Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.mft
File: jNtFdj7woZYpOzOAyIj4Oox803c.mft (raw, json)
Hash identifier: 3qPoCLQl9gXRSeOc54MYGe9veAcBMbEJ6K12btxUT1Q=
Subject key identifier: D1:70:95:B6:C1:60:13:DB:56:03:76:FE:98:B6:67:D2:98:00:69:40
Authority key identifier: 8C:DB:45:76:3E:F0:A1:96:29:3B:33:80:C8:88:F8:3A:8C:7C:D3:77
Certificate issuer: /CN=8cdb45763ef0a196293b3380c888f83a8c7cd377
Certificate serial: 019881D5788110D74FE209D089F4E1623AB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNtFdj7woZYpOzOAyIj4Oox803c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.mft
Manifest number: 04F1
Signing time: Thu 07 Aug 2025 00:01:47 +0000
Manifest this update: Thu 07 Aug 2025 00:01:47 +0000
Manifest next update: Fri 08 Aug 2025 00:01:47 +0000
Files and hashes: 1: jNtFdj7woZYpOzOAyIj4Oox803c.crl (hash: GDv5FEuZ/A9HCZP8dhq1RazNnnxtFA8UBXUpQAqwFHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNtFdj7woZYpOzOAyIj4Oox803c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 00:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d5:78:81:10:d7:4f:e2:09:d0:89:f4:e1:62:3a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cdb45763ef0a196293b3380c888f83a8c7cd377
Validity
Not Before: Aug 7 00:01:47 2025 GMT
Not After : Aug 8 00:01:47 2025 GMT
Subject: CN=d17095b6c16013db560376fe98b667d298006940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b1:31:d1:0b:44:01:52:20:bc:6d:e0:bd:80:
9d:8f:5c:20:d0:72:64:cd:42:b5:9d:e5:f3:f2:b5:
f7:ad:bb:0c:4b:66:2f:24:50:39:a1:a3:61:f5:a7:
5c:45:1f:0d:a8:00:b2:1e:96:0b:52:1c:a8:5d:30:
74:55:2f:ca:6d:04:22:91:01:b9:2d:d1:fe:06:d1:
06:5a:0c:31:7c:1d:b9:87:d8:08:ef:25:5e:9c:3e:
10:8c:f2:6b:72:62:39:26:c1:1f:dd:3a:fa:92:de:
1a:e6:a5:5d:b5:4d:a5:23:2c:f0:cd:67:d6:f8:6d:
94:f8:7f:6e:e4:d0:29:f1:39:5b:37:f4:89:77:ce:
de:4c:14:2d:c4:52:91:10:68:d9:15:8f:b2:ae:75:
cf:16:11:3d:48:25:17:95:80:9e:f3:52:bd:21:44:
ff:19:44:0d:9d:f1:d3:4a:bc:b2:04:8e:95:a1:2a:
b0:87:e9:74:d9:35:86:e2:f7:90:14:80:d2:79:a8:
63:3f:ed:75:8a:d7:e2:d6:0b:cf:21:32:b2:20:8e:
f2:93:9d:5b:3a:db:a9:9d:bb:60:1b:8a:26:46:d5:
03:18:f5:6f:99:c2:56:22:9b:36:b4:59:db:7d:32:
10:90:7f:5a:5b:f5:ec:6f:e4:7e:f2:18:d6:73:13:
d3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:70:95:B6:C1:60:13:DB:56:03:76:FE:98:B6:67:D2:98:00:69:40
X509v3 Authority Key Identifier:
keyid:8C:DB:45:76:3E:F0:A1:96:29:3B:33:80:C8:88:F8:3A:8C:7C:D3:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNtFdj7woZYpOzOAyIj4Oox803c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/e852b6-76e2-40ef-a7be-53d3b9874edd/1/jNtFdj7woZYpOzOAyIj4Oox803c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d9:de:7d:a8:21:4b:cc:ed:c1:c1:11:3c:ba:da:1f:9a:66:
