
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
File: jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft (raw, json)
Hash identifier: FhDFj09/GJiElLZkvD4dVOGZbZ1rZUuc2CyczX6lS+E=
Subject key identifier: 74:C1:6A:1A:8D:B5:68:E3:16:05:AB:F9:07:7A:56:E1:D7:B8:97:C8
Authority key identifier: 8C:1E:72:0F:D7:5D:D6:01:34:5B:98:76:AE:A7:F9:1A:B4:46:D4:7F
Certificate issuer: /CN=8c1e720fd75dd601345b9876aea7f91ab446d47f
Certificate serial: 0198D65FD3A97E7EFFB6BF0E26EE361EC062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
Manifest number: 0A3B
Signing time: Sat 23 Aug 2025 10:01:00 +0000
Manifest this update: Sat 23 Aug 2025 10:01:00 +0000
Manifest next update: Sun 24 Aug 2025 10:01:00 +0000
Files and hashes: 1: jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl (hash: ibEviarXtYDgIk3rHpcIwydsiZY7VMPfSH0ECWI2vbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:d3:a9:7e:7e:ff:b6:bf:0e:26:ee:36:1e:c0:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c1e720fd75dd601345b9876aea7f91ab446d47f
Validity
Not Before: Aug 23 10:01:00 2025 GMT
Not After : Aug 24 10:01:00 2025 GMT
Subject: CN=74c16a1a8db568e31605abf9077a56e1d7b897c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:43:81:0a:f8:5b:b3:1c:54:29:7c:15:60:21:
45:f6:ac:d1:5f:81:95:0a:e4:cc:96:c5:72:78:99:
b4:b8:86:29:74:b3:69:dc:25:4c:c6:ba:55:cd:5e:
82:5e:0d:2a:b3:87:cb:1d:aa:ec:7f:4a:9d:c1:fe:
82:67:21:7e:29:21:f0:dc:43:11:fc:27:71:1b:aa:
74:46:46:99:54:8a:98:f5:e4:e6:88:db:5e:3e:c4:
cb:94:63:be:23:5f:45:29:5a:8b:7a:44:41:06:ef:
4b:83:3a:a9:1b:42:7f:a0:cb:5d:5b:70:9e:37:3b:
91:c9:49:b3:16:81:c1:c9:2c:f3:da:2e:a9:1c:5f:
fe:11:de:39:94:2a:3b:6a:0c:77:d7:7c:cf:19:83:
c8:f3:0b:23:c2:52:07:e9:03:18:d8:b7:e7:70:df:
5c:ad:1e:22:04:f4:77:31:14:df:93:3a:c9:39:2a:
0d:98:6e:c1:3f:d9:10:a9:5f:67:c5:a0:e4:81:f7:
ca:15:86:12:c7:23:40:d2:51:a1:f4:19:1f:be:99:
8c:36:9c:cb:2f:22:6e:94:63:67:9f:38:5a:48:77:
de:36:05:21:fc:6c:f8:c3:2a:12:1b:f5:15:23:96:
88:5f:1e:78:00:d2:34:14:71:50:f7:86:7d:99:7a:
4f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C1:6A:1A:8D:B5:68:E3:16:05:AB:F9:07:7A:56:E1:D7:B8:97:C8
X509v3 Authority Key Identifier:
keyid:8C:1E:72:0F:D7:5D:D6:01:34:5B:98:76:AE:A7:F9:1A:B4:46:D4:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jB5yD9dd1gE0W5h2rqf5GrRG1H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4c2ebc-d795-4610-82ef-491fe7acc1a9/1/jB5yD9dd1gE0W5h2rqf5GrRG1H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f0:ed:93:30:14:c5:02:62:93:40:59:1e:be:f5:16:e5:19:
c3:7d:55:36:2c:20:cf:d1:9f:b0:9e:71:0c:d6:59:92:a2:f3:
28:5e:ea:d6:27:8a:3a:94:2a:f5:16:ca:fa:6d:e6:87:e9:50:
89:89:42:92:08:45:7c:b7:18:da:c4:99:95:8b:1c:2d:7c:8d:
a8:8e:75:f7:59:de:d3:f3:1c:64:24:a5:2b:34:93:42:30:a3:
dd:d8:24:49:9d:5b:4b:15:fe:b9:40:de:40:7c:20:d5:1b:cc:
e0:9c:90:d9:42:23:50:9e:45:a1:a6:8d:59:01:8a:3c:ec:11:
83:d2:ec:b3:f8:97:a7:2c:dc:48:23:2d:0e:6b:34:4f:c4:99:
92:20:b8:4e:2b:da:58:b3:73:fb:87:19:9d:66:16:4b:b8:a9:
a0:53:ac:23:cd:01:f5:b3:a0:c7:b1:bc:24:03:99:d7:31:00:
3c:e5:76:35:5a:dc:fd:60:ea:22:1c:7a:22:bc:32:48:3a:8c:
ad:be:2d:bb:e8:31:dc:15:d5:53:81:bc:0a:c2:81:23:b2:ab:
cb:79:0b:9a:b9:bc:55:82:ef:1f:71:26:75:4b:d5:42:e7:fc:
a2:ae:8b:cd:a3:dc:38:89:5b:2c:fd:00:75:e0:a6:6b:2f:81:
dc:54:b6:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX9Opfn7/tr8OJu42HsBiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMWU3MjBmZDc1ZGQ2MDEzNDViOTg3NmFlYTdmOTFhYjQ0
NmQ0N2YwHhcNMjUwODIzMTAwMTAwWhcNMjUwODI0MTAwMTAwWjAzMTEwLwYDVQQD
Eyg3NGMxNmExYThkYjU2OGUzMTYwNWFiZjkwNzdhNTZlMWQ3Yjg5N2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30OBCvhbsxxUKXwVYCFF9qzRX4GV
CuTMlsVyeJm0uIYpdLNp3CVMxrpVzV6CXg0qs4fLHarsf0qdwf6CZyF+KSHw3EMR
/CdxG6p0RkaZVIqY9eTmiNtePsTLlGO+I19FKVqLekRBBu9LgzqpG0J/oMtdW3Ce
NzuRyUmzFoHBySzz2i6pHF/+Ed45lCo7agx313zPGYPI8wsjwlIH6QMY2LfncN9c
rR4iBPR3MRTfkzrJOSoNmG7BP9kQqV9nxaDkgffKFYYSxyNA0lGh9BkfvpmMNpzL
LyJulGNnnzhaSHfeNgUh/Gz4wyoSG/UVI5aIXx54ANI0FHFQ94Z9mXpP2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTBahqNtWjjFgWr+Qd6VuHXuJfIMB8GA1UdIwQY
MBaAFIwecg/XXdYBNFuYdq6n+Rq0RtR/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakI1eUQ5ZGQxZ0UwVzVoMnJxZjVHclJHMUg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy80YzJlYmMtZDc5NS00NjEwLTgyZWYt
NDkxZmU3YWNjMWE5LzEvakI1eUQ5ZGQxZ0UwVzVoMnJxZjVHclJHMUg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy80YzJlYmMtZDc5NS00NjEwLTgyZWYtNDkxZmU3YWNjMWE5
LzEvakI1eUQ5ZGQxZ0UwVzVoMnJxZjVHclJHMUg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjPDtkzAU
xQJik0BZHr71FuUZw31VNiwgz9GfsJ5xDNZZkqLzKF7q1ieKOpQq9RbK+m3mh+lQ
iYlCkghFfLcY2sSZlYscLXyNqI5191ne0/McZCSlKzSTQjCj3dgkSZ1bSxX+uUDe
QHwg1RvM4JyQ2UIjUJ5FoaaNWQGKPOwRg9Lss/iXpyzcSCMtDms0T8SZkiC4Tiva
WLNz+4cZnWYWS7ipoFOsI80B9bOgx7G8JAOZ1zEAPOV2NVrc/WDqIhx6IrwySDqM
rb4tu+gx3BXVU4G8CsKBI7Kry3kLmrm8VYLvH3EmdUvVQuf8oq6LzaPcOIlbLP0A
deCmay+B3FS2lQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:23 2025 by rpki-client