Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.mft
File: J0hgAkaZUbaABwTI8CysdLX4KQU.mft (raw, json)
Hash identifier: 5/v/xVFs1pLLjpSJMHlWyayGpFyK+zh8njpb9/kpi9E=
Subject key identifier: 78:A7:9F:4A:5F:F7:F8:4A:BF:C6:B7:A6:FD:8E:F0:D0:78:03:AE:6D
Authority key identifier: 27:48:60:02:46:99:51:B6:80:07:04:C8:F0:2C:AC:74:B5:F8:29:05
Certificate issuer: /CN=27486002469951b6800704c8f02cac74b5f82905
Certificate serial: 0198D473ABB701ED0D690F4371A1579046F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0hgAkaZUbaABwTI8CysdLX4KQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.mft
Manifest number: 050A
Signing time: Sat 23 Aug 2025 01:03:27 +0000
Manifest this update: Sat 23 Aug 2025 01:03:27 +0000
Manifest next update: Sun 24 Aug 2025 01:03:27 +0000
Files and hashes: 1: J0hgAkaZUbaABwTI8CysdLX4KQU.crl (hash: MALsjcvPKg40i+fe+UN2SK/qbjWi2zksJ5hAV901+0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0hgAkaZUbaABwTI8CysdLX4KQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:ab:b7:01:ed:0d:69:0f:43:71:a1:57:90:46:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27486002469951b6800704c8f02cac74b5f82905
Validity
Not Before: Aug 23 01:03:27 2025 GMT
Not After : Aug 24 01:03:27 2025 GMT
Subject: CN=78a79f4a5ff7f84abfc6b7a6fd8ef0d07803ae6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:26:24:08:ab:ba:b2:d4:61:c1:56:df:02:5a:
2c:bd:65:1d:1d:a2:89:24:39:2c:35:fb:72:97:ce:
8b:52:b8:b3:16:e9:f4:9c:0b:9c:32:c8:35:49:47:
39:b8:21:2a:20:9d:6d:27:b4:b9:05:29:cb:47:59:
42:76:9a:46:8a:1c:40:93:84:66:a7:95:9f:3d:50:
82:37:7d:ca:b9:b5:c5:93:21:3f:25:75:f1:7c:a4:
51:aa:aa:ee:fd:20:a3:6a:47:af:cc:a8:a6:8e:d8:
8c:3f:4b:ba:24:62:d5:ff:f4:19:2e:9f:c3:ce:7a:
69:3e:c6:ac:87:2f:66:d8:89:f9:75:7b:d0:9c:a8:
b7:b8:d7:88:80:59:1e:ab:ef:32:7e:a4:7f:ab:52:
47:1f:0d:26:73:cf:81:a5:28:4e:17:87:9a:a4:5a:
97:bf:3e:5f:50:e7:04:69:09:13:38:2f:38:cf:32:
2b:a7:6a:1f:e2:25:77:63:38:f0:40:19:6f:5a:a8:
e8:b0:99:f9:f0:eb:e2:fe:2d:3a:9b:45:cb:2c:01:
cd:c7:6b:81:ca:cc:bc:5c:85:6e:e2:5d:78:2b:94:
f9:f2:2f:86:9c:85:2a:2b:85:65:85:f2:dd:08:86:
a8:19:9c:a9:87:14:25:50:cb:4e:19:da:2c:1e:a6:
e7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A7:9F:4A:5F:F7:F8:4A:BF:C6:B7:A6:FD:8E:F0:D0:78:03:AE:6D
X509v3 Authority Key Identifier:
keyid:27:48:60:02:46:99:51:B6:80:07:04:C8:F0:2C:AC:74:B5:F8:29:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hgAkaZUbaABwTI8CysdLX4KQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6f58fb-7379-42ab-863c-c4eb6df974ad/1/J0hgAkaZUbaABwTI8CysdLX4KQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:00:0b:12:a3:06:65:75:86:fb:2a:45:21:86:6d:8e:19:ad:
87:ea:d6:b8:45:f1:0b:28:94:05:99:6b:26:51:0d:8f:a7:23:
1f:01:13:ff:b9:a8:e1:d6:33:e6:83:19:ea:88:61:d7:60:f3:
27:43:52:c0:8e:ee:6c:ba:12:5d:ba:7c:ed:d0:c1:8e:7f:13:
fa:f2:17:e1:e5:ff:2f:1e:28:ff:93:01:71:16:2a:77:fb:a9:
46:87:38:4c:32:01:c3:3f:71:32:3d:4d:d1:75:07:4e:2b:45:
53:a7:c0:17:67:69:2e:07:a5:ef:90:7c:7f:0a:38:89:03:0c:
f0:c0:7a:ab:47:54:c1:72:11:90:2f:d5:17:ea:f8:87:9b:a4:
82:e7:e3:83:32:c8:9f:90:b9:7c:9b:bb:74:8f:56:b8:b6:1e:
91:a1:28:12:8f:13:99:3f:28:ca:8b:3d:98:a2:32:3a:d6:e2:
3e:87:1a:16:b4:b5:66:6c:21:c4:db:f9:59:32:a8:7b:28:ef:
3f:d8:28:8b:70:27:31:ff:b3:1a:eb:df:0b:8a:ae:1d:0c:c5:
97:26:62:6c:a7:27:91:3f:ea:da:38:e5:75:00:cf:5e:16:69:
15:19:3c:85:ca:82:b6:98:80:83:85:72:0f:f5:bf:15:4e:38:
70:e6:2e:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc6u3Ae0NaQ9DcaFXkEb0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NDg2MDAyNDY5OTUxYjY4MDA3MDRjOGYwMmNhYzc0YjVm
ODI5MDUwHhcNMjUwODIzMDEwMzI3WhcNMjUwODI0MDEwMzI3WjAzMTEwLwYDVQQD
Eyg3OGE3OWY0YTVmZjdmODRhYmZjNmI3YTZmZDhlZjBkMDc4MDNhZTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5iYkCKu6stRhwVbfAlosvWUdHaKJ
JDksNftyl86LUrizFun0nAucMsg1SUc5uCEqIJ1tJ7S5BSnLR1lCdppGihxAk4Rm
p5WfPVCCN33KubXFkyE/JXXxfKRRqqru/SCjakevzKimjtiMP0u6JGLV//QZLp/D
znppPsashy9m2In5dXvQnKi3uNeIgFkeq+8yfqR/q1JHHw0mc8+BpShOF4eapFqX
vz5fUOcEaQkTOC84zzIrp2of4iV3YzjwQBlvWqjosJn58Ovi/i06m0XLLAHNx2uB
ysy8XIVu4l14K5T58i+GnIUqK4VlhfLdCIaoGZyphxQlUMtOGdosHqbnyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHinn0pf9/hKv8a3pv2O8NB4A65tMB8GA1UdIwQY
MBaAFCdIYAJGmVG2gAcEyPAsrHS1+CkFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjBoZ0FrYVpVYmFBQndUSThDeXNkTFg0S1FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82ZjU4ZmItNzM3OS00MmFiLTg2M2Mt
YzRlYjZkZjk3NGFkLzEvSjBoZ0FrYVpVYmFBQndUSThDeXNkTFg0S1FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy82ZjU4ZmItNzM3OS00MmFiLTg2M2MtYzRlYjZkZjk3NGFk
LzEvSjBoZ0FrYVpVYmFBQndUSThDeXNkTFg0S1FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkgALEqMG
ZXWG+ypFIYZtjhmth+rWuEXxCyiUBZlrJlENj6cjHwET/7mo4dYz5oMZ6ohh12Dz
J0NSwI7ubLoSXbp87dDBjn8T+vIX4eX/Lx4o/5MBcRYqd/upRoc4TDIBwz9xMj1N
0XUHTitFU6fAF2dpLgel75B8fwo4iQMM8MB6q0dUwXIRkC/VF+r4h5ukgufjgzLI
n5C5fJu7dI9WuLYekaEoEo8TmT8oyos9mKIyOtbiPocaFrS1ZmwhxNv5WTKoeyjv
P9goi3AnMf+zGuvfC4quHQzFlyZibKcnkT/q2jjldQDPXhZpFRk8hcqCtpiAg4Vy
D/W/FU44cOYupg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:23 2025 by rpki-client