Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft
File: j-7pSg47IoCXZK7h4o8Hj61ja8M.mft (raw, json)
Hash identifier: sqAZxVsdPfBIT96aGkTVHOtSq45n2FSW14CE3Wo22zs=
Subject key identifier: 3A:52:66:75:CC:CE:63:3A:62:42:C7:44:3E:C9:7C:5F:52:CE:C6:63
Authority key identifier: 8F:EE:E9:4A:0E:3B:22:80:97:64:AE:E1:E2:8F:07:8F:AD:63:6B:C3
Certificate issuer: /CN=8feee94a0e3b22809764aee1e28f078fad636bc3
Certificate serial: 0199FAA0D359E46DAFC67DCB84CF21BF6D99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-7pSg47IoCXZK7h4o8Hj61ja8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 04:01:07 +0000
Manifest this update: Sun 19 Oct 2025 04:01:07 +0000
Manifest next update: Mon 20 Oct 2025 04:01:07 +0000
Files and hashes: 1: j-7pSg47IoCXZK7h4o8Hj61ja8M.crl (hash: ZJue7n7o51BhyJ1RkGJORfXDu4zj6e7VIayLVTyP3+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/j-7pSg47IoCXZK7h4o8Hj61ja8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a0:d3:59:e4:6d:af:c6:7d:cb:84:cf:21:bf:6d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8feee94a0e3b22809764aee1e28f078fad636bc3
Validity
Not Before: Oct 19 04:01:07 2025 GMT
Not After : Oct 20 04:01:07 2025 GMT
Subject: CN=3a526675ccce633a6242c7443ec97c5f52cec663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a0:bd:24:a0:27:54:7b:7a:e1:48:91:d7:2a:
fb:57:00:63:9f:7e:82:52:ae:e0:54:70:92:5b:51:
b7:5e:c8:7b:ae:d5:4f:00:ec:2b:5c:80:4e:74:0d:
ef:93:da:e4:a3:31:01:76:5f:ab:0a:88:30:6a:05:
65:ee:69:1a:e7:3c:4b:43:9b:17:df:bf:61:f3:dc:
9d:f6:50:ea:d4:90:b9:32:8e:41:2b:5b:35:99:a8:
b4:a2:60:5b:29:e3:c4:c2:2f:1c:ee:76:71:ce:4f:
40:57:fc:d6:0e:dc:1c:0c:83:a5:47:f8:27:fa:2e:
91:27:16:15:7b:40:99:ca:2e:3c:d3:9c:3c:0d:41:
f0:e4:4c:e0:ad:63:2a:f9:89:22:de:d5:d8:7d:96:
c5:c6:9d:f5:5d:b7:0a:b4:1d:4a:42:a5:91:8a:86:
b5:c7:bd:81:7d:a6:0e:fa:5b:d0:d6:32:79:1c:b0:
36:4d:d2:57:df:54:1e:45:d7:0d:2e:90:df:a5:61:
13:7d:00:d4:04:51:a9:70:a5:68:8a:c0:b8:8f:b5:
d4:57:46:e7:30:b1:b4:f6:b5:00:43:c0:a8:be:93:
52:d0:de:69:0e:cc:8d:8e:a2:85:f2:92:c5:3c:5b:
af:6e:de:b5:f1:54:d5:cf:f7:9a:8d:a9:a9:41:3b:
5c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:52:66:75:CC:CE:63:3A:62:42:C7:44:3E:C9:7C:5F:52:CE:C6:63
X509v3 Authority Key Identifier:
keyid:8F:EE:E9:4A:0E:3B:22:80:97:64:AE:E1:E2:8F:07:8F:AD:63:6B:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-7pSg47IoCXZK7h4o8Hj61ja8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fb92fa-5e4f-402f-9539-a4b961808201/1/j-7pSg47IoCXZK7h4o8Hj61ja8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:23:06:5f:c5:82:51:de:00:4b:81:f8:f0:bd:75:08:10:73:
fe:00:d8:a5:40:01:ae:8d:26:0d:2a:3d:dd:14:21:bc:53:ac:
aa:65:b8:6d:31:df:0e:33:54:41:a8:a5:aa:1c:2d:fd:68:d7:
9c:6d:4d:89:7d:92:53:cb:2a:a4:ec:59:1a:09:27:86:53:1d:
c4:4a:32:f2:0d:fb:4b:4c:2d:25:4d:80:2c:48:f3:8d:2b:7d:
78:42:b1:7d:44:9f:83:ea:f2:a3:b1:92:bf:01:ae:e2:ac:4a:
d1:bf:00:7c:85:eb:3b:50:c3:de:b7:03:d7:4b:95:ad:16:b7:
ad:6f:88:d4:7b:4b:93:20:a9:98:25:85:07:11:6f:f2:be:86:
48:d3:a8:90:67:83:97:e7:3e:05:c4:c2:11:18:8a:3b:0e:b1:
b2:0c:47:57:f3:a6:bf:66:7c:c5:f7:50:8a:cb:7a:c7:4e:0d:
ee:f9:a0:60:ca:d2:27:ee:e0:69:57:aa:06:1d:25:2d:f2:1a:
3c:5d:fe:af:54:29:9b:13:98:43:46:86:18:f7:e1:ea:75:17:
f3:de:34:29:5e:8d:70:63:78:5d:e3:2c:47:e8:d4:77:6b:31:
d7:4c:e3:80:ef:05:bd:da:93:b0:ad:1d:3a:8a:6b:c4:2a:8f:
65:0f:e0:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn6oNNZ5G2vxn3LhM8hv22ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmZWVlOTRhMGUzYjIyODA5NzY0YWVlMWUyOGYwNzhmYWQ2
MzZiYzMwHhcNMjUxMDE5MDQwMTA3WhcNMjUxMDIwMDQwMTA3WjAzMTEwLwYDVQQD
EygzYTUyNjY3NWNjY2U2MzNhNjI0MmM3NDQzZWM5N2M1ZjUyY2VjNjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaC9JKAnVHt64UiR1yr7VwBjn36C
Uq7gVHCSW1G3Xsh7rtVPAOwrXIBOdA3vk9rkozEBdl+rCogwagVl7mka5zxLQ5sX
379h89yd9lDq1JC5Mo5BK1s1mai0omBbKePEwi8c7nZxzk9AV/zWDtwcDIOlR/gn
+i6RJxYVe0CZyi4805w8DUHw5EzgrWMq+Yki3tXYfZbFxp31XbcKtB1KQqWRioa1
x72BfaYO+lvQ1jJ5HLA2TdJX31QeRdcNLpDfpWETfQDUBFGpcKVoisC4j7XUV0bn
MLG09rUAQ8CovpNS0N5pDsyNjqKF8pLFPFuvbt618VTVz/eajampQTtcwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDpSZnXMzmM6YkLHRD7JfF9SzsZjMB8GA1UdIwQY
MBaAFI/u6UoOOyKAl2Su4eKPB4+tY2vDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvai03cFNnNDdJb0NYWks3aDRvOEhqNjFqYThNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9mYjkyZmEtNWU0Zi00MDJmLTk1Mzkt
YTRiOTYxODA4MjAxLzEvai03cFNnNDdJb0NYWks3aDRvOEhqNjFqYThNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9mYjkyZmEtNWU0Zi00MDJmLTk1MzktYTRiOTYxODA4MjAx
LzEvai03cFNnNDdJb0NYWks3aDRvOEhqNjFqYThNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUiMGX8WC
Ud4AS4H48L11CBBz/gDYpUABro0mDSo93RQhvFOsqmW4bTHfDjNUQailqhwt/WjX
nG1NiX2SU8sqpOxZGgknhlMdxEoy8g37S0wtJU2ALEjzjSt9eEKxfUSfg+ryo7GS
vwGu4qxK0b8AfIXrO1DD3rcD10uVrRa3rW+I1HtLkyCpmCWFBxFv8r6GSNOokGeD
l+c+BcTCERiKOw6xsgxHV/Omv2Z8xfdQist6x04N7vmgYMrSJ+7gaVeqBh0lLfIa
PF3+r1QpmxOYQ0aGGPfh6nUX8940KV6NcGN4XeMsR+jUd2sx10zjgO8FvdqTsK0d
OoprxCqPZQ/g1w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:59 2025 by rpki-client