Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.mft
File: jsIqh2Rb03Xm2yqguBbooGEOelY.mft (raw, json)
Hash identifier: FobSVQsaEmdvSTraf73E8z6Bgh5Z5xzEFdPKRUYtqRo=
Subject key identifier: A9:B9:25:EF:61:35:DC:BB:90:95:5D:56:41:1E:24:65:3C:D8:D6:87
Authority key identifier: 8E:C2:2A:87:64:5B:D3:75:E6:DB:2A:A0:B8:16:E8:A0:61:0E:7A:56
Certificate issuer: /CN=8ec22a87645bd375e6db2aa0b816e8a0610e7a56
Certificate serial: 0198D5BBF0E1E7213C067D90F10A30AA730B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsIqh2Rb03Xm2yqguBbooGEOelY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.mft
Manifest number: 06E2
Signing time: Sat 23 Aug 2025 07:02:00 +0000
Manifest this update: Sat 23 Aug 2025 07:02:00 +0000
Manifest next update: Sun 24 Aug 2025 07:02:00 +0000
Files and hashes: 1: jsIqh2Rb03Xm2yqguBbooGEOelY.crl (hash: 1FMQgQoKbtjdhigxqvYJsbNp37u0T9x2rsypCaXTge4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsIqh2Rb03Xm2yqguBbooGEOelY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:f0:e1:e7:21:3c:06:7d:90:f1:0a:30:aa:73:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec22a87645bd375e6db2aa0b816e8a0610e7a56
Validity
Not Before: Aug 23 07:02:00 2025 GMT
Not After : Aug 24 07:02:00 2025 GMT
Subject: CN=a9b925ef6135dcbb90955d56411e24653cd8d687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:58:27:27:3f:08:71:4d:1b:eb:5a:6d:99:8f:
a6:e8:ff:c2:91:a9:d2:e2:73:93:95:aa:c0:e6:ed:
b4:54:d7:cc:75:7c:22:6d:8a:49:4f:c6:ff:de:cf:
72:a9:ce:7b:25:a6:4d:4c:3d:7e:0b:f5:38:e9:ac:
2e:40:83:c6:b9:4e:b7:c7:46:3a:4e:47:f7:2c:ef:
d9:8f:eb:4e:e3:55:0d:b1:3f:03:24:ee:fa:c8:02:
9b:ea:d4:30:69:ee:13:94:07:a9:ff:d9:bf:7c:9b:
45:4a:23:5e:58:5a:3d:21:0e:f8:80:ba:cc:a6:3a:
c8:ee:90:8f:a4:56:66:fe:91:d1:bd:17:85:e2:d6:
0b:ec:00:42:d2:92:90:40:10:8f:8d:58:bb:aa:35:
ea:c4:8e:ba:97:99:8c:07:a8:e3:0c:6f:02:81:41:
0e:2c:83:bf:a9:7b:e9:be:83:6e:e7:f9:27:7d:0e:
6e:fb:6f:2f:79:c6:80:f2:53:e3:52:35:e9:b0:7d:
f8:c2:57:99:37:57:28:f9:4e:ee:7e:a6:12:b6:7d:
2c:23:5d:ea:97:1f:fe:1c:99:a1:7b:68:24:da:c4:
11:88:df:b6:45:3e:4b:f8:b7:b8:7c:94:41:d7:2d:
30:3b:d1:7b:02:29:49:44:e8:3f:99:16:77:d5:1c:
64:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B9:25:EF:61:35:DC:BB:90:95:5D:56:41:1E:24:65:3C:D8:D6:87
X509v3 Authority Key Identifier:
keyid:8E:C2:2A:87:64:5B:D3:75:E6:DB:2A:A0:B8:16:E8:A0:61:0E:7A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsIqh2Rb03Xm2yqguBbooGEOelY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:11:3d:35:0f:ae:2a:5c:87:2c:3f:31:32:2c:7c:cd:41:bb:
