Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft
File: JUYEmZh5H-hXcDE7pmDEElGSmAs.mft (raw, json)
Hash identifier: T4kE5qV8MzZeaTgDd14d5kEP7FxyfDE3XgMAXE1nfHo=
Subject key identifier: CD:A1:F9:36:4B:57:7B:86:65:40:E4:FD:43:7D:0C:A5:B1:65:6C:A9
Authority key identifier: 25:46:04:99:98:79:1F:E8:57:70:31:3B:A6:60:C4:12:51:92:98:0B
Certificate issuer: /CN=2546049998791fe85770313ba660c4125192980b
Certificate serial: 0199FAD7AB8D5ABB34BC438DF6965ECB229D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUYEmZh5H-hXcDE7pmDEElGSmAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft
Manifest number: 150D
Signing time: Sun 19 Oct 2025 05:01:01 +0000
Manifest this update: Sun 19 Oct 2025 05:01:01 +0000
Manifest next update: Mon 20 Oct 2025 05:01:01 +0000
Files and hashes: 1: JUYEmZh5H-hXcDE7pmDEElGSmAs.crl (hash: wGjKoQe/4vCTaNZBZY30MGL07sHGKf9U1hETj0nsWto=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUYEmZh5H-hXcDE7pmDEElGSmAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:ab:8d:5a:bb:34:bc:43:8d:f6:96:5e:cb:22:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2546049998791fe85770313ba660c4125192980b
Validity
Not Before: Oct 19 05:01:01 2025 GMT
Not After : Oct 20 05:01:01 2025 GMT
Subject: CN=cda1f9364b577b866540e4fd437d0ca5b1656ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ef:c7:a7:47:51:2d:e3:c6:d6:ad:89:64:d4:
c8:99:52:04:28:d7:f3:9f:18:ce:ed:a3:89:d8:b3:
80:0a:80:fc:0d:52:8d:ba:27:08:a7:ab:67:12:6b:
c8:4d:09:3f:ba:ec:3f:9e:66:51:25:01:ec:42:6a:
93:52:ec:a1:b6:d0:2a:5b:1e:f6:da:db:08:43:f5:
09:49:2a:d5:94:c3:32:6f:be:b8:1c:f1:58:64:e0:
22:b1:d0:2a:74:49:a9:e9:11:ae:4a:6a:d1:3c:41:
bd:26:79:f8:f4:03:18:cb:92:eb:aa:80:b8:d5:44:
70:01:73:c7:73:2b:7e:72:90:ff:22:d4:0b:c8:55:
e4:1f:0e:78:30:2f:76:ae:15:d1:f3:e4:c8:60:62:
2e:a9:35:5f:79:3c:64:82:ef:a4:59:08:2c:53:b8:
81:63:a0:0f:1f:e7:70:0c:37:87:ab:4d:78:a0:36:
eb:41:34:8b:86:38:4d:b9:ec:b5:27:26:db:d5:e9:
2b:9d:d9:af:52:5b:bc:d7:db:44:bf:e0:ff:c3:4a:
7e:60:3d:b9:6b:1b:3a:73:7d:10:4f:05:60:0c:36:
7e:22:b8:88:c8:25:c6:1c:3a:66:67:c0:08:80:7a:
53:41:d9:2b:8c:ab:36:ba:2b:1a:29:3e:67:78:f5:
ff:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A1:F9:36:4B:57:7B:86:65:40:E4:FD:43:7D:0C:A5:B1:65:6C:A9
X509v3 Authority Key Identifier:
keyid:25:46:04:99:98:79:1F:E8:57:70:31:3B:A6:60:C4:12:51:92:98:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUYEmZh5H-hXcDE7pmDEElGSmAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/93dec0-987b-4707-9f7a-1c51b333dffb/1/JUYEmZh5H-hXcDE7pmDEElGSmAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:2b:b2:ba:ff:cb:74:6f:bd:f3:21:ed:d2:08:04:10:1a:e0:
d8:77:d0:2b:99:e3:22:cc:f9:8c:14:69:9b:83:35:38:23:70:
50:05:ae:d4:a7:80:bc:16:a6:5c:b6:2f:17:9b:41:1b:ec:e6:
61:fd:45:1b:0a:1d:c4:9c:d6:52:05:49:52:e9:eb:05:0f:0f:
1c:b3:92:22:e1:d1:59:e3:7c:23:8c:75:8a:8c:12:30:f2:c4:
62:b2:d7:09:1f:6c:c0:35:1b:ef:20:ec:89:ba:7a:59:11:df:
58:da:aa:1b:aa:27:10:de:35:61:54:87:3b:34:de:72:18:28:
0d:7a:2e:e4:f1:06:4f:66:17:71:a6:36:76:ef:9a:10:ad:ae:
a7:a2:18:59:80:19:b5:e2:c8:9b:2c:f1:f9:c2:cb:91:bb:46:
51:7d:59:86:32:ab:7f:63:67:86:f7:78:8e:4c:9e:14:fb:ee:
1e:da:fd:50:0c:aa:6a:dd:a1:ab:ca:7b:3e:4e:17:2f:dc:73:
df:5c:af:a6:95:d9:fb:b9:cf:f2:c5:1e:2a:87:64:ea:90:8f:
ed:52:19:76:e9:8d:4e:c3:b4:ad:e8:3d:db:05:b6:17:01:fc:
fb:34:fd:81:22:8c:87:bb:01:d3:5f:83:e1:96:57:67:2b:b8:
06:17:d5:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn616uNWrs0vEON9pZeyyKdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NDYwNDk5OTg3OTFmZTg1NzcwMzEzYmE2NjBjNDEyNTE5
Mjk4MGIwHhcNMjUxMDE5MDUwMTAxWhcNMjUxMDIwMDUwMTAxWjAzMTEwLwYDVQQD
EyhjZGExZjkzNjRiNTc3Yjg2NjU0MGU0ZmQ0MzdkMGNhNWIxNjU2Y2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2u/Hp0dRLePG1q2JZNTImVIEKNfz
nxjO7aOJ2LOACoD8DVKNuicIp6tnEmvITQk/uuw/nmZRJQHsQmqTUuyhttAqWx72
2tsIQ/UJSSrVlMMyb764HPFYZOAisdAqdEmp6RGuSmrRPEG9Jnn49AMYy5LrqoC4
1URwAXPHcyt+cpD/ItQLyFXkHw54MC92rhXR8+TIYGIuqTVfeTxkgu+kWQgsU7iB
Y6APH+dwDDeHq014oDbrQTSLhjhNuey1Jybb1ekrndmvUlu819tEv+D/w0p+YD25
axs6c30QTwVgDDZ+IriIyCXGHDpmZ8AIgHpTQdkrjKs2uisaKT5nePX/lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM2h+TZLV3uGZUDk/UN9DKWxZWypMB8GA1UdIwQY
MBaAFCVGBJmYeR/oV3AxO6ZgxBJRkpgLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlVZRW1aaDVILWhYY0RFN3BtREVFbEdTbUFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC85M2RlYzAtOTg3Yi00NzA3LTlmN2Et
MWM1MWIzMzNkZmZiLzEvSlVZRW1aaDVILWhYY0RFN3BtREVFbEdTbUFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC85M2RlYzAtOTg3Yi00NzA3LTlmN2EtMWM1MWIzMzNkZmZi
LzEvSlVZRW1aaDVILWhYY0RFN3BtREVFbEdTbUFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaSuyuv/L
dG+98yHt0ggEEBrg2HfQK5njIsz5jBRpm4M1OCNwUAWu1KeAvBamXLYvF5tBG+zm
Yf1FGwodxJzWUgVJUunrBQ8PHLOSIuHRWeN8I4x1iowSMPLEYrLXCR9swDUb7yDs
ibp6WRHfWNqqG6onEN41YVSHOzTechgoDXou5PEGT2YXcaY2du+aEK2up6IYWYAZ
teLImyzx+cLLkbtGUX1ZhjKrf2Nnhvd4jkyeFPvuHtr9UAyqat2hq8p7Pk4XL9xz
31yvppXZ+7nP8sUeKodk6pCP7VIZdumNTsO0reg92wW2FwH8+zT9gSKMh7sB01+D
4ZZXZyu4BhfVSQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:03 2025 by rpki-client