Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
File: jHr3naXytomGyDVkYKQ_pC0386Y.mft (raw, json)
Hash identifier: SlNJAZBRpPkdn3eIO+upwgp1soOTm0kZhtSsINHlqss=
Subject key identifier: D0:6C:80:69:86:F4:65:E3:D2:9C:5B:32:DB:F4:5B:20:7C:47:22:4F
Authority key identifier: 8C:7A:F7:9D:A5:F2:B6:89:86:C8:35:64:60:A4:3F:A4:2D:37:F3:A6
Certificate issuer: /CN=8c7af79da5f2b68986c8356460a43fa42d37f3a6
Certificate serial: 019A71EEB199FA8BBC0AA73CFB9EE19BD77D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHr3naXytomGyDVkYKQ_pC0386Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 08:00:59 +0000
Manifest this update: Tue 11 Nov 2025 08:00:59 +0000
Manifest next update: Wed 12 Nov 2025 08:00:59 +0000
Files and hashes: 1: Y6x4X7ml7gBX__XgDy6M9m8y_fM.roa (hash: euuUJ2B09SVhI3IDat0XeMWmWw0q0J+4EoTaRS+kLdQ=)
2: jHr3naXytomGyDVkYKQ_pC0386Y.crl (hash: FyJTygf1ltLRHKl0Rv4+GvCxVUodZhKuP/MtAoVRARQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHr3naXytomGyDVkYKQ_pC0386Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:b1:99:fa:8b:bc:0a:a7:3c:fb:9e:e1:9b:d7:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7af79da5f2b68986c8356460a43fa42d37f3a6
Validity
Not Before: Nov 11 08:00:59 2025 GMT
Not After : Nov 12 08:00:59 2025 GMT
Subject: CN=d06c806986f465e3d29c5b32dbf45b207c47224f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0f:32:3d:c0:53:08:ad:c3:ce:69:95:ca:01:
6c:d9:fc:f5:2b:42:e2:03:be:1e:cc:23:81:ac:f3:
02:15:fa:dd:53:eb:52:aa:7c:2e:79:d8:65:12:52:
48:a1:10:d9:67:1d:d5:51:87:6b:c2:0c:29:96:48:
d5:6a:d3:23:a1:cd:15:2d:06:16:5b:49:a0:12:c1:
35:77:02:b8:c9:77:3a:b2:84:45:90:3f:96:e8:cd:
30:e0:76:55:0d:71:fb:6d:12:bb:e6:83:a6:15:08:
2e:96:e4:22:d3:c5:7b:9b:2d:1d:47:cc:b3:d7:70:
50:fb:57:9c:d6:fb:b8:11:25:0c:67:7d:63:2c:70:
87:16:8a:88:2a:21:e5:43:b2:c9:00:6e:87:a4:fb:
84:ff:3c:b3:ec:cf:3b:9f:01:7b:21:ea:76:29:ae:
2d:c7:96:59:4c:54:4c:51:76:d8:97:8d:00:c6:48:
77:88:3a:5a:74:3b:e0:7e:03:c8:ae:9e:f7:c2:af:
ff:92:e4:8e:46:38:b7:ad:8e:cd:62:9b:0c:63:01:
b8:92:d1:ec:c9:96:ee:c5:20:89:2b:6c:a0:64:e3:
be:01:76:43:7e:a6:78:9a:1f:7e:ed:df:fc:da:c8:
aa:1e:45:70:81:1e:22:c3:d7:46:5f:53:53:4f:b5:
25:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6C:80:69:86:F4:65:E3:D2:9C:5B:32:DB:F4:5B:20:7C:47:22:4F
X509v3 Authority Key Identifier:
keyid:8C:7A:F7:9D:A5:F2:B6:89:86:C8:35:64:60:A4:3F:A4:2D:37:F3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHr3naXytomGyDVkYKQ_pC0386Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:d2:37:ac:be:59:83:69:4f:1b:39:98:68:43:1e:f5:92:87:
95:b9:ba:1f:0d:5f:6f:8b:cb:e9:ae:32:db:44:46:02:02:f5:
d1:29:7a:31:90:67:5c:f3:be:7d:f6:94:1d:fc:f4:ef:0b:74:
cd:f8:7d:10:53:b5:26:73:04:92:39:64:14:90:cf:dc:d6:0b:
f9:94:66:90:77:b8:bf:3c:19:02:d7:0f:42:11:30:5a:7c:32:
dc:3a:33:f4:29:20:ce:ea:6e:87:1a:d6:e6:4b:45:c4:f5:c4:
7b:81:8a:44:ef:e8:f3:1b:6e:44:6c:a3:71:56:c5:bd:8b:d3:
eb:76:5a:40:d5:ec:75:e5:a3:e5:bc:e3:3d:d7:ef:22:2c:b9:
65:e2:0d:e7:23:a8:81:fe:81:d4:12:e3:ad:a0:49:af:45:3d:
d5:e9:c6:de:e6:6d:d0:ad:28:ca:6f:5f:b1:e1:fb:0f:5e:50:
69:54:75:b0:31:dc:2f:18:2c:dd:15:6f:3b:83:08:58:c2:8a:
58:26:1a:78:a6:a2:1e:36:e6:ad:ff:a0:73:e3:d1:0b:c8:60:
58:80:11:d6:c6:a0:ec:30:3e:6b:0b:5d:fc:51:11:5a:ba:4e:
79:98:bf:7d:00:8e:83:f6:cd:46:11:42:2d:da:c4:5e:94:11:
c4:b1:df:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7rGZ+ou8Cqc8+57hm9d9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjN2FmNzlkYTVmMmI2ODk4NmM4MzU2NDYwYTQzZmE0MmQz
N2YzYTYwHhcNMjUxMTExMDgwMDU5WhcNMjUxMTEyMDgwMDU5WjAzMTEwLwYDVQQD
EyhkMDZjODA2OTg2ZjQ2NWUzZDI5YzViMzJkYmY0NWIyMDdjNDcyMjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxw8yPcBTCK3DzmmVygFs2fz1K0Li
A74ezCOBrPMCFfrdU+tSqnwuedhlElJIoRDZZx3VUYdrwgwplkjVatMjoc0VLQYW
W0mgEsE1dwK4yXc6soRFkD+W6M0w4HZVDXH7bRK75oOmFQguluQi08V7my0dR8yz
13BQ+1ec1vu4ESUMZ31jLHCHFoqIKiHlQ7LJAG6HpPuE/zyz7M87nwF7Iep2Ka4t
x5ZZTFRMUXbYl40Axkh3iDpadDvgfgPIrp73wq//kuSORji3rY7NYpsMYwG4ktHs
yZbuxSCJK2ygZOO+AXZDfqZ4mh9+7d/82siqHkVwgR4iw9dGX1NTT7UlFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNBsgGmG9GXj0pxbMtv0WyB8RyJPMB8GA1UdIwQY
MBaAFIx6952l8raJhsg1ZGCkP6QtN/OmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakhyM25hWHl0b21HeURWa1lLUV9wQzAzODZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8yNzA4NmQtMzdmMy00MTMwLTg3Mjkt
YmNlZGJiZDZlNTc0LzEvakhyM25hWHl0b21HeURWa1lLUV9wQzAzODZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8yNzA4NmQtMzdmMy00MTMwLTg3MjktYmNlZGJiZDZlNTc0
LzEvakhyM25hWHl0b21HeURWa1lLUV9wQzAzODZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe9I3rL5Z
g2lPGzmYaEMe9ZKHlbm6Hw1fb4vL6a4y20RGAgL10Sl6MZBnXPO+ffaUHfz07wt0
zfh9EFO1JnMEkjlkFJDP3NYL+ZRmkHe4vzwZAtcPQhEwWnwy3Doz9CkgzupuhxrW
5ktFxPXEe4GKRO/o8xtuRGyjcVbFvYvT63ZaQNXsdeWj5bzjPdfvIiy5ZeIN5yOo
gf6B1BLjraBJr0U91enG3uZt0K0oym9fseH7D15QaVR1sDHcLxgs3RVvO4MIWMKK
WCYaeKaiHjbmrf+gc+PRC8hgWIAR1sag7DA+awtd/FERWrpOeZi/fQCOg/bNRhFC
LdrEXpQRxLHfHg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:36:53 2025 by rpki-client