Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.mft
File: JlZJaRWR5VKhSIlDnP9w3lbAjak.mft (raw, json)
Hash identifier: hjyLRI1wLr3Pjwq8dQFJuUUvH31cXCF685ttNGY7bYA=
Subject key identifier: B0:88:C7:D9:E8:DC:E4:6D:C3:8B:52:40:53:D5:46:DA:BF:9B:55:7A
Authority key identifier: 26:56:49:69:15:91:E5:52:A1:48:89:43:9C:FF:70:DE:56:C0:8D:A9
Certificate issuer: /CN=265649691591e552a14889439cff70de56c08da9
Certificate serial: 0198D5BC234CE8B91CB3A75612354DAB5A81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlZJaRWR5VKhSIlDnP9w3lbAjak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.mft
Manifest number: 75
Signing time: Sat 23 Aug 2025 07:02:13 +0000
Manifest this update: Sat 23 Aug 2025 07:02:13 +0000
Manifest next update: Sun 24 Aug 2025 07:02:13 +0000
Files and hashes: 1: JlZJaRWR5VKhSIlDnP9w3lbAjak.crl (hash: xhvULkYrzyxJhvlNUQstqbwU1Xf6UkQb92zb5yeeif8=)
2: pZiY96ECGZ3enErASsqWJWksnRo.roa (hash: MEeiZ1S6byAdXpmL3x1KNRz/NrRtbh43pA6SZ1saEAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.mft
rsync://rpki.ripe.net/repository/DEFAULT/JlZJaRWR5VKhSIlDnP9w3lbAjak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:23:4c:e8:b9:1c:b3:a7:56:12:35:4d:ab:5a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=265649691591e552a14889439cff70de56c08da9
Validity
Not Before: Aug 23 07:02:13 2025 GMT
Not After : Aug 24 07:02:13 2025 GMT
Subject: CN=b088c7d9e8dce46dc38b524053d546dabf9b557a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:db:76:46:40:f1:5b:44:1c:5a:04:7d:fb:9f:
1e:c6:91:a3:71:a5:ff:fc:7d:43:5e:af:82:ee:0c:
78:05:fe:6a:a7:08:89:99:88:fa:09:c0:c1:c3:36:
0d:6d:f7:81:c5:30:50:29:0a:85:f2:e3:94:1c:d3:
ce:fc:b3:6c:f8:92:ab:b3:3b:0b:5c:aa:74:f7:52:
3a:46:a2:9b:5f:c6:e4:53:f4:fa:0c:ae:d1:62:26:
83:60:43:15:9a:77:f4:42:27:f0:f9:70:25:41:55:
8b:90:fc:96:5f:63:42:57:70:b7:56:8a:76:ee:0a:
b8:92:cd:8b:e3:b5:bb:71:6e:ed:05:2a:4e:76:2b:
7c:f4:83:9a:6d:43:66:f2:c8:2b:2e:ec:66:64:50:
30:7f:4f:11:23:ce:84:4f:22:20:63:2a:f7:9f:da:
a4:5c:c6:f5:0a:75:09:78:8f:e6:b5:ed:54:7e:c5:
c4:66:36:9c:e9:0e:e9:7c:59:32:fc:bf:86:68:6b:
ad:22:04:a2:3f:19:af:ac:dd:ac:db:01:b0:58:2b:
72:1f:68:3e:db:f6:d6:8d:36:c9:c1:b9:23:5d:cf:
a4:9c:a1:64:f8:fb:77:1a:42:4e:37:84:a2:88:c9:
1c:e0:37:b6:cf:65:8d:5b:00:13:a3:3d:4e:ca:1b:
a7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:88:C7:D9:E8:DC:E4:6D:C3:8B:52:40:53:D5:46:DA:BF:9B:55:7A
X509v3 Authority Key Identifier:
keyid:26:56:49:69:15:91:E5:52:A1:48:89:43:9C:FF:70:DE:56:C0:8D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlZJaRWR5VKhSIlDnP9w3lbAjak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:76:0a:e4:1a:f0:59:2a:68:aa:f5:07:1d:39:9a:90:40:bb:
72:50:da:ae:33:4c:00:eb:43:42:e1:ee:78:11:2c:9a:71:94:
a9:aa:54:3c:30:64:b4:de:93:28:bd:39:f7:48:7b:d9:eb:6b:
15:8b:cb:32:e8:35:d5:ba:5f:7b:93:06:2b:b4:be:47:ff:a2:
d9:4d:81:13:83:bf:b1:7b:17:d4:a6:36:26:4a:6d:79:1b:9b:
68:54:58:ac:60:f9:38:94:0b:a1:f8:93:12:c6:8d:1f:2e:9d:
4d:c2:6e:60:47:0e:3b:0e:f0:d2:b8:60:86:f8:3e:80:7d:31:
b0:bc:b9:4f:39:20:11:0a:28:af:25:2f:52:42:af:af:28:f7:
21:16:8a:e1:9f:5b:d3:f8:c2:e9:8f:d4:ba:9e:92:0b:a7:a3:
42:1f:cb:86:28:e7:51:ff:9b:cb:ef:6a:16:1a:e8:eb:42:ec:
17:84:63:8d:81:c9:8b:25:17:32:7c:db:0c:24:24:53:bd:a7:
47:df:06:50:9f:a7:a8:fd:6f:4c:20:ab:b3:e2:6b:8d:e9:65:
c0:61:48:56:72:29:e4:e8:98:34:b0:29:c3:88:1b:24:62:e3:
f0:1a:c0:e5:b0:69:24:83:36:72:1b:53:62:4a:e6:63:29:d4:
d2:39:24:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvCNM6Lkcs6dWEjVNq1qBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NTY0OTY5MTU5MWU1NTJhMTQ4ODk0MzljZmY3MGRlNTZj
MDhkYTkwHhcNMjUwODIzMDcwMjEzWhcNMjUwODI0MDcwMjEzWjAzMTEwLwYDVQQD
EyhiMDg4YzdkOWU4ZGNlNDZkYzM4YjUyNDA1M2Q1NDZkYWJmOWI1NTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNt2RkDxW0QcWgR9+58expGjcaX/
/H1DXq+C7gx4Bf5qpwiJmYj6CcDBwzYNbfeBxTBQKQqF8uOUHNPO/LNs+JKrszsL
XKp091I6RqKbX8bkU/T6DK7RYiaDYEMVmnf0Qifw+XAlQVWLkPyWX2NCV3C3Vop2
7gq4ks2L47W7cW7tBSpOdit89IOabUNm8sgrLuxmZFAwf08RI86ETyIgYyr3n9qk
XMb1CnUJeI/mte1UfsXEZjac6Q7pfFky/L+GaGutIgSiPxmvrN2s2wGwWCtyH2g+
2/bWjTbJwbkjXc+knKFk+Pt3GkJON4SiiMkc4De2z2WNWwAToz1OyhunXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCIx9no3ORtw4tSQFPVRtq/m1V6MB8GA1UdIwQY
MBaAFCZWSWkVkeVSoUiJQ5z/cN5WwI2pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmxaSmFSV1I1VktoU0lsRG5QOXczbGJBamFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS84MzFjNzktYTg4ZC00MWU2LWIwYTct
MTIxMDA5NGE0OGEzLzEvSmxaSmFSV1I1VktoU0lsRG5QOXczbGJBamFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS84MzFjNzktYTg4ZC00MWU2LWIwYTctMTIxMDA5NGE0OGEz
LzEvSmxaSmFSV1I1VktoU0lsRG5QOXczbGJBamFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYnYK5Brw
WSpoqvUHHTmakEC7clDarjNMAOtDQuHueBEsmnGUqapUPDBktN6TKL0590h72etr
FYvLMug11bpfe5MGK7S+R/+i2U2BE4O/sXsX1KY2JkpteRubaFRYrGD5OJQLofiT
EsaNHy6dTcJuYEcOOw7w0rhghvg+gH0xsLy5TzkgEQooryUvUkKvryj3IRaK4Z9b
0/jC6Y/Uup6SC6ejQh/LhijnUf+by+9qFhro60LsF4RjjYHJiyUXMnzbDCQkU72n
R98GUJ+nqP1vTCCrs+JrjellwGFIVnIp5OiYNLApw4gbJGLj8BrA5bBpJIM2chtT
YkrmYynU0jkkZA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:20 2025 by rpki-client