Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
File: JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft (raw, json)
Hash identifier: lNpXHxAPm4ULL3dReCkIU+MouX7Uq3oDQNXOMuf88lg=
Subject key identifier: 42:62:81:82:2B:91:CB:F4:89:EE:68:1E:CC:2D:56:A7:42:20:10:E3
Authority key identifier: 25:C5:26:87:A5:FF:16:1D:2E:DA:BC:9F:8E:3A:48:76:C4:AD:8D:A2
Certificate issuer: /CN=25c52687a5ff161d2edabc9f8e3a4876c4ad8da2
Certificate serial: 019A71B9261BC5E51FC7415043C754795C91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
Manifest number: 04F3
Signing time: Tue 11 Nov 2025 07:02:30 +0000
Manifest this update: Tue 11 Nov 2025 07:02:30 +0000
Manifest next update: Wed 12 Nov 2025 07:02:30 +0000
Files and hashes: 1: JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl (hash: 0ngnHwjQiEUMeWqBNx2nupDbgs60EJmow9o0asLQ7oI=)
2: K6bM5601EY4aWoYwlB_yWaSAYWg.roa (hash: q1/+kZ6yqPL4e9VCBVnSxVBfdHwsRb33uiurUpP8SWw=)
3: Qp56EhXo02rtbXG9bpMugv8X2n0.roa (hash: TyqFIVR8sVZ/spucHhOleEaJbMKaFD4U+qZbekh1SEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:26:1b:c5:e5:1f:c7:41:50:43:c7:54:79:5c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c52687a5ff161d2edabc9f8e3a4876c4ad8da2
Validity
Not Before: Nov 11 07:02:30 2025 GMT
Not After : Nov 12 07:02:30 2025 GMT
Subject: CN=426281822b91cbf489ee681ecc2d56a7422010e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6e:e0:00:3e:d8:73:5c:31:ab:bc:9a:c9:ab:
c1:4c:cd:7c:21:81:27:8d:83:c0:d6:7a:de:d6:51:
08:fc:50:82:6e:0b:4c:0a:87:3f:bb:1c:be:66:0b:
af:93:20:7a:91:0d:73:c3:51:7f:59:54:1e:bc:0f:
7c:37:f3:11:31:81:3f:9d:55:8a:90:42:df:73:19:
eb:b0:1b:8e:6f:ae:36:fc:20:33:7c:bb:c4:a7:da:
eb:19:36:b4:94:19:61:76:78:4b:ec:9d:4b:e8:3d:
e5:f1:23:e4:0f:6e:9b:b1:4e:e3:69:c4:cc:4c:6f:
88:6e:7b:97:18:9b:16:21:69:8f:56:16:bd:da:fc:
48:04:f1:97:e8:23:10:5b:8f:5e:f3:04:99:51:e9:
a5:85:f2:43:b2:a3:0f:eb:bd:f5:ae:4e:fb:b9:53:
62:07:50:a0:f1:a0:39:50:6b:a7:5f:ef:89:cd:10:
ad:20:46:0a:64:59:ba:1e:96:6e:7a:eb:ab:11:df:
20:18:5b:23:bf:66:04:3d:62:d5:e7:92:ea:c1:bc:
ab:1f:56:f9:89:2f:52:1b:37:0e:6b:3d:79:75:07:
e8:07:98:3b:f3:09:5d:9b:8b:20:a2:9c:6e:9d:57:
c9:81:98:3a:ee:47:46:44:4a:e4:7b:1d:e1:80:58:
d6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:62:81:82:2B:91:CB:F4:89:EE:68:1E:CC:2D:56:A7:42:20:10:E3
X509v3 Authority Key Identifier:
keyid:25:C5:26:87:A5:FF:16:1D:2E:DA:BC:9F:8E:3A:48:76:C4:AD:8D:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f4:7a:0c:81:1a:5e:e0:6f:55:52:dd:de:d5:2d:a2:9b:b9:
