Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft
File: JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft (raw, json)
Hash identifier: LmkXJjcQ5Zgyqm0DwNEcK6KPoAyBjEhZf8Jm/Y50sGU=
Subject key identifier: D6:EF:11:66:F7:C3:F3:B8:57:60:E5:8B:48:8F:1B:2C:E6:80:03:45
Authority key identifier: 26:A0:21:D2:58:73:42:C4:94:53:F1:51:34:22:08:C8:DE:94:4F:2C
Certificate issuer: /CN=26a021d2587342c49453f151342208c8de944f2c
Certificate serial: 0199FB457E6BDF762A5773E6078A1D1BC63C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqAh0lhzQsSUU_FRNCIIyN6UTyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft
Manifest number: 0233
Signing time: Sun 19 Oct 2025 07:00:59 +0000
Manifest this update: Sun 19 Oct 2025 07:00:59 +0000
Manifest next update: Mon 20 Oct 2025 07:00:59 +0000
Files and hashes: 1: JqAh0lhzQsSUU_FRNCIIyN6UTyw.crl (hash: oe2owxm1tuksfuF2yTNPYCvoMFaGTnvLzL+5FL+MpIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqAh0lhzQsSUU_FRNCIIyN6UTyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:7e:6b:df:76:2a:57:73:e6:07:8a:1d:1b:c6:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a021d2587342c49453f151342208c8de944f2c
Validity
Not Before: Oct 19 07:00:59 2025 GMT
Not After : Oct 20 07:00:59 2025 GMT
Subject: CN=d6ef1166f7c3f3b85760e58b488f1b2ce6800345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e1:92:36:2a:24:29:91:e3:79:1f:ac:79:90:
38:ed:70:bc:0c:b5:d5:fc:de:de:ff:c3:81:fe:a0:
2b:28:ed:ab:bd:f8:36:c9:8a:04:7c:14:33:07:11:
43:0f:ec:d3:12:ff:62:06:02:fd:3e:54:9e:fe:eb:
2d:9d:4a:e7:d7:f7:e7:32:42:51:15:69:fd:ab:b1:
46:47:41:45:35:b0:40:e2:d6:2c:29:47:e9:ea:ca:
f2:24:f0:7f:b0:11:37:34:07:fe:77:2b:ff:6e:0d:
63:b8:b7:92:24:2c:a9:ea:32:d5:43:84:31:f0:ce:
29:1d:4d:77:5f:a1:5c:eb:66:93:45:a9:2d:d8:0d:
66:3e:7e:30:4a:27:ae:30:8e:5c:ba:71:36:81:38:
38:2b:2d:2e:bf:dc:68:14:5d:f9:be:1f:b3:e1:12:
b1:6b:a6:20:cf:16:9d:c8:b4:57:f5:d1:86:16:c6:
03:b9:84:0f:e8:8a:80:c3:c8:0a:af:7a:f8:91:e9:
97:81:8f:c4:09:94:44:6f:02:8a:f9:e7:b6:a8:9e:
76:b1:0d:a3:6f:4b:c0:dc:95:6b:97:d4:a2:1b:7d:
d8:72:3f:79:43:f1:9e:fc:38:c1:48:48:e1:76:f5:
e8:d2:7b:53:7d:19:6b:d9:59:35:ef:a9:b5:f1:2a:
6b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:EF:11:66:F7:C3:F3:B8:57:60:E5:8B:48:8F:1B:2C:E6:80:03:45
X509v3 Authority Key Identifier:
keyid:26:A0:21:D2:58:73:42:C4:94:53:F1:51:34:22:08:C8:DE:94:4F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqAh0lhzQsSUU_FRNCIIyN6UTyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:f8:af:c0:f1:d6:46:2d:33:af:d6:48:32:8e:4f:5b:bb:56:
1a:28:40:30:b4:c0:fa:a7:7b:3b:7a:76:aa:82:c5:71:aa:85:
05:67:e2:88:56:1d:f4:d9:34:65:dd:62:45:0f:a6:2d:a6:eb:
ea:d0:dd:d5:76:0d:46:30:bf:7a:ef:96:47:64:65:4f:61:42:
78:c4:28:fa:98:54:a5:55:12:72:fc:de:62:51:bf:6c:00:8e:
f0:b4:ba:ac:da:63:45:4b:54:70:bd:52:98:61:ee:44:e1:98:
b0:12:02:1a:fd:de:21:4d:fa:db:8d:c9:0d:c5:05:45:39:2c:
79:9f:e6:af:16:01:3b:3a:b4:02:19:66:82:06:69:43:b7:b3:
69:04:9a:3e:3b:fc:f2:ad:95:95:5e:72:3d:90:3d:3e:f3:df:
f8:5b:3a:75:5c:2f:8c:e8:3c:26:8b:97:77:e6:7f:e7:6c:0e:
32:cf:f4:2d:4f:07:39:a3:1d:78:c7:bb:55:b7:93:62:28:15:
0e:f3:0e:62:cd:71:1f:40:bc:58:ed:1c:13:90:3b:04:e9:7f:
49:36:c4:27:52:1b:d5:86:d5:b7:48:5c:8b:17:5f:ae:9d:9d:
c5:07:5d:e6:cc:b3:1d:eb:a5:72:62:1b:0b:3e:d9:10:e5:4c:
05:8b:a2:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7RX5r33YqV3PmB4odG8Y8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2YTAyMWQyNTg3MzQyYzQ5NDUzZjE1MTM0MjIwOGM4ZGU5
NDRmMmMwHhcNMjUxMDE5MDcwMDU5WhcNMjUxMDIwMDcwMDU5WjAzMTEwLwYDVQQD
EyhkNmVmMTE2NmY3YzNmM2I4NTc2MGU1OGI0ODhmMWIyY2U2ODAwMzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+GSNiokKZHjeR+seZA47XC8DLXV
/N7e/8OB/qArKO2rvfg2yYoEfBQzBxFDD+zTEv9iBgL9PlSe/ustnUrn1/fnMkJR
FWn9q7FGR0FFNbBA4tYsKUfp6sryJPB/sBE3NAf+dyv/bg1juLeSJCyp6jLVQ4Qx
8M4pHU13X6Fc62aTRakt2A1mPn4wSieuMI5cunE2gTg4Ky0uv9xoFF35vh+z4RKx
a6YgzxadyLRX9dGGFsYDuYQP6IqAw8gKr3r4kemXgY/ECZREbwKK+ee2qJ52sQ2j
b0vA3JVrl9SiG33Ycj95Q/Ge/DjBSEjhdvXo0ntTfRlr2Vk176m18Spr9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNbvEWb3w/O4V2Dli0iPGyzmgANFMB8GA1UdIwQY
MBaAFCagIdJYc0LElFPxUTQiCMjelE8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnFBaDBsaHpRc1NVVV9GUk5DSUl5TjZVVHl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9hNzI2YTgtNzlmNi00NzFmLWI5NzQt
NGEzM2JmNTE4MDFlLzEvSnFBaDBsaHpRc1NVVV9GUk5DSUl5TjZVVHl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9hNzI2YTgtNzlmNi00NzFmLWI5NzQtNGEzM2JmNTE4MDFl
LzEvSnFBaDBsaHpRc1NVVV9GUk5DSUl5TjZVVHl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI/ivwPHW
Ri0zr9ZIMo5PW7tWGihAMLTA+qd7O3p2qoLFcaqFBWfiiFYd9Nk0Zd1iRQ+mLabr
6tDd1XYNRjC/eu+WR2RlT2FCeMQo+phUpVUScvzeYlG/bACO8LS6rNpjRUtUcL1S
mGHuROGYsBICGv3eIU36243JDcUFRTkseZ/mrxYBOzq0AhlmggZpQ7ezaQSaPjv8
8q2VlV5yPZA9PvPf+Fs6dVwvjOg8JouXd+Z/52wOMs/0LU8HOaMdeMe7VbeTYigV
DvMOYs1xH0C8WO0cE5A7BOl/STbEJ1Ib1YbVt0hcixdfrp2dxQdd5syzHeulcmIb
Cz7ZEOVMBYuiFQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:11 2025 by rpki-client