Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft
File: JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft (raw, json)
Hash identifier: MIDGMnfjXnglSNlrA+1WEg/YkvY+1Pf8Mc9LIFENuvw=
Subject key identifier: 7D:3B:62:4F:1B:1D:36:54:82:62:B4:41:74:03:26:68:3C:7B:E4:CB
Authority key identifier: 25:D2:5D:FC:65:24:83:CC:7B:FF:D6:13:6F:47:73:5B:D1:90:D5:A1
Certificate issuer: /CN=25d25dfc652483cc7bffd6136f47735bd190d5a1
Certificate serial: 019895C912B854665998A755741ED21DFD98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft
Manifest number: 058A
Signing time: Sun 10 Aug 2025 21:00:39 +0000
Manifest this update: Sun 10 Aug 2025 21:00:39 +0000
Manifest next update: Mon 11 Aug 2025 21:00:39 +0000
Files and hashes: 1: JdJd_GUkg8x7_9YTb0dzW9GQ1aE.crl (hash: dW3+8LfWhxkhBzeneitko7zfVIf32GF1XWVbz/q+PTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 21:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:c9:12:b8:54:66:59:98:a7:55:74:1e:d2:1d:fd:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d25dfc652483cc7bffd6136f47735bd190d5a1
Validity
Not Before: Aug 10 21:00:39 2025 GMT
Not After : Aug 11 21:00:39 2025 GMT
Subject: CN=7d3b624f1b1d36548262b441740326683c7be4cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:f7:24:5c:45:52:5c:53:05:78:49:ce:e1:5c:
2b:8a:91:09:07:73:1f:97:f2:01:3c:a2:c4:9a:a7:
fa:69:92:84:b6:eb:1d:e5:73:51:17:e2:5c:e2:f9:
59:4e:3a:12:17:17:33:7e:c6:30:a1:9d:74:0c:f0:
93:98:2c:5e:dc:9d:c6:ab:07:68:d0:7c:c4:25:2d:
37:a5:c4:68:d4:4d:81:32:51:93:60:e6:5d:70:7d:
8c:4e:56:30:fa:f0:4d:ad:48:6a:2f:61:90:75:7e:
18:f6:b8:7c:80:4f:96:d6:70:a3:6c:d3:09:af:21:
46:d3:c8:14:e9:6a:70:36:11:52:b3:0d:2f:48:b3:
c3:33:d1:9a:d0:d2:a7:6e:a9:e3:ad:46:e2:75:ec:
63:de:b3:5d:d9:37:fa:dc:6b:de:17:b2:19:a4:50:
53:76:e9:9d:dc:cd:a5:e1:4c:3f:16:35:cd:56:0b:
67:cd:e5:87:e0:3d:4a:b1:f5:8d:1b:40:1d:db:03:
99:31:f8:54:9e:bf:d3:e3:67:9e:a2:80:00:5e:bb:
37:36:21:0a:da:4c:8f:af:d7:17:02:0e:00:d1:3e:
71:b2:28:ee:db:fb:41:52:b6:60:1d:96:ef:d3:b9:
49:54:28:98:f7:1a:aa:e2:6d:b7:7b:14:e9:7e:14:
03:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:3B:62:4F:1B:1D:36:54:82:62:B4:41:74:03:26:68:3C:7B:E4:CB
X509v3 Authority Key Identifier:
keyid:25:D2:5D:FC:65:24:83:CC:7B:FF:D6:13:6F:47:73:5B:D1:90:D5:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e85adc-9e62-4609-ad2d-002a12c24248/1/JdJd_GUkg8x7_9YTb0dzW9GQ1aE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:60:84:db:15:01:c0:15:77:d1:57:ae:eb:a9:1a:90:8c:8a:
4f:48:d4:46:9c:3c:c8:09:f9:14:9b:0b:13:35:36:cf:e0:37:
35:f5:0f:8d:03:06:f7:0e:96:1d:d4:d9:5b:85:2b:0d:10:2f:
28:cb:cc:72:07:dc:9f:9e:67:31:7b:32:bb:67:9a:ae:3f:b8:
ae:32:1e:95:3b:45:80:88:f2:fc:a4:3b:e1:14:06:b7:d5:3e:
08:85:a5:98:e0:15:8f:af:7c:d5:12:b2:62:dc:1e:d0:98:82:
85:12:f7:d6:08:6d:4b:c1:91:dc:ea:07:52:38:80:56:b0:af:
ae:32:0b:98:6a:0e:80:7a:50:6d:91:b3:37:27:14:f9:e9:c1:
53:15:63:0f:24:88:db:3a:72:2e:99:8d:54:11:17:c1:51:34:
33:c7:48:2e:aa:47:e3:ca:04:7b:d2:14:55:24:8a:b6:ff:de:
4c:23:3b:65:de:76:d9:ca:3a:db:92:54:46:e3:1a:4a:50:07:
a9:0e:cd:24:db:0f:17:29:70:70:e7:33:b5:05:6f:79:b0:4e:
fb:57:c6:95:9d:64:02:cc:83:02:84:6b:f8:c3:b8:55:91:fd:
1e:81:78:a5:a7:50:23:22:e4:76:5a:3f:4a:c8:ac:d3:26:32:
6d:ae:a3:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiVyRK4VGZZmKdVdB7SHf2YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ZDI1ZGZjNjUyNDgzY2M3YmZmZDYxMzZmNDc3MzViZDE5
MGQ1YTEwHhcNMjUwODEwMjEwMDM5WhcNMjUwODExMjEwMDM5WjAzMTEwLwYDVQQD
Eyg3ZDNiNjI0ZjFiMWQzNjU0ODI2MmI0NDE3NDAzMjY2ODNjN2JlNGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7vckXEVSXFMFeEnO4VwripEJB3Mf
l/IBPKLEmqf6aZKEtusd5XNRF+Jc4vlZTjoSFxczfsYwoZ10DPCTmCxe3J3Gqwdo
0HzEJS03pcRo1E2BMlGTYOZdcH2MTlYw+vBNrUhqL2GQdX4Y9rh8gE+W1nCjbNMJ
ryFG08gU6WpwNhFSsw0vSLPDM9Ga0NKnbqnjrUbidexj3rNd2Tf63GveF7IZpFBT
dumd3M2l4Uw/FjXNVgtnzeWH4D1KsfWNG0Ad2wOZMfhUnr/T42eeooAAXrs3NiEK
2kyPr9cXAg4A0T5xsiju2/tBUrZgHZbv07lJVCiY9xqq4m23exTpfhQDTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH07Yk8bHTZUgmK0QXQDJmg8e+TLMB8GA1UdIwQY
MBaAFCXSXfxlJIPMe//WE29Hc1vRkNWhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmRKZF9HVWtnOHg3XzlZVGIwZHpXOUdRMWFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9lODVhZGMtOWU2Mi00NjA5LWFkMmQt
MDAyYTEyYzI0MjQ4LzEvSmRKZF9HVWtnOHg3XzlZVGIwZHpXOUdRMWFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9lODVhZGMtOWU2Mi00NjA5LWFkMmQtMDAyYTEyYzI0MjQ4
LzEvSmRKZF9HVWtnOHg3XzlZVGIwZHpXOUdRMWFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtWCE2xUB
wBV30Veu66kakIyKT0jURpw8yAn5FJsLEzU2z+A3NfUPjQMG9w6WHdTZW4UrDRAv
KMvMcgfcn55nMXsyu2earj+4rjIelTtFgIjy/KQ74RQGt9U+CIWlmOAVj6981RKy
Ytwe0JiChRL31ghtS8GR3OoHUjiAVrCvrjILmGoOgHpQbZGzNycU+enBUxVjDySI
2zpyLpmNVBEXwVE0M8dILqpH48oEe9IUVSSKtv/eTCM7Zd522co625JURuMaSlAH
qQ7NJNsPFylwcOcztQVvebBO+1fGlZ1kAsyDAoRr+MO4VZH9HoF4padQIyLkdlo/
Ssis0yYyba6jOg==
-----END CERTIFICATE-----
Generated at Mon Aug 11 06:09:29 2025 by rpki-client