Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft
File: JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft (raw, json)
Hash identifier: 5nR4faePOOdiJP2mso1B8gybSuEch+EU2YXT7n6367g=
Subject key identifier: 4F:08:B7:C8:25:07:86:0A:D3:13:A5:26:48:44:07:77:40:92:2C:05
Authority key identifier: 25:71:78:49:A6:9A:D8:DF:87:08:8D:A6:58:B2:30:5B:85:94:C8:C4
Certificate issuer: /CN=25717849a69ad8df87088da658b2305b8594c8c4
Certificate serial: 019872982FCB7A0EDAEDF361F809B44AB38C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft
Manifest number: 1033
Signing time: Mon 04 Aug 2025 01:00:32 +0000
Manifest this update: Mon 04 Aug 2025 01:00:32 +0000
Manifest next update: Tue 05 Aug 2025 01:00:32 +0000
Files and hashes: 1: JXF4Saaa2N-HCI2mWLIwW4WUyMQ.crl (hash: CfFFLcaH3skU5aHkE72n5GH3EzcBCyXN6xJlXqU7LRg=)
2: lBGL9p4jnzQMYNOwvgWWIRMR64U.roa (hash: 3FeAIvuJzpUiBU31icxKTzpDUG89bC33mLCDCqaCBw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:2f:cb:7a:0e:da:ed:f3:61:f8:09:b4:4a:b3:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25717849a69ad8df87088da658b2305b8594c8c4
Validity
Not Before: Aug 4 01:00:32 2025 GMT
Not After : Aug 5 01:00:32 2025 GMT
Subject: CN=4f08b7c82507860ad313a5264844077740922c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ff:39:5c:f2:67:e5:31:dc:b3:35:dc:5d:81:
e2:e5:b0:d4:04:20:7c:8e:5f:3a:84:3f:05:f0:a0:
3d:5d:f1:87:52:c2:ce:c6:bd:e8:61:89:db:ce:19:
57:6a:d5:dd:b4:5a:ef:57:a9:ad:e8:f1:12:dd:fc:
b6:8d:33:ba:e9:67:dd:36:39:10:04:82:67:ee:ec:
ee:f1:8d:d9:56:06:20:56:4e:84:5f:a7:99:66:17:
69:41:0f:f8:5e:45:e2:98:b1:08:28:e3:6f:2f:fc:
4d:0f:17:2f:e4:08:df:52:8c:68:db:1c:1a:c9:4c:
95:69:06:e3:a0:bf:5d:d7:25:ac:15:1f:f5:c7:63:
cf:22:b6:d9:ca:28:07:d4:7f:41:b7:f5:b5:c5:2d:
ee:94:e0:04:da:2c:ea:d7:c9:a2:ad:e1:21:e3:c4:
1d:72:34:a0:6b:37:c0:f4:6d:48:20:66:05:a7:f2:
bc:d8:3d:cc:e3:06:a4:0e:e6:80:6c:5e:e2:3b:82:
0b:a5:76:fa:fb:c9:05:eb:c4:b5:a2:43:25:8b:bd:
69:96:38:b5:f5:40:8c:36:cc:4b:30:6c:02:dd:15:
12:ec:ca:d6:82:df:fe:17:e0:cf:7f:3b:3a:92:88:
9f:98:67:22:6c:30:f3:e3:2e:3a:6a:a4:8c:a0:d6:
83:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:08:B7:C8:25:07:86:0A:D3:13:A5:26:48:44:07:77:40:92:2C:05
X509v3 Authority Key Identifier:
keyid:25:71:78:49:A6:9A:D8:DF:87:08:8D:A6:58:B2:30:5B:85:94:C8:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ed:2e:e2:cb:ca:2e:2c:c8:e5:a6:0d:3f:a1:b5:79:27:30:
