Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft
File: Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft (raw, json)
Hash identifier: MXdDuSurJhHnMNEUDdHbpTgixe4EWTThCVjlloOuUZI=
Subject key identifier: 04:65:9F:CC:D0:25:C6:52:2C:F6:53:AB:6C:85:F4:D6:6C:BB:7D:B1
Authority key identifier: 26:4E:E8:D2:A3:70:D2:3E:24:11:BD:4A:E3:9F:F3:4A:9D:3F:0F:EE
Certificate issuer: /CN=264ee8d2a370d23e2411bd4ae39ff34a9d3f0fee
Certificate serial: 0199FBEB26B8658AD851084948EB97BFD968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jk7o0qNw0j4kEb1K45_zSp0_D-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft
Manifest number: 16DD
Signing time: Sun 19 Oct 2025 10:01:55 +0000
Manifest this update: Sun 19 Oct 2025 10:01:55 +0000
Manifest next update: Mon 20 Oct 2025 10:01:55 +0000
Files and hashes: 1: Jk7o0qNw0j4kEb1K45_zSp0_D-4.crl (hash: AR9EvJGs5L0KERk6KkS4Ovby+Br5uA1l+LXI918xEpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jk7o0qNw0j4kEb1K45_zSp0_D-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:26:b8:65:8a:d8:51:08:49:48:eb:97:bf:d9:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=264ee8d2a370d23e2411bd4ae39ff34a9d3f0fee
Validity
Not Before: Oct 19 10:01:55 2025 GMT
Not After : Oct 20 10:01:55 2025 GMT
Subject: CN=04659fccd025c6522cf653ab6c85f4d66cbb7db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9d:21:22:7a:5f:16:09:dc:15:b1:83:a6:ab:
40:c7:cb:b0:e4:5c:b5:86:ae:b9:48:78:d2:29:01:
d5:63:a2:c0:fc:5a:dd:de:58:03:64:7b:01:37:11:
5e:a7:37:5f:bc:67:ce:36:9d:61:c5:57:ee:78:39:
ba:70:8e:a1:e1:04:64:eb:07:d4:06:f4:11:ac:d5:
3c:c5:fa:cd:52:69:00:23:41:b8:22:72:3f:62:ac:
45:60:e2:b4:ff:86:92:59:1a:93:5d:3b:82:0f:87:
77:85:b8:75:98:29:8b:2a:43:9c:09:98:83:3f:04:
23:98:23:7f:4a:f1:04:b4:c9:dd:2f:c6:f5:8d:80:
b6:68:40:f8:86:ca:4b:47:76:96:f4:4c:27:0a:6b:
8a:86:2b:a5:40:24:a0:2b:01:23:92:74:c2:eb:5e:
f6:5f:e1:f7:3f:dc:c0:41:1e:82:60:26:90:f3:16:
c8:1e:d9:97:3d:33:33:e7:da:f5:23:8b:3e:71:eb:
7b:b8:17:d3:b2:0a:65:fe:e8:68:67:cb:f9:22:f6:
fb:6e:e1:39:47:f4:e7:6a:2e:2b:11:da:56:42:0f:
88:c6:f1:ca:f3:f5:09:ce:b8:05:5a:d5:4e:3c:91:
b7:0b:85:4a:10:4f:41:40:10:37:cd:2f:bb:91:6c:
b5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:65:9F:CC:D0:25:C6:52:2C:F6:53:AB:6C:85:F4:D6:6C:BB:7D:B1
X509v3 Authority Key Identifier:
keyid:26:4E:E8:D2:A3:70:D2:3E:24:11:BD:4A:E3:9F:F3:4A:9D:3F:0F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jk7o0qNw0j4kEb1K45_zSp0_D-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:48:c9:cf:dd:a7:63:bd:d7:0e:6c:bb:c9:61:aa:02:aa:85:
bf:0e:45:45:71:8d:37:41:f9:90:c1:4b:1f:bd:f4:be:87:c1:
d6:83:d2:26:ab:0d:54:de:47:36:83:57:94:5a:8d:be:8c:b0:
e9:93:08:9c:63:80:80:ef:b7:bb:60:2e:44:16:3d:2a:5b:d5:
db:56:e8:7a:38:d5:96:6b:fd:f1:40:44:6e:71:f9:00:e3:f8:
9a:3f:dd:4b:57:39:1a:29:0c:ac:dc:9c:c3:c8:2e:dc:50:e5:
9b:60:5d:2a:58:09:f6:f6:bd:3f:59:82:2e:ab:46:2f:55:3a:
51:ac:9a:02:74:27:97:35:47:3c:15:5f:67:fd:72:59:5d:d8:
5f:2b:ca:50:2b:8f:04:8b:4a:bd:34:0b:a3:ac:96:0c:12:87:
0d:ac:90:12:5b:9c:d1:62:03:22:60:67:cf:54:61:84:d9:3c:
15:61:b2:89:44:59:3d:f2:cc:1f:c6:1c:6d:7e:0f:ec:32:e6:
96:c0:1b:e4:c8:c8:66:d8:36:61:52:c8:55:15:9d:1b:ea:4d:
e8:44:b9:c8:73:b2:e7:80:5d:76:b6:43:f0:2a:5c:bc:27:c6:
6a:c7:a0:bd:08:3b:e8:57:3e:f6:65:a2:12:07:0d:58:5c:84:
40:05:61:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76ya4ZYrYUQhJSOuXv9loMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NGVlOGQyYTM3MGQyM2UyNDExYmQ0YWUzOWZmMzRhOWQz
ZjBmZWUwHhcNMjUxMDE5MTAwMTU1WhcNMjUxMDIwMTAwMTU1WjAzMTEwLwYDVQQD
EygwNDY1OWZjY2QwMjVjNjUyMmNmNjUzYWI2Yzg1ZjRkNjZjYmI3ZGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAup0hInpfFgncFbGDpqtAx8uw5Fy1
hq65SHjSKQHVY6LA/Frd3lgDZHsBNxFepzdfvGfONp1hxVfueDm6cI6h4QRk6wfU
BvQRrNU8xfrNUmkAI0G4InI/YqxFYOK0/4aSWRqTXTuCD4d3hbh1mCmLKkOcCZiD
PwQjmCN/SvEEtMndL8b1jYC2aED4hspLR3aW9EwnCmuKhiulQCSgKwEjknTC6172
X+H3P9zAQR6CYCaQ8xbIHtmXPTMz59r1I4s+cet7uBfTsgpl/uhoZ8v5Ivb7buE5
R/Tnai4rEdpWQg+IxvHK8/UJzrgFWtVOPJG3C4VKEE9BQBA3zS+7kWy1UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFARln8zQJcZSLPZTq2yF9NZsu32xMB8GA1UdIwQY
MBaAFCZO6NKjcNI+JBG9SuOf80qdPw/uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSms3bzBxTncwajRrRWIxSzQ1X3pTcDBfRC00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy83MGUzNDEtNDU2Ni00NWRhLTgyNzMt
ZjU1MWIxYTA0NjJjLzEvSms3bzBxTncwajRrRWIxSzQ1X3pTcDBfRC00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy83MGUzNDEtNDU2Ni00NWRhLTgyNzMtZjU1MWIxYTA0NjJj
LzEvSms3bzBxTncwajRrRWIxSzQ1X3pTcDBfRC00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeEjJz92n
Y73XDmy7yWGqAqqFvw5FRXGNN0H5kMFLH730vofB1oPSJqsNVN5HNoNXlFqNvoyw
6ZMInGOAgO+3u2AuRBY9KlvV21boejjVlmv98UBEbnH5AOP4mj/dS1c5GikMrNyc
w8gu3FDlm2BdKlgJ9va9P1mCLqtGL1U6UayaAnQnlzVHPBVfZ/1yWV3YXyvKUCuP
BItKvTQLo6yWDBKHDayQEluc0WIDImBnz1RhhNk8FWGyiURZPfLMH8YcbX4P7DLm
lsAb5MjIZtg2YVLIVRWdG+pN6ES5yHOy54BddrZD8CpcvCfGasegvQg76Fc+9mWi
EgcNWFyEQAVhNw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:11 2025 by rpki-client