Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
File: JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft (raw, json)
Hash identifier: 0tFRsxnxMYukY66qzvy5I4+DyPEqQVald/UARzB9x4I=
Subject key identifier: 5F:F4:26:ED:FE:89:7F:2A:BD:2D:2A:DC:6C:26:29:D2:17:E2:DC:52
Authority key identifier: 26:9B:8A:37:48:44:0C:9D:5C:2C:50:8B:D0:3B:46:D7:27:3E:EE:56
Certificate issuer: /CN=269b8a3748440c9d5c2c508bd03b46d7273eee56
Certificate serial: 0199FD6ACFEB979D957755E0F0B2C34CFDB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
Manifest number: 0F0D
Signing time: Sun 19 Oct 2025 17:00:59 +0000
Manifest this update: Sun 19 Oct 2025 17:00:59 +0000
Manifest next update: Mon 20 Oct 2025 17:00:59 +0000
Files and hashes: 1: JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl (hash: t9WuxFvRH88yFIbk8XBEzHaTaVw/2NQgejtdc8ZXhnE=)
2: zZ4Hlb2x-3mX0RpLcIDR2DBRVWM.roa (hash: rtcchc9xlTzl7W167gpB0l7rHLuWsqswJuQgbOgsw/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:cf:eb:97:9d:95:77:55:e0:f0:b2:c3:4c:fd:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=269b8a3748440c9d5c2c508bd03b46d7273eee56
Validity
Not Before: Oct 19 17:00:59 2025 GMT
Not After : Oct 20 17:00:59 2025 GMT
Subject: CN=5ff426edfe897f2abd2d2adc6c2629d217e2dc52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f5:62:62:0b:34:25:3f:93:19:99:97:ed:8b:
4d:1d:a1:be:01:ac:3b:2e:07:92:e2:7a:61:64:4c:
22:cd:0e:2b:3b:a5:1d:11:59:0e:22:c3:94:49:27:
0b:85:51:db:f3:b9:2a:54:b7:fa:1d:8e:49:80:0d:
bf:5c:7b:c9:0f:57:c4:9c:4f:5c:db:a6:28:4e:86:
03:b8:da:d0:0f:28:48:ff:9c:11:a0:70:82:16:56:
8a:03:27:4f:7a:a3:04:cc:38:18:90:2e:c8:3b:00:
98:06:47:d6:03:1f:e0:58:17:c1:97:6d:37:b6:65:
c7:2a:24:53:cb:3a:3d:e7:26:62:bd:3b:5d:65:9d:
4b:8c:25:c0:28:62:f3:50:90:17:6e:80:63:55:f1:
cf:48:25:7a:d5:94:ea:de:87:5b:a1:11:38:6f:bd:
47:3b:e2:1c:37:24:c7:66:40:13:31:66:95:ca:2e:
55:44:77:17:dd:2f:c0:8d:4d:26:4a:18:d7:5c:d6:
af:77:cf:59:6f:7b:fe:1c:ca:84:57:d2:c1:ba:f2:
db:41:78:f4:ab:40:96:8d:2a:bc:67:dd:7a:32:8c:
19:65:e4:55:d4:70:f2:b9:6d:55:42:d6:9e:a8:7f:
1e:6e:7c:bb:71:74:6f:46:f6:26:17:2d:d7:03:37:
f7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F4:26:ED:FE:89:7F:2A:BD:2D:2A:DC:6C:26:29:D2:17:E2:DC:52
X509v3 Authority Key Identifier:
keyid:26:9B:8A:37:48:44:0C:9D:5C:2C:50:8B:D0:3B:46:D7:27:3E:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:38:6c:9d:2b:01:53:ba:dd:65:be:18:59:52:17:a2:d1:b7:
20:60:27:11:f1:f8:59:c1:14:4d:d3:ce:97:b2:cc:ae:92:16:
91:3b:65:2c:52:75:7f:d7:86:f3:83:ab:05:d2:2c:e2:66:08:
4c:07:48:ad:2a:af:6f:2f:f0:a3:75:21:32:26:9d:34:05:7c:
27:f1:3d:88:31:b2:a7:ae:de:96:35:07:24:01:7f:00:3a:83:
be:d2:e8:06:74:c8:ef:9d:aa:a7:2a:f4:28:d7:84:cd:4f:e3:
22:65:c6:8f:2a:02:db:f1:dd:02:ed:e5:94:04:69:21:29:ce:
d2:a7:53:27:43:12:82:88:c9:df:b6:ff:94:2e:58:6b:80:f7:
a4:28:b2:86:c4:88:09:b3:dd:3e:cf:96:c6:7c:8a:95:a8:00:
95:d1:bd:15:90:38:85:ac:c6:b2:35:d6:dc:dc:f4:da:15:5c:
0b:f8:41:8c:ec:03:4a:16:1a:e9:ec:3a:a4:78:6a:bc:93:2e:
bd:3d:62:b1:3b:52:4d:30:c0:ad:e0:a5:7f:8d:11:35:46:77:
38:bd:ce:ac:d8:f1:11:fe:6f:ec:6c:52:93:f1:89:a1:62:e6:
40:9b:07:4a:4d:95:a1:6b:65:84:26:aa:39:01:80:4b:9c:80:
14:36:7a:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9as/rl52Vd1Xg8LLDTP23MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2OWI4YTM3NDg0NDBjOWQ1YzJjNTA4YmQwM2I0NmQ3Mjcz
ZWVlNTYwHhcNMjUxMDE5MTcwMDU5WhcNMjUxMDIwMTcwMDU5WjAzMTEwLwYDVQQD
Eyg1ZmY0MjZlZGZlODk3ZjJhYmQyZDJhZGM2YzI2MjlkMjE3ZTJkYzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PViYgs0JT+TGZmX7YtNHaG+Aaw7
LgeS4nphZEwizQ4rO6UdEVkOIsOUSScLhVHb87kqVLf6HY5JgA2/XHvJD1fEnE9c
26YoToYDuNrQDyhI/5wRoHCCFlaKAydPeqMEzDgYkC7IOwCYBkfWAx/gWBfBl203
tmXHKiRTyzo95yZivTtdZZ1LjCXAKGLzUJAXboBjVfHPSCV61ZTq3odboRE4b71H
O+IcNyTHZkATMWaVyi5VRHcX3S/AjU0mShjXXNavd89Zb3v+HMqEV9LBuvLbQXj0
q0CWjSq8Z916MowZZeRV1HDyuW1VQtaeqH8ebny7cXRvRvYmFy3XAzf3pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/0Ju3+iX8qvS0q3GwmKdIX4txSMB8GA1UdIwQY
MBaAFCabijdIRAydXCxQi9A7RtcnPu5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnB1S04waEVESjFjTEZDTDBEdEcxeWMtN2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85NGFhZTQtNzcxYy00MjlhLWE3Y2Qt
Zjg3YmMxNzNkMmFhLzEvSnB1S04waEVESjFjTEZDTDBEdEcxeWMtN2xZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC85NGFhZTQtNzcxYy00MjlhLWE3Y2QtZjg3YmMxNzNkMmFh
LzEvSnB1S04waEVESjFjTEZDTDBEdEcxeWMtN2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANDhsnSsB
U7rdZb4YWVIXotG3IGAnEfH4WcEUTdPOl7LMrpIWkTtlLFJ1f9eG84OrBdIs4mYI
TAdIrSqvby/wo3UhMiadNAV8J/E9iDGyp67eljUHJAF/ADqDvtLoBnTI752qpyr0
KNeEzU/jImXGjyoC2/HdAu3llARpISnO0qdTJ0MSgojJ37b/lC5Ya4D3pCiyhsSI
CbPdPs+WxnyKlagAldG9FZA4hazGsjXW3Nz02hVcC/hBjOwDShYa6ew6pHhqvJMu
vT1isTtSTTDAreClf40RNUZ3OL3OrNjxEf5v7GxSk/GJoWLmQJsHSk2VoWtlhCaq
OQGAS5yAFDZ6pA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:41 2025 by rpki-client