Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft
File: Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft (raw, json)
Hash identifier: lGwzzQUMFKNWwaaqY94etekhKadZGmFSojIR2oJ/V9k=
Subject key identifier: 62:A2:43:92:81:84:B7:8D:67:A6:D6:C3:01:4D:3E:6A:CD:6B:CE:6E
Authority key identifier: 26:4E:E8:D2:A3:70:D2:3E:24:11:BD:4A:E3:9F:F3:4A:9D:3F:0F:EE
Certificate issuer: /CN=264ee8d2a370d23e2411bd4ae39ff34a9d3f0fee
Certificate serial: 0198D65FFB94137CD3F0B631AE1E6EC97547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jk7o0qNw0j4kEb1K45_zSp0_D-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 10:01:11 +0000
Manifest this update: Sat 23 Aug 2025 10:01:11 +0000
Manifest next update: Sun 24 Aug 2025 10:01:11 +0000
Files and hashes: 1: Jk7o0qNw0j4kEb1K45_zSp0_D-4.crl (hash: 9xhfTZAhkCSBTJGZEPQCvZd1VGTQYXRoWgDq5Eg8ZRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jk7o0qNw0j4kEb1K45_zSp0_D-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:fb:94:13:7c:d3:f0:b6:31:ae:1e:6e:c9:75:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=264ee8d2a370d23e2411bd4ae39ff34a9d3f0fee
Validity
Not Before: Aug 23 10:01:11 2025 GMT
Not After : Aug 24 10:01:11 2025 GMT
Subject: CN=62a243928184b78d67a6d6c3014d3e6acd6bce6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:71:26:f8:44:61:1b:70:3d:23:b3:e2:c4:85:
75:91:53:4c:f4:c0:1c:37:1d:85:9b:49:63:e6:cf:
33:b8:7e:bb:46:1c:e9:82:0c:30:e8:0d:bf:a1:35:
fe:e3:b0:70:c1:13:c5:6b:31:78:40:46:ac:cd:02:
92:2c:63:c8:2c:dc:20:5b:12:c8:94:43:9b:f8:af:
07:be:3f:e5:61:48:0a:9e:91:27:e3:fd:90:a7:11:
20:53:2a:7a:4e:b0:be:fd:ea:04:f2:3c:d5:45:3a:
67:37:4d:97:c5:c0:6b:04:1a:1e:6e:96:f8:cd:06:
6a:60:fc:11:e6:13:3b:5b:51:fb:2d:8a:57:f5:4a:
f8:59:b4:e4:5f:86:40:3d:7d:f8:c7:0f:d2:f7:40:
d5:16:c2:3a:9a:30:4d:e2:bd:fb:fc:c1:57:56:3e:
69:ac:80:bd:12:84:d9:06:6f:ff:2d:e9:df:a4:c0:
56:47:b8:53:38:85:3b:04:37:40:ee:b9:6d:7c:3e:
a9:7b:cd:21:69:b5:94:fe:8c:10:40:8d:12:1c:8a:
d4:c1:eb:e3:3d:f5:be:1c:be:da:cd:aa:35:8c:82:
7d:4a:f3:7c:66:2f:ff:6e:4c:3b:0f:1b:9f:41:b2:
40:94:a5:95:e6:53:eb:29:a8:4d:32:85:d9:f6:c2:
82:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A2:43:92:81:84:B7:8D:67:A6:D6:C3:01:4D:3E:6A:CD:6B:CE:6E
X509v3 Authority Key Identifier:
keyid:26:4E:E8:D2:A3:70:D2:3E:24:11:BD:4A:E3:9F:F3:4A:9D:3F:0F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jk7o0qNw0j4kEb1K45_zSp0_D-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/70e341-4566-45da-8273-f551b1a0462c/1/Jk7o0qNw0j4kEb1K45_zSp0_D-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e8:a1:bc:4c:8d:28:ea:43:75:57:ea:f0:6e:76:4c:8f:4d:
