Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
File: jxKyaetwOrwSLUeFE7CBcdTJba0.mft (raw, json)
Hash identifier: 161cz2kGKo+wWR3B4IvWc7zlcbcJKLNmSB39Imt4xvM=
Subject key identifier: 03:29:5D:EC:61:FB:30:77:8C:97:AD:9E:06:EB:C0:5C:57:48:95:58
Authority key identifier: 8F:12:B2:69:EB:70:3A:BC:12:2D:47:85:13:B0:81:71:D4:C9:6D:AD
Certificate issuer: /CN=8f12b269eb703abc122d478513b08171d4c96dad
Certificate serial: 0199FE474618B43727C5D27A8C19A14E91C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 21:01:47 +0000
Manifest this update: Sun 19 Oct 2025 21:01:47 +0000
Manifest next update: Mon 20 Oct 2025 21:01:47 +0000
Files and hashes: 1: jxKyaetwOrwSLUeFE7CBcdTJba0.crl (hash: YBe+69QYjvvun6zv3SIyoMxIUOb8PXN5DqJP2EYIVtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:46:18:b4:37:27:c5:d2:7a:8c:19:a1:4e:91:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f12b269eb703abc122d478513b08171d4c96dad
Validity
Not Before: Oct 19 21:01:47 2025 GMT
Not After : Oct 20 21:01:47 2025 GMT
Subject: CN=03295dec61fb30778c97ad9e06ebc05c57489558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f4:58:fe:44:fb:e6:dc:86:fb:6e:6a:74:7f:
ef:09:1f:47:f1:c0:e7:67:77:83:81:7e:fe:f2:99:
26:9f:9b:ca:60:46:31:7c:40:b9:f1:46:d0:71:1f:
26:ef:24:97:b3:8a:5c:ef:65:82:ff:0c:21:1d:cb:
ee:b7:3a:02:dc:56:bc:7d:9d:04:91:8d:8c:4d:38:
b5:4e:52:b1:e0:fa:cb:82:9a:60:3a:89:fb:dd:47:
6e:0b:ed:c7:47:67:5c:08:ad:94:ed:a8:ee:9f:05:
db:6b:bb:f4:e1:6e:a5:ae:6d:1a:b9:44:90:6c:5f:
73:30:e1:d9:6d:9e:e6:93:8d:6e:5a:b2:b8:d4:63:
f6:0f:46:be:07:6f:5f:5d:37:18:ca:71:d3:66:8c:
40:59:88:6c:cf:7a:24:ee:da:79:95:aa:42:bf:b1:
f2:ca:20:22:0b:47:57:66:4d:ce:da:fe:ef:3b:85:
38:02:53:d0:6d:e1:85:af:d4:26:7b:50:94:19:21:
c6:67:bb:8e:ad:ac:92:5f:b6:7f:30:7c:25:13:5c:
cf:6c:2a:2e:f7:be:41:78:2e:7c:ff:ee:fd:aa:ba:
16:4b:96:64:63:10:f6:ea:7b:aa:e0:a4:73:9f:7a:
8b:d3:72:57:f5:77:8c:c6:cd:e9:38:09:c4:fb:8e:
60:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:29:5D:EC:61:FB:30:77:8C:97:AD:9E:06:EB:C0:5C:57:48:95:58
X509v3 Authority Key Identifier:
keyid:8F:12:B2:69:EB:70:3A:BC:12:2D:47:85:13:B0:81:71:D4:C9:6D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b9:9c:96:c5:de:63:3b:f0:bf:b4:d4:35:9c:8a:b8:6d:71:
da:ce:97:99:fa:13:0d:d1:f8:83:70:f7:c3:b6:a9:b4:22:f9:
d9:77:d9:91:21:07:21:8d:22:28:97:35:a6:1c:69:84:d9:2a:
