Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
File: jXIJqeqB_vMrGFNMHRHtoymZcO8.mft (raw, json)
Hash identifier: fKTjzglQWtsLg8tehhG9zN7DgA28jbaJquizbrZOpVw=
Subject key identifier: 60:4A:ED:1F:0B:77:3B:92:33:ED:DD:F7:E8:DD:69:B4:A6:43:CC:99
Authority key identifier: 8D:72:09:A9:EA:81:FE:F3:2B:18:53:4C:1D:11:ED:A3:29:99:70:EF
Certificate issuer: /CN=8d7209a9ea81fef32b18534c1d11eda3299970ef
Certificate serial: 0198D661361969D9271B3FE9C6F33C5AF910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jXIJqeqB_vMrGFNMHRHtoymZcO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
Manifest number: 0BF2
Signing time: Sat 23 Aug 2025 10:02:31 +0000
Manifest this update: Sat 23 Aug 2025 10:02:31 +0000
Manifest next update: Sun 24 Aug 2025 10:02:31 +0000
Files and hashes: 1: jXIJqeqB_vMrGFNMHRHtoymZcO8.crl (hash: 4rRmlkIR66T73IYPPWStN0lwba/C/hnaf1+eWi9N7DQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jXIJqeqB_vMrGFNMHRHtoymZcO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:36:19:69:d9:27:1b:3f:e9:c6:f3:3c:5a:f9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d7209a9ea81fef32b18534c1d11eda3299970ef
Validity
Not Before: Aug 23 10:02:31 2025 GMT
Not After : Aug 24 10:02:31 2025 GMT
Subject: CN=604aed1f0b773b9233edddf7e8dd69b4a643cc99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e9:c5:a4:6f:ae:01:b7:2f:3b:10:a1:34:3d:
10:57:4a:c7:9f:87:27:77:01:98:4c:ab:49:b0:dc:
0a:78:17:f4:d9:49:3c:ce:1e:f4:e5:96:4e:e2:e4:
d4:13:d9:b9:e4:d1:1f:e8:db:86:69:63:1c:54:f7:
55:de:3e:d9:73:19:b8:a1:45:f0:af:4f:1b:5e:4f:
85:73:c3:ed:14:c5:3a:42:45:34:a4:c9:ff:86:50:
22:1d:86:da:f1:28:73:58:03:ac:75:48:f2:ad:c9:
00:d0:e6:88:a7:6a:76:6f:da:55:b8:5f:6d:04:90:
8e:1c:8b:9f:36:8a:0c:e5:1e:79:2a:5a:46:0a:31:
f4:56:cb:ec:c8:35:f0:5e:c3:79:7f:c0:10:00:2e:
00:e8:4a:61:73:0b:d6:81:b4:bb:7d:a6:21:8c:9b:
f4:f1:16:2f:f5:e3:e1:8d:4f:80:cd:11:c0:22:48:
da:1c:cc:68:94:d4:0d:28:b4:a6:c0:28:8c:58:ba:
57:93:31:43:f1:ca:fb:81:f5:76:95:2d:9c:3a:3e:
55:d5:10:08:2f:1d:ca:04:96:88:a6:fd:94:61:b1:
b3:77:df:9c:01:36:50:29:f4:eb:1e:e6:32:0b:f9:
a5:bb:86:48:bb:ee:16:44:3d:a1:81:e2:71:00:c7:
ac:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4A:ED:1F:0B:77:3B:92:33:ED:DD:F7:E8:DD:69:B4:A6:43:CC:99
X509v3 Authority Key Identifier:
keyid:8D:72:09:A9:EA:81:FE:F3:2B:18:53:4C:1D:11:ED:A3:29:99:70:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jXIJqeqB_vMrGFNMHRHtoymZcO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/8c1e7d-efa3-4891-aeff-d9b1353667aa/1/jXIJqeqB_vMrGFNMHRHtoymZcO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:e8:5c:b9:00:e0:d6:a9:a2:d3:45:db:63:1a:c1:02:00:2c:
4a:03:d6:0c:4b:9f:bd:10:45:fc:46:58:29:bf:cb:51:ad:bb:
f3:96:b4:0b:5b:f2:b3:77:39:35:d0:f9:11:4f:56:8d:64:57:
69:ba:23:3f:36:04:e1:9d:e0:fa:83:82:b7:e1:70:7b:eb:aa:
e2:1c:70:22:8a:7b:f5:66:3e:8f:37:41:e9:fe:7a:e7:10:17:
4d:5b:29:0f:e9:43:30:07:f3:26:90:a9:73:fa:22:e0:8a:a0:
b5:4a:5c:95:ad:e1:f4:a1:ca:e3:4e:18:de:a0:53:57:0e:b7:
96:74:c2:a3:79:e9:ad:13:26:43:f3:75:ab:1c:9b:31:31:86:
6a:b7:b1:d6:6f:17:3d:84:ef:76:47:5d:06:8a:00:24:e6:67:
40:c5:62:d7:2a:9e:09:0a:25:aa:cf:f5:48:ca:fa:b9:54:6c:
9f:81:41:3e:09:6d:67:b9:63:24:cf:a2:c6:45:86:74:be:05:
16:a0:9f:d0:e8:a7:f4:31:74:9f:5a:ed:4d:a7:d9:d8:23:74:
4a:07:4c:90:89:e3:51:51:e7:9d:20:61:cc:87:be:b7:d8:59:
71:11:0f:ec:5a:a1:75:56:29:29:49:68:48:fc:66:3d:93:f6:
d9:4c:15:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYTYZadknGz/pxvM8WvkQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNzIwOWE5ZWE4MWZlZjMyYjE4NTM0YzFkMTFlZGEzMjk5
OTcwZWYwHhcNMjUwODIzMTAwMjMxWhcNMjUwODI0MTAwMjMxWjAzMTEwLwYDVQQD
Eyg2MDRhZWQxZjBiNzczYjkyMzNlZGRkZjdlOGRkNjliNGE2NDNjYzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOnFpG+uAbcvOxChND0QV0rHn4cn
dwGYTKtJsNwKeBf02Uk8zh705ZZO4uTUE9m55NEf6NuGaWMcVPdV3j7Zcxm4oUXw
r08bXk+Fc8PtFMU6QkU0pMn/hlAiHYba8ShzWAOsdUjyrckA0OaIp2p2b9pVuF9t
BJCOHIufNooM5R55KlpGCjH0VsvsyDXwXsN5f8AQAC4A6EphcwvWgbS7faYhjJv0
8RYv9ePhjU+AzRHAIkjaHMxolNQNKLSmwCiMWLpXkzFD8cr7gfV2lS2cOj5V1RAI
Lx3KBJaIpv2UYbGzd9+cATZQKfTrHuYyC/mlu4ZIu+4WRD2hgeJxAMes6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGBK7R8LdzuSM+3d9+jdabSmQ8yZMB8GA1UdIwQY
MBaAFI1yCanqgf7zKxhTTB0R7aMpmXDvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalhJSnFlcUJfdk1yR0ZOTUhSSHRveW1aY084LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC84YzFlN2QtZWZhMy00ODkxLWFlZmYt
ZDliMTM1MzY2N2FhLzEvalhJSnFlcUJfdk1yR0ZOTUhSSHRveW1aY084Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC84YzFlN2QtZWZhMy00ODkxLWFlZmYtZDliMTM1MzY2N2Fh
LzEvalhJSnFlcUJfdk1yR0ZOTUhSSHRveW1aY084LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoOhcuQDg
1qmi00XbYxrBAgAsSgPWDEufvRBF/EZYKb/LUa2785a0C1vys3c5NdD5EU9WjWRX
abojPzYE4Z3g+oOCt+Fwe+uq4hxwIop79WY+jzdB6f565xAXTVspD+lDMAfzJpCp
c/oi4IqgtUpcla3h9KHK404Y3qBTVw63lnTCo3nprRMmQ/N1qxybMTGGarex1m8X
PYTvdkddBooAJOZnQMVi1yqeCQolqs/1SMr6uVRsn4FBPgltZ7ljJM+ixkWGdL4F
FqCf0Oin9DF0n1rtTafZ2CN0SgdMkInjUVHnnSBhzIe+t9hZcREP7FqhdVYpKUlo
SPxmPZP22UwVKg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:36:08 2025 by rpki-client