a9:33:e3:1e:c8:88:aa:72:cd:70:96:6a:57:0e:89:12:01:44:
dc:fb:5c:99:52:83:93:3a:a8:0c:fe:3a:f2:64:2a:c6:18:a9:
80:cc:7d:d2:27:b1:1f:f1:e1:46:24:b1:07:fa:50:df:bf:6a:
6d:34:94:1f:fd:60:64:59:be:04:f2:b2:04:1b:28:dc:d3:6b:
2b:32:30:3f:a9:5c:d8:82:f5:de:75:31:98:ea:7f:4d:15:1d:
0f:0e:c0:92:8c:92:cc:3f:ad:fb:60:70:f5:64:2b:31:06:c5:
5e:0a:da:d0:29:49:37:65:1a:aa:6f:9f:d3:72:8d:20:bc:34:
c4:67:c6:a0:cf:45:9c:1d:48:54:32:2e:72:51:03:07:bd:22:
9d:0a:bd:14:2e:4a:b3:d0:f5:87:73:90:c9:b5:ce:f5:a8:bd:
06:d7:0e:29:69:e0:f9:9b:df:d6:67:57:f0:39:30:b1:08:fe:
3d:de:0f:26:dc:5d:84:5e:a6:20:3a:32:a2:6a:cd:5e:7c:6c:
fb:7e:a6:37:f5:3b:37:05:e8:94:ea:3f:ca:02:06:19:23:2b:
6e:9c:a6:35:64:d9:85:b4:da:45:61:99:0b:9c:fa:51:02:fd:
ba:1c:83:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu/Dh5yE8Bn2Q8QowqnMLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYzIyYTg3NjQ1YmQzNzVlNmRiMmFhMGI4MTZlOGEwNjEw
ZTdhNTYwHhcNMjUwODIzMDcwMjAwWhcNMjUwODI0MDcwMjAwWjAzMTEwLwYDVQQD
EyhhOWI5MjVlZjYxMzVkY2JiOTA5NTVkNTY0MTFlMjQ2NTNjZDhkNjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VgnJz8IcU0b61ptmY+m6P/CkanS
4nOTlarA5u20VNfMdXwibYpJT8b/3s9yqc57JaZNTD1+C/U46awuQIPGuU63x0Y6
Tkf3LO/Zj+tO41UNsT8DJO76yAKb6tQwae4TlAep/9m/fJtFSiNeWFo9IQ74gLrM
pjrI7pCPpFZm/pHRvReF4tYL7ABC0pKQQBCPjVi7qjXqxI66l5mMB6jjDG8CgUEO
LIO/qXvpvoNu5/knfQ5u+28vecaA8lPjUjXpsH34wleZN1co+U7ufqYStn0sI13q
lx/+HJmhe2gk2sQRiN+2RT5L+Le4fJRB1y0wO9F7AilJROg/mRZ31RxkMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKm5Je9hNdy7kJVdVkEeJGU82NaHMB8GA1UdIwQY
MBaAFI7CKodkW9N15tsqoLgW6KBhDnpWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanNJcWgyUmIwM1htMnlxZ3VCYm9vR0VPZWxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xMjk4ZWEtYTQ2Ny00NWI5LTkxMTct
ODc5OGVkNzVmMjg5LzEvanNJcWgyUmIwM1htMnlxZ3VCYm9vR0VPZWxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8xMjk4ZWEtYTQ2Ny00NWI5LTkxMTctODc5OGVkNzVmMjg5
LzEvanNJcWgyUmIwM1htMnlxZ3VCYm9vR0VPZWxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfxE9NQ+u
KlyHLD8xMix8zUG7qTPjHsiIqnLNcJZqVw6JEgFE3PtcmVKDkzqoDP468mQqxhip
gMx90iexH/HhRiSxB/pQ379qbTSUH/1gZFm+BPKyBBso3NNrKzIwP6lc2IL13nUx
mOp/TRUdDw7AkoySzD+t+2Bw9WQrMQbFXgra0ClJN2Uaqm+f03KNILw0xGfGoM9F
nB1IVDIuclEDB70inQq9FC5Ks9D1h3OQybXO9ai9BtcOKWng+Zvf1mdX8DkwsQj+
Pd4PJtxdhF6mIDoyomrNXnxs+36mN/U7NwXolOo/ygIGGSMrbpymNWTZhbTaRWGZ
C5z6UQL9uhyDlw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:27:25 2025 by rpki-client