Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
File: jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft (raw, json)
Hash identifier: 3WGHI1zwzoC/xehO3FLzCXKrU9iGYyDx98WbPsc16mk=
Subject key identifier: 1E:59:25:F0:72:99:12:DE:06:95:B2:57:B0:21:A0:73:E5:C3:06:C7
Authority key identifier: 8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
Certificate issuer: /CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Certificate serial: 019A066D6DD2F57FBEE485835B63509EA3AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
Manifest number: 02FE
Signing time: Tue 21 Oct 2025 11:00:26 +0000
Manifest this update: Tue 21 Oct 2025 11:00:26 +0000
Manifest next update: Wed 22 Oct 2025 11:00:26 +0000
Files and hashes: 1: 2a4uGqXqRLFwxkrNzW_s6-qnGXE.roa (hash: goHZck25hCom6tNMtTpOVgal0/zlXu42ccbA4cfzVE0=)
2: jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl (hash: nh5pyLzv2+6UoTLLjIJK5/1RAT0NB94BKlBoMIj9Q2E=)
3: kFOw0UjGI7qti8qa1uAUEOsP1Y0.roa (hash: 3Ka4QMk7D3J6EIhtUeiuaJXa58kFmA+7bZN+m672Gvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:6d:6d:d2:f5:7f:be:e4:85:83:5b:63:50:9e:a3:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d34fab9aa33eb55d9854237bd0d2252792132e6
Validity
Not Before: Oct 21 11:00:26 2025 GMT
Not After : Oct 22 11:00:26 2025 GMT
Subject: CN=1e5925f0729912de0695b257b021a073e5c306c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1e:b8:f8:6b:fb:f2:74:66:5e:b5:6e:3e:0a:
4d:e1:72:55:02:f4:1c:50:04:00:dc:68:fc:2d:fa:
f7:ba:60:cf:97:15:4c:33:55:7a:8e:b0:1b:0e:2e:
ca:cc:85:5c:c1:45:2c:a0:f8:2d:4d:0a:89:fa:77:
f1:46:b4:cd:46:9a:ea:bb:e7:ca:17:b9:fc:30:0b:
02:6c:da:2c:33:b8:58:4a:85:59:9a:77:9c:c8:19:
bf:13:a2:b7:43:7e:80:62:7d:2a:15:cd:06:41:35:
0c:c3:39:92:c5:ed:46:7b:32:06:75:66:48:7d:81:
b8:c9:02:86:0e:36:e1:93:78:27:2b:af:d5:59:a2:
a2:c7:0a:cb:8a:14:0b:9b:3b:98:73:12:ba:9e:26:
a1:50:6d:a6:4b:53:70:14:24:42:01:8a:ea:74:5e:
a0:54:62:38:48:da:2b:1a:f5:a2:bc:2c:45:e6:c7:
ce:02:aa:be:89:31:12:b9:5d:57:ed:4f:38:67:c9:
b2:4e:65:27:27:2d:f1:d2:57:bc:78:47:49:d2:b4:
58:3b:4e:c9:bc:1f:b2:60:6c:4f:e7:cc:82:8e:a0:
e2:4d:ce:f2:82:5a:20:f3:7a:35:ff:0f:dc:3d:c7:
63:74:15:13:21:e3:eb:77:a5:67:bd:22:dd:4f:4e:
07:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:59:25:F0:72:99:12:DE:06:95:B2:57:B0:21:A0:73:E5:C3:06:C7
X509v3 Authority Key Identifier:
keyid:8D:34:FA:B9:AA:33:EB:55:D9:85:42:37:BD:0D:22:52:79:21:32:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTT6uaoz61XZhUI3vQ0iUnkhMuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6de7ff-321e-4b47-b3c5-6db086c00f6a/1/jTT6uaoz61XZhUI3vQ0iUnkhMuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ce:a1:87:cc:ed:c6:c9:96:4c:c7:ae:5c:68:fe:81:15:1b:
ae:41:0c:82:47:46:dc:2d:34:4e:5b:67:74:40:67:b1:2d:d4:
7b:5e:90:8b:09:72:54:7a:34:1e:07:67:e8:aa:e9:d7:fb:52:
e3:0c:ba:91:d3:69:89:66:82:3a:c9:a9:76:1b:2e:81:4f:e7:
88:2f:ca:ed:be:2f:4e:e3:2e:d2:eb:21:17:8e:41:84:a2:b8:
f5:43:33:1b:d6:4f:6a:eb:2e:55:4f:82:6a:30:6a:34:48:da:
81:2f:6f:a1:88:57:35:e2:ff:0d:44:c4:62:e5:5b:01:3b:54:
6b:2b:a4:11:42:75:8e:c7:4a:6e:dd:17:39:61:e1:36:dd:af:
e9:22:17:3d:b4:de:85:83:ea:d6:05:68:b2:3e:65:89:5a:b2:
39:aa:cf:83:4a:0d:13:22:0d:77:7d:55:e1:13:0a:97:92:54:
59:4b:c4:d9:d7:45:1e:fa:8b:d8:c8:55:33:18:db:5a:0b:7c:
a2:fb:3c:f8:84:96:c2:e3:5d:b2:06:60:9a:98:14:f3:4e:da:
a7:8a:39:d9:7f:16:77:51:90:c1:3b:b2:ac:b9:e2:9b:aa:c1:
40:50:80:25:e5:8d:c9:da:af:f5:f1:6a:db:58:fc:21:09:ff:
f8:57:f3:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoGbW3S9X++5IWDW2NQnqOrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMzRmYWI5YWEzM2ViNTVkOTg1NDIzN2JkMGQyMjUyNzky
MTMyZTYwHhcNMjUxMDIxMTEwMDI2WhcNMjUxMDIyMTEwMDI2WjAzMTEwLwYDVQQD
EygxZTU5MjVmMDcyOTkxMmRlMDY5NWIyNTdiMDIxYTA3M2U1YzMwNmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoB64+Gv78nRmXrVuPgpN4XJVAvQc
UAQA3Gj8Lfr3umDPlxVMM1V6jrAbDi7KzIVcwUUsoPgtTQqJ+nfxRrTNRprqu+fK
F7n8MAsCbNosM7hYSoVZmnecyBm/E6K3Q36AYn0qFc0GQTUMwzmSxe1GezIGdWZI
fYG4yQKGDjbhk3gnK6/VWaKixwrLihQLmzuYcxK6niahUG2mS1NwFCRCAYrqdF6g
VGI4SNorGvWivCxF5sfOAqq+iTESuV1X7U84Z8myTmUnJy3x0le8eEdJ0rRYO07J
vB+yYGxP58yCjqDiTc7yglog83o1/w/cPcdjdBUTIePrd6VnvSLdT04HWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB5ZJfBymRLeBpWyV7AhoHPlwwbHMB8GA1UdIwQY
MBaAFI00+rmqM+tV2YVCN70NIlJ5ITLmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalRUNnVhb3o2MVhaaFVJM3ZRMGlVbmtoTXVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC82ZGU3ZmYtMzIxZS00YjQ3LWIzYzUt
NmRiMDg2YzAwZjZhLzEvalRUNnVhb3o2MVhaaFVJM3ZRMGlVbmtoTXVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC82ZGU3ZmYtMzIxZS00YjQ3LWIzYzUtNmRiMDg2YzAwZjZh
LzEvalRUNnVhb3o2MVhaaFVJM3ZRMGlVbmtoTXVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAic6hh8zt
xsmWTMeuXGj+gRUbrkEMgkdG3C00TltndEBnsS3Ue16QiwlyVHo0Hgdn6Krp1/tS
4wy6kdNpiWaCOsmpdhsugU/niC/K7b4vTuMu0ushF45BhKK49UMzG9ZPausuVU+C
ajBqNEjagS9voYhXNeL/DUTEYuVbATtUayukEUJ1jsdKbt0XOWHhNt2v6SIXPbTe
hYPq1gVosj5liVqyOarPg0oNEyINd31V4RMKl5JUWUvE2ddFHvqL2MhVMxjbWgt8
ovs8+ISWwuNdsgZgmpgU807ap4o52X8Wd1GQwTuyrLnim6rBQFCAJeWNydqv9fFq
21j8IQn/+FfzQA==
-----END CERTIFICATE-----
Generated at Tue Oct 21 14:13:03 2025 by rpki-client