37:0a:0f:e6:43:c5:bf:6f:19:6d:b3:f7:90:24:76:49:ab:43:
72:bd:df:60:6c:21:6f:f6:1f:51:ac:d7:6c:a0:fb:79:e8:30:
36:c6:0d:1e:d2:bf:bc:4b:ff:02:74:a4:e5:e4:05:4e:1c:cc:
24:02:c3:fe:51:a8:d9:74:0f:4d:c9:90:58:b2:f6:44:52:e0:
b9:74:13:be:3a:dc:eb:3d:80:0f:80:98:fb:63:0b:1b:36:49:
d6:7c:44:19:e1:05:df:13:fb:7d:ca:3b:b2:d6:2f:08:1e:16:
c6:b4:e3:77:31:da:a4:c0:ac:f3:51:7c:3a:a9:c3:9d:4d:8f:
35:10:3a:f6:48:90:ab:7b:45:0f:fe:87:48:7a:de:7c:32:3d:
29:b0:19:cf:a3:4c:b3:88:cd:60:d5:9f:6f:53:7c:c0:36:fa:
12:54:80:07:38:ea:2a:e6:19:cd:49:c4:12:08:cc:2d:e7:6c:
1d:a5:65:9a:df:6c:54:92:3a:63:49:c4:32:51:b0:60:fc:d6:
a9:cb:22:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+R0YYtDcnxdJ6jBmhTpHBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMTJiMjY5ZWI3MDNhYmMxMjJkNDc4NTEzYjA4MTcxZDRj
OTZkYWQwHhcNMjUxMDE5MjEwMTQ3WhcNMjUxMDIwMjEwMTQ3WjAzMTEwLwYDVQQD
EygwMzI5NWRlYzYxZmIzMDc3OGM5N2FkOWUwNmViYzA1YzU3NDg5NTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvRY/kT75tyG+25qdH/vCR9H8cDn
Z3eDgX7+8pkmn5vKYEYxfEC58UbQcR8m7ySXs4pc72WC/wwhHcvutzoC3Fa8fZ0E
kY2MTTi1TlKx4PrLgppgOon73UduC+3HR2dcCK2U7ajunwXba7v04W6lrm0auUSQ
bF9zMOHZbZ7mk41uWrK41GP2D0a+B29fXTcYynHTZoxAWYhsz3ok7tp5lapCv7Hy
yiAiC0dXZk3O2v7vO4U4AlPQbeGFr9Qme1CUGSHGZ7uOraySX7Z/MHwlE1zPbCou
975BeC58/+79qroWS5ZkYxD26nuq4KRzn3qL03JX9XeMxs3pOAnE+45gWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAMpXexh+zB3jJetngbrwFxXSJVYMB8GA1UdIwQY
MBaAFI8SsmnrcDq8Ei1HhROwgXHUyW2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanhLeWFldHdPcndTTFVlRkU3Q0JjZFRKYmEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kYmQzNWQtMWUzYS00NTkyLTg0ZjMt
NmVmZjE4YTJlYTQ0LzEvanhLeWFldHdPcndTTFVlRkU3Q0JjZFRKYmEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9kYmQzNWQtMWUzYS00NTkyLTg0ZjMtNmVmZjE4YTJlYTQ0
LzEvanhLeWFldHdPcndTTFVlRkU3Q0JjZFRKYmEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOLmclsXe
Yzvwv7TUNZyKuG1x2s6XmfoTDdH4g3D3w7aptCL52XfZkSEHIY0iKJc1phxphNkq
NwoP5kPFv28ZbbP3kCR2SatDcr3fYGwhb/YfUazXbKD7eegwNsYNHtK/vEv/AnSk
5eQFThzMJALD/lGo2XQPTcmQWLL2RFLguXQTvjrc6z2AD4CY+2MLGzZJ1nxEGeEF
3xP7fco7stYvCB4WxrTjdzHapMCs81F8OqnDnU2PNRA69kiQq3tFD/6HSHrefDI9
KbAZz6NMs4jNYNWfb1N8wDb6ElSABzjqKuYZzUnEEgjMLedsHaVlmt9sVJI6Y0nE
MlGwYPzWqcsi7w==
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:37 2025 by rpki-client