Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
File: JzWNbTPibSr4Q9WB3PacDREKneg.mft (raw, json)
Hash identifier: 35QKGqECKFiwWFj6ZocpwiZ7j4038GG5LL+jZo6nhcE=
Subject key identifier: CB:21:41:F3:5A:28:0D:53:20:AC:33:5B:A7:CE:4E:A0:2A:34:C4:BC
Authority key identifier: 27:35:8D:6D:33:E2:6D:2A:F8:43:D5:81:DC:F6:9C:0D:11:0A:9D:E8
Certificate issuer: /CN=27358d6d33e26d2af843d581dcf69c0d110a9de8
Certificate serial: 019A4DAAC9C0DE442F1C162CCD0D0A355829
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
Manifest number: 0326
Signing time: Tue 04 Nov 2025 07:00:29 +0000
Manifest this update: Tue 04 Nov 2025 07:00:29 +0000
Manifest next update: Wed 05 Nov 2025 07:00:29 +0000
Files and hashes: 1: JzWNbTPibSr4Q9WB3PacDREKneg.crl (hash: hJsiOLSgsC4vbkrp6v4f6LfK2fqEpi6UsEwFOwHdL4E=)
2: xCvl2MPRqLFevw92K1xWqEyP8xM.roa (hash: x5lJC5gSbKWJztGnWxiyT9yj/ffbvJ91buVaYTLqpME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:c9:c0:de:44:2f:1c:16:2c:cd:0d:0a:35:58:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27358d6d33e26d2af843d581dcf69c0d110a9de8
Validity
Not Before: Nov 4 07:00:29 2025 GMT
Not After : Nov 5 07:00:29 2025 GMT
Subject: CN=cb2141f35a280d5320ac335ba7ce4ea02a34c4bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:24:f6:a5:ea:82:6d:be:fd:4d:2e:ef:e5:16:
e9:27:be:3f:ae:60:c3:ed:d2:d6:c2:97:6d:f5:1b:
fb:f5:f5:bd:0b:1e:91:06:2a:45:2b:89:9e:73:d6:
be:ce:ef:79:12:96:e7:14:8f:24:d5:f6:1e:e5:d5:
12:77:52:33:b1:ce:5c:3f:09:71:a0:12:8a:d0:a1:
ae:2d:1f:6a:a9:d0:68:5a:96:c7:03:f5:70:de:44:
39:ce:b0:f5:0c:d6:7e:b8:14:16:97:dc:74:c3:2e:
ea:ac:73:c2:68:93:2e:5e:3d:c2:41:4f:a7:ce:77:
bb:3e:ac:82:e1:18:f8:ad:35:2e:cb:34:1b:94:fc:
32:ae:ce:47:74:b5:d6:71:8a:11:2f:20:a4:b6:d7:
3e:f9:b0:dd:8e:fd:2a:6c:7a:93:3d:ee:c0:34:a4:
36:3f:fe:39:01:80:15:4a:09:75:f2:36:ce:20:78:
70:ad:2a:65:6e:65:10:b0:35:cc:fe:b2:b0:fc:d5:
e0:a3:52:63:70:6f:e8:3e:3f:5b:ca:2a:69:62:e8:
26:0b:43:21:1f:15:4b:7f:8d:df:30:80:b3:5c:a8:
c2:cb:ba:a6:1a:9e:b2:be:02:d4:a9:31:fc:7c:76:
eb:f0:4f:6f:bb:9b:7f:a3:67:be:d3:a8:4d:8d:53:
e9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:21:41:F3:5A:28:0D:53:20:AC:33:5B:A7:CE:4E:A0:2A:34:C4:BC
X509v3 Authority Key Identifier:
keyid:27:35:8D:6D:33:E2:6D:2A:F8:43:D5:81:DC:F6:9C:0D:11:0A:9D:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:27:c1:17:97:a1:9d:c4:68:3b:69:07:a9:2e:6a:ef:16:4d:
