Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft
File: JCSASgJ3cDnEz9jADcKfqR2KOQw.mft (raw, json)
Hash identifier: sqL3S0Qb/T5CHDrCydO4naLDK1nhZIzEQC3mDnx2z8s=
Subject key identifier: 48:07:50:3A:17:13:7C:78:FF:5B:CD:82:A1:AC:E1:94:41:1C:E5:0B
Authority key identifier: 24:24:80:4A:02:77:70:39:C4:CF:D8:C0:0D:C2:9F:A9:1D:8A:39:0C
Certificate issuer: /CN=2424804a02777039c4cfd8c00dc29fa91d8a390c
Certificate serial: 019A51878CE56732647FB655FB510610889B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JCSASgJ3cDnEz9jADcKfqR2KOQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft
Manifest number: 034B
Signing time: Wed 05 Nov 2025 01:00:29 +0000
Manifest this update: Wed 05 Nov 2025 01:00:29 +0000
Manifest next update: Thu 06 Nov 2025 01:00:29 +0000
Files and hashes: 1: JCSASgJ3cDnEz9jADcKfqR2KOQw.crl (hash: 8yyybeQpdmRa0e0znq0Bk5AUN8v0BWa9cQ8n0y5XnMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JCSASgJ3cDnEz9jADcKfqR2KOQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:8c:e5:67:32:64:7f:b6:55:fb:51:06:10:88:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2424804a02777039c4cfd8c00dc29fa91d8a390c
Validity
Not Before: Nov 5 01:00:29 2025 GMT
Not After : Nov 6 01:00:29 2025 GMT
Subject: CN=4807503a17137c78ff5bcd82a1ace194411ce50b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c9:16:64:71:bc:7e:8b:9a:d4:32:93:2c:e1:
66:5a:0e:11:ca:63:84:38:4b:9b:08:1d:cb:33:9b:
38:6c:99:50:67:2d:bd:eb:20:f3:ad:18:6d:29:6d:
24:25:9a:6f:62:31:a5:12:46:7b:6e:87:87:32:d1:
9e:40:f3:2f:b3:6b:85:15:e1:f9:5e:cb:74:90:53:
7d:e5:83:c1:e8:d2:c3:07:23:04:56:e7:6e:d1:c5:
ed:a0:88:12:0f:fb:a6:87:57:9f:55:cf:84:b0:20:
bd:34:57:ac:94:32:2a:c5:1d:4d:8b:69:03:68:96:
bf:a2:6f:a9:59:3b:7f:86:ef:e3:47:aa:e8:2a:ba:
88:62:3b:e3:86:47:6c:15:3a:aa:e2:61:df:9b:2b:
90:09:76:40:6a:25:78:45:90:09:24:a0:28:03:1c:
70:d8:45:d8:5b:13:d1:a3:b3:08:7c:4e:c3:b3:de:
6c:f1:60:93:21:73:87:f3:50:ec:74:26:56:08:76:
ad:84:d4:e8:f7:e5:e4:37:6a:60:0a:eb:a3:2f:c6:
84:c9:d9:e7:da:e2:c6:de:76:32:76:c6:d1:30:ee:
1a:85:33:11:1a:c5:0c:db:ac:33:30:6a:c1:5e:28:
03:ab:5a:2b:b9:50:e4:4b:d4:57:1e:43:9f:3a:d6:
1a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:07:50:3A:17:13:7C:78:FF:5B:CD:82:A1:AC:E1:94:41:1C:E5:0B
X509v3 Authority Key Identifier:
keyid:24:24:80:4A:02:77:70:39:C4:CF:D8:C0:0D:C2:9F:A9:1D:8A:39:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JCSASgJ3cDnEz9jADcKfqR2KOQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b57aea-3cdf-44d0-aed4-d00b5822ccef/1/JCSASgJ3cDnEz9jADcKfqR2KOQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:4e:44:01:e1:a7:a7:86:e3:92:d4:23:df:ce:17:26:97:ea:
ca:98:05:4a:82:b1:b0:f6:cb:c1:df:c4:c6:00:75:7a:8d:89:
b3:73:96:b8:76:26:33:b0:55:5e:03:f2:5d:cf:8f:2b:c3:be:
f1:b8:36:e1:5d:0a:9b:e1:0f:99:10:4f:3a:d3:f0:a2:3e:a0:
e1:c5:83:c4:38:f9:ab:0c:86:32:0d:42:56:12:9c:37:88:9d:
72:20:a6:f4:90:f5:1d:aa:66:27:7f:21:b7:b3:42:71:1e:cb:
ae:fc:25:6f:86:ce:f1:ef:7b:bf:07:a5:15:63:a3:37:40:d8:
9a:5a:88:24:5d:a8:96:37:e4:6e:7a:ad:d7:0f:a5:91:00:04:
55:92:de:38:83:ca:53:dc:51:b2:36:35:32:9a:eb:26:2e:2f:
70:53:7c:3e:34:57:b3:a3:bc:fc:00:65:be:25:4c:1e:dc:93:
9e:a3:a0:51:97:50:29:00:03:8c:19:7c:40:f0:83:b2:ed:2c:
15:6e:70:8a:45:88:08:d8:ef:d3:3b:bf:b3:e5:3a:b7:c4:c4:
67:17:14:05:4f:53:1a:88:3f:ac:f2:40:d1:5c:85:65:7d:89:
f0:1a:8b:ff:db:10:a3:d4:ac:58:88:9e:28:1a:e3:94:17:52:
68:3f:d8:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRh4zlZzJkf7ZV+1EGEIibMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MjQ4MDRhMDI3NzcwMzljNGNmZDhjMDBkYzI5ZmE5MWQ4
YTM5MGMwHhcNMjUxMTA1MDEwMDI5WhcNMjUxMTA2MDEwMDI5WjAzMTEwLwYDVQQD
Eyg0ODA3NTAzYTE3MTM3Yzc4ZmY1YmNkODJhMWFjZTE5NDQxMWNlNTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8kWZHG8foua1DKTLOFmWg4RymOE
OEubCB3LM5s4bJlQZy296yDzrRhtKW0kJZpvYjGlEkZ7boeHMtGeQPMvs2uFFeH5
Xst0kFN95YPB6NLDByMEVudu0cXtoIgSD/umh1efVc+EsCC9NFeslDIqxR1Ni2kD
aJa/om+pWTt/hu/jR6roKrqIYjvjhkdsFTqq4mHfmyuQCXZAaiV4RZAJJKAoAxxw
2EXYWxPRo7MIfE7Ds95s8WCTIXOH81DsdCZWCHathNTo9+XkN2pgCuujL8aEydnn
2uLG3nYydsbRMO4ahTMRGsUM26wzMGrBXigDq1oruVDkS9RXHkOfOtYaywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEgHUDoXE3x4/1vNgqGs4ZRBHOULMB8GA1UdIwQY
MBaAFCQkgEoCd3A5xM/YwA3Cn6kdijkMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkNTQVNnSjNjRG5FejlqQURjS2ZxUjJLT1F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iNTdhZWEtM2NkZi00NGQwLWFlZDQt
ZDAwYjU4MjJjY2VmLzEvSkNTQVNnSjNjRG5FejlqQURjS2ZxUjJLT1F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9iNTdhZWEtM2NkZi00NGQwLWFlZDQtZDAwYjU4MjJjY2Vm
LzEvSkNTQVNnSjNjRG5FejlqQURjS2ZxUjJLT1F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATU5EAeGn
p4bjktQj384XJpfqypgFSoKxsPbLwd/ExgB1eo2Js3OWuHYmM7BVXgPyXc+PK8O+
8bg24V0Km+EPmRBPOtPwoj6g4cWDxDj5qwyGMg1CVhKcN4idciCm9JD1HapmJ38h
t7NCcR7Lrvwlb4bO8e97vwelFWOjN0DYmlqIJF2oljfkbnqt1w+lkQAEVZLeOIPK
U9xRsjY1MprrJi4vcFN8PjRXs6O8/ABlviVMHtyTnqOgUZdQKQADjBl8QPCDsu0s
FW5wikWICNjv0zu/s+U6t8TEZxcUBU9TGog/rPJA0VyFZX2J8BqL/9sQo9SsWIie
KBrjlBdSaD/Yig==
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:43:32 2025 by rpki-client