D4OtTEvoyfCodYMuPfQemkXqhXkPQfnqGkXxslB4fojM3Ar5gSxarCHO
tT6vmQ/N45tCF0mXtFea3Cx331n4PLvrqSP3AuOXlgeBFPobZJ6fEUXIj1OYDoD1
vqy6V4p9uHM0Xg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:00 2025 by rpki-client