de:76:d0:42:dd:ed:6e:fc:6c:5b:9c:e0:1a:4d:d9:00:0e:95:
6d:fb:03:0e:1c:41:97:5c:54:81:dc:4a:95:0a:6f:82:69:89:
71:84:02:2e:6d:45:73:93:f2:8b:3c:4c:b7:b8:1f:ba:90:33:
90:02:b4:c9:c0:d3:ea:b3:85:62:77:7c:c7:dd:39:57:41:e7:
e0:81:a0:16:c1:b8:a0:0a:2f:c6:f6:0f:38:7e:f4:c7:f0:74:
f1:c1:5d:65:d4:df:5b:ae:d8:00:41:84:33:12:24:f9:49:f8:
2b:9a:b7:2b:b4:51:e2:94:bc:74:80:5d:6e:90:b7:75:66:f0:
49:2f:14:52:7f:98:e4:1b:dc:45:cd:44:10:e2:52:6e:5c:64:
31:69:fa:6c:f1:02:14:de:06:98:57:1b:4d:89:dc:4f:8a:fb:
09:af:9b:80:49:7a:55:09:c9:a6:a6:be:ad:ae:53:5d:5d:a8:
20:c8:7e:d6:d8:23:43:29:e0:46:52:fd:88:e2:36:35:58:47:
c0:1f:75:98:a4:f0:b4:7a:71:c1:13:a6:c9:64:eb:cf:49:13:
84:7a:34:c8:c9:44:4e:63:9d:35:e1:c4:a0:d5:b3:97:30:66:
79:2e:af:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX/uUE3zT8LYxrh5uyXVHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NGVlOGQyYTM3MGQyM2UyNDExYmQ0YWUzOWZmMzRhOWQz
ZjBmZWUwHhcNMjUwODIzMTAwMTExWhcNMjUwODI0MTAwMTExWjAzMTEwLwYDVQQD
Eyg2MmEyNDM5MjgxODRiNzhkNjdhNmQ2YzMwMTRkM2U2YWNkNmJjZTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3Em+ERhG3A9I7PixIV1kVNM9MAc
Nx2Fm0lj5s8zuH67Rhzpggww6A2/oTX+47BwwRPFazF4QEaszQKSLGPILNwgWxLI
lEOb+K8Hvj/lYUgKnpEn4/2QpxEgUyp6TrC+/eoE8jzVRTpnN02XxcBrBBoebpb4
zQZqYPwR5hM7W1H7LYpX9Ur4WbTkX4ZAPX34xw/S90DVFsI6mjBN4r37/MFXVj5p
rIC9EoTZBm//LenfpMBWR7hTOIU7BDdA7rltfD6pe80habWU/owQQI0SHIrUwevj
PfW+HL7azao1jIJ9SvN8Zi//bkw7DxufQbJAlKWV5lPrKahNMoXZ9sKC9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKiQ5KBhLeNZ6bWwwFNPmrNa85uMB8GA1UdIwQY
MBaAFCZO6NKjcNI+JBG9SuOf80qdPw/uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSms3bzBxTncwajRrRWIxSzQ1X3pTcDBfRC00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy83MGUzNDEtNDU2Ni00NWRhLTgyNzMt
ZjU1MWIxYTA0NjJjLzEvSms3bzBxTncwajRrRWIxSzQ1X3pTcDBfRC00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy83MGUzNDEtNDU2Ni00NWRhLTgyNzMtZjU1MWIxYTA0NjJj
LzEvSms3bzBxTncwajRrRWIxSzQ1X3pTcDBfRC00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATeihvEyN
KOpDdVfq8G52TI9N3nbQQt3tbvxsW5zgGk3ZAA6VbfsDDhxBl1xUgdxKlQpvgmmJ
cYQCLm1Fc5PyizxMt7gfupAzkAK0ycDT6rOFYnd8x905V0Hn4IGgFsG4oAovxvYP
OH70x/B08cFdZdTfW67YAEGEMxIk+Un4K5q3K7RR4pS8dIBdbpC3dWbwSS8UUn+Y
5BvcRc1EEOJSblxkMWn6bPECFN4GmFcbTYncT4r7Ca+bgEl6VQnJpqa+ra5TXV2o
IMh+1tgjQyngRlL9iOI2NVhHwB91mKTwtHpxwROmyWTrz0kThHo0yMlETmOdNeHE
oNWzlzBmeS6vhQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:32:40 2025 by rpki-client