Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
File: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft (raw, json)
Hash identifier: G3aX3H1kV361Bgu6obqnR1NsewvoN5MKRcMYB11iJ4I=
Subject key identifier: 3D:2A:82:BB:77:13:7D:9D:31:96:51:88:86:81:DB:A7:C1:71:FA:41
Authority key identifier: 24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50
Certificate issuer: /CN=240fd0d33886d839c5cc90103a186e13a348ad50
Certificate serial: 0198A04DF7250F12E1955ABFF3318560AE7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
Manifest number: 162A
Signing time: Tue 12 Aug 2025 22:02:00 +0000
Manifest this update: Tue 12 Aug 2025 22:02:00 +0000
Manifest next update: Wed 13 Aug 2025 22:02:00 +0000
Files and hashes: 1: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl (hash: 6X49S1osl2RQps36BnOl3sNRZgxwFce6GwjbHUunrBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4d:f7:25:0f:12:e1:95:5a:bf:f3:31:85:60:ae:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240fd0d33886d839c5cc90103a186e13a348ad50
Validity
Not Before: Aug 12 22:02:00 2025 GMT
Not After : Aug 13 22:02:00 2025 GMT
Subject: CN=3d2a82bb77137d9d319651888681dba7c171fa41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:de:12:ec:bd:2a:3e:9a:f4:b2:a6:19:06:49:
41:5f:8e:4c:9e:23:ec:be:93:27:bb:30:83:89:3d:
f9:32:f1:9d:6c:c5:a3:e7:7c:d9:08:b6:7a:f6:97:
a0:46:87:9e:2a:e8:a4:fb:1b:5f:6c:13:94:f3:95:
99:1e:25:eb:d4:d0:b7:a1:2c:17:b0:64:2f:a6:43:
a7:9f:f6:67:fb:ec:44:be:33:c9:51:80:af:86:1e:
5b:8b:a5:6e:2c:52:99:61:47:b0:1d:eb:28:4a:c4:
23:f9:b5:88:f8:61:9b:41:08:c8:54:a0:f7:d3:35:
1a:f8:e7:c7:87:15:09:cc:00:0d:31:7d:0a:1c:e2:
a1:f6:98:dc:64:0f:0c:25:78:07:b4:6e:51:68:2c:
5b:6b:d5:75:86:b8:f7:d2:35:e6:6c:a2:a7:64:fd:
fa:04:3d:1f:66:94:95:2f:92:82:29:3d:19:78:52:
75:d3:fa:90:a0:c2:b3:3e:9c:7f:4d:55:ff:00:23:
86:17:15:dc:b9:8f:7c:43:1e:05:ca:bd:9d:56:e2:
67:37:d7:da:fa:2c:af:5b:64:02:48:bb:c4:33:18:
97:ba:41:81:e7:c1:cb:23:65:6c:9a:70:25:d8:f3:
5c:d6:69:4a:bb:98:6c:f7:8f:98:da:67:93:da:2d:
f6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2A:82:BB:77:13:7D:9D:31:96:51:88:86:81:DB:A7:C1:71:FA:41
X509v3 Authority Key Identifier:
keyid:24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:68:7d:64:76:7a:6f:a7:c5:0a:04:98:0b:61:16:d0:0a:ca:
da:ac:c4:9f:11:96:76:23:ec:53:d3:fd:bd:16:9d:7f:12:97:
72:bd:ad:33:02:1e:ce:64:35:bc:e6:27:e0:0f:78:f4:78:ff:
86:d2:4a:30:d8:7b:2a:90:6a:1a:e1:03:65:48:1c:1d:47:0d:
55:5e:5d:a6:a0:43:7f:7f:9e:d4:ab:cf:2f:34:65:26:7d:55:
98:50:53:f6:68:66:19:d2:f0:09:d4:2c:ad:d8:e3:21:45:7d:
83:51:78:37:c1:00:c8:ca:9a:f7:8d:1d:2d:3d:11:8d:ff:55:
66:61:f0:b5:96:d5:63:13:00:f8:d9:91:df:c6:57:0e:3d:2e:
3c:34:24:1c:e0:b2:85:c4:e5:5f:15:8b:f5:e6:65:17:d7:08:
e0:e5:b0:fd:cf:6e:7d:08:f9:91:aa:db:be:69:06:40:de:52:
8a:d7:9e:a7:da:7f:ec:55:ba:c8:38:cf:da:cd:e3:25:1d:e5:
24:ba:a1:38:88:97:ca:b7:b3:86:04:91:f2:23:d9:16:e9:81:
3e:55:6b:07:a6:00:7a:9a:70:cb:72:bf:49:84:92:c9:50:6a:
d0:12:a4:a1:21:55:ef:96:04:a1:42:2e:47:cc:c9:61:ee:51:
75:26:10:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZigTfclDxLhlVq/8zGFYK57MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MGZkMGQzMzg4NmQ4MzljNWNjOTAxMDNhMTg2ZTEzYTM0
OGFkNTAwHhcNMjUwODEyMjIwMjAwWhcNMjUwODEzMjIwMjAwWjAzMTEwLwYDVQQD
EygzZDJhODJiYjc3MTM3ZDlkMzE5NjUxODg4NjgxZGJhN2MxNzFmYTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv94S7L0qPpr0sqYZBklBX45MniPs
vpMnuzCDiT35MvGdbMWj53zZCLZ69pegRoeeKuik+xtfbBOU85WZHiXr1NC3oSwX
sGQvpkOnn/Zn++xEvjPJUYCvhh5bi6VuLFKZYUewHesoSsQj+bWI+GGbQQjIVKD3
0zUa+OfHhxUJzAANMX0KHOKh9pjcZA8MJXgHtG5RaCxba9V1hrj30jXmbKKnZP36
BD0fZpSVL5KCKT0ZeFJ10/qQoMKzPpx/TVX/ACOGFxXcuY98Qx4Fyr2dVuJnN9fa
+iyvW2QCSLvEMxiXukGB58HLI2VsmnAl2PNc1mlKu5hs94+Y2meT2i32AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD0qgrt3E32dMZZRiIaB26fBcfpBMB8GA1UdIwQY
MBaAFCQP0NM4htg5xcyQEDoYbhOjSK1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkFfUTB6aUcyRG5GekpBUU9oaHVFNk5JclZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy85NThhNTktZjgwZC00ZDU4LTlkNDMt
ZjI2YmZmOGI0OTk0LzEvSkFfUTB6aUcyRG5GekpBUU9oaHVFNk5JclZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy85NThhNTktZjgwZC00ZDU4LTlkNDMtZjI2YmZmOGI0OTk0
LzEvSkFfUTB6aUcyRG5GekpBUU9oaHVFNk5JclZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEmh9ZHZ6
b6fFCgSYC2EW0ArK2qzEnxGWdiPsU9P9vRadfxKXcr2tMwIezmQ1vOYn4A949Hj/
htJKMNh7KpBqGuEDZUgcHUcNVV5dpqBDf3+e1KvPLzRlJn1VmFBT9mhmGdLwCdQs
rdjjIUV9g1F4N8EAyMqa940dLT0Rjf9VZmHwtZbVYxMA+NmR38ZXDj0uPDQkHOCy
hcTlXxWL9eZlF9cI4OWw/c9ufQj5karbvmkGQN5Siteep9p/7FW6yDjP2s3jJR3l
JLqhOIiXyrezhgSR8iPZFumBPlVrB6YAeppwy3K/SYSSyVBq0BKkoSFV75YEoUIu
R8zJYe5RdSYQGA==
-----END CERTIFICATE-----
Generated at Wed Aug 13 02:42:54 2025 by rpki-client