Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
File: JUdfWtnsz_acNaYw3P8sWmY_188.mft (raw, json)
Hash identifier: XnEMk3/8L8aunovPVuGNgDhrGfcm1MYRacBi6vxK+Uk=
Subject key identifier: E0:A3:B7:46:43:90:47:54:E6:81:71:FD:5D:F5:75:54:DC:72:39:BC
Authority key identifier: 25:47:5F:5A:D9:EC:CF:F6:9C:35:A6:30:DC:FF:2C:5A:66:3F:D7:CF
Certificate issuer: /CN=25475f5ad9eccff69c35a630dcff2c5a663fd7cf
Certificate serial: 0198D84FBC29E29418170F7D258307701714
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 19:02:40 +0000
Manifest this update: Sat 23 Aug 2025 19:02:40 +0000
Manifest next update: Sun 24 Aug 2025 19:02:40 +0000
Files and hashes: 1: JUdfWtnsz_acNaYw3P8sWmY_188.crl (hash: VQ2+ZM4NbEEpmxUtCDFLOLeXs0oS93+uZ5fWQMudlnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:bc:29:e2:94:18:17:0f:7d:25:83:07:70:17:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25475f5ad9eccff69c35a630dcff2c5a663fd7cf
Validity
Not Before: Aug 23 19:02:40 2025 GMT
Not After : Aug 24 19:02:40 2025 GMT
Subject: CN=e0a3b74643904754e68171fd5df57554dc7239bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4e:75:69:5c:6a:f9:b0:42:26:54:66:55:c8:
00:51:9f:06:82:79:ac:2d:4a:b9:24:17:36:ec:91:
c2:7b:1c:b8:d1:9c:a9:2f:fa:da:3f:97:a7:8f:a1:
90:2e:26:69:69:1e:1e:76:61:a6:2b:7c:e9:77:4e:
bf:cb:0c:da:8e:7e:86:ac:94:07:30:b8:37:9d:40:
6f:53:d0:dd:d7:ab:b6:d9:ef:d1:be:c6:20:a9:51:
d4:9b:b3:62:04:ec:5a:b9:c9:e2:60:dc:bb:aa:24:
8e:c0:87:ed:6f:55:a9:ad:70:6c:41:9c:5d:d7:25:
b7:4d:64:c0:63:db:9d:0b:19:23:e0:f0:3b:43:12:
ea:17:ea:0d:b8:85:bb:7f:62:37:3a:0c:45:ed:c5:
6c:70:79:02:64:60:8d:8c:a3:db:67:bc:d9:a3:20:
14:42:e7:ec:74:48:f0:be:e0:1f:3a:3a:43:a7:99:
b2:7f:3d:d7:d6:7c:62:3a:54:57:ca:11:cb:9b:6c:
6b:5f:2f:a3:d0:f0:f6:a9:f1:67:b4:12:ae:01:22:
15:0d:64:b9:d4:99:3a:ae:0d:0e:d8:77:09:3f:7c:
68:7b:c8:7f:d4:7a:da:38:b5:7a:c2:36:b2:02:64:
a1:33:9a:f3:56:f9:fb:3b:9c:52:42:98:e0:6a:b4:
55:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A3:B7:46:43:90:47:54:E6:81:71:FD:5D:F5:75:54:DC:72:39:BC
X509v3 Authority Key Identifier:
keyid:25:47:5F:5A:D9:EC:CF:F6:9C:35:A6:30:DC:FF:2C:5A:66:3F:D7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c0:8e:c6:f6:02:f8:63:48:b8:0d:a0:7d:77:ec:72:eb:6b:
31:20:67:43:a5:ea:e6:60:b5:26:2b:1d:22:e4:0f:61:5a:2b:
c9:a1:69:1e:1c:bd:63:0d:32:4b:6a:85:ec:a7:f4:0c:d4:25:
4a:eb:54:50:84:26:3f:ab:0b:c5:dc:3e:4b:0c:85:67:78:9c:
b2:ca:bf:8d:0e:d5:e3:44:78:1d:a0:e1:ea:f8:cf:0c:cd:4e:
dd:36:98:96:32:16:93:15:f9:d9:ad:51:3f:13:91:df:c4:a3:
ed:65:61:37:06:5a:cc:26:fe:5f:a2:e5:54:09:38:14:08:a6:
f0:b5:14:b1:bf:21:1c:50:35:b9:86:05:f3:6b:19:f8:8d:5c:
d5:25:e9:3b:38:13:90:69:26:ee:d8:8f:0f:19:ec:47:3b:0a:
d4:29:12:3e:8a:06:01:79:d0:57:af:6e:8b:c2:48:85:ac:ba:
9d:66:11:4c:7a:cd:5d:78:61:8b:39:b4:9b:d5:75:a9:17:df:
09:f4:4d:7d:14:c6:c8:fb:78:ce:5f:b0:1c:f2:ba:cc:01:ae:
36:d0:c6:3d:5b:1a:91:70:3b:d8:b7:20:ab:12:34:84:0e:ac:
c8:19:01:24:db:24:d1:d8:c5:8e:e7:02:e7:fa:ae:40:97:82:
30:36:5a:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjYT7wp4pQYFw99JYMHcBcUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NDc1ZjVhZDllY2NmZjY5YzM1YTYzMGRjZmYyYzVhNjYz
ZmQ3Y2YwHhcNMjUwODIzMTkwMjQwWhcNMjUwODI0MTkwMjQwWjAzMTEwLwYDVQQD
EyhlMGEzYjc0NjQzOTA0NzU0ZTY4MTcxZmQ1ZGY1NzU1NGRjNzIzOWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwU51aVxq+bBCJlRmVcgAUZ8Ggnms
LUq5JBc27JHCexy40ZypL/raP5enj6GQLiZpaR4edmGmK3zpd06/ywzajn6GrJQH
MLg3nUBvU9Dd16u22e/RvsYgqVHUm7NiBOxaucniYNy7qiSOwIftb1WprXBsQZxd
1yW3TWTAY9udCxkj4PA7QxLqF+oNuIW7f2I3OgxF7cVscHkCZGCNjKPbZ7zZoyAU
QufsdEjwvuAfOjpDp5myfz3X1nxiOlRXyhHLm2xrXy+j0PD2qfFntBKuASIVDWS5
1Jk6rg0O2HcJP3xoe8h/1HraOLV6wjayAmShM5rzVvn7O5xSQpjgarRV4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOCjt0ZDkEdU5oFx/V31dVTccjm8MB8GA1UdIwQY
MBaAFCVHX1rZ7M/2nDWmMNz/LFpmP9fPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlVkZld0bnN6X2FjTmFZdzNQOHNXbVlfMTg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iZmVjMDgtOGNiZS00YzQ1LThkYjEt
NGQ0NmM2YTcwMTBhLzEvSlVkZld0bnN6X2FjTmFZdzNQOHNXbVlfMTg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iZmVjMDgtOGNiZS00YzQ1LThkYjEtNGQ0NmM2YTcwMTBh
LzEvSlVkZld0bnN6X2FjTmFZdzNQOHNXbVlfMTg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVsCOxvYC
+GNIuA2gfXfscutrMSBnQ6Xq5mC1JisdIuQPYVoryaFpHhy9Yw0yS2qF7Kf0DNQl
SutUUIQmP6sLxdw+SwyFZ3icssq/jQ7V40R4HaDh6vjPDM1O3TaYljIWkxX52a1R
PxOR38Sj7WVhNwZazCb+X6LlVAk4FAim8LUUsb8hHFA1uYYF82sZ+I1c1SXpOzgT
kGkm7tiPDxnsRzsK1CkSPooGAXnQV69ui8JIhay6nWYRTHrNXXhhizm0m9V1qRff
CfRNfRTGyPt4zl+wHPK6zAGuNtDGPVsakXA72LcgqxI0hA6syBkBJNsk0djFjucC
5/quQJeCMDZaJA==
-----END CERTIFICATE-----
Generated at Sun Aug 24 02:49:00 2025 by rpki-client