Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft
File: JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft (raw, json)
Hash identifier: 6iiWaOkd0DqpVoUXsa+wvfeDaR6OLz/6R10GDRLn4lo=
Subject key identifier: B6:13:83:40:4A:94:B8:84:F9:09:0D:76:D0:C7:9E:9F:73:FD:59:64
Authority key identifier: 26:06:6B:6B:6C:13:60:35:01:AA:25:6F:CD:C3:74:0D:F7:78:01:DD
Certificate issuer: /CN=26066b6b6c13603501aa256fcdc3740df77801dd
Certificate serial: 019A522C3F55E46CCAB1845B9D95114F0F68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft
Manifest number: 0B61
Signing time: Wed 05 Nov 2025 04:00:22 +0000
Manifest this update: Wed 05 Nov 2025 04:00:22 +0000
Manifest next update: Thu 06 Nov 2025 04:00:22 +0000
Files and hashes: 1: JgZra2wTYDUBqiVvzcN0Dfd4Ad0.crl (hash: 0UfoyJtAhZoYW22oH3hH0YqTmGCcFnBEAzv4CA5Jn0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:3f:55:e4:6c:ca:b1:84:5b:9d:95:11:4f:0f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26066b6b6c13603501aa256fcdc3740df77801dd
Validity
Not Before: Nov 5 04:00:22 2025 GMT
Not After : Nov 6 04:00:22 2025 GMT
Subject: CN=b61383404a94b884f9090d76d0c79e9f73fd5964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:36:94:12:2d:b7:6c:69:63:e2:b3:74:0a:24:
40:de:6f:bc:e2:6f:e0:3f:97:c9:fe:59:08:e7:f1:
c5:d7:f8:72:84:08:c3:54:ff:db:4f:34:3d:7d:db:
1a:29:a9:da:51:20:82:71:f6:55:c0:22:75:03:f0:
2f:70:22:77:72:27:a7:56:df:67:d9:84:85:24:38:
6f:d1:db:91:9e:81:77:f9:f0:e0:64:98:6c:8a:ea:
0e:c6:42:23:34:3b:36:84:e2:32:58:91:42:f0:9d:
c2:f5:46:7f:aa:1e:06:d2:03:79:d1:8b:6e:c1:a9:
78:35:e0:fb:ca:c4:61:54:27:4f:b5:6b:b1:bc:2a:
e9:44:fb:e4:29:58:51:52:6b:4f:a0:ef:fc:46:18:
de:5e:83:f3:31:ef:bc:af:98:14:db:d5:a9:26:55:
ad:03:57:52:fa:d8:99:37:e3:75:53:58:29:07:3a:
24:87:e5:3a:8b:ad:c8:92:4d:57:4a:26:18:32:59:
1a:06:15:b9:8a:0c:5b:99:a4:6f:93:3d:96:e9:aa:
99:e7:9f:92:b7:06:c9:ec:30:ff:5d:2d:33:ff:ab:
8b:66:8e:98:2f:b8:db:4e:f8:04:61:ae:92:3e:86:
b6:4a:1a:30:93:46:2f:33:09:b3:72:50:5e:d7:bd:
21:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:13:83:40:4A:94:B8:84:F9:09:0D:76:D0:C7:9E:9F:73:FD:59:64
X509v3 Authority Key Identifier:
keyid:26:06:6B:6B:6C:13:60:35:01:AA:25:6F:CD:C3:74:0D:F7:78:01:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/22771e-a383-450f-85bb-14b47f5911d7/1/JgZra2wTYDUBqiVvzcN0Dfd4Ad0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:65:5d:50:36:a7:ae:6e:86:08:1d:28:58:26:26:27:3e:35:
78:41:b2:29:e2:7c:d1:99:e6:d4:ff:47:aa:b6:fb:35:8c:0f:
9d:9b:86:a3:9a:46:21:06:c1:30:a5:97:78:ef:45:b8:d5:22:
2c:3a:ff:57:c6:b1:45:d5:09:80:99:d6:0f:ff:62:77:d9:93:
48:43:bb:a3:cd:53:a0:59:e2:3f:0b:ba:be:b3:7b:12:d5:ce:
b2:ad:4a:b1:87:13:a4:f1:96:d2:da:ab:fc:c7:16:ce:53:53:
c6:13:da:51:15:3c:d8:d3:33:10:3c:65:54:dd:d8:e5:16:88:
47:6d:d8:b1:5c:47:b5:df:9f:b2:85:d5:b0:31:df:1a:5f:2c:
65:03:dc:81:59:d0:21:47:e2:33:03:45:25:2a:1d:e3:0e:99:
b9:21:68:4b:0c:39:c4:5c:37:df:cc:6c:11:88:5f:3d:0a:c4:
ed:f8:f2:22:c8:a2:b6:5b:ac:69:9c:18:4b:79:07:ab:2b:0b:
2d:9b:b4:34:e5:1e:30:8d:47:f9:81:cb:55:48:12:f2:74:d2:
f1:d9:af:99:4f:22:c3:8e:72:e9:cb:af:ab:c7:d5:db:0f:40:
74:2d:47:8b:8c:c6:c7:d4:b9:de:83:00:a3:cc:0a:c6:47:b4:
87:6e:0f:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpSLD9V5GzKsYRbnZURTw9oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MDY2YjZiNmMxMzYwMzUwMWFhMjU2ZmNkYzM3NDBkZjc3
ODAxZGQwHhcNMjUxMTA1MDQwMDIyWhcNMjUxMTA2MDQwMDIyWjAzMTEwLwYDVQQD
EyhiNjEzODM0MDRhOTRiODg0ZjkwOTBkNzZkMGM3OWU5ZjczZmQ1OTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzaUEi23bGlj4rN0CiRA3m+84m/g
P5fJ/lkI5/HF1/hyhAjDVP/bTzQ9fdsaKanaUSCCcfZVwCJ1A/AvcCJ3cienVt9n
2YSFJDhv0duRnoF3+fDgZJhsiuoOxkIjNDs2hOIyWJFC8J3C9UZ/qh4G0gN50Ytu
wal4NeD7ysRhVCdPtWuxvCrpRPvkKVhRUmtPoO/8RhjeXoPzMe+8r5gU29WpJlWt
A1dS+tiZN+N1U1gpBzokh+U6i63Ikk1XSiYYMlkaBhW5igxbmaRvkz2W6aqZ55+S
twbJ7DD/XS0z/6uLZo6YL7jbTvgEYa6SPoa2Showk0YvMwmzclBe170htwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLYTg0BKlLiE+QkNdtDHnp9z/VlkMB8GA1UdIwQY
MBaAFCYGa2tsE2A1Aaolb83DdA33eAHdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmdacmEyd1RZRFVCcWlWdnpjTjBEZmQ0QWQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8yMjc3MWUtYTM4My00NTBmLTg1YmIt
MTRiNDdmNTkxMWQ3LzEvSmdacmEyd1RZRFVCcWlWdnpjTjBEZmQ0QWQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8yMjc3MWUtYTM4My00NTBmLTg1YmItMTRiNDdmNTkxMWQ3
LzEvSmdacmEyd1RZRFVCcWlWdnpjTjBEZmQ0QWQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMGVdUDan
rm6GCB0oWCYmJz41eEGyKeJ80Znm1P9Hqrb7NYwPnZuGo5pGIQbBMKWXeO9FuNUi
LDr/V8axRdUJgJnWD/9id9mTSEO7o81ToFniPwu6vrN7EtXOsq1KsYcTpPGW0tqr
/McWzlNTxhPaURU82NMzEDxlVN3Y5RaIR23YsVxHtd+fsoXVsDHfGl8sZQPcgVnQ
IUfiMwNFJSod4w6ZuSFoSww5xFw338xsEYhfPQrE7fjyIsiitlusaZwYS3kHqysL
LZu0NOUeMI1H+YHLVUgS8nTS8dmvmU8iw45y6cuvq8fV2w9AdC1Hi4zGx9S53oMA
o8wKxke0h24P9w==
-----END CERTIFICATE-----
Generated at Wed Nov 5 07:59:13 2025 by rpki-client