Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft
File: jAmWt03P0bu4ZvLrrU4W_cyStjs.mft (raw, json)
Hash identifier: ZIhwCVhle9yhb1GVOPQAWqgwD8qeYDMn3SHyyRZxpE0=
Subject key identifier: D2:3B:D0:9E:A5:7B:CD:40:1E:17:F5:11:90:05:4E:FE:3B:1C:28:A9
Authority key identifier: 8C:09:96:B7:4D:CF:D1:BB:B8:66:F2:EB:AD:4E:16:FD:CC:92:B6:3B
Certificate issuer: /CN=8c0996b74dcfd1bbb866f2ebad4e16fdcc92b63b
Certificate serial: 0199FC8F9FE0350DFE677623964413F14202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAmWt03P0bu4ZvLrrU4W_cyStjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft
Manifest number: 07CA
Signing time: Sun 19 Oct 2025 13:01:34 +0000
Manifest this update: Sun 19 Oct 2025 13:01:34 +0000
Manifest next update: Mon 20 Oct 2025 13:01:34 +0000
Files and hashes: 1: jAmWt03P0bu4ZvLrrU4W_cyStjs.crl (hash: CVz5szAEcT5bvIFUC5rMar1Hs/7pntWvgG9jeq+Ou9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAmWt03P0bu4ZvLrrU4W_cyStjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:9f:e0:35:0d:fe:67:76:23:96:44:13:f1:42:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c0996b74dcfd1bbb866f2ebad4e16fdcc92b63b
Validity
Not Before: Oct 19 13:01:34 2025 GMT
Not After : Oct 20 13:01:34 2025 GMT
Subject: CN=d23bd09ea57bcd401e17f51190054efe3b1c28a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:48:0f:7d:20:65:c6:87:d1:61:3a:ab:83:ee:
bc:cd:2b:86:9a:ac:4b:9b:1a:fe:26:ed:52:8a:9a:
64:af:f1:41:8c:5d:93:93:3b:b6:67:66:55:49:7b:
d7:d5:77:12:47:1e:41:6c:87:3e:db:27:f2:3f:c3:
68:ef:9e:cc:ad:5c:a8:55:ca:be:2b:62:33:62:be:
39:25:39:e7:99:7a:cf:58:e7:78:17:65:36:42:df:
aa:57:71:76:19:b7:fc:6b:4f:de:0c:9a:66:37:9d:
58:65:5a:50:f4:44:95:20:e3:42:8e:fe:e9:95:cc:
a3:ec:f6:65:ff:46:87:5f:e7:6b:35:c1:2f:7c:81:
3f:50:0d:05:7a:7a:71:d2:6c:1c:8b:9f:0e:9c:ac:
9d:c3:89:99:45:9d:bc:bc:68:ec:66:c1:2c:64:70:
c2:6c:8c:b8:38:6d:87:36:f9:ca:31:41:6c:4f:fa:
64:bb:c7:cd:0a:99:ce:7f:b6:25:cf:af:b2:37:4c:
2e:cc:78:b1:bb:d2:d9:72:14:09:13:8d:14:d2:26:
f7:f7:44:24:6a:7f:37:ab:66:95:fb:95:be:76:1c:
e7:3a:29:f7:54:e2:64:87:87:fe:81:c7:6a:1c:cf:
10:fe:51:66:48:b8:7b:fe:5d:fe:e2:a3:82:59:85:
5f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:3B:D0:9E:A5:7B:CD:40:1E:17:F5:11:90:05:4E:FE:3B:1C:28:A9
X509v3 Authority Key Identifier:
keyid:8C:09:96:B7:4D:CF:D1:BB:B8:66:F2:EB:AD:4E:16:FD:CC:92:B6:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAmWt03P0bu4ZvLrrU4W_cyStjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ad7ef1-b228-4135-8e39-b1ac89f31d46/1/jAmWt03P0bu4ZvLrrU4W_cyStjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:40:ad:10:46:40:c4:66:7e:f1:b2:db:d3:37:79:0d:8f:68:
86:b1:f5:0e:bd:f3:69:74:3a:92:c7:22:c2:af:f2:83:05:b5:
9e:57:ac:39:6f:58:fd:de:22:27:3f:49:a9:f5:c8:05:a1:32:
74:06:78:6a:22:7d:5b:3e:1a:71:4b:d4:2a:69:3b:7f:f9:73:
03:c5:58:d3:d1:ea:94:3d:03:11:2e:de:c2:c7:a4:94:b2:f1:
8a:35:99:d9:ba:2d:56:bc:d2:8f:b3:82:6e:43:29:e2:08:b9:
9f:0d:00:bb:37:42:13:4c:4d:f5:91:4a:10:94:68:e2:93:4f:
97:16:0a:6c:64:ad:e5:33:ea:6c:0c:b7:7a:41:75:93:6e:c6:
56:1f:d5:73:4f:12:bd:88:b8:85:35:35:15:04:f4:f4:49:aa:
dd:36:cb:77:58:a2:eb:da:f6:cd:45:57:f0:6e:73:e0:76:98:
3e:0a:6d:f0:3c:9f:f8:be:f9:fa:12:cf:3d:c1:ca:9a:a6:f0:
4c:b4:97:99:b6:2a:1a:14:e2:34:55:c7:56:26:0c:df:4a:46:
55:49:88:6f:d6:4b:e0:a0:2f:63:57:c5:3b:16:19:84:45:43:
d1:6c:1e:13:ed:b4:70:32:5b:8e:a3:8c:fb:ca:11:cd:7a:cc:
cc:6c:3d:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j5/gNQ3+Z3YjlkQT8UICMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMDk5NmI3NGRjZmQxYmJiODY2ZjJlYmFkNGUxNmZkY2M5
MmI2M2IwHhcNMjUxMDE5MTMwMTM0WhcNMjUxMDIwMTMwMTM0WjAzMTEwLwYDVQQD
EyhkMjNiZDA5ZWE1N2JjZDQwMWUxN2Y1MTE5MDA1NGVmZTNiMWMyOGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEgPfSBlxofRYTqrg+68zSuGmqxL
mxr+Ju1Sippkr/FBjF2Tkzu2Z2ZVSXvX1XcSRx5BbIc+2yfyP8No757MrVyoVcq+
K2IzYr45JTnnmXrPWOd4F2U2Qt+qV3F2Gbf8a0/eDJpmN51YZVpQ9ESVIONCjv7p
lcyj7PZl/0aHX+drNcEvfIE/UA0Fenpx0mwci58OnKydw4mZRZ28vGjsZsEsZHDC
bIy4OG2HNvnKMUFsT/pku8fNCpnOf7Ylz6+yN0wuzHixu9LZchQJE40U0ib390Qk
an83q2aV+5W+dhznOin3VOJkh4f+gcdqHM8Q/lFmSLh7/l3+4qOCWYVfmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNI70J6le81AHhf1EZAFTv47HCipMB8GA1UdIwQY
MBaAFIwJlrdNz9G7uGby661OFv3MkrY7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakFtV3QwM1AwYnU0WnZMcnJVNFdfY3lTdGpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9hZDdlZjEtYjIyOC00MTM1LThlMzkt
YjFhYzg5ZjMxZDQ2LzEvakFtV3QwM1AwYnU0WnZMcnJVNFdfY3lTdGpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9hZDdlZjEtYjIyOC00MTM1LThlMzktYjFhYzg5ZjMxZDQ2
LzEvakFtV3QwM1AwYnU0WnZMcnJVNFdfY3lTdGpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARECtEEZA
xGZ+8bLb0zd5DY9ohrH1Dr3zaXQ6ksciwq/ygwW1nlesOW9Y/d4iJz9JqfXIBaEy
dAZ4aiJ9Wz4acUvUKmk7f/lzA8VY09HqlD0DES7ewseklLLxijWZ2botVrzSj7OC
bkMp4gi5nw0AuzdCE0xN9ZFKEJRo4pNPlxYKbGSt5TPqbAy3ekF1k27GVh/Vc08S
vYi4hTU1FQT09Emq3TbLd1ii69r2zUVX8G5z4HaYPgpt8Dyf+L75+hLPPcHKmqbw
TLSXmbYqGhTiNFXHViYM30pGVUmIb9ZL4KAvY1fFOxYZhEVD0WweE+20cDJbjqOM
+8oRzXrMzGw9RA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:00 2025 by rpki-client