Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft
File: jlKjlU4w5HU-LgCg74FpZtbWDbY.mft (raw, json)
Hash identifier: 1oWyZjxtsz7duPNZDG1DPHRPF2TUBWuTetaNN85EYLU=
Subject key identifier: 8B:67:C0:C4:A7:CB:17:87:BF:CE:8E:8E:32:03:4D:53:B6:62:4F:76
Authority key identifier: 8E:52:A3:95:4E:30:E4:75:3E:2E:00:A0:EF:81:69:66:D6:D6:0D:B6
Certificate issuer: /CN=8e52a3954e30e4753e2e00a0ef816966d6d60db6
Certificate serial: 019A71EED1B491E312D080B3FF73BAE70C7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlKjlU4w5HU-LgCg74FpZtbWDbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 08:01:07 +0000
Manifest this update: Tue 11 Nov 2025 08:01:07 +0000
Manifest next update: Wed 12 Nov 2025 08:01:07 +0000
Files and hashes: 1: fUQfJ9b5u35O0_p-iUp42Os46hA.roa (hash: 0cvi4gkix6mewQd5i5/nO5DzbnNjSl7ne7hKCvJ5puY=)
2: jlKjlU4w5HU-LgCg74FpZtbWDbY.crl (hash: T0k5acIkoqjvy105xGpIJE4dLJsiFzH6EAiHx4MoAdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlKjlU4w5HU-LgCg74FpZtbWDbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:d1:b4:91:e3:12:d0:80:b3:ff:73:ba:e7:0c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e52a3954e30e4753e2e00a0ef816966d6d60db6
Validity
Not Before: Nov 11 08:01:07 2025 GMT
Not After : Nov 12 08:01:07 2025 GMT
Subject: CN=8b67c0c4a7cb1787bfce8e8e32034d53b6624f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:57:05:32:14:e5:5e:c1:e1:61:ad:2d:f0:74:
cb:21:19:fe:14:de:78:2f:11:30:1f:b3:b9:ab:ee:
c4:c3:37:00:db:4e:8c:91:aa:de:92:a1:75:19:fc:
70:c0:c1:8c:a5:07:1c:76:09:4c:fe:02:9f:83:77:
9b:a4:b8:55:a5:54:c8:a2:37:ad:58:69:e3:ad:14:
8e:0d:6a:71:2f:39:fa:0e:a5:e5:61:39:42:93:2a:
08:e2:db:41:22:0e:d1:91:82:18:43:69:d3:eb:c7:
1d:ac:da:f3:7c:9d:1a:32:4d:74:b5:40:95:32:89:
9b:a8:ad:d7:54:c0:36:5e:c4:e8:11:59:da:34:9a:
f0:1b:e8:96:e8:2c:fd:cb:2e:9b:fe:13:9f:73:2a:
6a:4d:93:a9:f0:e9:52:2c:8b:2d:c9:4c:c4:de:c4:
09:6f:33:8a:8b:9a:08:06:24:f3:f7:46:0e:ae:87:
78:8d:ba:12:80:6b:71:2b:b0:a7:8c:87:7f:7c:31:
5e:a5:b4:c9:08:c6:d4:3c:e1:5d:fa:71:3c:8d:7e:
52:aa:84:24:eb:25:6d:c6:e5:12:0c:fb:6c:17:44:
b3:f1:14:28:ec:39:86:06:0f:20:58:d4:12:ed:ef:
01:5a:67:17:16:7b:65:7e:ed:ef:c7:b0:61:7b:75:
70:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:67:C0:C4:A7:CB:17:87:BF:CE:8E:8E:32:03:4D:53:B6:62:4F:76
X509v3 Authority Key Identifier:
keyid:8E:52:A3:95:4E:30:E4:75:3E:2E:00:A0:EF:81:69:66:D6:D6:0D:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlKjlU4w5HU-LgCg74FpZtbWDbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:77:02:a8:25:a4:b5:df:06:cc:ba:31:4a:dc:92:31:ca:f3:
68:ed:80:f9:c8:53:ee:26:21:b2:3a:c1:38:5f:ab:ce:ad:20:
4a:f6:8b:de:bf:12:e8:fc:3e:e5:c2:57:42:31:6b:53:84:60:
99:b2:27:3d:8b:a0:90:82:22:bc:9f:71:cf:15:bd:8b:3f:d0:
50:4f:37:ba:83:e0:11:09:98:86:39:31:66:8d:42:c0:be:e8:
29:5b:f3:87:a6:d4:e4:6c:ab:c2:94:10:38:91:5c:2e:f1:0c:
c8:96:ad:ff:10:44:43:ea:e0:80:08:6e:a5:4a:91:9d:de:93:
38:ba:f0:a9:77:bb:70:ff:a4:4d:90:e2:c6:4f:6b:31:0c:16:
67:b3:7f:30:6c:ac:a4:1c:65:ef:85:8c:f2:55:65:35:f9:68:
2b:20:90:7b:c0:b5:38:0a:91:18:13:8b:9e:2e:59:05:19:62:
fe:a6:dc:84:04:35:76:07:ac:7a:26:5f:00:9e:01:9d:2d:ff:
ff:c0:a0:91:0b:83:b4:e6:6a:fd:2a:3d:f4:92:50:af:d7:8a:
ea:02:fa:0e:1d:e5:11:92:3e:fc:1d:57:f8:df:a9:53:bd:63:
b1:9d:60:2c:5d:54:d3:e2:94:ad:91:b0:ee:4d:61:63:10:ae:
ab:45:ac:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7tG0keMS0ICz/3O65wx/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNTJhMzk1NGUzMGU0NzUzZTJlMDBhMGVmODE2OTY2ZDZk
NjBkYjYwHhcNMjUxMTExMDgwMTA3WhcNMjUxMTEyMDgwMTA3WjAzMTEwLwYDVQQD
Eyg4YjY3YzBjNGE3Y2IxNzg3YmZjZThlOGUzMjAzNGQ1M2I2NjI0Zjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlcFMhTlXsHhYa0t8HTLIRn+FN54
LxEwH7O5q+7EwzcA206MkarekqF1GfxwwMGMpQccdglM/gKfg3ebpLhVpVTIojet
WGnjrRSODWpxLzn6DqXlYTlCkyoI4ttBIg7RkYIYQ2nT68cdrNrzfJ0aMk10tUCV
MombqK3XVMA2XsToEVnaNJrwG+iW6Cz9yy6b/hOfcypqTZOp8OlSLIstyUzE3sQJ
bzOKi5oIBiTz90YOrod4jboSgGtxK7CnjId/fDFepbTJCMbUPOFd+nE8jX5SqoQk
6yVtxuUSDPtsF0Sz8RQo7DmGBg8gWNQS7e8BWmcXFntlfu3vx7Bhe3VwGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFItnwMSnyxeHv86OjjIDTVO2Yk92MB8GA1UdIwQY
MBaAFI5So5VOMOR1Pi4AoO+BaWbW1g22MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamxLamxVNHc1SFUtTGdDZzc0RnBadGJXRGJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8xMTc3YTItMjE5Yy00YjYwLWI5MDEt
Yjg1NmRiMzNjNmM2LzEvamxLamxVNHc1SFUtTGdDZzc0RnBadGJXRGJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8xMTc3YTItMjE5Yy00YjYwLWI5MDEtYjg1NmRiMzNjNmM2
LzEvamxLamxVNHc1SFUtTGdDZzc0RnBadGJXRGJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv3cCqCWk
td8GzLoxStySMcrzaO2A+chT7iYhsjrBOF+rzq0gSvaL3r8S6Pw+5cJXQjFrU4Rg
mbInPYugkIIivJ9xzxW9iz/QUE83uoPgEQmYhjkxZo1CwL7oKVvzh6bU5GyrwpQQ
OJFcLvEMyJat/xBEQ+rggAhupUqRnd6TOLrwqXe7cP+kTZDixk9rMQwWZ7N/MGys
pBxl74WM8lVlNfloKyCQe8C1OAqRGBOLni5ZBRli/qbchAQ1dgeseiZfAJ4BnS3/
/8CgkQuDtOZq/So99JJQr9eK6gL6Dh3lEZI+/B1X+N+pU71jsZ1gLF1U0+KUrZGw
7k1hYxCuq0WsQA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:16:54 2025 by rpki-client