Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
File: JzWNbTPibSr4Q9WB3PacDREKneg.mft (raw, json)
Hash identifier: 2vZnVObgDUMxrdNabBYWK2RlYbUBCZQY/7HMbgctUUI=
Subject key identifier: E3:5C:32:A0:A2:F8:1E:3C:8B:43:D8:52:CB:71:D6:4F:E5:60:B3:75
Authority key identifier: 27:35:8D:6D:33:E2:6D:2A:F8:43:D5:81:DC:F6:9C:0D:11:0A:9D:E8
Certificate issuer: /CN=27358d6d33e26d2af843d581dcf69c0d110a9de8
Certificate serial: 0198D7059845A8899B51581AC290282BEFE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
Manifest number: 0264
Signing time: Sat 23 Aug 2025 13:02:04 +0000
Manifest this update: Sat 23 Aug 2025 13:02:04 +0000
Manifest next update: Sun 24 Aug 2025 13:02:04 +0000
Files and hashes: 1: JzWNbTPibSr4Q9WB3PacDREKneg.crl (hash: s/SteYrpgJVavwknkmrufOMvame6cd48fve0IMdgniM=)
2: xCvl2MPRqLFevw92K1xWqEyP8xM.roa (hash: x5lJC5gSbKWJztGnWxiyT9yj/ffbvJ91buVaYTLqpME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:98:45:a8:89:9b:51:58:1a:c2:90:28:2b:ef:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27358d6d33e26d2af843d581dcf69c0d110a9de8
Validity
Not Before: Aug 23 13:02:04 2025 GMT
Not After : Aug 24 13:02:04 2025 GMT
Subject: CN=e35c32a0a2f81e3c8b43d852cb71d64fe560b375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:da:95:37:be:a6:01:fa:88:75:48:e9:38:c4:
93:37:68:a6:ff:ac:f7:77:a7:60:2a:93:2e:c7:7e:
b4:09:cd:9b:74:2c:93:c6:90:98:e1:67:c3:55:18:
0b:6c:ae:5e:c9:ed:1d:22:2f:12:66:e7:97:96:25:
3b:4c:fb:87:2a:97:d8:09:66:a0:39:b3:81:c2:77:
84:c1:8e:6b:0f:c7:35:29:0d:91:9e:ad:47:a8:e7:
b0:8b:75:61:f8:c3:a2:ea:79:ea:c6:e3:a4:cb:7b:
e4:b4:c3:f1:82:35:fa:30:f2:94:3c:54:c0:e5:99:
5c:64:fc:55:c7:7a:04:ab:7e:43:bf:f6:73:4c:9b:
e5:7b:6a:88:f7:71:b0:ad:54:a1:e0:83:ca:dc:45:
8c:b5:b2:ea:5f:44:cd:16:8f:54:6c:23:af:c4:1c:
4c:99:c2:f1:72:eb:3c:f7:27:a4:ff:76:db:f1:12:
87:6f:b5:92:4a:ac:59:14:17:06:c7:e7:c4:64:85:
67:2d:77:45:81:42:2d:83:7c:10:71:e7:2d:22:a3:
60:35:a1:b2:01:08:af:0d:f4:fe:3b:26:08:63:82:
07:75:68:48:57:38:e1:4f:0b:cb:42:50:68:e5:04:
7f:c4:0d:ec:d6:2f:f6:39:18:80:c5:ab:b3:44:8b:
ab:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:5C:32:A0:A2:F8:1E:3C:8B:43:D8:52:CB:71:D6:4F:E5:60:B3:75
X509v3 Authority Key Identifier:
keyid:27:35:8D:6D:33:E2:6D:2A:F8:43:D5:81:DC:F6:9C:0D:11:0A:9D:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:28:b4:e7:6e:86:4f:b7:0f:a5:3e:24:d8:1a:37:96:e0:cf:
b8:e4:9a:ac:2b:51:9b:a4:5e:4c:f8:f5:cb:70:0f:4b:2d:9e:
99:de:ec:ed:88:43:66:47:0f:38:34:52:3d:5c:09:fa:e5:0f:
72:5d:46:24:a6:ba:0a:6d:47:d8:0f:56:17:4a:af:8d:dc:c5:
ad:3e:9a:c5:1e:f2:53:bd:4b:38:3d:55:93:d6:9b:47:a6:1d:
24:ce:cf:cb:44:23:9d:6a:5f:0c:fd:58:40:8f:b2:07:bc:3c:
e1:ca:09:43:57:36:27:60:49:49:df:16:14:7c:97:3b:02:ab:
91:67:32:be:98:f9:58:8c:87:b9:e4:00:05:e4:77:77:68:21:
42:35:a0:3d:21:93:8d:72:4b:31:f4:01:d1:70:90:91:71:54:
89:aa:b1:23:21:41:33:04:10:27:6f:ca:08:91:cd:72:f7:17:
b1:20:dd:c4:62:0d:49:f2:d6:df:26:ff:9c:3c:4a:09:6a:69:
9a:de:81:ce:b3:6e:58:4b:d0:64:cc:ea:43:f6:1d:a4:96:2b:
1c:f4:7d:a0:77:7b:c6:e0:8c:2c:df:38:b3:01:4b:79:a5:d5:
a2:e5:8c:2b:e5:9e:90:43:68:de:28:f3:a5:5b:68:71:5e:49:
9e:2e:81:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXBZhFqImbUVgawpAoK+/jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MzU4ZDZkMzNlMjZkMmFmODQzZDU4MWRjZjY5YzBkMTEw
YTlkZTgwHhcNMjUwODIzMTMwMjA0WhcNMjUwODI0MTMwMjA0WjAzMTEwLwYDVQQD
EyhlMzVjMzJhMGEyZjgxZTNjOGI0M2Q4NTJjYjcxZDY0ZmU1NjBiMzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tqVN76mAfqIdUjpOMSTN2im/6z3
d6dgKpMux360Cc2bdCyTxpCY4WfDVRgLbK5eye0dIi8SZueXliU7TPuHKpfYCWag
ObOBwneEwY5rD8c1KQ2Rnq1HqOewi3Vh+MOi6nnqxuOky3vktMPxgjX6MPKUPFTA
5ZlcZPxVx3oEq35Dv/ZzTJvle2qI93GwrVSh4IPK3EWMtbLqX0TNFo9UbCOvxBxM
mcLxcus89yek/3bb8RKHb7WSSqxZFBcGx+fEZIVnLXdFgUItg3wQcectIqNgNaGy
AQivDfT+OyYIY4IHdWhIVzjhTwvLQlBo5QR/xA3s1i/2ORiAxauzRIurfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONcMqCi+B48i0PYUstx1k/lYLN1MB8GA1UdIwQY
MBaAFCc1jW0z4m0q+EPVgdz2nA0RCp3oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnpXTmJUUGliU3I0UTlXQjNQYWNEUkVLbmVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mYzE4ZjMtYzBkYi00Y2QyLWEwODMt
NDI2ZDlmZjIwN2QxLzEvSnpXTmJUUGliU3I0UTlXQjNQYWNEUkVLbmVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mYzE4ZjMtYzBkYi00Y2QyLWEwODMtNDI2ZDlmZjIwN2Qx
LzEvSnpXTmJUUGliU3I0UTlXQjNQYWNEUkVLbmVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmyi0526G
T7cPpT4k2Bo3luDPuOSarCtRm6ReTPj1y3APSy2emd7s7YhDZkcPODRSPVwJ+uUP
cl1GJKa6Cm1H2A9WF0qvjdzFrT6axR7yU71LOD1Vk9abR6YdJM7Py0QjnWpfDP1Y
QI+yB7w84coJQ1c2J2BJSd8WFHyXOwKrkWcyvpj5WIyHueQABeR3d2ghQjWgPSGT
jXJLMfQB0XCQkXFUiaqxIyFBMwQQJ2/KCJHNcvcXsSDdxGINSfLW3yb/nDxKCWpp
mt6BzrNuWEvQZMzqQ/YdpJYrHPR9oHd7xuCMLN84swFLeaXVouWMK+WekENo3ijz
pVtocV5Jni6BOA==
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:22:15 2025 by rpki-client