Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.mft
File: jTgcV7CbXiZ91UcVDbRVg46si6M.mft (raw, json)
Hash identifier: uth28Rp7szkLQ+u6EZpubqTF+qPMAJJSNGIty+DWEJ4=
Subject key identifier: 9D:D3:39:B9:87:44:08:0F:81:2B:A6:22:7C:41:82:82:9C:01:44:90
Authority key identifier: 8D:38:1C:57:B0:9B:5E:26:7D:D5:47:15:0D:B4:55:83:8E:AC:8B:A3
Certificate issuer: /CN=8d381c57b09b5e267dd547150db455838eac8ba3
Certificate serial: 0198D65FAE5089366CB9C7FE199A5B1252D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTgcV7CbXiZ91UcVDbRVg46si6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.mft
Manifest number: 03D0
Signing time: Sat 23 Aug 2025 10:00:51 +0000
Manifest this update: Sat 23 Aug 2025 10:00:51 +0000
Manifest next update: Sun 24 Aug 2025 10:00:51 +0000
Files and hashes: 1: jTgcV7CbXiZ91UcVDbRVg46si6M.crl (hash: ZgWUOU8HVPJwXGaVrIPs6YtE5w/nz6MTrrbOLGVaiv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTgcV7CbXiZ91UcVDbRVg46si6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:ae:50:89:36:6c:b9:c7:fe:19:9a:5b:12:52:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d381c57b09b5e267dd547150db455838eac8ba3
Validity
Not Before: Aug 23 10:00:51 2025 GMT
Not After : Aug 24 10:00:51 2025 GMT
Subject: CN=9dd339b98744080f812ba6227c4182829c014490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a1:f9:0f:f2:3c:4b:36:e5:2e:6f:68:c4:c1:
96:9f:dd:ed:be:f0:f5:cc:45:2b:e9:f4:19:4e:df:
fc:2f:37:b8:a7:af:e1:2e:05:7e:a5:3c:2b:9e:1d:
1d:90:ad:6a:fc:99:94:0f:b9:63:a2:01:85:b3:54:
63:bd:96:ca:8b:62:84:2d:fa:d1:c2:f3:13:ed:3e:
a0:d7:8c:3c:eb:7b:d7:59:fb:58:28:52:db:ab:22:
08:82:6f:c2:1d:b9:81:68:5a:ae:46:c3:82:e7:00:
17:96:d0:c9:94:3e:a4:3a:02:80:a1:fe:2c:19:49:
66:8c:b2:0f:83:bf:f1:0c:8a:72:f4:55:2f:45:95:
9b:71:74:8b:b1:1e:03:28:8f:0f:ce:ae:d7:77:89:
a7:0b:39:68:4e:67:a9:c5:5c:6b:66:7e:0e:4c:38:
c1:67:8b:40:33:93:e5:08:64:d3:95:56:34:a3:b2:
4e:ac:e2:2d:99:7d:08:fd:eb:95:13:6e:af:a5:fa:
30:9d:c9:8a:a5:76:5c:96:7d:67:1d:b9:d2:fb:3f:
7f:33:1f:cf:a5:53:88:7d:bb:bf:3d:17:dd:8f:57:
74:03:6c:71:b7:86:7b:44:d4:c7:fe:74:83:dc:71:
da:14:24:d3:dd:25:00:57:0b:e3:28:37:0a:9b:ce:
b5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D3:39:B9:87:44:08:0F:81:2B:A6:22:7C:41:82:82:9C:01:44:90
X509v3 Authority Key Identifier:
keyid:8D:38:1C:57:B0:9B:5E:26:7D:D5:47:15:0D:B4:55:83:8E:AC:8B:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTgcV7CbXiZ91UcVDbRVg46si6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:85:f8:b3:19:72:5d:91:32:76:dd:40:27:2e:71:75:80:6d:
2c:df:bd:46:6a:85:13:2f:93:01:89:a1:1c:06:76:f2:df:1e:
55:35:22:46:d2:11:57:d1:b8:12:cb:6d:bc:77:a7:ec:d8:93:
5b:18:2d:82:f3:0e:5c:0c:c7:4d:5a:4a:8e:cc:ef:89:bc:a5:
1b:91:34:69:77:ac:3e:fc:47:5d:84:9f:f6:7c:6e:ba:5d:b4:
e6:c2:82:cf:c0:97:e0:fa:f1:7f:b0:d0:98:50:75:1d:4b:59:
73:b4:a4:4f:87:90:b8:2d:93:cc:3f:38:c3:0f:37:23:c2:11:
5d:51:39:ef:9c:e1:97:5c:01:c5:5a:5b:d5:a7:24:73:8f:85:
3a:4e:14:91:e8:a3:b1:cc:04:6d:0e:18:ab:a2:ca:f1:4a:3d:
f7:6f:b3:b3:ba:fc:9a:7b:2e:f6:1e:c1:cb:b2:52:23:3a:32:
fb:cc:4d:9c:51:f6:07:58:3a:a6:e7:df:7c:52:ba:82:d4:06:
f1:81:ee:d2:ed:ee:d9:45:b1:7f:23:ed:7b:e4:58:28:cd:c3:
63:2a:f4:fd:a8:ac:d6:e6:fa:81:ad:02:14:02:13:54:a4:d9:
67:da:fc:95:1c:30:62:ad:83:b2:9d:99:37:17:e1:b8:ba:13:
4c:de:de:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX65QiTZsucf+GZpbElLZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMzgxYzU3YjA5YjVlMjY3ZGQ1NDcxNTBkYjQ1NTgzOGVh
YzhiYTMwHhcNMjUwODIzMTAwMDUxWhcNMjUwODI0MTAwMDUxWjAzMTEwLwYDVQQD
Eyg5ZGQzMzliOTg3NDQwODBmODEyYmE2MjI3YzQxODI4MjljMDE0NDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqH5D/I8SzblLm9oxMGWn93tvvD1
zEUr6fQZTt/8Lze4p6/hLgV+pTwrnh0dkK1q/JmUD7ljogGFs1RjvZbKi2KELfrR
wvMT7T6g14w863vXWftYKFLbqyIIgm/CHbmBaFquRsOC5wAXltDJlD6kOgKAof4s
GUlmjLIPg7/xDIpy9FUvRZWbcXSLsR4DKI8Pzq7Xd4mnCzloTmepxVxrZn4OTDjB
Z4tAM5PlCGTTlVY0o7JOrOItmX0I/euVE26vpfowncmKpXZcln1nHbnS+z9/Mx/P
pVOIfbu/PRfdj1d0A2xxt4Z7RNTH/nSD3HHaFCTT3SUAVwvjKDcKm861hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ3TObmHRAgPgSumInxBgoKcAUSQMB8GA1UdIwQY
MBaAFI04HFewm14mfdVHFQ20VYOOrIujMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalRnY1Y3Q2JYaVo5MVVjVkRiUlZnNDZzaTZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9iNWVlMzItYzcwMy00OTRkLTg5YzAt
NmY4MzAyNjk4OTliLzEvalRnY1Y3Q2JYaVo5MVVjVkRiUlZnNDZzaTZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9iNWVlMzItYzcwMy00OTRkLTg5YzAtNmY4MzAyNjk4OTli
LzEvalRnY1Y3Q2JYaVo5MVVjVkRiUlZnNDZzaTZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZYX4sxly
XZEydt1AJy5xdYBtLN+9RmqFEy+TAYmhHAZ28t8eVTUiRtIRV9G4EsttvHen7NiT
WxgtgvMOXAzHTVpKjszvibylG5E0aXesPvxHXYSf9nxuul205sKCz8CX4Prxf7DQ
mFB1HUtZc7SkT4eQuC2TzD84ww83I8IRXVE575zhl1wBxVpb1ackc4+FOk4Ukeij
scwEbQ4Yq6LK8Uo992+zs7r8mnsu9h7By7JSIzoy+8xNnFH2B1g6pufffFK6gtQG
8YHu0u3u2UWxfyPte+RYKM3DYyr0/ais1ub6ga0CFAITVKTZZ9r8lRwwYq2Dsp2Z
NxfhuLoTTN7egQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:02 2025 by rpki-client