Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft
File: JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft (raw, json)
Hash identifier: tTO3VUfPtbOrmBzdQi9C9RYXaA0nqcQ8wQ9pYxeu91g=
Subject key identifier: D6:EA:B9:75:A2:12:1C:FB:E8:37:80:8B:63:65:6B:F8:8B:A5:BF:12
Authority key identifier: 26:A0:21:D2:58:73:42:C4:94:53:F1:51:34:22:08:C8:DE:94:4F:2C
Certificate issuer: /CN=26a021d2587342c49453f151342208c8de944f2c
Certificate serial: 01987ED375DA662B0DEB4860666DB47DD7D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqAh0lhzQsSUU_FRNCIIyN6UTyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft
Manifest number: 016E
Signing time: Wed 06 Aug 2025 10:00:43 +0000
Manifest this update: Wed 06 Aug 2025 10:00:43 +0000
Manifest next update: Thu 07 Aug 2025 10:00:43 +0000
Files and hashes: 1: JqAh0lhzQsSUU_FRNCIIyN6UTyw.crl (hash: 2zHS19r+tM6fMimWk1GJsa0JFmASNu394n+kW7dlppI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqAh0lhzQsSUU_FRNCIIyN6UTyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:75:da:66:2b:0d:eb:48:60:66:6d:b4:7d:d7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a021d2587342c49453f151342208c8de944f2c
Validity
Not Before: Aug 6 10:00:43 2025 GMT
Not After : Aug 7 10:00:43 2025 GMT
Subject: CN=d6eab975a2121cfbe837808b63656bf88ba5bf12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b2:cd:bb:9a:14:62:e8:1c:79:81:32:9b:27:
f9:73:94:87:2f:4b:b6:3f:8b:9d:fa:8b:bb:34:a5:
50:e3:22:73:65:d7:76:32:c8:3e:94:66:15:cd:25:
d7:e2:ac:10:54:e8:31:58:d4:96:27:bc:83:24:51:
f3:68:5b:2f:65:f1:e8:95:f3:ea:8a:7f:f8:75:9c:
6c:2f:a9:b7:f6:f9:cf:07:f6:01:48:71:c9:88:21:
01:3a:1c:e1:fb:55:2a:d3:05:f3:c9:ce:13:fe:96:
e8:f4:2c:de:85:e5:c9:12:08:84:74:82:22:2e:15:
d8:83:0b:af:b4:ff:df:a7:a8:ab:63:68:fe:33:b0:
f9:4e:23:50:66:9b:8b:b4:6f:e1:2d:11:54:eb:f8:
d9:2c:22:ff:c4:68:6e:6a:d1:90:c4:b8:81:4e:80:
11:70:5f:4c:74:a0:ed:c9:48:03:c9:a9:5f:73:ef:
c3:43:54:de:1e:d9:40:ba:56:44:1d:8b:ae:86:07:
4f:25:1f:fe:61:82:9a:fa:76:f7:66:51:6e:c4:1f:
ac:19:c5:79:64:c3:2b:f0:96:29:f5:0a:e9:63:f7:
c2:9b:64:04:da:4e:c4:89:03:65:3e:52:e1:65:02:
32:7c:ec:09:6d:9f:71:9f:44:3a:16:ed:10:13:0e:
6e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:EA:B9:75:A2:12:1C:FB:E8:37:80:8B:63:65:6B:F8:8B:A5:BF:12
X509v3 Authority Key Identifier:
keyid:26:A0:21:D2:58:73:42:C4:94:53:F1:51:34:22:08:C8:DE:94:4F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqAh0lhzQsSUU_FRNCIIyN6UTyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:7e:65:50:7d:58:0c:c2:01:7e:17:8f:fe:b1:d7:29:66:be:
37:4d:66:21:f1:e6:f3:60:fe:4e:89:50:48:e0:fd:a0:16:f0:
d8:2c:68:80:4c:3d:21:7e:ec:ce:3e:7f:6f:a6:3f:6c:cc:39:
47:dd:25:8a:33:1a:17:87:31:b8:97:9a:3d:79:47:98:50:16:
c7:4c:5a:0f:75:1c:8a:f6:89:c7:b6:42:00:9f:58:23:d6:0c:
48:b4:7f:c2:52:b2:f1:ea:37:95:5e:bf:76:03:31:08:34:df:
8a:77:02:53:56:cf:58:ca:53:14:b4:83:df:76:2e:10:c8:42:
8e:d7:60:6d:a8:50:c2:bb:37:ca:ed:dc:5e:8b:0e:3e:72:e8:
c7:d3:26:0f:6f:30:1a:f0:d4:05:80:48:05:43:d2:f9:52:4b:
68:3a:17:ed:32:39:48:a7:8e:b6:32:f4:32:83:52:74:33:55:
38:e5:d1:57:3a:f4:8b:20:54:bb:54:e9:ff:37:3e:39:47:24:
98:7b:ac:3d:14:a4:28:07:dd:2a:ed:c4:c9:0b:bc:5d:31:0c:
5a:1b:f3:5e:4d:23:3a:ca:a7:3e:83:15:fd:b2:0d:8d:b5:1b:
db:04:bd:60:26:97:bc:ec:c5:d0:e7:2e:a1:54:31:43:f5:a4:
90:66:b2:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh+03XaZisN60hgZm20fdfUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2YTAyMWQyNTg3MzQyYzQ5NDUzZjE1MTM0MjIwOGM4ZGU5
NDRmMmMwHhcNMjUwODA2MTAwMDQzWhcNMjUwODA3MTAwMDQzWjAzMTEwLwYDVQQD
EyhkNmVhYjk3NWEyMTIxY2ZiZTgzNzgwOGI2MzY1NmJmODhiYTViZjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorLNu5oUYugceYEymyf5c5SHL0u2
P4ud+ou7NKVQ4yJzZdd2Msg+lGYVzSXX4qwQVOgxWNSWJ7yDJFHzaFsvZfHolfPq
in/4dZxsL6m39vnPB/YBSHHJiCEBOhzh+1Uq0wXzyc4T/pbo9CzeheXJEgiEdIIi
LhXYgwuvtP/fp6irY2j+M7D5TiNQZpuLtG/hLRFU6/jZLCL/xGhuatGQxLiBToAR
cF9MdKDtyUgDyalfc+/DQ1TeHtlAulZEHYuuhgdPJR/+YYKa+nb3ZlFuxB+sGcV5
ZMMr8JYp9QrpY/fCm2QE2k7EiQNlPlLhZQIyfOwJbZ9xn0Q6Fu0QEw5uKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNbquXWiEhz76DeAi2Nla/iLpb8SMB8GA1UdIwQY
MBaAFCagIdJYc0LElFPxUTQiCMjelE8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnFBaDBsaHpRc1NVVV9GUk5DSUl5TjZVVHl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9hNzI2YTgtNzlmNi00NzFmLWI5NzQt
NGEzM2JmNTE4MDFlLzEvSnFBaDBsaHpRc1NVVV9GUk5DSUl5TjZVVHl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9hNzI2YTgtNzlmNi00NzFmLWI5NzQtNGEzM2JmNTE4MDFl
LzEvSnFBaDBsaHpRc1NVVV9GUk5DSUl5TjZVVHl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsH5lUH1Y
DMIBfheP/rHXKWa+N01mIfHm82D+TolQSOD9oBbw2CxogEw9IX7szj5/b6Y/bMw5
R90lijMaF4cxuJeaPXlHmFAWx0xaD3UcivaJx7ZCAJ9YI9YMSLR/wlKy8eo3lV6/
dgMxCDTfincCU1bPWMpTFLSD33YuEMhCjtdgbahQwrs3yu3cXosOPnLox9MmD28w
GvDUBYBIBUPS+VJLaDoX7TI5SKeOtjL0MoNSdDNVOOXRVzr0iyBUu1Tp/zc+OUck
mHusPRSkKAfdKu3EyQu8XTEMWhvzXk0jOsqnPoMV/bINjbUb2wS9YCaXvOzF0Ocu
oVQxQ/WkkGayHQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 12:33:50 2025 by rpki-client