Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft
File: jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft (raw, json)
Hash identifier: Iijv7EdUsVoRo4/UidgPzVS9r/irJzlzpc6SbH1fsDM=
Subject key identifier: FA:28:77:E1:B8:65:F6:9F:D7:C8:C0:67:D3:9D:2D:3F:F5:0E:D0:9D
Authority key identifier: 8C:DA:93:A7:02:F0:3D:60:34:B0:2C:46:37:21:2A:74:3A:47:2C:8A
Certificate issuer: /CN=8cda93a702f03d6034b02c4637212a743a472c8a
Certificate serial: 0198D706007D5CE2C89CD834625D578A95A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNqTpwLwPWA0sCxGNyEqdDpHLIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 13:02:31 +0000
Manifest this update: Sat 23 Aug 2025 13:02:31 +0000
Manifest next update: Sun 24 Aug 2025 13:02:31 +0000
Files and hashes: 1: jNqTpwLwPWA0sCxGNyEqdDpHLIo.crl (hash: daEGqSX1CT+UiPp6+fiPVYqTbTv5DVROeXZPlE77U3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNqTpwLwPWA0sCxGNyEqdDpHLIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:00:7d:5c:e2:c8:9c:d8:34:62:5d:57:8a:95:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cda93a702f03d6034b02c4637212a743a472c8a
Validity
Not Before: Aug 23 13:02:31 2025 GMT
Not After : Aug 24 13:02:31 2025 GMT
Subject: CN=fa2877e1b865f69fd7c8c067d39d2d3ff50ed09d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d1:e4:4b:3c:e0:51:f9:7e:7a:c7:cf:df:4b:
22:11:d5:27:7a:f0:d3:12:a5:da:03:28:f0:73:05:
c1:81:c3:e5:b2:04:a6:b8:6d:78:bf:8d:a4:6b:02:
6c:cb:63:51:6d:7d:fd:72:9c:c6:3b:9f:7e:fc:04:
5f:07:00:15:87:17:20:91:a6:f2:0d:d1:c1:f7:33:
c9:11:a9:9e:df:74:b3:fc:b4:19:e2:72:f6:a5:d3:
f3:70:48:4a:da:46:89:ac:e2:a3:ab:70:73:0b:00:
5c:1e:f2:af:a1:9a:a1:e3:e7:b9:79:8e:6c:d4:68:
61:8e:9e:21:18:37:47:75:78:a4:07:85:04:fc:bd:
98:ba:e1:6c:53:a2:3f:99:de:a0:30:38:b8:ae:12:
21:b2:3b:82:65:bb:10:52:74:e1:05:ee:e3:2c:5a:
73:c7:c2:81:ca:e8:d2:8b:fb:f2:42:c6:7e:1b:06:
34:96:82:15:20:dc:d9:d2:23:2c:df:df:88:5d:73:
31:1e:99:7c:6e:9f:4a:71:a4:6d:18:f9:91:e2:11:
56:88:59:d7:2d:b5:5d:68:19:71:21:25:47:d5:93:
0c:b7:0d:60:5b:3e:18:f1:8d:b8:60:64:fa:61:6d:
6b:f9:1b:3a:3b:05:50:da:3a:e7:b3:f9:b2:5d:07:
8b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:28:77:E1:B8:65:F6:9F:D7:C8:C0:67:D3:9D:2D:3F:F5:0E:D0:9D
X509v3 Authority Key Identifier:
keyid:8C:DA:93:A7:02:F0:3D:60:34:B0:2C:46:37:21:2A:74:3A:47:2C:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNqTpwLwPWA0sCxGNyEqdDpHLIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb2f46-030a-4aef-8b60-a4661ee3c9a6/1/jNqTpwLwPWA0sCxGNyEqdDpHLIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:60:de:52:24:f5:2b:cf:12:99:89:7d:4a:2b:41:fe:98:ce:
6e:f8:b6:71:f5:1d:fc:04:c4:c4:7d:b7:9f:b9:50:1a:16:fc:
bf:8b:6e:72:1c:0b:f0:05:f5:22:3b:1a:bc:c6:76:89:6c:55:
70:2b:9e:86:7c:5d:f6:6f:41:3f:6c:54:4e:06:66:0f:69:80:
8f:10:2b:05:e3:d8:ee:a8:52:9f:61:cd:0e:17:01:c2:14:e8:
0e:88:3d:60:aa:b1:73:01:f1:0f:c2:4f:74:6a:7f:fa:6b:1d:
2b:38:9e:ab:72:6b:3d:c4:f1:2a:16:5d:1a:33:19:69:df:b4:
3d:cd:cb:09:05:57:94:5a:c0:c4:22:e3:56:d9:fc:42:45:f5:
30:40:85:da:68:56:b1:84:bc:93:50:86:e2:d5:69:26:59:b3:
d7:25:c9:07:0f:32:28:91:66:af:e4:a6:fb:0e:a5:a2:81:9c:
d1:81:52:35:99:d6:89:8e:07:4c:08:54:7c:1c:f6:3d:d9:7a:
78:39:99:24:1a:4d:4c:a3:d4:83:ce:36:b1:56:a0:fc:44:94:
08:81:18:72:6b:90:e1:6d:30:64:62:6f:4c:9d:b6:e7:e5:0d:
67:d5:93:9d:2e:d6:a6:dc:d9:be:2a:b0:0b:e4:7d:55:3a:34:
07:34:31:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXBgB9XOLInNg0Yl1XipWnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZGE5M2E3MDJmMDNkNjAzNGIwMmM0NjM3MjEyYTc0M2E0
NzJjOGEwHhcNMjUwODIzMTMwMjMxWhcNMjUwODI0MTMwMjMxWjAzMTEwLwYDVQQD
EyhmYTI4NzdlMWI4NjVmNjlmZDdjOGMwNjdkMzlkMmQzZmY1MGVkMDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNHkSzzgUfl+esfP30siEdUnevDT
EqXaAyjwcwXBgcPlsgSmuG14v42kawJsy2NRbX39cpzGO59+/ARfBwAVhxcgkaby
DdHB9zPJEame33Sz/LQZ4nL2pdPzcEhK2kaJrOKjq3BzCwBcHvKvoZqh4+e5eY5s
1Ghhjp4hGDdHdXikB4UE/L2YuuFsU6I/md6gMDi4rhIhsjuCZbsQUnThBe7jLFpz
x8KByujSi/vyQsZ+GwY0loIVINzZ0iMs39+IXXMxHpl8bp9KcaRtGPmR4hFWiFnX
LbVdaBlxISVH1ZMMtw1gWz4Y8Y24YGT6YW1r+Rs6OwVQ2jrns/myXQeLvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPood+G4Zfaf18jAZ9OdLT/1DtCdMB8GA1UdIwQY
MBaAFIzak6cC8D1gNLAsRjchKnQ6RyyKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak5xVHB3THdQV0Ewc0N4R055RXFkRHBITElvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iYjJmNDYtMDMwYS00YWVmLThiNjAt
YTQ2NjFlZTNjOWE2LzEvak5xVHB3THdQV0Ewc0N4R055RXFkRHBITElvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9iYjJmNDYtMDMwYS00YWVmLThiNjAtYTQ2NjFlZTNjOWE2
LzEvak5xVHB3THdQV0Ewc0N4R055RXFkRHBITElvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe2DeUiT1
K88SmYl9SitB/pjObvi2cfUd/ATExH23n7lQGhb8v4tuchwL8AX1IjsavMZ2iWxV
cCuehnxd9m9BP2xUTgZmD2mAjxArBePY7qhSn2HNDhcBwhToDog9YKqxcwHxD8JP
dGp/+msdKzieq3JrPcTxKhZdGjMZad+0Pc3LCQVXlFrAxCLjVtn8QkX1MECF2mhW
sYS8k1CG4tVpJlmz1yXJBw8yKJFmr+Sm+w6looGc0YFSNZnWiY4HTAhUfBz2Pdl6
eDmZJBpNTKPUg842sVag/ESUCIEYcmuQ4W0wZGJvTJ225+UNZ9WTnS7WptzZviqw
C+R9VTo0BzQxzA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:39:16 2025 by rpki-client