Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/95df81-fc9e-4c5f-bb43-ffb028f0a02f/1/JAy7mUeWHigo2EdLysoem5FVZWA.mft
File: JAy7mUeWHigo2EdLysoem5FVZWA.mft (raw, json)
Hash identifier: nNkIvTTL0F7x2RVbZcS1pic6+VKScW9SCE2DeNrm5B4=
Subject key identifier: 87:AE:8B:FD:13:AC:D7:20:88:57:12:1B:A0:B4:28:F1:FC:93:59:6E
Authority key identifier: 24:0C:BB:99:47:96:1E:28:28:D8:47:4B:CA:CA:1E:9B:91:55:65:60
Certificate issuer: /CN=240cbb9947961e2828d8474bcaca1e9b91556560
Certificate serial: 01988467B2AD81758322D2F1694FC398695E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JAy7mUeWHigo2EdLysoem5FVZWA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/95df81-fc9e-4c5f-bb43-ffb028f0a02f/1/JAy7mUeWHigo2EdLysoem5FVZWA.mft
Manifest number: 135B
Signing time: Thu 07 Aug 2025 12:00:45 +0000
Manifest this update: Thu 07 Aug 2025 12:00:45 +0000
Manifest next update: Fri 08 Aug 2025 12:00:45 +0000
Files and hashes: 1: JAy7mUeWHigo2EdLysoem5FVZWA.crl (hash: XFjKXC9eqcOMYEkjMIH878dmRl9VXhzkAff07iyRuMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/95df81-fc9e-4c5f-bb43-ffb028f0a02f/1/JAy7mUeWHigo2EdLysoem5FVZWA.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/95df81-fc9e-4c5f-bb43-ffb028f0a02f/1/JAy7mUeWHigo2EdLysoem5FVZWA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JAy7mUeWHigo2EdLysoem5FVZWA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:67:b2:ad:81:75:83:22:d2:f1:69:4f:c3:98:69:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240cbb9947961e2828d8474bcaca1e9b91556560
Validity
Not Before: Aug 7 12:00:45 2025 GMT
Not After : Aug 8 12:00:45 2025 GMT
Subject: CN=87ae8bfd13acd7208857121ba0b428f1fc93596e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4f:90:d6:e7:4c:22:1f:c9:d5:63:0f:f7:17:
eb:8c:22:99:87:b7:ec:22:b2:42:fc:97:9b:11:21:
0d:6d:a6:46:bd:9a:39:65:d1:b7:aa:75:56:86:68:
d7:f6:c7:9d:5f:4e:eb:1c:8a:84:46:c4:e8:93:25:
ea:2e:e1:17:17:cd:cf:ae:c3:52:5e:08:77:c2:45:
0b:5e:3c:8e:8e:61:db:13:cc:fd:5a:91:d6:a6:f5:
ac:a2:cd:56:84:11:74:77:71:c1:82:80:e9:78:e6:
d7:13:76:c4:37:f5:04:e8:d3:9c:6b:14:d5:b4:82:
23:21:ae:ff:1d:f9:81:01:36:0d:e3:9f:8d:7a:9a:
b3:67:64:fe:4b:f3:ae:90:41:64:bf:52:75:77:a2:
2f:16:b2:33:34:78:0a:4e:78:6a:3c:74:2d:81:33:
eb:28:d0:6b:76:b5:d4:b8:3a:07:df:b1:ad:fd:b2:
a0:ae:88:61:3e:5f:cd:0c:1d:81:e1:68:46:aa:ee:
28:b8:2c:9a:1c:2e:52:78:cc:dc:95:81:77:bf:24:
a7:65:b9:87:e4:eb:b3:fd:ca:d0:82:75:bd:b4:8d:
d6:91:1b:a9:08:e1:53:79:dc:18:1d:46:f6:63:9b:
37:bc:3a:88:61:b4:dc:04:c7:81:da:ec:97:14:75:
6d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:AE:8B:FD:13:AC:D7:20:88:57:12:1B:A0:B4:28:F1:FC:93:59:6E
X509v3 Authority Key Identifier:
keyid:24:0C:BB:99:47:96:1E:28:28:D8:47:4B:CA:CA:1E:9B:91:55:65:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JAy7mUeWHigo2EdLysoem5FVZWA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/95df81-fc9e-4c5f-bb43-ffb028f0a02f/1/JAy7mUeWHigo2EdLysoem5FVZWA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/95df81-fc9e-4c5f-bb43-ffb028f0a02f/1/JAy7mUeWHigo2EdLysoem5FVZWA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b9:ab:69:e0:22:45:62:61:ff:f8:ea:6e:17:a3:fc:de:a0:
c2:84:a7:fe:e0:67:c8:7b:d9:2a:d8:13:01:47:8a:14:7a:7f:
d5:5f:1b:3c:6a:23:cd:a7:80:40:79:12:25:af:78:5f:69:5b:
2e:db:86:36:fa:4d:1f:29:13:13:8a:8f:57:2c:10:e7:67:30:
29:2f:e0:80:18:9e:fb:2c:fe:a3:e1:12:17:db:c6:97:74:1c:
12:40:b0:43:78:e0:00:82:3e:1f:07:47:8e:25:1a:ee:9f:7d:
63:07:3a:4f:ba:b8:de:44:bc:ae:6e:cc:8d:03:59:c6:f9:11:
40:85:09:6c:a4:22:31:d2:09:b2:ca:13:1d:21:c1:e3:f8:08:
1d:29:c2:57:7f:ca:15:09:a3:54:33:e3:83:d0:eb:b0:c5:9a:
f0:6c:50:79:a4:08:1e:48:1d:a0:43:56:72:b4:cc:e0:96:1d:
d9:6c:50:ec:9c:15:f2:e3:20:3d:50:a2:e5:e4:5a:91:aa:e2:
ce:1a:d6:32:94:ea:15:d1:cc:05:95:ef:5a:b2:71:eb:f0:a5:
1f:d4:90:5d:97:7d:93:77:e5:66:9b:d4:d8:ec:37:8a:df:3c:
7e:f7:5a:7f:ac:a2:5a:35:c7:31:81:5f:d8:6c:b6:42:75:82:
33:f2:74:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiEZ7KtgXWDItLxaU/DmGleMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MGNiYjk5NDc5NjFlMjgyOGQ4NDc0YmNhY2ExZTliOTE1
NTY1NjAwHhcNMjUwODA3MTIwMDQ1WhcNMjUwODA4MTIwMDQ1WjAzMTEwLwYDVQQD
Eyg4N2FlOGJmZDEzYWNkNzIwODg1NzEyMWJhMGI0MjhmMWZjOTM1OTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwU+Q1udMIh/J1WMP9xfrjCKZh7fs
IrJC/JebESENbaZGvZo5ZdG3qnVWhmjX9sedX07rHIqERsTokyXqLuEXF83PrsNS
Xgh3wkULXjyOjmHbE8z9WpHWpvWsos1WhBF0d3HBgoDpeObXE3bEN/UE6NOcaxTV
tIIjIa7/HfmBATYN45+NepqzZ2T+S/OukEFkv1J1d6IvFrIzNHgKTnhqPHQtgTPr
KNBrdrXUuDoH37Gt/bKgrohhPl/NDB2B4WhGqu4ouCyaHC5SeMzclYF3vySnZbmH
5Ouz/crQgnW9tI3WkRupCOFTedwYHUb2Y5s3vDqIYbTcBMeB2uyXFHVtQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIeui/0TrNcgiFcSG6C0KPH8k1luMB8GA1UdIwQY
MBaAFCQMu5lHlh4oKNhHS8rKHpuRVWVgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkF5N21VZVdIaWdvMkVkTHlzb2VtNUZWWldBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85NWRmODEtZmM5ZS00YzVmLWJiNDMt
ZmZiMDI4ZjBhMDJmLzEvSkF5N21VZVdIaWdvMkVkTHlzb2VtNUZWWldBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85NWRmODEtZmM5ZS00YzVmLWJiNDMtZmZiMDI4ZjBhMDJm
LzEvSkF5N21VZVdIaWdvMkVkTHlzb2VtNUZWWldBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP7mraeAi
RWJh//jqbhej/N6gwoSn/uBnyHvZKtgTAUeKFHp/1V8bPGojzaeAQHkSJa94X2lb
LtuGNvpNHykTE4qPVywQ52cwKS/ggBie+yz+o+ESF9vGl3QcEkCwQ3jgAII+HwdH
jiUa7p99Ywc6T7q43kS8rm7MjQNZxvkRQIUJbKQiMdIJssoTHSHB4/gIHSnCV3/K
FQmjVDPjg9DrsMWa8GxQeaQIHkgdoENWcrTM4JYd2WxQ7JwV8uMgPVCi5eRakari
zhrWMpTqFdHMBZXvWrJx6/ClH9SQXZd9k3flZpvU2Ow3it88fvdaf6yiWjXHMYFf
2Gy2QnWCM/J0aQ==
-----END CERTIFICATE-----
Generated at Thu Aug 7 14:40:24 2025 by rpki-client