Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
File: jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft (raw, json)
Hash identifier: El/O6T+tBUbOU3bOsC04bkPTdK0GniKyatWpGfynQm0=
Subject key identifier: 5C:82:3A:9B:6F:3A:3B:0C:7B:97:2A:CB:A5:BF:18:84:38:E7:FC:DC
Authority key identifier: 8E:56:61:69:7D:A9:0B:58:00:BC:42:AD:F9:B4:59:53:21:97:55:D0
Certificate issuer: /CN=8e5661697da90b5800bc42adf9b45953219755d0
Certificate serial: 0199FBEC034D48BE16CE74618C66033AE697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlZhaX2pC1gAvEKt-bRZUyGXVdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
Manifest number: 0FDB
Signing time: Sun 19 Oct 2025 10:02:52 +0000
Manifest this update: Sun 19 Oct 2025 10:02:52 +0000
Manifest next update: Mon 20 Oct 2025 10:02:52 +0000
Files and hashes: 1: jlZhaX2pC1gAvEKt-bRZUyGXVdA.crl (hash: hHGxYz8mTt7Edw+cDcJ79ZBWkNbqPkkHCLolXzCH5Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlZhaX2pC1gAvEKt-bRZUyGXVdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:03:4d:48:be:16:ce:74:61:8c:66:03:3a:e6:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5661697da90b5800bc42adf9b45953219755d0
Validity
Not Before: Oct 19 10:02:52 2025 GMT
Not After : Oct 20 10:02:52 2025 GMT
Subject: CN=5c823a9b6f3a3b0c7b972acba5bf188438e7fcdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:26:e0:2c:e3:7c:02:6c:39:4d:6f:30:1f:09:
d9:69:15:2a:7e:72:40:b8:b4:c5:9c:1c:cf:29:69:
63:93:b9:8f:04:84:58:a2:91:d7:31:1f:96:22:fb:
55:06:86:f2:9d:af:1a:88:b9:92:76:1f:1d:a8:65:
aa:b5:8a:07:dd:dd:85:b8:04:cd:f3:4a:71:12:09:
d1:57:a2:7a:c5:85:12:58:a6:ad:42:41:64:5f:00:
99:de:27:47:88:9a:f4:a9:12:21:7c:e7:0f:d6:d1:
64:d0:4d:f4:37:67:ec:7b:2b:1a:ee:e4:d1:9e:c9:
c3:51:61:6a:9e:94:e7:23:d0:d0:42:4d:5a:ee:b2:
bd:d6:c2:ca:3a:13:04:d8:9a:cd:e4:9a:55:fb:e3:
2a:74:e9:12:d1:07:55:39:d7:20:b4:93:d3:1d:c5:
94:90:f1:e5:15:93:88:98:fa:96:70:8f:22:6f:1c:
46:22:dc:a6:f7:86:22:ad:d1:8d:48:9e:8b:58:5a:
3c:bd:82:ca:f7:aa:42:58:5f:a0:e4:74:e5:e7:c5:
30:60:ee:dc:be:06:9f:06:fc:ed:77:3f:d4:3a:3d:
ce:0d:27:a6:3a:b8:a5:fa:32:12:ec:be:f1:b2:56:
85:4d:bc:e0:85:4c:5c:6b:cf:80:d5:20:39:14:5d:
20:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:82:3A:9B:6F:3A:3B:0C:7B:97:2A:CB:A5:BF:18:84:38:E7:FC:DC
X509v3 Authority Key Identifier:
keyid:8E:56:61:69:7D:A9:0B:58:00:BC:42:AD:F9:B4:59:53:21:97:55:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlZhaX2pC1gAvEKt-bRZUyGXVdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8cf47b-7971-4257-a342-a1c9d3e5fbba/1/jlZhaX2pC1gAvEKt-bRZUyGXVdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:33:8a:74:ad:cd:8f:5a:bc:46:ce:20:d6:a6:38:f8:f4:a6:
57:b9:f3:99:2a:d8:1a:04:27:af:be:4e:77:7f:2d:f3:f7:03:
c0:a9:6a:91:1a:7b:72:3d:b1:0f:0e:18:0a:83:a1:e1:81:0b:
dc:ec:3a:2d:6c:2f:06:d6:b3:84:84:80:8d:ad:8c:4b:8f:1d:
c6:91:d0:61:d6:b4:b9:45:9f:83:45:d6:3d:15:26:41:b0:a0:
b6:ce:54:21:32:c6:01:37:d6:68:7f:23:3b:8c:ef:be:4a:34:
dd:df:27:63:bf:03:c4:77:d9:e5:97:33:2a:a4:bf:eb:90:9a:
5f:8a:20:d2:63:8f:77:93:7b:8f:93:16:3a:f1:42:34:a0:57:
cb:3a:f0:3d:5b:65:7e:cf:82:bd:6c:ad:50:76:45:aa:74:9d:
1c:bd:0d:ae:ea:93:32:9d:9c:a1:d8:93:84:23:e2:57:ad:77:
07:f6:82:03:c4:f2:92:11:93:6d:0d:c5:b1:ef:dd:36:cd:3e:
ab:c4:4b:85:ae:76:c4:3d:66:d1:69:e4:22:e8:92:9a:65:46:
50:b5:3b:0c:2e:d2:fe:1b:99:de:16:97:b1:db:da:d6:0e:5a:
84:a0:d8:6e:bb:64:5c:3b:24:48:ca:fd:a2:01:be:34:51:9e:
ce:5c:b9:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn77ANNSL4WznRhjGYDOuaXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNTY2MTY5N2RhOTBiNTgwMGJjNDJhZGY5YjQ1OTUzMjE5
NzU1ZDAwHhcNMjUxMDE5MTAwMjUyWhcNMjUxMDIwMTAwMjUyWjAzMTEwLwYDVQQD
Eyg1YzgyM2E5YjZmM2EzYjBjN2I5NzJhY2JhNWJmMTg4NDM4ZTdmY2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCbgLON8Amw5TW8wHwnZaRUqfnJA
uLTFnBzPKWljk7mPBIRYopHXMR+WIvtVBobyna8aiLmSdh8dqGWqtYoH3d2FuATN
80pxEgnRV6J6xYUSWKatQkFkXwCZ3idHiJr0qRIhfOcP1tFk0E30N2fseysa7uTR
nsnDUWFqnpTnI9DQQk1a7rK91sLKOhME2JrN5JpV++MqdOkS0QdVOdcgtJPTHcWU
kPHlFZOImPqWcI8ibxxGItym94YirdGNSJ6LWFo8vYLK96pCWF+g5HTl58UwYO7c
vgafBvztdz/UOj3ODSemOril+jIS7L7xslaFTbzghUxca8+A1SA5FF0gYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFyCOptvOjsMe5cqy6W/GIQ45/zcMB8GA1UdIwQY
MBaAFI5WYWl9qQtYALxCrfm0WVMhl1XQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamxaaGFYMnBDMWdBdkVLdC1iUlpVeUdYVmRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny84Y2Y0N2ItNzk3MS00MjU3LWEzNDIt
YTFjOWQzZTVmYmJhLzEvamxaaGFYMnBDMWdBdkVLdC1iUlpVeUdYVmRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny84Y2Y0N2ItNzk3MS00MjU3LWEzNDItYTFjOWQzZTVmYmJh
LzEvamxaaGFYMnBDMWdBdkVLdC1iUlpVeUdYVmRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUDOKdK3N
j1q8Rs4g1qY4+PSmV7nzmSrYGgQnr75Od38t8/cDwKlqkRp7cj2xDw4YCoOh4YEL
3Ow6LWwvBtazhISAja2MS48dxpHQYda0uUWfg0XWPRUmQbCgts5UITLGATfWaH8j
O4zvvko03d8nY78DxHfZ5ZczKqS/65CaX4og0mOPd5N7j5MWOvFCNKBXyzrwPVtl
fs+CvWytUHZFqnSdHL0NruqTMp2codiThCPiV613B/aCA8TykhGTbQ3Fse/dNs0+
q8RLha52xD1m0WnkIuiSmmVGULU7DC7S/huZ3haXsdva1g5ahKDYbrtkXDskSMr9
ogG+NFGezly5kA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:31 2025 by rpki-client