Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.mft
File: j39d3CK0NKz6QNZ-5QsEKQxw27M.mft (raw, json)
Hash identifier: A8tj4PC653+PR1KVF/pKpLbfth1267XuQLveimPGVKA=
Subject key identifier: 54:17:22:43:B3:71:AC:F5:6D:FD:5A:A5:5C:4D:41:5E:78:BB:84:C8
Authority key identifier: 8F:7F:5D:DC:22:B4:34:AC:FA:40:D6:7E:E5:0B:04:29:0C:70:DB:B3
Certificate issuer: /CN=8f7f5ddc22b434acfa40d67ee50b04290c70dbb3
Certificate serial: 0199FBEAB6F00CFAD72D54A81F6CC18FEB81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j39d3CK0NKz6QNZ-5QsEKQxw27M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.mft
Manifest number: 0878
Signing time: Sun 19 Oct 2025 10:01:27 +0000
Manifest this update: Sun 19 Oct 2025 10:01:27 +0000
Manifest next update: Mon 20 Oct 2025 10:01:27 +0000
Files and hashes: 1: j39d3CK0NKz6QNZ-5QsEKQxw27M.crl (hash: rBfZg5AVj9ct7AkzFk8qMe2sDFDTw0/zi2e0rJRFXLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.mft
rsync://rpki.ripe.net/repository/DEFAULT/j39d3CK0NKz6QNZ-5QsEKQxw27M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:b6:f0:0c:fa:d7:2d:54:a8:1f:6c:c1:8f:eb:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7f5ddc22b434acfa40d67ee50b04290c70dbb3
Validity
Not Before: Oct 19 10:01:27 2025 GMT
Not After : Oct 20 10:01:27 2025 GMT
Subject: CN=54172243b371acf56dfd5aa55c4d415e78bb84c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:22:c0:f5:88:6d:aa:92:41:05:d2:bf:ae:57:
fc:26:dd:5a:16:fb:c3:1c:50:f0:fc:de:da:98:a5:
c9:e3:5c:ed:65:c4:35:24:28:42:b2:c2:7d:47:fd:
b1:ea:e8:c2:5b:d0:16:c7:be:2c:3e:af:75:e1:14:
37:d9:cd:96:9b:cd:98:70:9c:30:ed:36:a2:6f:0c:
12:7d:91:60:fc:20:7c:dd:9c:99:30:31:7b:07:b7:
cf:13:ed:a4:6c:bc:3d:06:b8:42:c3:ae:a2:f6:6e:
74:64:5e:6d:56:94:6e:6d:fd:ad:5b:dc:32:68:ff:
17:41:ec:0b:89:14:ea:40:2a:15:af:ad:d8:f2:f2:
5d:72:24:e5:69:60:d3:95:aa:b5:ef:15:a3:25:95:
02:50:c6:08:4f:52:2f:3c:91:84:ce:9c:4b:31:33:
0e:65:e5:4c:3c:c0:12:cd:05:c1:c2:6d:a5:9e:35:
8d:1f:53:89:ac:f9:20:c8:6f:75:3c:7a:76:ba:c1:
ad:6c:44:28:fe:9f:9f:d9:83:4c:b3:29:58:ee:04:
85:70:51:ac:20:2e:1b:4a:8f:21:fc:63:3e:33:59:
fa:fe:c7:89:28:db:67:67:f6:3f:15:5c:e2:d3:6a:
e5:48:44:9a:3b:a4:e9:b6:29:9a:56:e5:2f:87:95:
a9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:17:22:43:B3:71:AC:F5:6D:FD:5A:A5:5C:4D:41:5E:78:BB:84:C8
X509v3 Authority Key Identifier:
keyid:8F:7F:5D:DC:22:B4:34:AC:FA:40:D6:7E:E5:0B:04:29:0C:70:DB:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j39d3CK0NKz6QNZ-5QsEKQxw27M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:77:99:5c:df:25:f0:c2:ab:e6:d7:f4:7d:42:66:1a:bc:22:
