Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
File: jxKyaetwOrwSLUeFE7CBcdTJba0.mft (raw, json)
Hash identifier: Yuwva8vxlOVPr2cmv8lP8iws3LaugFESnx5eahMFOak=
Subject key identifier: 59:76:17:0D:8C:50:35:62:F9:60:8C:B8:24:F0:DF:8F:24:70:63:1D
Authority key identifier: 8F:12:B2:69:EB:70:3A:BC:12:2D:47:85:13:B0:81:71:D4:C9:6D:AD
Certificate issuer: /CN=8f12b269eb703abc122d478513b08171d4c96dad
Certificate serial: 019A4F621B1CED9FF1AA19E9042B979EBBE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 15:00:20 +0000
Manifest this update: Tue 04 Nov 2025 15:00:20 +0000
Manifest next update: Wed 05 Nov 2025 15:00:20 +0000
Files and hashes: 1: jxKyaetwOrwSLUeFE7CBcdTJba0.crl (hash: xAPzwwe8nmWlqNr+ZhI2GVKIdo5ZSNFVhBnpG240VKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:1b:1c:ed:9f:f1:aa:19:e9:04:2b:97:9e:bb:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f12b269eb703abc122d478513b08171d4c96dad
Validity
Not Before: Nov 4 15:00:20 2025 GMT
Not After : Nov 5 15:00:20 2025 GMT
Subject: CN=5976170d8c503562f9608cb824f0df8f2470631d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e2:ce:12:91:29:a9:45:60:10:1f:26:22:56:
f0:e6:46:22:48:c2:d7:af:09:18:2f:95:b9:4f:0f:
04:e1:ec:cb:ec:fe:2d:9d:e4:06:a3:c2:b8:10:d9:
74:25:47:94:bb:36:d8:61:6d:3c:f3:e6:04:84:dd:
a6:57:1f:b9:b5:59:ea:fe:a0:3b:ae:2c:f7:6b:f5:
6d:1d:17:c3:5b:6e:e1:5c:43:60:2c:50:39:59:bd:
27:5d:b1:ff:3a:e3:e5:ef:ff:c3:26:36:5f:ab:66:
24:bf:70:2d:1e:d5:54:9b:7d:a5:87:fe:30:b4:bb:
14:2c:e0:8f:0b:60:0c:05:29:9a:62:35:ab:84:ee:
52:23:4e:47:c2:d9:62:c8:a7:a0:81:4c:20:13:94:
aa:5e:1e:b2:0e:67:ba:61:74:df:3f:42:62:d9:94:
f5:7e:b5:aa:84:e7:dc:06:95:45:b6:ac:f9:23:7a:
84:e2:65:75:96:bc:f1:fd:5c:85:c8:b8:ca:5c:9f:
8d:55:a2:a4:58:a7:71:2f:7d:b2:3f:7f:2f:ef:6a:
ee:49:d2:5a:e3:8f:b8:2d:0d:45:31:0c:b4:15:a4:
45:78:1c:a3:7a:8c:9f:41:5b:08:fd:e2:89:67:40:
80:3a:ab:6a:b0:11:e7:c6:30:9b:f8:43:d1:5f:be:
ef:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:76:17:0D:8C:50:35:62:F9:60:8C:B8:24:F0:DF:8F:24:70:63:1D
X509v3 Authority Key Identifier:
keyid:8F:12:B2:69:EB:70:3A:BC:12:2D:47:85:13:B0:81:71:D4:C9:6D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxKyaetwOrwSLUeFE7CBcdTJba0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/dbd35d-1e3a-4592-84f3-6eff18a2ea44/1/jxKyaetwOrwSLUeFE7CBcdTJba0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:6e:81:78:82:4e:90:40:6f:84:cd:39:3f:c4:83:8c:21:2a:
0e:a3:51:68:8f:37:4a:ce:cd:11:dd:9c:db:4b:47:0d:bd:0f:
46:a2:e9:6d:80:a1:61:58:fc:af:d1:fe:1d:6c:b8:9f:b0:34:
13:24:8b:b8:d4:15:11:b1:cc:ca:88:80:b2:f9:5c:3a:6e:e9:
c6:dc:6a:8d:33:e2:da:86:a2:27:b5:13:a9:32:c0:3d:4d:17:
3a:35:86:da:fb:97:30:30:0a:74:b1:2f:85:78:dd:1c:6c:1d:
d1:02:e7:be:66:49:43:56:c7:97:d2:e0:75:d1:fe:c4:d3:d1:
82:43:70:70:df:9e:11:62:c8:4a:97:05:16:d5:e6:ff:0b:13:
db:d7:cf:e5:e0:12:40:ba:62:ca:9f:a0:61:49:17:68:9e:88:
3f:24:75:55:02:50:34:72:72:15:92:2f:1b:02:23:f8:72:81:
a1:43:8e:ab:42:cf:5f:89:24:3e:cf:c6:ea:19:8c:3d:e7:81:
3c:8c:9d:bc:76:2f:15:e6:f0:4a:e2:c6:c8:5b:ff:11:fd:18:
a9:4d:ba:7b:95:86:2e:0a:29:cb:a5:90:ba:ed:92:ca:c5:90:
82:87:4d:61:7e:4b:1b:bc:0c:73:19:e8:b1:8d:3e:f2:d8:1e:
8c:e0:dc:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYhsc7Z/xqhnpBCuXnrvnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMTJiMjY5ZWI3MDNhYmMxMjJkNDc4NTEzYjA4MTcxZDRj
OTZkYWQwHhcNMjUxMTA0MTUwMDIwWhcNMjUxMTA1MTUwMDIwWjAzMTEwLwYDVQQD
Eyg1OTc2MTcwZDhjNTAzNTYyZjk2MDhjYjgyNGYwZGY4ZjI0NzA2MzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeLOEpEpqUVgEB8mIlbw5kYiSMLX
rwkYL5W5Tw8E4ezL7P4tneQGo8K4ENl0JUeUuzbYYW088+YEhN2mVx+5tVnq/qA7
riz3a/VtHRfDW27hXENgLFA5Wb0nXbH/OuPl7//DJjZfq2Ykv3AtHtVUm32lh/4w
tLsULOCPC2AMBSmaYjWrhO5SI05HwtliyKeggUwgE5SqXh6yDme6YXTfP0Ji2ZT1
frWqhOfcBpVFtqz5I3qE4mV1lrzx/VyFyLjKXJ+NVaKkWKdxL32yP38v72ruSdJa
44+4LQ1FMQy0FaRFeByjeoyfQVsI/eKJZ0CAOqtqsBHnxjCb+EPRX77vlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFl2Fw2MUDVi+WCMuCTw348kcGMdMB8GA1UdIwQY
MBaAFI8SsmnrcDq8Ei1HhROwgXHUyW2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanhLeWFldHdPcndTTFVlRkU3Q0JjZFRKYmEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kYmQzNWQtMWUzYS00NTkyLTg0ZjMt
NmVmZjE4YTJlYTQ0LzEvanhLeWFldHdPcndTTFVlRkU3Q0JjZFRKYmEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9kYmQzNWQtMWUzYS00NTkyLTg0ZjMtNmVmZjE4YTJlYTQ0
LzEvanhLeWFldHdPcndTTFVlRkU3Q0JjZFRKYmEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATW6BeIJO
kEBvhM05P8SDjCEqDqNRaI83Ss7NEd2c20tHDb0PRqLpbYChYVj8r9H+HWy4n7A0
EySLuNQVEbHMyoiAsvlcOm7pxtxqjTPi2oaiJ7UTqTLAPU0XOjWG2vuXMDAKdLEv
hXjdHGwd0QLnvmZJQ1bHl9LgddH+xNPRgkNwcN+eEWLISpcFFtXm/wsT29fP5eAS
QLpiyp+gYUkXaJ6IPyR1VQJQNHJyFZIvGwIj+HKBoUOOq0LPX4kkPs/G6hmMPeeB
PIydvHYvFebwSuLGyFv/Ef0YqU26e5WGLgopy6WQuu2SysWQgodNYX5LG7wMcxno
sY0+8tgejODcgA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:43:33 2025 by rpki-client