Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft
File: JCSASgJ3cDnEz9jADcKfqR2KOQw.mft (raw, json)
Hash identifier: 5tKU8xeJUTs2XL0UKGa7bAd4byJLJh9IlvI3hfTn8l4=
Subject key identifier: 0C:70:97:0A:5C:F9:E0:75:43:93:B3:AE:62:53:CB:7E:BE:BB:FD:C6
Authority key identifier: 24:24:80:4A:02:77:70:39:C4:CF:D8:C0:0D:C2:9F:A9:1D:8A:39:0C
Certificate issuer: /CN=2424804a02777039c4cfd8c00dc29fa91d8a390c
Certificate serial: 0199FC8F500AF246B29F2E0DAEF5B64B45AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JCSASgJ3cDnEz9jADcKfqR2KOQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft
Manifest number: 031F
Signing time: Sun 19 Oct 2025 13:01:14 +0000
Manifest this update: Sun 19 Oct 2025 13:01:14 +0000
Manifest next update: Mon 20 Oct 2025 13:01:14 +0000
Files and hashes: 1: JCSASgJ3cDnEz9jADcKfqR2KOQw.crl (hash: JVOkTLmvZoJV9dCaD9WzWY7iudWU8sPtS89M17tJNis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JCSASgJ3cDnEz9jADcKfqR2KOQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:50:0a:f2:46:b2:9f:2e:0d:ae:f5:b6:4b:45:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2424804a02777039c4cfd8c00dc29fa91d8a390c
Validity
Not Before: Oct 19 13:01:14 2025 GMT
Not After : Oct 20 13:01:14 2025 GMT
Subject: CN=0c70970a5cf9e0754393b3ae6253cb7ebebbfdc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0b:a7:05:00:a3:17:4c:4b:aa:30:ed:10:98:
23:6e:fa:6f:2d:c6:72:7d:71:14:fa:d9:7f:d7:39:
a8:e3:4c:b0:44:6a:20:17:99:4c:18:96:41:f0:35:
8f:5a:cb:48:6d:19:2e:96:ed:e8:1d:fe:96:38:8d:
9e:36:85:1d:31:44:97:9b:80:9e:13:9b:ae:a2:3b:
8e:cd:f5:c6:98:9d:a9:7f:69:ec:77:e9:dd:7f:74:
1f:4a:98:cf:30:82:77:02:22:1a:3a:56:e1:92:5a:
5a:fe:9c:41:b1:76:02:be:70:f9:2f:fa:bd:b6:cf:
3b:bc:fa:6e:95:7b:e5:14:49:53:5c:f0:3d:c7:35:
75:b3:50:e4:1f:f4:e3:4a:b9:9f:3c:b9:dd:5b:2e:
fa:27:c3:99:05:8a:3c:55:47:09:84:1e:6f:fe:2f:
fe:32:66:c6:6f:a5:33:87:16:89:96:d7:16:67:b4:
14:3d:71:2d:81:79:d4:57:c2:18:c8:4e:e5:2d:b4:
9f:b2:6f:fe:44:df:4e:be:c9:ce:f7:59:45:01:32:
f1:b1:66:ec:37:e1:0c:0c:60:31:9f:f2:ba:dd:44:
4a:99:e7:e9:6f:e9:17:e0:5a:73:48:00:21:7e:a3:
b5:c3:b2:8a:61:6b:31:71:9a:db:8c:ea:a3:e6:3b:
a1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:70:97:0A:5C:F9:E0:75:43:93:B3:AE:62:53:CB:7E:BE:BB:FD:C6
X509v3 Authority Key Identifier:
keyid:24:24:80:4A:02:77:70:39:C4:CF:D8:C0:0D:C2:9F:A9:1D:8A:39:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JCSASgJ3cDnEz9jADcKfqR2KOQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:ea:88:5b:5e:40:53:ec:96:d9:32:e7:fe:3c:b3:40:ce:3f:
56:06:7f:e3:8a:8b:c7:ce:23:41:2f:c3:2c:45:64:53:7f:67:
17:b6:2a:c1:59:04:83:87:f5:9a:95:52:ba:c1:c7:5c:ee:bf:
b2:5c:fa:2a:1b:eb:d4:fa:5f:a3:e2:a0:ff:34:3c:88:3c:cb:
a7:d0:d0:96:96:cd:68:cb:7f:e7:c2:af:49:60:3a:9b:16:5e:
e2:f0:e7:02:6b:9e:13:08:b2:a9:d8:36:32:38:20:83:2c:be:
7a:58:83:1b:b4:77:f1:5b:1f:16:46:16:73:fb:0b:8e:c7:34:
a1:ee:6f:cd:71:7c:29:0d:71:72:27:69:f9:4b:05:09:62:a4:
60:ba:fa:b9:65:f1:c4:73:29:0f:f5:f2:8b:2e:c4:da:dc:85:
45:74:61:2e:26:03:6a:0a:0a:4e:be:5e:a5:97:b7:ee:dd:24:
75:7c:5b:73:f5:89:54:6f:98:1e:f8:c7:62:8e:ba:96:23:bd:
e4:37:f7:0b:61:5d:f2:1a:2f:89:87:9d:2e:a5:aa:b9:7a:b8:
db:fa:ee:93:67:14:7b:e1:58:7e:cc:0d:6b:2c:e3:1d:1c:8c:
98:29:9c:d6:eb:2a:87:b7:f1:ad:aa:70:66:2a:88:56:d4:6b:
be:9a:2f:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j1AK8kayny4NrvW2S0WrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MjQ4MDRhMDI3NzcwMzljNGNmZDhjMDBkYzI5ZmE5MWQ4
YTM5MGMwHhcNMjUxMDE5MTMwMTE0WhcNMjUxMDIwMTMwMTE0WjAzMTEwLwYDVQQD
EygwYzcwOTcwYTVjZjllMDc1NDM5M2IzYWU2MjUzY2I3ZWJlYmJmZGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgunBQCjF0xLqjDtEJgjbvpvLcZy
fXEU+tl/1zmo40ywRGogF5lMGJZB8DWPWstIbRkulu3oHf6WOI2eNoUdMUSXm4Ce
E5uuojuOzfXGmJ2pf2nsd+ndf3QfSpjPMIJ3AiIaOlbhklpa/pxBsXYCvnD5L/q9
ts87vPpulXvlFElTXPA9xzV1s1DkH/TjSrmfPLndWy76J8OZBYo8VUcJhB5v/i/+
MmbGb6UzhxaJltcWZ7QUPXEtgXnUV8IYyE7lLbSfsm/+RN9OvsnO91lFATLxsWbs
N+EMDGAxn/K63URKmefpb+kX4FpzSAAhfqO1w7KKYWsxcZrbjOqj5juhXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAxwlwpc+eB1Q5OzrmJTy36+u/3GMB8GA1UdIwQY
MBaAFCQkgEoCd3A5xM/YwA3Cn6kdijkMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkNTQVNnSjNjRG5FejlqQURjS2ZxUjJLT1F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iNTdhZWEtM2NkZi00NGQwLWFlZDQt
ZDAwYjU4MjJjY2VmLzEvSkNTQVNnSjNjRG5FejlqQURjS2ZxUjJLT1F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9iNTdhZWEtM2NkZi00NGQwLWFlZDQtZDAwYjU4MjJjY2Vm
LzEvSkNTQVNnSjNjRG5FejlqQURjS2ZxUjJLT1F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs+qIW15A
U+yW2TLn/jyzQM4/VgZ/44qLx84jQS/DLEVkU39nF7YqwVkEg4f1mpVSusHHXO6/
slz6Khvr1Ppfo+Kg/zQ8iDzLp9DQlpbNaMt/58KvSWA6mxZe4vDnAmueEwiyqdg2
Mjgggyy+eliDG7R38VsfFkYWc/sLjsc0oe5vzXF8KQ1xcidp+UsFCWKkYLr6uWXx
xHMpD/Xyiy7E2tyFRXRhLiYDagoKTr5epZe37t0kdXxbc/WJVG+YHvjHYo66liO9
5Df3C2Fd8hoviYedLqWquXq42/ruk2cUe+FYfswNayzjHRyMmCmc1usqh7fxrapw
ZiqIVtRrvpov1g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:37 2025 by rpki-client