Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft
File: JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft (raw, json)
Hash identifier: 8lz5UxJg4B+lYU9e65e6avcu7c/svdnpHGDoBjuFia4=
Subject key identifier: DE:59:62:89:F8:34:64:37:82:06:74:FB:2C:2D:6F:48:81:00:E7:B2
Authority key identifier: 27:33:94:09:45:8C:FC:2B:BC:30:BB:19:AE:E5:06:31:85:5B:75:E6
Certificate issuer: /CN=27339409458cfc2bbc30bb19aee50631855b75e6
Certificate serial: 019A4EF4403E6D34692EA43317F9F4C23019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzOUCUWM_Cu8MLsZruUGMYVbdeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft
Manifest number: 1708
Signing time: Tue 04 Nov 2025 13:00:21 +0000
Manifest this update: Tue 04 Nov 2025 13:00:21 +0000
Manifest next update: Wed 05 Nov 2025 13:00:21 +0000
Files and hashes: 1: JzOUCUWM_Cu8MLsZruUGMYVbdeY.crl (hash: 3GRGQXx4/T+ONjfjGv9ntvBzGrauozSnmyHjRPwbxxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JzOUCUWM_Cu8MLsZruUGMYVbdeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:40:3e:6d:34:69:2e:a4:33:17:f9:f4:c2:30:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27339409458cfc2bbc30bb19aee50631855b75e6
Validity
Not Before: Nov 4 13:00:21 2025 GMT
Not After : Nov 5 13:00:21 2025 GMT
Subject: CN=de596289f8346437820674fb2c2d6f488100e7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:76:ce:2c:11:ca:c0:74:eb:dc:10:09:0b:4b:
7a:c2:2f:a9:09:70:3a:f3:1a:32:89:78:b0:ad:09:
55:b2:b9:2a:e7:24:d8:12:75:ba:5e:e9:7b:3b:c3:
ab:da:08:f6:73:02:bb:dd:c6:ef:12:eb:6e:a7:94:
6c:d0:e3:01:48:dd:d2:00:56:47:f3:0f:7e:77:0d:
d0:04:77:f6:b3:53:76:1a:db:bc:52:91:55:ae:be:
65:f4:7a:13:f9:0e:a5:eb:c6:f6:99:2a:6a:26:53:
48:98:25:fa:4b:92:90:72:8e:af:81:26:1f:df:2d:
8c:5a:87:c8:93:84:81:32:6e:45:37:6c:3a:e3:cc:
2e:26:78:da:35:99:3a:21:bf:14:87:24:e3:25:26:
ae:3e:3d:e1:e2:72:85:e3:6f:68:bc:bc:71:ad:c8:
28:f4:9e:1d:3c:53:9d:d6:b9:b9:33:91:f9:99:ed:
68:6f:9d:b8:6a:a3:96:76:b0:a5:1a:e4:cc:00:83:
46:ab:7c:5b:c8:2f:62:79:5a:b4:77:14:6f:1a:71:
e7:4b:04:1d:f6:78:95:59:49:21:40:c7:47:86:27:
f8:d2:7c:ec:65:d0:cf:cf:0c:eb:20:d1:79:cd:14:
69:65:f1:47:f9:ef:f2:a9:05:00:b3:14:3e:59:53:
57:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:59:62:89:F8:34:64:37:82:06:74:FB:2C:2D:6F:48:81:00:E7:B2
X509v3 Authority Key Identifier:
keyid:27:33:94:09:45:8C:FC:2B:BC:30:BB:19:AE:E5:06:31:85:5B:75:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzOUCUWM_Cu8MLsZruUGMYVbdeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ecd6a5-dcf2-451c-8a2f-5d13c7447f6a/1/JzOUCUWM_Cu8MLsZruUGMYVbdeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:54:e2:c0:d1:17:3f:7d:f7:71:ae:6b:18:f2:b8:9c:39:a3:
fe:ad:fb:e4:b6:cb:7d:b3:cb:d9:21:32:ce:07:8e:50:d6:16:
cf:98:40:26:7a:c0:81:ea:12:f8:44:8b:ff:6e:74:99:ac:ac:
20:ad:87:9d:5e:d8:42:b5:29:21:9e:fc:37:3c:31:15:3d:ef:
c1:d3:7d:4e:13:7a:41:04:41:9e:d9:7b:c7:cc:87:84:82:8a:
3d:f9:bc:28:77:14:b8:d2:25:14:b9:ea:b4:91:6d:1b:f8:63:
91:26:20:ed:21:3b:f1:bb:81:b3:b7:6d:b0:d9:49:d2:e8:f4:
e2:6c:26:32:98:cc:cf:8b:16:9a:97:db:9c:fe:70:0e:09:1d:
92:54:0e:54:fe:fe:9a:b9:34:62:52:5f:70:ff:61:fc:b6:c4:
02:62:27:40:97:ee:99:d5:48:a0:7a:fc:cc:b3:0b:b8:6a:f4:
df:ee:3e:3e:30:1e:99:7c:9c:f5:21:f6:a9:42:60:d0:66:46:
87:c3:6b:4b:18:56:48:11:20:e0:a7:21:6c:08:54:a7:a7:ce:
b8:c9:30:3c:6f:fa:20:2c:72:b8:8b:44:2a:aa:e5:e1:ef:20:
89:99:07:86:e1:be:09:fd:a2:73:77:c7:07:88:69:f1:df:29:
1a:fc:7c:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9EA+bTRpLqQzF/n0wjAZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MzM5NDA5NDU4Y2ZjMmJiYzMwYmIxOWFlZTUwNjMxODU1
Yjc1ZTYwHhcNMjUxMTA0MTMwMDIxWhcNMjUxMTA1MTMwMDIxWjAzMTEwLwYDVQQD
EyhkZTU5NjI4OWY4MzQ2NDM3ODIwNjc0ZmIyYzJkNmY0ODgxMDBlN2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHbOLBHKwHTr3BAJC0t6wi+pCXA6
8xoyiXiwrQlVsrkq5yTYEnW6Xul7O8Or2gj2cwK73cbvEutup5Rs0OMBSN3SAFZH
8w9+dw3QBHf2s1N2Gtu8UpFVrr5l9HoT+Q6l68b2mSpqJlNImCX6S5KQco6vgSYf
3y2MWofIk4SBMm5FN2w648wuJnjaNZk6Ib8UhyTjJSauPj3h4nKF429ovLxxrcgo
9J4dPFOd1rm5M5H5me1ob524aqOWdrClGuTMAINGq3xbyC9ieVq0dxRvGnHnSwQd
9niVWUkhQMdHhif40nzsZdDPzwzrINF5zRRpZfFH+e/yqQUAsxQ+WVNXBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5ZYon4NGQ3ggZ0+ywtb0iBAOeyMB8GA1UdIwQY
MBaAFCczlAlFjPwrvDC7Ga7lBjGFW3XmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnpPVUNVV01fQ3U4TUxzWnJ1VUdNWVZiZGVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9lY2Q2YTUtZGNmMi00NTFjLThhMmYt
NWQxM2M3NDQ3ZjZhLzEvSnpPVUNVV01fQ3U4TUxzWnJ1VUdNWVZiZGVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9lY2Q2YTUtZGNmMi00NTFjLThhMmYtNWQxM2M3NDQ3ZjZh
LzEvSnpPVUNVV01fQ3U4TUxzWnJ1VUdNWVZiZGVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUVTiwNEX
P333ca5rGPK4nDmj/q375LbLfbPL2SEyzgeOUNYWz5hAJnrAgeoS+ESL/250mays
IK2HnV7YQrUpIZ78NzwxFT3vwdN9ThN6QQRBntl7x8yHhIKKPfm8KHcUuNIlFLnq
tJFtG/hjkSYg7SE78buBs7dtsNlJ0uj04mwmMpjMz4sWmpfbnP5wDgkdklQOVP7+
mrk0YlJfcP9h/LbEAmInQJfumdVIoHr8zLMLuGr03+4+PjAemXyc9SH2qUJg0GZG
h8NrSxhWSBEg4KchbAhUp6fOuMkwPG/6ICxyuItEKqrl4e8giZkHhuG+Cf2ic3fH
B4hp8d8pGvx8sQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:05:00 2025 by rpki-client