Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.mft
File: jGrD-sRfBdkCaII3X-ArFX1LdRg.mft (raw, json)
Hash identifier: 1P6vmrbS1tDZ4YBsFh+9DKCXREqdd3JMPis3IZjMzZU=
Subject key identifier: 78:4E:27:09:01:B1:1F:A2:E0:DE:98:E7:AD:B9:21:6B:8F:16:E5:74
Authority key identifier: 8C:6A:C3:FA:C4:5F:05:D9:02:68:82:37:5F:E0:2B:15:7D:4B:75:18
Certificate issuer: /CN=8c6ac3fac45f05d9026882375fe02b157d4b7518
Certificate serial: 019873E39B720F09E8AEB397AB3231CD8614
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jGrD-sRfBdkCaII3X-ArFX1LdRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.mft
Manifest number: 0DB9
Signing time: Mon 04 Aug 2025 07:02:32 +0000
Manifest this update: Mon 04 Aug 2025 07:02:32 +0000
Manifest next update: Tue 05 Aug 2025 07:02:32 +0000
Files and hashes: 1: jGrD-sRfBdkCaII3X-ArFX1LdRg.crl (hash: XqjL5MyXPlThaeGqlw9AmOFPrZwyHYZOhS9eWtfuv5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jGrD-sRfBdkCaII3X-ArFX1LdRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:9b:72:0f:09:e8:ae:b3:97:ab:32:31:cd:86:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c6ac3fac45f05d9026882375fe02b157d4b7518
Validity
Not Before: Aug 4 07:02:32 2025 GMT
Not After : Aug 5 07:02:32 2025 GMT
Subject: CN=784e270901b11fa2e0de98e7adb9216b8f16e574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:10:e1:3e:30:6c:bb:68:bc:d5:70:c7:b7:3a:
bf:fc:3f:61:41:3b:63:0b:6c:83:e1:09:80:56:d8:
22:48:57:f0:03:c8:a7:ed:36:9c:9e:30:49:71:55:
a1:19:fe:66:78:be:60:75:97:5e:ac:12:58:5c:25:
6c:f6:44:c9:f0:37:35:86:2a:57:07:8f:3e:1d:1f:
26:5a:4b:5b:1c:f1:c9:2d:4f:8f:f7:a1:17:8e:dd:
c2:72:63:ab:3a:c0:b3:57:dc:94:e5:59:39:18:de:
b3:b1:8c:82:30:e6:d8:79:fc:e8:1a:50:21:1f:2a:
a6:df:e3:bb:65:49:9f:5c:43:13:5a:a0:ed:3d:f3:
1b:6e:0b:89:9f:f1:56:9c:1b:60:bf:4d:c1:0a:9c:
df:6a:0b:c8:1a:e9:19:80:b0:8b:2e:de:54:e4:29:
d1:04:e2:43:63:02:77:6a:52:40:13:83:0a:08:f1:
c7:98:f5:87:22:79:d0:ab:b6:e6:e0:49:b5:5b:f4:
b9:4a:01:0d:1e:a1:77:c9:9f:3b:16:dd:f3:03:c6:
3d:4d:16:91:52:dc:51:a4:7c:9b:44:47:05:d5:87:
15:70:25:01:31:5f:b0:dd:b6:69:77:d5:a7:10:ca:
ec:c6:0e:a6:ed:32:fa:4c:d9:4d:5c:8d:0d:f3:34:
00:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4E:27:09:01:B1:1F:A2:E0:DE:98:E7:AD:B9:21:6B:8F:16:E5:74
X509v3 Authority Key Identifier:
keyid:8C:6A:C3:FA:C4:5F:05:D9:02:68:82:37:5F:E0:2B:15:7D:4B:75:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jGrD-sRfBdkCaII3X-ArFX1LdRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/b71df3-4226-4a56-beb8-82210cbf8448/1/jGrD-sRfBdkCaII3X-ArFX1LdRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:32:d9:22:9c:a3:80:c5:e2:e7:eb:5f:16:47:3f:5b:68:13:
99:c5:9e:20:77:3b:a8:53:08:23:19:a8:08:5f:45:7a:a0:c6:
16:5c:1d:68:e9:97:b1:90:21:03:67:be:9b:85:e0:8a:d3:3a:
21:a5:59:33:ff:f4:bc:b8:a5:a1:d1:37:40:6f:80:83:aa:cf:
1e:49:a6:76:4d:42:bb:92:43:6d:d1:72:7d:2f:20:35:38:b2:
18:a0:cb:22:5c:09:d0:e6:10:94:26:21:52:89:a8:e0:72:da:
ac:38:d5:3f:ef:ee:be:3e:3e:f3:26:fd:27:5f:04:ef:a9:71:
6b:c9:c6:1a:63:b2:84:09:45:e6:3a:76:90:52:48:ef:55:39:
89:a5:10:02:ad:bc:d7:77:59:06:bb:b7:e0:c7:c2:b1:19:54:
f4:a9:e6:13:8e:c5:03:1a:e8:79:9e:12:05:31:1c:b8:bb:23:
9f:fc:88:35:0f:ee:9e:25:3c:db:98:b4:da:64:14:33:8e:db:
30:98:40:f8:56:44:1b:ff:3a:3a:b7:89:d4:28:c1:44:8b:bb:
80:e2:79:07:04:e1:ac:81:86:9d:2e:4b:28:70:0a:89:3f:57:
77:a7:77:42:de:31:a1:25:0a:95:ce:60:16:02:10:5f:42:95:
d3:d3:17:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz45tyDwnorrOXqzIxzYYUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjNmFjM2ZhYzQ1ZjA1ZDkwMjY4ODIzNzVmZTAyYjE1N2Q0
Yjc1MTgwHhcNMjUwODA0MDcwMjMyWhcNMjUwODA1MDcwMjMyWjAzMTEwLwYDVQQD
Eyg3ODRlMjcwOTAxYjExZmEyZTBkZTk4ZTdhZGI5MjE2YjhmMTZlNTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihDhPjBsu2i81XDHtzq//D9hQTtj
C2yD4QmAVtgiSFfwA8in7TacnjBJcVWhGf5meL5gdZderBJYXCVs9kTJ8Dc1hipX
B48+HR8mWktbHPHJLU+P96EXjt3CcmOrOsCzV9yU5Vk5GN6zsYyCMObYefzoGlAh
Hyqm3+O7ZUmfXEMTWqDtPfMbbguJn/FWnBtgv03BCpzfagvIGukZgLCLLt5U5CnR
BOJDYwJ3alJAE4MKCPHHmPWHInnQq7bm4Em1W/S5SgENHqF3yZ87Ft3zA8Y9TRaR
UtxRpHybREcF1YcVcCUBMV+w3bZpd9WnEMrsxg6m7TL6TNlNXI0N8zQAuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHhOJwkBsR+i4N6Y5625IWuPFuV0MB8GA1UdIwQY
MBaAFIxqw/rEXwXZAmiCN1/gKxV9S3UYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakdyRC1zUmZCZGtDYUlJM1gtQXJGWDFMZFJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9iNzFkZjMtNDIyNi00YTU2LWJlYjgt
ODIyMTBjYmY4NDQ4LzEvakdyRC1zUmZCZGtDYUlJM1gtQXJGWDFMZFJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9iNzFkZjMtNDIyNi00YTU2LWJlYjgtODIyMTBjYmY4NDQ4
LzEvakdyRC1zUmZCZGtDYUlJM1gtQXJGWDFMZFJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWDLZIpyj
gMXi5+tfFkc/W2gTmcWeIHc7qFMIIxmoCF9FeqDGFlwdaOmXsZAhA2e+m4XgitM6
IaVZM//0vLilodE3QG+Ag6rPHkmmdk1Cu5JDbdFyfS8gNTiyGKDLIlwJ0OYQlCYh
Uomo4HLarDjVP+/uvj4+8yb9J18E76lxa8nGGmOyhAlF5jp2kFJI71U5iaUQAq28
13dZBru34MfCsRlU9KnmE47FAxroeZ4SBTEcuLsjn/yINQ/uniU825i02mQUM47b
MJhA+FZEG/86OreJ1CjBRIu7gOJ5BwThrIGGnS5LKHAKiT9Xd6d3Qt4xoSUKlc5g
FgIQX0KV09MXKA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:21:27 2025 by rpki-client