43:ef:95:fd:81:fa:20:80:65:0f:a4:51:c0:ed:d1:20:4c:1e:
71:9a:3e:c3:9e:12:e4:4c:62:c7:08:d7:a4:63:3f:cc:9f:ff:
16:75:95:7c:0f:2a:44:15:fe:f2:2e:31:2a:ad:67:0c:ef:d5:
8b:92:bc:db:dd:6b:ab:e9:68:32:4e:be:f9:fc:8a:94:3a:1a:
76:59:3c:2c:f7:16:82:3e:b7:28:94:fb:3d:a8:f1:3d:0c:66:
c5:7c:b0:6c:74:e1:07:0a:59:75:ce:67:96:67:e3:12:cf:2a:
3f:00:e2:a1:c2:7f:76:fc:2c:5a:10:38:36:16:8c:9d:d1:6f:
e9:c6:b1:20:88:b7:80:0b:e8:22:65:eb:87:09:ee:95:c8:e6:
ce:0b:52:0a:f0:20:82:f2:cf:49:86:3b:21:cf:5c:c9:86:87:
d2:ea:9f:68:9c:6c:73:e4:a4:6f:95:c6:27:8d:d1:bb:1e:74:
d8:25:a5:5d:b6:b0:0d:4e:66:f6:5f:2a:db:ce:06:79:0f:9d:
da:7f:95:8e:62:ec:49:82:3d:54:b9:b5:eb:ee:c4:8e:fa:6a:
f6:05:83:da:89:ca:01:35:44:6d:c5:5b:97:f7:ba:a2:34:03:
29:db:88:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqsnA3kQvHBYszQ0KNVgpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MzU4ZDZkMzNlMjZkMmFmODQzZDU4MWRjZjY5YzBkMTEw
YTlkZTgwHhcNMjUxMTA0MDcwMDI5WhcNMjUxMTA1MDcwMDI5WjAzMTEwLwYDVQQD
EyhjYjIxNDFmMzVhMjgwZDUzMjBhYzMzNWJhN2NlNGVhMDJhMzRjNGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iT2peqCbb79TS7v5RbpJ74/rmDD
7dLWwpdt9Rv79fW9Cx6RBipFK4mec9a+zu95EpbnFI8k1fYe5dUSd1Izsc5cPwlx
oBKK0KGuLR9qqdBoWpbHA/Vw3kQ5zrD1DNZ+uBQWl9x0wy7qrHPCaJMuXj3CQU+n
zne7PqyC4Rj4rTUuyzQblPwyrs5HdLXWcYoRLyCkttc++bDdjv0qbHqTPe7ANKQ2
P/45AYAVSgl18jbOIHhwrSplbmUQsDXM/rKw/NXgo1JjcG/oPj9byippYugmC0Mh
HxVLf43fMICzXKjCy7qmGp6yvgLUqTH8fHbr8E9vu5t/o2e+06hNjVPp2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMshQfNaKA1TIKwzW6fOTqAqNMS8MB8GA1UdIwQY
MBaAFCc1jW0z4m0q+EPVgdz2nA0RCp3oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnpXTmJUUGliU3I0UTlXQjNQYWNEUkVLbmVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mYzE4ZjMtYzBkYi00Y2QyLWEwODMt
NDI2ZDlmZjIwN2QxLzEvSnpXTmJUUGliU3I0UTlXQjNQYWNEUkVLbmVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mYzE4ZjMtYzBkYi00Y2QyLWEwODMtNDI2ZDlmZjIwN2Qx
LzEvSnpXTmJUUGliU3I0UTlXQjNQYWNEUkVLbmVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZCfBF5eh
ncRoO2kHqS5q7xZNQ++V/YH6IIBlD6RRwO3RIEwecZo+w54S5ExixwjXpGM/zJ//
FnWVfA8qRBX+8i4xKq1nDO/Vi5K8291rq+loMk6++fyKlDoadlk8LPcWgj63KJT7
PajxPQxmxXywbHThBwpZdc5nlmfjEs8qPwDiocJ/dvwsWhA4NhaMndFv6caxIIi3
gAvoImXrhwnulcjmzgtSCvAggvLPSYY7Ic9cyYaH0uqfaJxsc+Skb5XGJ43Rux50
2CWlXbawDU5m9l8q284GeQ+d2n+VjmLsSYI9VLm16+7Ejvpq9gWD2onKATVEbcVb
l/e6ojQDKduIKw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:56:10 2025 by rpki-client