Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
File: JUdfWtnsz_acNaYw3P8sWmY_188.mft (raw, json)
Hash identifier: FdLt7qF+sdeqanrV2z6zPpVkd3N16ciGx0rfD4r4s3E=
Subject key identifier: 9D:B7:95:5A:D6:D4:D0:5E:F9:26:09:20:70:7D:39:2B:E1:26:43:5B
Authority key identifier: 25:47:5F:5A:D9:EC:CF:F6:9C:35:A6:30:DC:FF:2C:5A:66:3F:D7:CF
Certificate issuer: /CN=25475f5ad9eccff69c35a630dcff2c5a663fd7cf
Certificate serial: 019873E26B88C199F8C26C4899BA39C0036E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 07:01:14 +0000
Manifest this update: Mon 04 Aug 2025 07:01:14 +0000
Manifest next update: Tue 05 Aug 2025 07:01:14 +0000
Files and hashes: 1: JUdfWtnsz_acNaYw3P8sWmY_188.crl (hash: nvPm/lp/WzCXXtzT+cW1lsKwCaog5HT5P7NJSnifeD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:6b:88:c1:99:f8:c2:6c:48:99:ba:39:c0:03:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25475f5ad9eccff69c35a630dcff2c5a663fd7cf
Validity
Not Before: Aug 4 07:01:14 2025 GMT
Not After : Aug 5 07:01:14 2025 GMT
Subject: CN=9db7955ad6d4d05ef9260920707d392be126435b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6d:f0:ad:36:d4:18:a4:0b:33:e9:1a:75:c3:
d5:b6:f1:e2:46:cc:fa:93:a5:a5:e9:5f:10:5a:f7:
6d:a8:1e:ee:1b:b8:7a:61:a2:d6:43:24:0f:f2:e1:
27:d2:21:36:c5:58:22:01:84:8a:6d:54:fe:c9:15:
6f:bb:0d:71:a1:11:84:81:59:e8:4b:96:76:f6:1f:
64:5a:3e:a4:7d:61:dd:d3:0f:fd:b3:f2:80:f1:1f:
53:f0:55:e3:06:69:5a:02:05:0f:28:7f:ab:9d:3d:
2d:c6:2b:93:ef:96:bf:26:d3:7c:89:15:e9:1f:52:
ce:91:62:19:ab:64:27:94:1e:ff:f8:44:66:3e:8b:
ab:ba:d6:6e:0d:6f:49:6c:8c:32:57:07:aa:1a:f3:
17:11:69:8e:84:aa:d3:88:11:18:db:85:b4:a9:1d:
70:c7:18:96:68:e8:b8:8d:5a:6c:5e:4c:7b:7f:a7:
e0:16:73:29:4e:96:da:34:71:c6:bf:93:4b:26:90:
94:66:46:ab:53:2f:45:6a:4b:05:5e:fb:39:cd:ee:
58:0b:51:39:be:b9:9e:a8:00:9d:bd:18:b4:2e:97:
8b:bf:42:88:e7:cd:a5:a8:ec:50:33:63:b0:d5:91:
27:ef:93:4f:f6:47:05:78:17:b7:81:1b:46:e8:2d:
f7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B7:95:5A:D6:D4:D0:5E:F9:26:09:20:70:7D:39:2B:E1:26:43:5B
X509v3 Authority Key Identifier:
keyid:25:47:5F:5A:D9:EC:CF:F6:9C:35:A6:30:DC:FF:2C:5A:66:3F:D7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUdfWtnsz_acNaYw3P8sWmY_188.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfec08-8cbe-4c45-8db1-4d46c6a7010a/1/JUdfWtnsz_acNaYw3P8sWmY_188.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ea:e2:73:03:6e:79:c9:40:81:cc:82:b4:74:10:e2:28:71:
81:2d:01:d1:a9:c8:73:3a:6c:d6:7a:33:9a:85:3d:8c:cc:b0:
b4:79:8a:74:2f:d3:19:ca:72:b2:65:6d:25:41:27:fb:28:12:
f9:cc:49:71:35:58:34:1c:7d:3a:33:97:a3:41:cb:74:a9:d2:
87:eb:68:ef:90:cd:39:b9:85:2b:4b:7b:ec:de:93:13:81:23:
16:d0:ad:e8:b3:4d:e7:18:cc:1a:5f:25:94:8b:59:7a:08:24:
2c:b0:a9:41:5f:25:a4:3b:71:ab:31:ad:2d:8f:6d:3e:23:7b:
27:85:07:8c:41:53:1a:e9:8c:4c:c0:8b:57:68:b3:f9:9e:3d:
5b:68:21:58:65:90:1b:c0:d9:56:af:9a:62:44:00:d1:40:42:
61:d7:66:7a:f0:18:d9:8c:34:74:62:8a:5a:39:e5:97:d5:db:
1d:cf:2f:69:1f:30:36:8e:83:cd:04:01:ff:39:f6:ff:42:c7:
bf:b6:fa:04:65:75:de:ea:53:9f:3b:d9:82:ae:61:7b:fd:9a:
7b:69:f6:e9:86:9e:a4:05:15:f5:57:76:28:e1:a7:3b:f2:68:
39:fd:88:68:23:bd:10:6a:c6:d1:57:c8:89:54:d2:47:80:14:
37:cb:55:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4muIwZn4wmxImbo5wANuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NDc1ZjVhZDllY2NmZjY5YzM1YTYzMGRjZmYyYzVhNjYz
ZmQ3Y2YwHhcNMjUwODA0MDcwMTE0WhcNMjUwODA1MDcwMTE0WjAzMTEwLwYDVQQD
Eyg5ZGI3OTU1YWQ2ZDRkMDVlZjkyNjA5MjA3MDdkMzkyYmUxMjY0MzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl23wrTbUGKQLM+kadcPVtvHiRsz6
k6Wl6V8QWvdtqB7uG7h6YaLWQyQP8uEn0iE2xVgiAYSKbVT+yRVvuw1xoRGEgVno
S5Z29h9kWj6kfWHd0w/9s/KA8R9T8FXjBmlaAgUPKH+rnT0txiuT75a/JtN8iRXp
H1LOkWIZq2QnlB7/+ERmPourutZuDW9JbIwyVweqGvMXEWmOhKrTiBEY24W0qR1w
xxiWaOi4jVpsXkx7f6fgFnMpTpbaNHHGv5NLJpCUZkarUy9FaksFXvs5ze5YC1E5
vrmeqACdvRi0LpeLv0KI582lqOxQM2Ow1ZEn75NP9kcFeBe3gRtG6C33WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ23lVrW1NBe+SYJIHB9OSvhJkNbMB8GA1UdIwQY
MBaAFCVHX1rZ7M/2nDWmMNz/LFpmP9fPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlVkZld0bnN6X2FjTmFZdzNQOHNXbVlfMTg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iZmVjMDgtOGNiZS00YzQ1LThkYjEt
NGQ0NmM2YTcwMTBhLzEvSlVkZld0bnN6X2FjTmFZdzNQOHNXbVlfMTg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iZmVjMDgtOGNiZS00YzQ1LThkYjEtNGQ0NmM2YTcwMTBh
LzEvSlVkZld0bnN6X2FjTmFZdzNQOHNXbVlfMTg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAROricwNu
eclAgcyCtHQQ4ihxgS0B0anIczps1nozmoU9jMywtHmKdC/TGcpysmVtJUEn+ygS
+cxJcTVYNBx9OjOXo0HLdKnSh+to75DNObmFK0t77N6TE4EjFtCt6LNN5xjMGl8l
lItZeggkLLCpQV8lpDtxqzGtLY9tPiN7J4UHjEFTGumMTMCLV2iz+Z49W2ghWGWQ
G8DZVq+aYkQA0UBCYddmevAY2Yw0dGKKWjnll9XbHc8vaR8wNo6DzQQB/zn2/0LH
v7b6BGV13upTnzvZgq5he/2ae2n26YaepAUV9Vd2KOGnO/JoOf2IaCO9EGrG0VfI
iVTSR4AUN8tVwA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:02:45 2025 by rpki-client