Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
File: jWIohbCUzKumvc5vw6r92Pqn51Y.mft (raw, json)
Hash identifier: Q0bqX8yrkW9MhSgJdOjHjSG4gA+WgMn9BgbH8DUysOE=
Subject key identifier: 26:96:AC:5D:7C:93:48:67:A3:50:54:12:CA:79:4B:16:C8:EB:65:CD
Authority key identifier: 8D:62:28:85:B0:94:CC:AB:A6:BD:CE:6F:C3:AA:FD:D8:FA:A7:E7:56
Certificate issuer: /CN=8d622885b094ccaba6bdce6fc3aafdd8faa7e756
Certificate serial: 0199FBEB5D7870C6332BA6C488086DE893BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWIohbCUzKumvc5vw6r92Pqn51Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
Manifest number: 0801
Signing time: Sun 19 Oct 2025 10:02:09 +0000
Manifest this update: Sun 19 Oct 2025 10:02:09 +0000
Manifest next update: Mon 20 Oct 2025 10:02:09 +0000
Files and hashes: 1: jWIohbCUzKumvc5vw6r92Pqn51Y.crl (hash: MUMaglF7w9L9u49FRJx4n+wtkx89BzUaBggQ0G6p1VM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWIohbCUzKumvc5vw6r92Pqn51Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:5d:78:70:c6:33:2b:a6:c4:88:08:6d:e8:93:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d622885b094ccaba6bdce6fc3aafdd8faa7e756
Validity
Not Before: Oct 19 10:02:09 2025 GMT
Not After : Oct 20 10:02:09 2025 GMT
Subject: CN=2696ac5d7c934867a3505412ca794b16c8eb65cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e1:0e:da:72:8a:14:d6:62:15:de:b9:61:bd:
10:26:e8:92:55:95:78:3a:52:6c:1e:0f:7d:1c:76:
19:2a:ca:ac:71:61:2e:3d:f9:52:00:3c:e9:ec:d9:
f1:ba:26:65:45:b4:9e:5d:9a:3c:74:6f:55:ca:d8:
70:c9:32:c2:cd:b6:a7:a4:55:fa:3e:e4:01:49:1c:
e9:57:50:84:14:3a:77:79:39:a3:3a:b1:09:0b:5f:
9d:98:1f:a6:26:7a:a6:24:fa:de:27:0a:fe:12:36:
80:03:ba:5e:85:76:c0:98:7d:9d:95:53:ff:68:e7:
1e:9f:4e:8c:83:d3:0a:e8:d5:63:c9:fe:62:8d:58:
ee:4d:59:33:bc:2a:fc:38:fd:5e:66:b8:67:7d:45:
c1:52:d8:e2:c2:41:b5:5a:12:c2:ef:7e:4d:2c:bb:
58:82:12:42:b0:db:0e:fc:80:39:fe:ba:34:49:81:
0c:b9:9b:2a:10:df:6f:ff:60:8e:63:d1:56:ea:6e:
25:ff:4e:f2:72:77:f5:8d:a0:15:9a:15:6d:2f:c5:
d7:01:b2:7d:07:bb:0d:91:4f:36:91:96:89:85:0e:
27:47:5a:69:44:8b:31:bb:8d:50:a5:c2:50:45:87:
a5:fa:30:af:b1:b3:81:4a:ec:41:8e:3c:55:39:f7:
da:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:96:AC:5D:7C:93:48:67:A3:50:54:12:CA:79:4B:16:C8:EB:65:CD
X509v3 Authority Key Identifier:
keyid:8D:62:28:85:B0:94:CC:AB:A6:BD:CE:6F:C3:AA:FD:D8:FA:A7:E7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWIohbCUzKumvc5vw6r92Pqn51Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:92:9f:d1:09:53:21:cd:76:0d:ae:76:63:1f:f0:50:8e:95:
a7:d3:a0:e6:87:8c:05:e4:2f:74:02:aa:5b:3f:16:1b:24:3f:
ac:1b:3d:8e:c8:3f:7e:9b:76:94:53:28:74:c5:e8:b4:4d:fa:
2a:0d:a8:df:a4:7b:ca:4f:ab:f7:83:43:6c:1b:31:10:68:c8:
49:21:e2:70:fa:7a:90:81:21:71:d4:61:e3:7d:9d:d4:53:6f:
df:d2:42:11:66:fd:f0:43:0c:94:07:78:2f:a7:e8:71:2f:7f:
24:84:3c:4e:f0:34:44:60:e2:fa:c2:33:de:4d:a9:74:8b:3c:
05:a7:e1:cd:b3:33:dd:c3:70:ab:fa:07:ea:4f:e8:3b:03:3f:
02:06:84:0d:51:40:00:d5:d2:9b:41:eb:46:b0:eb:a8:ad:5d:
a0:52:fe:fb:7b:7f:82:c4:5d:1d:28:08:de:b8:18:23:32:d0:
a2:50:44:b3:63:39:40:bf:e9:20:82:f5:3a:05:ad:78:e0:45:
3d:af:89:ad:3f:b4:3a:5d:d5:1d:da:6b:78:24:d9:7b:dc:62:
59:4b:f7:0a:fe:6d:f6:b4:8f:7c:05:79:ad:3d:62:8a:c2:98:
91:4a:d5:ea:c0:24:33:58:7b:12:65:23:10:5d:7c:8c:2a:e8:
6c:19:79:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76114cMYzK6bEiAht6JO8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNjIyODg1YjA5NGNjYWJhNmJkY2U2ZmMzYWFmZGQ4ZmFh
N2U3NTYwHhcNMjUxMDE5MTAwMjA5WhcNMjUxMDIwMTAwMjA5WjAzMTEwLwYDVQQD
EygyNjk2YWM1ZDdjOTM0ODY3YTM1MDU0MTJjYTc5NGIxNmM4ZWI2NWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4eEO2nKKFNZiFd65Yb0QJuiSVZV4
OlJsHg99HHYZKsqscWEuPflSADzp7NnxuiZlRbSeXZo8dG9VythwyTLCzbanpFX6
PuQBSRzpV1CEFDp3eTmjOrEJC1+dmB+mJnqmJPreJwr+EjaAA7pehXbAmH2dlVP/
aOcen06Mg9MK6NVjyf5ijVjuTVkzvCr8OP1eZrhnfUXBUtjiwkG1WhLC735NLLtY
ghJCsNsO/IA5/ro0SYEMuZsqEN9v/2COY9FW6m4l/07ycnf1jaAVmhVtL8XXAbJ9
B7sNkU82kZaJhQ4nR1ppRIsxu41QpcJQRYel+jCvsbOBSuxBjjxVOffafQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCaWrF18k0hno1BUEsp5SxbI62XNMB8GA1UdIwQY
MBaAFI1iKIWwlMyrpr3Ob8Oq/dj6p+dWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaldJb2hiQ1V6S3VtdmM1dnc2cjkyUHFuNTFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9mYzY4MjItMGU4My00NjE0LTg3ODAt
Nzg5ZDJiNWE4NmJjLzEvaldJb2hiQ1V6S3VtdmM1dnc2cjkyUHFuNTFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9mYzY4MjItMGU4My00NjE0LTg3ODAtNzg5ZDJiNWE4NmJj
LzEvaldJb2hiQ1V6S3VtdmM1dnc2cjkyUHFuNTFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaZKf0QlT
Ic12Da52Yx/wUI6Vp9Og5oeMBeQvdAKqWz8WGyQ/rBs9jsg/fpt2lFModMXotE36
Kg2o36R7yk+r94NDbBsxEGjISSHicPp6kIEhcdRh432d1FNv39JCEWb98EMMlAd4
L6focS9/JIQ8TvA0RGDi+sIz3k2pdIs8BafhzbMz3cNwq/oH6k/oOwM/AgaEDVFA
ANXSm0HrRrDrqK1doFL++3t/gsRdHSgI3rgYIzLQolBEs2M5QL/pIIL1OgWteOBF
Pa+JrT+0Ol3VHdpreCTZe9xiWUv3Cv5t9rSPfAV5rT1iisKYkUrV6sAkM1h7EmUj
EF18jCrobBl5JA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:19 2025 by rpki-client