ff:aa:5d:53:dc:40:c0:9c:ea:a4:28:77:ed:aa:ff:f4:34:df:
a5:17:05:5a:ba:e8:27:1d:fc:92:c8:f0:03:38:c1:8d:1d:ee:
6c:00:9c:6a:d1:66:bb:27:38:91:d7:dd:de:25:6c:4c:ef:2d:
56:2a:a0:74:00:f9:19:49:45:9c:0e:0e:e9:0c:f5:11:df:8c:
43:45:9c:49:92:cb:3e:90:36:dd:5b:4a:8f:f4:10:c3:63:1d:
c2:3b:d5:0e:5e:06:c6:7f:02:dc:12:83:f8:b9:e9:1d:44:4b:
ea:80:0e:5d:33:6e:be:a7:d0:be:aa:fe:a9:7f:63:5f:47:7c:
cc:3c:4c:06:a9:21:ce:79:45:4f:ec:88:9b:0a:ae:db:09:a7:
29:a4:23:d8:81:2d:20:9e:c9:21:6c:d8:eb:bb:d4:8f:c5:49:
0f:78:38:c1:81:b9:40:8a:6e:01:9c:52:01:92:a3:f9:da:32:
18:5e:13:e8:c5:6c:c2:1a:00:0a:73:99:c4:20:86:94:2d:73:
5e:c2:a6:43:ea:14:cf:d7:75:a8:ba:3a:f2:22:85:96:97:f0:
fe:3b:05:e6:f3:3e:53:63:97:a6:49:40:bf:9d:33:4c:98:89:
a0:da:6d:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiB1XiBENdP4gnQifThYjq1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZGI0NTc2M2VmMGExOTYyOTNiMzM4MGM4ODhmODNhOGM3
Y2QzNzcwHhcNMjUwODA3MDAwMTQ3WhcNMjUwODA4MDAwMTQ3WjAzMTEwLwYDVQQD
EyhkMTcwOTViNmMxNjAxM2RiNTYwMzc2ZmU5OGI2NjdkMjk4MDA2OTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rEx0QtEAVIgvG3gvYCdj1wg0HJk
zUK1neXz8rX3rbsMS2YvJFA5oaNh9adcRR8NqACyHpYLUhyoXTB0VS/KbQQikQG5
LdH+BtEGWgwxfB25h9gI7yVenD4QjPJrcmI5JsEf3Tr6kt4a5qVdtU2lIyzwzWfW
+G2U+H9u5NAp8TlbN/SJd87eTBQtxFKREGjZFY+yrnXPFhE9SCUXlYCe81K9IUT/
GUQNnfHTSryyBI6VoSqwh+l02TWG4veQFIDSeahjP+11itfi1gvPITKyII7yk51b
OtupnbtgG4omRtUDGPVvmcJWIps2tFnbfTIQkH9aW/Xsb+R+8hjWcxPTDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFwlbbBYBPbVgN2/pi2Z9KYAGlAMB8GA1UdIwQY
MBaAFIzbRXY+8KGWKTszgMiI+DqMfNN3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak50RmRqN3dvWllwT3pPQXlJajRPb3g4MDNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9lODUyYjYtNzZlMi00MGVmLWE3YmUt
NTNkM2I5ODc0ZWRkLzEvak50RmRqN3dvWllwT3pPQXlJajRPb3g4MDNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9lODUyYjYtNzZlMi00MGVmLWE3YmUtNTNkM2I5ODc0ZWRk
LzEvak50RmRqN3dvWllwT3pPQXlJajRPb3g4MDNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADtnefagh
S8ztwcERPLraH5pm/6pdU9xAwJzqpCh37ar/9DTfpRcFWrroJx38ksjwAzjBjR3u
bACcatFmuyc4kdfd3iVsTO8tViqgdAD5GUlFnA4O6Qz1Ed+MQ0WcSZLLPpA23VtK
j/QQw2MdwjvVDl4Gxn8C3BKD+LnpHURL6oAOXTNuvqfQvqr+qX9jX0d8zDxMBqkh
znlFT+yImwqu2wmnKaQj2IEtIJ7JIWzY67vUj8VJD3g4wYG5QIpuAZxSAZKj+doy
GF4T6MVswhoACnOZxCCGlC1zXsKmQ+oUz9d1qLo68iKFlpfw/jsF5vM+U2OXpklA
v50zTJiJoNptWw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 11:08:21 2025 by rpki-client