35:2e:e9:54:74:fa:cc:78:af:13:50:84:a9:f3:78:60:9b:9c:
7f:5e:87:5f:31:7d:04:34:e0:9a:63:01:07:f2:20:d4:b3:97:
5d:c0:a7:e1:70:11:e4:39:10:73:52:a3:e4:83:cb:86:c5:0c:
c4:31:85:da:8c:a3:0d:5e:bb:1a:88:e5:53:8b:2a:69:1c:85:
ec:38:16:b6:2d:85:bd:d2:cf:45:f5:bc:02:0c:06:56:b4:cb:
31:13:51:a2:3b:b9:36:9b:b5:41:09:5d:45:cb:cf:aa:13:f9:
13:81:f7:25:52:c9:b7:9f:f5:39:ad:2d:82:61:4f:62:2c:da:
ed:84:bb:b0:13:7b:64:f1:54:ea:f3:36:c6:43:8b:ed:8c:9e:
8d:48:c8:a7:24:1c:36:69:a9:0e:5f:bc:de:0d:76:a5:11:e4:
53:78:2d:66:31:26:49:b6:da:4a:e6:97:e6:2b:d1:9e:b3:94:
86:17:d9:0b:08:c9:47:a3:3d:36:c6:5b:aa:66:1a:eb:bc:eb:
73:e9:dd:ab:2d:08:e5:41:19:84:8f:42:73:4f:8b:d6:82:7d:
40:3b:0b:25:35:48:32:3f:27:fc:7e:f1:7b:16:fe:88:a5:f7:
c4:01:a2:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhymC/Leg7a7fNh+Am0SrOMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NzE3ODQ5YTY5YWQ4ZGY4NzA4OGRhNjU4YjIzMDViODU5
NGM4YzQwHhcNMjUwODA0MDEwMDMyWhcNMjUwODA1MDEwMDMyWjAzMTEwLwYDVQQD
Eyg0ZjA4YjdjODI1MDc4NjBhZDMxM2E1MjY0ODQ0MDc3NzQwOTIyYzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/85XPJn5THcszXcXYHi5bDUBCB8
jl86hD8F8KA9XfGHUsLOxr3oYYnbzhlXatXdtFrvV6mt6PES3fy2jTO66WfdNjkQ
BIJn7uzu8Y3ZVgYgVk6EX6eZZhdpQQ/4XkXimLEIKONvL/xNDxcv5AjfUoxo2xwa
yUyVaQbjoL9d1yWsFR/1x2PPIrbZyigH1H9Bt/W1xS3ulOAE2izq18mireEh48Qd
cjSgazfA9G1IIGYFp/K82D3M4wakDuaAbF7iO4ILpXb6+8kF68S1okMli71plji1
9UCMNsxLMGwC3RUS7MrWgt/+F+DPfzs6koifmGcibDDz4y46aqSMoNaDmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE8It8glB4YK0xOlJkhEB3dAkiwFMB8GA1UdIwQY
MBaAFCVxeEmmmtjfhwiNpliyMFuFlMjEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlhGNFNhYWEyTi1IQ0kybVdMSXdXNFdVeU1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8wOTVlY2YtN2Q2YS00ODgxLTg4ZTct
ZmUyNGVkMmFkY2ZmLzEvSlhGNFNhYWEyTi1IQ0kybVdMSXdXNFdVeU1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8wOTVlY2YtN2Q2YS00ODgxLTg4ZTctZmUyNGVkMmFkY2Zm
LzEvSlhGNFNhYWEyTi1IQ0kybVdMSXdXNFdVeU1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI+0u4svK
LizI5aYNP6G1eScwNS7pVHT6zHivE1CEqfN4YJucf16HXzF9BDTgmmMBB/Ig1LOX
XcCn4XAR5DkQc1Kj5IPLhsUMxDGF2oyjDV67GojlU4sqaRyF7DgWti2FvdLPRfW8
AgwGVrTLMRNRoju5Npu1QQldRcvPqhP5E4H3JVLJt5/1Oa0tgmFPYiza7YS7sBN7
ZPFU6vM2xkOL7YyejUjIpyQcNmmpDl+83g12pRHkU3gtZjEmSbbaSuaX5ivRnrOU
hhfZCwjJR6M9NsZbqmYa67zrc+ndqy0I5UEZhI9Cc0+L1oJ9QDsLJTVIMj8n/H7x
exb+iKX3xAGiBQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:51 2025 by rpki-client