Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft
File: jNspNdndDVhbZVEYdkwBxtdvdMI.mft (raw, json)
Hash identifier: z+J71fFE8kzk+xpqW+coj9cJRmhluzkCau8b7T158L0=
Subject key identifier: 7C:CA:2D:23:12:05:5B:DB:D9:B8:FA:1F:AC:40:F6:21:A5:60:DA:DB
Authority key identifier: 8C:DB:29:35:D9:DD:0D:58:5B:65:51:18:76:4C:01:C6:D7:6F:74:C2
Certificate issuer: /CN=8cdb2935d9dd0d585b655118764c01c6d76f74c2
Certificate serial: 0199FCFD3DDE77AEA2E87E452ACFAFA8188D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNspNdndDVhbZVEYdkwBxtdvdMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft
Manifest number: 07EA
Signing time: Sun 19 Oct 2025 15:01:18 +0000
Manifest this update: Sun 19 Oct 2025 15:01:18 +0000
Manifest next update: Mon 20 Oct 2025 15:01:18 +0000
Files and hashes: 1: jNspNdndDVhbZVEYdkwBxtdvdMI.crl (hash: RI52Hno+TcMgIcw6qv94mO2/pFNmwDIEFTp0h/Ar214=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNspNdndDVhbZVEYdkwBxtdvdMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:3d:de:77:ae:a2:e8:7e:45:2a:cf:af:a8:18:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cdb2935d9dd0d585b655118764c01c6d76f74c2
Validity
Not Before: Oct 19 15:01:18 2025 GMT
Not After : Oct 20 15:01:18 2025 GMT
Subject: CN=7cca2d2312055bdbd9b8fa1fac40f621a560dadb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d0:b0:76:31:61:e0:e9:27:a6:30:ce:02:cc:
a6:6f:f4:ea:39:4e:f9:b7:2d:53:06:07:a3:11:1d:
94:5b:7b:34:fe:93:cd:89:46:ef:c6:52:30:58:83:
d5:fd:78:37:98:47:3c:d6:bb:e4:c4:0c:12:be:83:
5a:a1:b6:a0:95:ab:ef:ca:26:d3:88:0d:7c:66:6d:
5c:fd:5c:2f:d9:38:92:f3:b5:e0:74:94:b9:1c:09:
bc:20:8d:8e:5e:bc:b8:84:6b:c5:6f:08:c8:20:50:
45:c9:21:04:46:6b:ef:de:e6:05:8d:22:dd:47:a7:
5c:b4:8d:bc:ce:69:9d:c7:dd:be:1f:7b:68:61:f8:
d5:68:48:be:b7:1f:66:96:36:60:e1:62:f2:47:87:
d7:ed:57:9b:6a:38:85:eb:ae:e4:52:91:37:34:de:
60:7c:5d:ac:fa:8d:fd:59:90:5f:2e:2e:e3:be:93:
24:27:62:8f:83:3d:f1:f3:fd:23:77:96:56:ad:d3:
bf:b0:2a:23:9c:9f:99:b5:56:06:88:01:8d:7b:c8:
0c:a1:54:92:a9:5e:5a:37:fc:a1:43:68:16:a9:ee:
bf:6f:ad:e6:22:cd:b8:67:1c:71:36:36:8f:d9:0a:
9f:a9:23:59:2b:76:cd:0d:0b:3b:6c:07:d1:85:35:
51:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CA:2D:23:12:05:5B:DB:D9:B8:FA:1F:AC:40:F6:21:A5:60:DA:DB
X509v3 Authority Key Identifier:
keyid:8C:DB:29:35:D9:DD:0D:58:5B:65:51:18:76:4C:01:C6:D7:6F:74:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNspNdndDVhbZVEYdkwBxtdvdMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e5fe85-c5c0-4271-99c1-5456e15d4671/1/jNspNdndDVhbZVEYdkwBxtdvdMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:6d:72:3c:c6:79:6e:67:58:23:25:a2:53:6d:b3:09:3d:35:
3a:7c:7b:ba:53:b6:29:5b:56:d4:e1:17:25:aa:bd:10:28:e6:
4b:54:5f:ed:6f:e8:f9:36:1e:f3:02:1a:bc:3b:16:5a:ec:cc:
74:6e:39:aa:ca:3f:4a:0c:a4:f5:28:75:e0:d7:6d:75:1f:f4:
c9:72:fd:5d:73:55:9a:7b:5d:23:d5:61:c5:65:dc:9d:17:12:
93:58:3d:e8:f7:c1:38:45:9c:b9:df:c6:85:66:ee:7f:12:65:
c5:fa:26:f8:07:2f:1f:e8:f3:18:4e:43:23:f2:ea:1e:33:b5:
93:99:d4:f6:5b:be:56:b6:39:c4:52:37:36:bb:af:5e:38:30:
3e:2d:33:47:ab:36:a7:00:02:b3:29:ed:8c:70:d0:8f:99:b5:
5c:62:d4:81:36:68:d1:0e:38:ca:84:93:3c:93:b5:aa:87:64:
1f:85:d2:92:62:c8:1e:31:19:c0:68:69:ef:a0:95:6f:50:78:
c8:9f:9e:a9:18:0c:91:c6:35:63:e8:67:4c:06:31:ff:f1:44:
1f:11:d3:58:fb:1a:61:c1:29:ef:f0:ed:64:8f:07:4a:47:eb:
82:c4:ef:cc:2d:30:aa:2e:4a:b8:c6:21:b4:dd:87:5b:73:d0:
6b:a1:91:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/T3ed66i6H5FKs+vqBiNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZGIyOTM1ZDlkZDBkNTg1YjY1NTExODc2NGMwMWM2ZDc2
Zjc0YzIwHhcNMjUxMDE5MTUwMTE4WhcNMjUxMDIwMTUwMTE4WjAzMTEwLwYDVQQD
Eyg3Y2NhMmQyMzEyMDU1YmRiZDliOGZhMWZhYzQwZjYyMWE1NjBkYWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdCwdjFh4OknpjDOAsymb/TqOU75
ty1TBgejER2UW3s0/pPNiUbvxlIwWIPV/Xg3mEc81rvkxAwSvoNaobaglavvyibT
iA18Zm1c/Vwv2TiS87XgdJS5HAm8II2OXry4hGvFbwjIIFBFySEERmvv3uYFjSLd
R6dctI28zmmdx92+H3toYfjVaEi+tx9mljZg4WLyR4fX7VebajiF667kUpE3NN5g
fF2s+o39WZBfLi7jvpMkJ2KPgz3x8/0jd5ZWrdO/sCojnJ+ZtVYGiAGNe8gMoVSS
qV5aN/yhQ2gWqe6/b63mIs24ZxxxNjaP2QqfqSNZK3bNDQs7bAfRhTVRowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHzKLSMSBVvb2bj6H6xA9iGlYNrbMB8GA1UdIwQY
MBaAFIzbKTXZ3Q1YW2VRGHZMAcbXb3TCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak5zcE5kbmREVmhiWlZFWWRrd0J4dGR2ZE1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9lNWZlODUtYzVjMC00MjcxLTk5YzEt
NTQ1NmUxNWQ0NjcxLzEvak5zcE5kbmREVmhiWlZFWWRrd0J4dGR2ZE1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9lNWZlODUtYzVjMC00MjcxLTk5YzEtNTQ1NmUxNWQ0Njcx
LzEvak5zcE5kbmREVmhiWlZFWWRrd0J4dGR2ZE1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIm1yPMZ5
bmdYIyWiU22zCT01Onx7ulO2KVtW1OEXJaq9ECjmS1Rf7W/o+TYe8wIavDsWWuzM
dG45qso/Sgyk9Sh14NdtdR/0yXL9XXNVmntdI9VhxWXcnRcSk1g96PfBOEWcud/G
hWbufxJlxfom+AcvH+jzGE5DI/LqHjO1k5nU9lu+VrY5xFI3NruvXjgwPi0zR6s2
pwACsyntjHDQj5m1XGLUgTZo0Q44yoSTPJO1qodkH4XSkmLIHjEZwGhp76CVb1B4
yJ+eqRgMkcY1Y+hnTAYx//FEHxHTWPsaYcEp7/DtZI8HSkfrgsTvzC0wqi5KuMYh
tN2HW3PQa6GRGA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:32:54 2025 by rpki-client