
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft
File: ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft (raw, json)
Hash identifier: KG9qhkOQdKyVI+MF+ttJAoOXW7Q3blxImeQMrYbjus4=
Subject key identifier: 7E:9C:1E:92:D0:55:5B:3B:FC:44:F5:F6:27:73:2B:50:89:80:7E:62
Authority key identifier: 8D:AD:92:77:BA:91:81:9E:B7:34:92:4C:12:5F:87:6A:41:65:9E:AB
Certificate issuer: /CN=8dad9277ba91819eb734924c125f876a41659eab
Certificate serial: 0199FBEB42CD89605A278EAC8FB8B686521A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ja2Sd7qRgZ63NJJMEl-HakFlnqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft
Manifest number: 1097
Signing time: Sun 19 Oct 2025 10:02:03 +0000
Manifest this update: Sun 19 Oct 2025 10:02:03 +0000
Manifest next update: Mon 20 Oct 2025 10:02:03 +0000
Files and hashes: 1: ja2Sd7qRgZ63NJJMEl-HakFlnqs.crl (hash: xsO4Pzg9OvQR0PXUNbkeE8Xo6xJvuJ0r4tmhvNukrNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ja2Sd7qRgZ63NJJMEl-HakFlnqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:42:cd:89:60:5a:27:8e:ac:8f:b8:b6:86:52:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dad9277ba91819eb734924c125f876a41659eab
Validity
Not Before: Oct 19 10:02:03 2025 GMT
Not After : Oct 20 10:02:03 2025 GMT
Subject: CN=7e9c1e92d0555b3bfc44f5f627732b5089807e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:dd:c5:58:80:4c:4a:3f:12:bc:9d:83:2b:26:
10:29:5a:e5:60:9e:4f:49:c7:97:f7:39:1b:24:f6:
3e:ac:99:e4:f8:33:f6:54:12:ea:b2:09:3b:aa:e8:
73:a8:d1:0c:9b:84:42:77:9a:34:4b:d2:52:9a:96:
30:15:19:a5:f5:99:66:cd:1b:18:6b:f4:b8:56:9b:
e0:3c:52:e0:4c:2a:81:7c:e4:af:e2:0d:58:74:81:
e8:de:6e:96:bf:76:1f:f9:e7:13:09:46:f4:e8:e1:
28:ce:cd:1f:f6:b9:51:63:6a:ba:71:00:98:50:89:
0c:62:17:90:17:5c:3a:cc:ce:d4:c9:13:19:8b:7f:
c7:63:28:f1:d5:84:48:1f:11:e5:93:5b:32:d9:72:
13:b8:1b:5f:4c:14:59:db:ca:d5:71:b7:4d:db:89:
27:54:ac:56:a1:3b:f6:a2:eb:5f:ba:f1:12:36:c6:
76:88:c5:66:92:ea:3b:84:41:b1:82:47:50:bd:7a:
66:89:c9:e1:6b:7c:f5:c1:ce:04:27:15:d1:96:c3:
fa:de:ea:27:f3:21:7c:a4:98:1d:fd:25:87:62:7c:
15:ae:db:61:31:c3:37:18:87:2c:ca:38:da:01:86:
43:16:36:b5:d8:00:5d:43:74:24:16:b1:61:ed:e6:
8c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:9C:1E:92:D0:55:5B:3B:FC:44:F5:F6:27:73:2B:50:89:80:7E:62
X509v3 Authority Key Identifier:
keyid:8D:AD:92:77:BA:91:81:9E:B7:34:92:4C:12:5F:87:6A:41:65:9E:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ja2Sd7qRgZ63NJJMEl-HakFlnqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ecb1da-b835-43fa-b602-9149d348a6c7/1/ja2Sd7qRgZ63NJJMEl-HakFlnqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:ed:67:2c:77:a1:d1:c2:42:7c:98:67:3e:c2:30:67:ca:d4:
f6:51:28:f0:2f:d9:f5:1e:c3:7c:be:2a:39:2f:46:1f:6c:a3:
22:a9:a5:1e:d3:6c:87:62:2c:f3:89:a3:a6:23:ee:71:46:c2:
e7:94:73:bf:4a:09:fd:18:6a:f3:69:c4:3e:2d:c0:30:bf:4d:
59:a8:1e:0e:e7:83:30:a7:27:ce:32:ce:7f:4f:b0:7e:77:83:
6d:ad:7b:f0:f8:43:3b:57:01:10:72:58:f7:29:c8:a8:96:32:
08:a7:63:49:87:da:93:24:f7:f8:21:81:3e:37:60:79:78:12:
70:b9:99:f0:48:36:1f:e2:63:eb:4e:60:62:08:4f:ef:59:3a:
92:35:a0:1a:38:45:f5:f4:53:0d:3b:1d:6e:a5:91:b8:ae:13:
b2:f3:e8:13:24:c9:a3:e1:2e:4a:a6:ec:4a:ad:8f:e8:bb:4c:
10:23:5b:b0:f8:ac:66:9a:c6:e1:76:07:e5:52:64:7b:1c:c9:
ac:26:9a:bf:b2:1c:dd:08:5b:78:18:dd:17:81:65:4f:0f:cc:
6d:15:a5:cf:55:f7:d4:67:0a:73:c5:00:d2:3b:d1:c4:1b:9f:
ca:f5:27:f5:9c:f0:7b:2d:87:63:c1:4d:9a:d1:6e:01:5b:c4:
7f:ea:6c:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn760LNiWBaJ46sj7i2hlIaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYWQ5Mjc3YmE5MTgxOWViNzM0OTI0YzEyNWY4NzZhNDE2
NTllYWIwHhcNMjUxMDE5MTAwMjAzWhcNMjUxMDIwMTAwMjAzWjAzMTEwLwYDVQQD
Eyg3ZTljMWU5MmQwNTU1YjNiZmM0NGY1ZjYyNzczMmI1MDg5ODA3ZTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzN3FWIBMSj8SvJ2DKyYQKVrlYJ5P
SceX9zkbJPY+rJnk+DP2VBLqsgk7quhzqNEMm4RCd5o0S9JSmpYwFRml9ZlmzRsY
a/S4VpvgPFLgTCqBfOSv4g1YdIHo3m6Wv3Yf+ecTCUb06OEozs0f9rlRY2q6cQCY
UIkMYheQF1w6zM7UyRMZi3/HYyjx1YRIHxHlk1sy2XITuBtfTBRZ28rVcbdN24kn
VKxWoTv2outfuvESNsZ2iMVmkuo7hEGxgkdQvXpmicnha3z1wc4EJxXRlsP63uon
8yF8pJgd/SWHYnwVrtthMcM3GIcsyjjaAYZDFja12ABdQ3QkFrFh7eaMPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6cHpLQVVs7/ET19idzK1CJgH5iMB8GA1UdIwQY
MBaAFI2tkne6kYGetzSSTBJfh2pBZZ6rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamEyU2Q3cVJnWjYzTkpKTUVsLUhha0ZsbnFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9lY2IxZGEtYjgzNS00M2ZhLWI2MDIt
OTE0OWQzNDhhNmM3LzEvamEyU2Q3cVJnWjYzTkpKTUVsLUhha0ZsbnFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9lY2IxZGEtYjgzNS00M2ZhLWI2MDItOTE0OWQzNDhhNmM3
LzEvamEyU2Q3cVJnWjYzTkpKTUVsLUhha0ZsbnFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv+1nLHeh
0cJCfJhnPsIwZ8rU9lEo8C/Z9R7DfL4qOS9GH2yjIqmlHtNsh2Is84mjpiPucUbC
55Rzv0oJ/Rhq82nEPi3AML9NWageDueDMKcnzjLOf0+wfneDba178PhDO1cBEHJY
9ynIqJYyCKdjSYfakyT3+CGBPjdgeXgScLmZ8Eg2H+Jj605gYghP71k6kjWgGjhF
9fRTDTsdbqWRuK4TsvPoEyTJo+EuSqbsSq2P6LtMECNbsPisZprG4XYH5VJkexzJ
rCaav7Ic3QhbeBjdF4FlTw/MbRWlz1X31GcKc8UA0jvRxBufyvUn9Zzwey2HY8FN
mtFuAVvEf+ps0w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:58 2025 by rpki-client