f2:51:51:55:98:c3:d1:42:73:a3:1f:54:69:2a:79:60:10:b8:
40:cf:be:3c:f0:d9:5f:05:ad:7e:2a:d2:0f:15:f4:20:38:16:
06:e4:d3:b1:53:ad:91:06:d4:c0:09:36:f3:2e:74:29:3f:4f:
ec:27:36:08:bd:37:8b:0a:f2:51:8f:28:5b:b6:63:bb:da:af:
d3:3a:85:5b:69:ef:d3:a5:ba:95:a5:88:68:5d:00:64:ec:8b:
c5:d0:c3:6a:ce:b6:8a:03:ff:8e:9c:af:d2:ec:0f:ff:cd:b3:
16:ec:8f:fc:d9:30:ce:20:c0:26:61:84:67:02:ad:1a:a0:5a:
6c:56:39:7a:d9:89:1b:9b:58:ff:a0:a4:96:b2:ea:a3:b0:62:
ba:3f:6d:8c:2e:f4:ad:f0:84:d0:52:a4:75:b7:eb:5d:0a:55:
08:09:dc:59:20:5b:07:d4:1e:c1:a6:12:f5:6f:d4:0d:14:f3:
99:c0:fa:92:3b:1d:f4:39:b5:dd:d0:86:fd:f6:c5:84:91:3a:
ce:7b:d0:92:1e:99:8a:b0:41:c6:e5:a6:48:25:8f:4f:1f:a0:
29:ee:c9:2a:79:17:de:8c:2c:1b:53:df:ec:3e:1f:c1:21:9d:
94:c3:c9:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuSYbxeUfx0FQQ8dUeVyRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YzUyNjg3YTVmZjE2MWQyZWRhYmM5ZjhlM2E0ODc2YzRh
ZDhkYTIwHhcNMjUxMTExMDcwMjMwWhcNMjUxMTEyMDcwMjMwWjAzMTEwLwYDVQQD
Eyg0MjYyODE4MjJiOTFjYmY0ODllZTY4MWVjYzJkNTZhNzQyMjAxMGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvm7gAD7Yc1wxq7yayavBTM18IYEn
jYPA1nre1lEI/FCCbgtMCoc/uxy+ZguvkyB6kQ1zw1F/WVQevA98N/MRMYE/nVWK
kELfcxnrsBuOb642/CAzfLvEp9rrGTa0lBlhdnhL7J1L6D3l8SPkD26bsU7jacTM
TG+IbnuXGJsWIWmPVha92vxIBPGX6CMQW49e8wSZUemlhfJDsqMP6731rk77uVNi
B1Cg8aA5UGunX++JzRCtIEYKZFm6HpZueuurEd8gGFsjv2YEPWLV55LqwbyrH1b5
iS9SGzcOaz15dQfoB5g78wldm4sgopxunVfJgZg67kdGRErkex3hgFjW3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJigYIrkcv0ie5oHswtVqdCIBDjMB8GA1UdIwQY
MBaAFCXFJoel/xYdLtq8n446SHbErY2iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmNVbWg2WF9GaDB1MnJ5ZmpqcElkc1N0amFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81OTY1MDYtNWFjNi00OWIzLWJkNzAt
NzVkYWU1ZGRmZWQzLzEvSmNVbWg2WF9GaDB1MnJ5ZmpqcElkc1N0amFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy81OTY1MDYtNWFjNi00OWIzLWJkNzAtNzVkYWU1ZGRmZWQz
LzEvSmNVbWg2WF9GaDB1MnJ5ZmpqcElkc1N0amFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE/R6DIEa
XuBvVVLd3tUtopu58lFRVZjD0UJzox9UaSp5YBC4QM++PPDZXwWtfirSDxX0IDgW
BuTTsVOtkQbUwAk28y50KT9P7Cc2CL03iwryUY8oW7Zju9qv0zqFW2nv06W6laWI
aF0AZOyLxdDDas62igP/jpyv0uwP/82zFuyP/NkwziDAJmGEZwKtGqBabFY5etmJ
G5tY/6CklrLqo7Biuj9tjC70rfCE0FKkdbfrXQpVCAncWSBbB9QewaYS9W/UDRTz
mcD6kjsd9Dm13dCG/fbFhJE6znvQkh6ZirBBxuWmSCWPTx+gKe7JKnkX3owsG1Pf
7D4fwSGdlMPJnw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:06 2025 by rpki-client