70:8e:96:f4:3a:4f:d4:ea:c5:e4:05:11:46:f2:cb:6e:cf:18:
95:f8:c5:30:25:69:9b:e7:4f:de:65:3a:ec:42:a5:06:e9:2e:
d6:71:49:9d:4a:68:6f:d9:64:8d:76:1b:09:4b:f6:d2:b3:a0:
b5:46:a6:c5:5b:72:3c:39:be:b2:14:f1:c1:4f:b4:d7:c1:bd:
59:2b:53:a9:89:ee:b8:29:ad:a9:d1:02:4d:14:4c:59:0e:34:
ba:c9:49:c6:89:85:12:2d:b6:51:f2:dd:28:1a:0f:90:0f:33:
63:94:96:ed:7b:ea:e6:24:1e:5f:48:ce:59:55:b5:4a:5b:0d:
dc:da:17:a0:e4:f1:b4:b2:fb:a7:90:cd:2f:d7:5d:ec:40:a5:
12:26:ce:17:33:d2:87:b6:b3:1a:34:6d:83:35:7c:0f:8b:55:
48:9a:93:d7:c6:fe:05:c3:93:48:6c:ad:e5:cb:d9:d2:f4:a5:
15:4e:2f:f0:bb:d6:19:5c:94:1c:89:a1:7a:a8:a4:d1:37:87:
19:f3:77:ef:e5:f9:ee:8c:7c:ca:b4:d5:4a:86:31:f7:5d:c5:
c3:fc:27:3f:55:7f:14:b3:e7:91:c8:1c:78:a1:2c:fe:c7:3e:
cb:dd:fa:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76rbwDPrXLVSoH2zBj+uBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmN2Y1ZGRjMjJiNDM0YWNmYTQwZDY3ZWU1MGIwNDI5MGM3
MGRiYjMwHhcNMjUxMDE5MTAwMTI3WhcNMjUxMDIwMTAwMTI3WjAzMTEwLwYDVQQD
Eyg1NDE3MjI0M2IzNzFhY2Y1NmRmZDVhYTU1YzRkNDE1ZTc4YmI4NGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiLA9YhtqpJBBdK/rlf8Jt1aFvvD
HFDw/N7amKXJ41ztZcQ1JChCssJ9R/2x6ujCW9AWx74sPq914RQ32c2Wm82YcJww
7TaibwwSfZFg/CB83ZyZMDF7B7fPE+2kbLw9BrhCw66i9m50ZF5tVpRubf2tW9wy
aP8XQewLiRTqQCoVr63Y8vJdciTlaWDTlaq17xWjJZUCUMYIT1IvPJGEzpxLMTMO
ZeVMPMASzQXBwm2lnjWNH1OJrPkgyG91PHp2usGtbEQo/p+f2YNMsylY7gSFcFGs
IC4bSo8h/GM+M1n6/seJKNtnZ/Y/FVzi02rlSESaO6TptimaVuUvh5WpRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQXIkOzcaz1bf1apVxNQV54u4TIMB8GA1UdIwQY
MBaAFI9/XdwitDSs+kDWfuULBCkMcNuzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajM5ZDNDSzBOS3o2UU5aLTVRc0VLUXh3MjdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82OWZkNjktMmMyNy00ODcwLTljYzkt
MzJkYWM0YjE0MGVkLzEvajM5ZDNDSzBOS3o2UU5aLTVRc0VLUXh3MjdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS82OWZkNjktMmMyNy00ODcwLTljYzktMzJkYWM0YjE0MGVk
LzEvajM5ZDNDSzBOS3o2UU5aLTVRc0VLUXh3MjdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmXeZXN8l
8MKr5tf0fUJmGrwicI6W9DpP1OrF5AURRvLLbs8YlfjFMCVpm+dP3mU67EKlBuku
1nFJnUpob9lkjXYbCUv20rOgtUamxVtyPDm+shTxwU+018G9WStTqYnuuCmtqdEC
TRRMWQ40uslJxomFEi22UfLdKBoPkA8zY5SW7Xvq5iQeX0jOWVW1SlsN3NoXoOTx
tLL7p5DNL9dd7EClEibOFzPSh7azGjRtgzV8D4tVSJqT18b+BcOTSGyt5cvZ0vSl
FU4v8LvWGVyUHImheqik0TeHGfN37+X57ox8yrTVSoYx913Fw/wnP1V/FLPnkcgc
eKEs/sc+y936PA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:28 2025 by rpki-client