Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft
File: jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft (raw, json)
Hash identifier: tCq1um2zHhblyws5Xb8CR8hadSuhAuvbYGPJsxI0YsM=
Subject key identifier: 3F:A6:E2:9F:BA:55:FA:E0:42:A3:D5:E3:56:CE:47:33:A0:07:E6:AC
Authority key identifier: 8C:08:36:3E:5C:10:67:AD:18:8C:38:03:90:B0:9D:09:A6:2A:17:09
Certificate issuer: /CN=8c08363e5c1067ad188c380390b09d09a62a1709
Certificate serial: 0199FC58A6B3AEC1CC31FA4A83DB8248F694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAg2PlwQZ60YjDgDkLCdCaYqFwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft
Manifest number: 045C
Signing time: Sun 19 Oct 2025 12:01:32 +0000
Manifest this update: Sun 19 Oct 2025 12:01:32 +0000
Manifest next update: Mon 20 Oct 2025 12:01:32 +0000
Files and hashes: 1: jAg2PlwQZ60YjDgDkLCdCaYqFwk.crl (hash: 3LJNqbAdpVzeo9TnjT90NCJ/6rAidaS7y8ffIOmBJAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAg2PlwQZ60YjDgDkLCdCaYqFwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:a6:b3:ae:c1:cc:31:fa:4a:83:db:82:48:f6:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c08363e5c1067ad188c380390b09d09a62a1709
Validity
Not Before: Oct 19 12:01:32 2025 GMT
Not After : Oct 20 12:01:32 2025 GMT
Subject: CN=3fa6e29fba55fae042a3d5e356ce4733a007e6ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c0:f2:95:48:ed:99:d4:d2:44:b2:6f:6b:37:
6f:48:bd:c4:f7:1e:42:68:c9:d4:d0:0f:84:ac:02:
51:01:40:a3:f0:8c:91:fb:5d:73:90:4b:a7:27:0f:
05:35:a0:a1:c3:33:2a:96:60:8d:70:a5:c8:1b:07:
19:a0:43:94:28:86:3e:b1:af:b0:44:d6:29:f2:b1:
78:75:69:5e:5d:7c:46:1b:54:2c:84:41:f8:da:97:
e8:91:27:c0:c6:df:79:b5:4f:f9:9a:9b:d0:1b:53:
76:e8:cf:4f:b9:76:57:3d:34:ea:3b:e3:e3:db:b5:
1f:a6:34:8a:02:26:df:f8:6d:8a:6d:d4:89:72:6b:
14:83:3c:0a:2e:73:f5:00:c9:d3:e7:86:c0:81:98:
4b:0d:0e:fc:d5:65:dd:8e:ee:e0:6a:6f:46:05:5c:
4b:d2:30:b4:63:41:47:5f:2b:7d:c1:b9:d2:68:a0:
d4:d1:7b:6e:8b:5d:ae:8b:82:50:9d:c8:cb:fb:dd:
f6:1f:16:2a:42:d0:e3:52:e8:98:49:bd:83:cf:54:
81:10:4f:24:f1:70:67:09:66:ab:18:6f:45:d6:33:
d9:66:e0:0f:48:ad:fb:05:d6:38:1c:51:4d:48:79:
72:07:5c:9f:0e:83:ff:a5:48:27:76:cd:3a:1e:7b:
e2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A6:E2:9F:BA:55:FA:E0:42:A3:D5:E3:56:CE:47:33:A0:07:E6:AC
X509v3 Authority Key Identifier:
keyid:8C:08:36:3E:5C:10:67:AD:18:8C:38:03:90:B0:9D:09:A6:2A:17:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAg2PlwQZ60YjDgDkLCdCaYqFwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e93311-fc3b-41bd-8cc6-b87ab6b0a029/1/jAg2PlwQZ60YjDgDkLCdCaYqFwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:65:08:09:9d:17:da:a5:3c:11:12:96:90:c8:57:86:9a:5e:
56:7c:ac:89:5f:c6:5e:38:0b:b5:9e:d7:5a:33:32:7b:a6:25:
b2:61:b7:5e:87:b3:44:3a:89:33:8d:44:84:6f:ec:80:0b:3f:
bc:00:5b:52:e2:2c:c6:21:07:e0:6c:51:c9:5a:80:af:15:ec:
71:f9:5d:d3:0d:6e:1a:a5:aa:6d:5c:5a:19:f2:60:b1:5b:20:
8e:2b:3c:4e:65:f9:48:d9:a9:7f:b5:18:e6:04:44:b3:a8:fa:
28:5c:53:c0:4d:39:14:d8:7b:53:46:48:a4:ba:f3:e8:5d:5d:
4c:52:bf:1a:5c:b3:1a:71:bb:00:0e:8e:02:c8:75:77:32:78:
ca:05:2b:56:94:21:86:7f:c0:60:53:dd:f7:e5:8c:3e:d9:82:
d5:04:88:ef:22:05:2c:0f:8c:ed:ea:a8:e0:3a:09:b1:79:49:
52:a3:e6:fe:0f:63:96:ef:a7:ff:99:d0:09:7d:18:c8:ad:04:
5c:1d:0b:80:e9:4c:7f:2e:b3:d9:02:d6:3a:e8:04:82:42:54:
43:76:80:3f:9d:fc:b0:c9:4b:ff:70:b4:b1:42:95:f6:e7:fa:
89:b3:dd:50:02:fd:30:2f:cb:5c:49:bd:83:fe:b6:09:85:2f:
d7:54:2a:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WKazrsHMMfpKg9uCSPaUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMDgzNjNlNWMxMDY3YWQxODhjMzgwMzkwYjA5ZDA5YTYy
YTE3MDkwHhcNMjUxMDE5MTIwMTMyWhcNMjUxMDIwMTIwMTMyWjAzMTEwLwYDVQQD
EygzZmE2ZTI5ZmJhNTVmYWUwNDJhM2Q1ZTM1NmNlNDczM2EwMDdlNmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cDylUjtmdTSRLJvazdvSL3E9x5C
aMnU0A+ErAJRAUCj8IyR+11zkEunJw8FNaChwzMqlmCNcKXIGwcZoEOUKIY+sa+w
RNYp8rF4dWleXXxGG1QshEH42pfokSfAxt95tU/5mpvQG1N26M9PuXZXPTTqO+Pj
27UfpjSKAibf+G2KbdSJcmsUgzwKLnP1AMnT54bAgZhLDQ781WXdju7gam9GBVxL
0jC0Y0FHXyt9wbnSaKDU0Xtui12ui4JQncjL+932HxYqQtDjUuiYSb2Dz1SBEE8k
8XBnCWarGG9F1jPZZuAPSK37BdY4HFFNSHlyB1yfDoP/pUgnds06HnviQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+m4p+6VfrgQqPV41bORzOgB+asMB8GA1UdIwQY
MBaAFIwINj5cEGetGIw4A5CwnQmmKhcJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakFnMlBsd1FaNjBZakRnRGtMQ2RDYVlxRndrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9lOTMzMTEtZmMzYi00MWJkLThjYzYt
Yjg3YWI2YjBhMDI5LzEvakFnMlBsd1FaNjBZakRnRGtMQ2RDYVlxRndrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9lOTMzMTEtZmMzYi00MWJkLThjYzYtYjg3YWI2YjBhMDI5
LzEvakFnMlBsd1FaNjBZakRnRGtMQ2RDYVlxRndrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN2UICZ0X
2qU8ERKWkMhXhppeVnysiV/GXjgLtZ7XWjMye6YlsmG3XoezRDqJM41EhG/sgAs/
vABbUuIsxiEH4GxRyVqArxXscfld0w1uGqWqbVxaGfJgsVsgjis8TmX5SNmpf7UY
5gREs6j6KFxTwE05FNh7U0ZIpLrz6F1dTFK/GlyzGnG7AA6OAsh1dzJ4ygUrVpQh
hn/AYFPd9+WMPtmC1QSI7yIFLA+M7eqo4DoJsXlJUqPm/g9jlu+n/5nQCX0YyK0E
XB0LgOlMfy6z2QLWOugEgkJUQ3aAP538sMlL/3C0sUKV9uf6ibPdUAL9MC/LXEm9
g/62CYUv11QqUw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:46 2025 by rpki-client