
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
File: JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft (raw, json)
Hash identifier: L0q9rvYomfXz2mMq42e8xIgiv6w5UYrHKfFISMMzH68=
Subject key identifier: 9A:38:4C:12:C0:C9:75:E2:F5:ED:0A:3B:9B:E9:4A:AE:F2:10:0E:81
Authority key identifier: 25:DB:00:61:F2:D8:AE:14:03:49:7C:A1:7E:1A:88:DF:23:04:8F:93
Certificate issuer: /CN=25db0061f2d8ae1403497ca17e1a88df23048f93
Certificate serial: 0199FBEB5FB2A2355F736596C87FFED0E46A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
Manifest number: 1554
Signing time: Sun 19 Oct 2025 10:02:10 +0000
Manifest this update: Sun 19 Oct 2025 10:02:10 +0000
Manifest next update: Mon 20 Oct 2025 10:02:10 +0000
Files and hashes: 1: JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl (hash: HBm2vj1OxDYut3IavTsyfVOmc6Iu3N/YZNsOnyPm8tU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:5f:b2:a2:35:5f:73:65:96:c8:7f:fe:d0:e4:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25db0061f2d8ae1403497ca17e1a88df23048f93
Validity
Not Before: Oct 19 10:02:10 2025 GMT
Not After : Oct 20 10:02:10 2025 GMT
Subject: CN=9a384c12c0c975e2f5ed0a3b9be94aaef2100e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:08:0b:4d:37:ae:14:a7:59:a1:2a:5e:36:49:
22:01:6f:cd:61:54:7a:5a:f3:a9:1c:f3:49:2f:99:
a0:85:3f:67:8a:bf:d1:22:4c:9d:8a:5b:d8:99:be:
65:00:0f:2b:c8:e0:6e:f1:22:02:ab:4d:08:1c:d9:
82:04:ac:80:e6:de:c3:70:8f:10:19:b3:72:63:7d:
1b:3f:2b:77:a9:54:f4:8d:4d:27:27:3c:d8:2c:2d:
ba:d8:64:43:c5:cd:d9:ce:0d:99:26:fa:18:7e:df:
d9:c8:f1:ad:71:04:b6:e9:ec:41:41:8e:10:ba:10:
53:4e:21:48:ea:e6:91:9b:a9:8a:0b:ae:95:fc:74:
39:ce:81:8d:9f:25:66:20:8d:4c:c4:cc:e3:bb:d3:
83:dc:9e:59:7d:15:4d:a7:36:13:9d:d4:30:94:4c:
a4:55:bc:7e:7a:4f:78:92:95:2e:fb:f9:20:87:eb:
72:89:5b:df:0d:cf:20:ea:1a:f3:67:97:8d:c3:ec:
b1:f2:64:56:91:d5:42:52:ab:00:56:7b:97:1b:b4:
7c:37:57:9a:1a:9e:43:9d:59:71:a1:d8:86:c1:c3:
52:2e:3b:60:19:5c:09:51:6d:49:52:d5:a8:66:e6:
b4:31:ea:23:06:cf:a1:4e:88:13:27:76:07:f2:d4:
59:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:38:4C:12:C0:C9:75:E2:F5:ED:0A:3B:9B:E9:4A:AE:F2:10:0E:81
X509v3 Authority Key Identifier:
keyid:25:DB:00:61:F2:D8:AE:14:03:49:7C:A1:7E:1A:88:DF:23:04:8F:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdsAYfLYrhQDSXyhfhqI3yMEj5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c9be93-3a58-4cec-8a6b-2acbe3d53dfb/1/JdsAYfLYrhQDSXyhfhqI3yMEj5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:80:a7:77:0d:de:b7:7f:75:ff:e9:94:9e:60:00:98:bd:05:
6d:46:c7:4a:f9:19:9f:8e:a5:bd:9b:bd:44:42:7d:02:a1:94:
21:6d:a4:e8:ad:ea:1e:94:44:c5:33:ae:53:23:56:02:b5:14:
e0:b8:73:f2:63:31:7d:aa:b9:5d:ce:15:ca:a1:19:90:1f:0e:
fa:09:d5:d1:44:f7:75:18:ff:1d:32:15:d5:79:28:e1:e5:23:
09:4e:fa:b9:9a:88:06:2d:a9:9e:92:be:9c:bd:09:b0:b4:f6:
ff:38:14:60:4d:ce:6c:ad:a1:27:8c:eb:6f:20:f4:af:e9:5a:
3f:d7:a4:1f:e5:f1:40:24:2f:89:ae:cc:3d:57:dc:58:b0:c3:
f4:bc:56:aa:61:6c:0d:bb:67:0e:1a:9d:cf:5c:00:c3:a3:ac:
ad:fc:32:aa:70:a1:f8:41:e4:f4:9e:4b:01:c3:a5:bb:7e:67:
ee:63:e9:db:29:82:85:66:87:e1:1f:69:de:47:f2:d9:13:1d:
d4:32:b8:02:6f:42:f0:9a:a8:e3:20:8a:72:95:d4:51:6b:d4:
5f:0e:f2:ed:90:48:29:89:9f:43:0b:bf:03:c9:e0:a2:97:f5:
8d:da:cf:db:a3:86:c9:fb:c6:76:fa:8f:51:9c:17:f4:74:98:
09:d7:29:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn761+yojVfc2WWyH/+0ORqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZGIwMDYxZjJkOGFlMTQwMzQ5N2NhMTdlMWE4OGRmMjMw
NDhmOTMwHhcNMjUxMDE5MTAwMjEwWhcNMjUxMDIwMTAwMjEwWjAzMTEwLwYDVQQD
Eyg5YTM4NGMxMmMwYzk3NWUyZjVlZDBhM2I5YmU5NGFhZWYyMTAwZTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+AgLTTeuFKdZoSpeNkkiAW/NYVR6
WvOpHPNJL5mghT9nir/RIkydilvYmb5lAA8ryOBu8SICq00IHNmCBKyA5t7DcI8Q
GbNyY30bPyt3qVT0jU0nJzzYLC262GRDxc3Zzg2ZJvoYft/ZyPGtcQS26exBQY4Q
uhBTTiFI6uaRm6mKC66V/HQ5zoGNnyVmII1MxMzju9OD3J5ZfRVNpzYTndQwlEyk
Vbx+ek94kpUu+/kgh+tyiVvfDc8g6hrzZ5eNw+yx8mRWkdVCUqsAVnuXG7R8N1ea
Gp5DnVlxodiGwcNSLjtgGVwJUW1JUtWoZua0MeojBs+hTogTJ3YH8tRZGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJo4TBLAyXXi9e0KO5vpSq7yEA6BMB8GA1UdIwQY
MBaAFCXbAGHy2K4UA0l8oX4aiN8jBI+TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmRzQVlmTFlyaFFEU1h5aGZocUkzeU1FajVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9jOWJlOTMtM2E1OC00Y2VjLThhNmIt
MmFjYmUzZDUzZGZiLzEvSmRzQVlmTFlyaFFEU1h5aGZocUkzeU1FajVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9jOWJlOTMtM2E1OC00Y2VjLThhNmItMmFjYmUzZDUzZGZi
LzEvSmRzQVlmTFlyaFFEU1h5aGZocUkzeU1FajVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOYCndw3e
t391/+mUnmAAmL0FbUbHSvkZn46lvZu9REJ9AqGUIW2k6K3qHpRExTOuUyNWArUU
4Lhz8mMxfaq5Xc4VyqEZkB8O+gnV0UT3dRj/HTIV1Xko4eUjCU76uZqIBi2pnpK+
nL0JsLT2/zgUYE3ObK2hJ4zrbyD0r+laP9ekH+XxQCQvia7MPVfcWLDD9LxWqmFs
DbtnDhqdz1wAw6OsrfwyqnCh+EHk9J5LAcOlu35n7mPp2ymChWaH4R9p3kfy2RMd
1DK4Am9C8Jqo4yCKcpXUUWvUXw7y7ZBIKYmfQwu/A8ngopf1jdrP26OGyfvGdvqP
UZwX9HSYCdcpOw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:55 2025 by rpki-client