Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
File: sjQvyZcw8qNNCe5LXukheHVs1NE.mft (raw, json)
Hash identifier: /aQ4RHu6sthvmZjhLQQPXzz8eGQFAt/AKgl+PmbGSi0=
Subject key identifier: A2:60:C0:1A:44:69:59:4A:62:97:64:83:E2:5A:04:45:40:99:A0:8E
Authority key identifier: B2:34:2F:C9:97:30:F2:A3:4D:09:EE:4B:5E:E9:21:78:75:6C:D4:D1
Certificate issuer: /CN=b2342fc99730f2a34d09ee4b5ee92178756cd4d1
Certificate serial: 0198D660C39A4C1090C014824EEC679B563D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjQvyZcw8qNNCe5LXukheHVs1NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
Manifest number: 06F6
Signing time: Sat 23 Aug 2025 10:02:02 +0000
Manifest this update: Sat 23 Aug 2025 10:02:02 +0000
Manifest next update: Sun 24 Aug 2025 10:02:02 +0000
Files and hashes: 1: sjQvyZcw8qNNCe5LXukheHVs1NE.crl (hash: UX4emcPGMpiwWepIgU9F5e3aYwNudEG/9aQRIqYtVNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjQvyZcw8qNNCe5LXukheHVs1NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:c3:9a:4c:10:90:c0:14:82:4e:ec:67:9b:56:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2342fc99730f2a34d09ee4b5ee92178756cd4d1
Validity
Not Before: Aug 23 10:02:02 2025 GMT
Not After : Aug 24 10:02:02 2025 GMT
Subject: CN=a260c01a4469594a62976483e25a04454099a08e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c3:14:1d:10:21:36:1e:d9:7c:a5:fe:6a:c2:
df:3c:9e:7d:0c:85:72:e1:93:64:96:50:e9:05:0a:
e7:90:89:a9:38:4e:5c:aa:f4:6c:c3:d1:cd:97:91:
11:e2:78:a3:cd:bc:8c:e9:f1:27:27:86:a6:62:74:
a5:e1:a9:32:bb:d0:b6:3f:65:de:e1:d9:c5:7a:27:
6b:27:3f:4a:eb:ec:99:cb:3b:39:30:42:a7:32:b7:
90:1d:1f:51:a0:b4:21:2f:5f:fb:6b:f9:71:0b:af:
39:0f:c4:c4:78:ac:c6:6e:09:fe:91:09:a5:32:b0:
19:4c:32:80:59:ca:ea:c0:4f:4e:5d:10:d5:9d:a0:
ec:80:21:d8:66:d8:ec:18:33:fd:48:38:1f:80:96:
2e:d5:06:c9:7f:d3:02:5c:81:1a:0a:52:d6:d1:5b:
58:41:5e:fd:05:80:69:ec:4a:28:f6:fc:69:e6:92:
9b:aa:45:9e:45:0e:6a:ec:25:fd:94:f6:fe:44:47:
87:f0:88:83:26:31:ca:83:3c:f1:c2:26:54:76:61:
ab:53:a8:03:b7:1a:7d:7e:dc:7d:fb:21:7e:04:7e:
95:5b:7b:0b:46:61:36:42:80:4f:c3:4d:cd:76:ca:
e8:86:3a:06:2f:65:3a:73:2a:66:36:20:96:de:1f:
81:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:60:C0:1A:44:69:59:4A:62:97:64:83:E2:5A:04:45:40:99:A0:8E
X509v3 Authority Key Identifier:
keyid:B2:34:2F:C9:97:30:F2:A3:4D:09:EE:4B:5E:E9:21:78:75:6C:D4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjQvyZcw8qNNCe5LXukheHVs1NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:de:d6:d3:d7:d1:7a:c1:67:58:6f:ea:8e:bd:8c:ad:dc:7c:
01:ca:56:31:c1:1d:93:9b:80:f0:4f:83:02:6a:f2:4a:7a:09:
90:77:a2:25:6f:8c:56:a8:44:d7:bd:66:b8:94:42:06:c2:ce:
99:a2:5b:95:ed:56:bf:22:56:6c:ae:94:6e:e0:f8:24:56:81:
8e:71:eb:c6:6c:63:90:8b:a4:c2:25:cb:ac:09:e7:c0:1a:01:
7e:e6:c4:b3:a7:10:e9:b4:e3:05:c6:57:4b:c1:ec:0b:f2:f0:
4c:c3:93:10:b7:f4:aa:4f:25:3b:9c:93:67:8a:82:9e:ed:2b:
2d:4c:02:20:4a:9f:e2:91:93:e5:87:a8:e0:5a:4e:07:e8:d2:
99:4e:9b:a9:c2:cb:93:41:22:f5:dd:d3:65:85:ab:f7:fe:70:
6d:7d:26:43:61:aa:01:91:3a:c9:24:9e:a0:30:be:e6:e2:a7:
0a:c7:b0:57:98:c1:8a:45:57:2e:2b:70:8f:bc:fa:84:26:58:
0f:ab:ee:62:84:54:d0:ab:be:82:70:53:a3:ab:3a:91:14:e6:
b8:78:a3:27:2f:bc:1e:d9:f9:4d:51:18:8e:7d:9f:78:00:4a:
24:7a:60:04:1e:dd:12:c5:b4:cb:d4:d8:71:1a:96:db:2e:a9:
74:70:76:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYMOaTBCQwBSCTuxnm1Y9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMzQyZmM5OTczMGYyYTM0ZDA5ZWU0YjVlZTkyMTc4NzU2
Y2Q0ZDEwHhcNMjUwODIzMTAwMjAyWhcNMjUwODI0MTAwMjAyWjAzMTEwLwYDVQQD
EyhhMjYwYzAxYTQ0Njk1OTRhNjI5NzY0ODNlMjVhMDQ0NTQwOTlhMDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMMUHRAhNh7ZfKX+asLfPJ59DIVy
4ZNkllDpBQrnkImpOE5cqvRsw9HNl5ER4nijzbyM6fEnJ4amYnSl4akyu9C2P2Xe
4dnFeidrJz9K6+yZyzs5MEKnMreQHR9RoLQhL1/7a/lxC685D8TEeKzGbgn+kQml
MrAZTDKAWcrqwE9OXRDVnaDsgCHYZtjsGDP9SDgfgJYu1QbJf9MCXIEaClLW0VtY
QV79BYBp7Eoo9vxp5pKbqkWeRQ5q7CX9lPb+REeH8IiDJjHKgzzxwiZUdmGrU6gD
txp9ftx9+yF+BH6VW3sLRmE2QoBPw03NdsrohjoGL2U6cypmNiCW3h+BjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJgwBpEaVlKYpdkg+JaBEVAmaCOMB8GA1UdIwQY
MBaAFLI0L8mXMPKjTQnuS17pIXh1bNTRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2pRdnlaY3c4cU5OQ2U1TFh1a2hlSFZzMU5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi81ODRjMGQtODg1Yy00NGEwLTliZWYt
N2E4ZTM4OTIwMjUwLzEvc2pRdnlaY3c4cU5OQ2U1TFh1a2hlSFZzMU5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi81ODRjMGQtODg1Yy00NGEwLTliZWYtN2E4ZTM4OTIwMjUw
LzEvc2pRdnlaY3c4cU5OQ2U1TFh1a2hlSFZzMU5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqd7W09fR
esFnWG/qjr2Mrdx8AcpWMcEdk5uA8E+DAmrySnoJkHeiJW+MVqhE171muJRCBsLO
maJble1WvyJWbK6UbuD4JFaBjnHrxmxjkIukwiXLrAnnwBoBfubEs6cQ6bTjBcZX
S8HsC/LwTMOTELf0qk8lO5yTZ4qCnu0rLUwCIEqf4pGT5Yeo4FpOB+jSmU6bqcLL
k0Ei9d3TZYWr9/5wbX0mQ2GqAZE6ySSeoDC+5uKnCsewV5jBikVXLitwj7z6hCZY
D6vuYoRU0Ku+gnBTo6s6kRTmuHijJy+8Htn5TVEYjn2feABKJHpgBB7dEsW0y9TY
cRqW2y6pdHB23g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:20 2025 by rpki-client