Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
File: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft (raw, json)
Hash identifier: UgPS1XX2/YZ7DV/UsxMaDe12zV+xo0WYj1tknJK9j1E=
Subject key identifier: 22:54:AE:0B:6B:CB:DA:00:FA:39:4C:78:FA:D9:9C:BC:D9:68:33:33
Authority key identifier: F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
Certificate issuer: /CN=f896c3489feebbc094255d27edcd8655121027bc
Certificate serial: 019A4FD040F23F0C6D308F9424E8225149B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
Manifest number: 0920
Signing time: Tue 04 Nov 2025 17:00:39 +0000
Manifest this update: Tue 04 Nov 2025 17:00:39 +0000
Manifest next update: Wed 05 Nov 2025 17:00:39 +0000
Files and hashes: 1: 1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl (hash: 2C9pv2m3pFLIV23Hlylua3ME8sXck+enqmmFX4t2aaA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:40:f2:3f:0c:6d:30:8f:94:24:e8:22:51:49:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f896c3489feebbc094255d27edcd8655121027bc
Validity
Not Before: Nov 4 17:00:39 2025 GMT
Not After : Nov 5 17:00:39 2025 GMT
Subject: CN=2254ae0b6bcbda00fa394c78fad99cbcd9683333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9d:02:1c:6d:4b:4f:77:0a:57:99:16:6b:0e:
c5:9c:3c:6a:f3:c7:3e:e4:d5:99:2d:58:d6:30:59:
48:37:71:d2:ec:95:fd:28:d0:7c:66:84:13:d1:a1:
b4:bc:f3:f2:0c:1b:ed:22:9b:fd:81:55:86:9d:10:
92:d2:29:45:31:58:5c:ec:2b:c2:aa:64:82:60:cb:
a8:b9:8d:b3:ae:b3:fd:3f:5f:8e:dc:6e:de:89:5e:
51:10:6b:73:5e:38:cd:e4:cf:df:37:7a:16:39:75:
02:61:ac:da:f2:68:bc:ec:d8:65:ce:9e:27:ca:30:
36:34:9d:4b:c5:15:70:e5:c2:95:01:6e:c7:c4:2a:
27:57:c3:b0:85:0a:31:0a:dc:6b:ab:60:31:73:27:
4b:ea:5a:a2:61:2e:53:9a:6a:09:a3:94:4a:60:e3:
84:1d:59:3a:83:e9:56:2d:75:f3:5b:32:bd:5c:d2:
04:e8:92:1b:86:af:ef:42:37:28:64:20:a2:a8:e1:
ff:0c:bf:49:d5:79:72:a8:9e:26:6f:e6:25:e0:13:
bf:4e:5b:0f:7f:c4:0b:23:37:ee:91:a9:83:18:98:
8a:aa:e5:72:e3:ca:3e:a2:85:38:d0:99:b6:82:96:
11:0c:af:00:e2:04:f3:1e:cc:7b:58:2a:80:1e:b8:
3c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:54:AE:0B:6B:CB:DA:00:FA:39:4C:78:FA:D9:9C:BC:D9:68:33:33
X509v3 Authority Key Identifier:
keyid:F8:96:C3:48:9F:EE:BB:C0:94:25:5D:27:ED:CD:86:55:12:10:27:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/48fd1e-0aab-4371-89c4-b51cc4f05aaa/1/1-JbDSJ_uu8CUJV0n7c2GVRIQJ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:3c:28:f9:19:a4:b2:24:37:5f:e4:8f:7c:3e:0e:56:d6:09:
67:8f:8a:b3:f8:aa:d6:14:af:39:50:8e:8d:62:d2:66:52:47:
14:7b:06:18:85:fb:d0:18:2e:91:5a:83:64:bd:88:78:ee:84:
1b:9f:bc:bb:49:13:d4:ac:34:c1:5d:fa:10:72:88:75:d9:8f:
f3:51:f2:10:d5:4f:33:ff:52:11:3d:43:a2:59:c2:ef:d8:b7:
1a:d7:44:87:18:ab:e5:53:5d:d6:10:4d:0d:13:9d:8d:c5:a0:
3e:7f:75:9a:29:4f:98:7f:ff:c4:4b:28:e4:36:31:bd:6d:d9:
a6:d7:1e:cf:e4:31:79:73:7a:e3:f6:98:16:ee:1d:98:4d:db:
60:55:60:8f:56:a9:e1:e9:eb:f6:25:6a:17:46:b6:d1:af:f3:
8d:58:c7:c5:c9:4b:3f:9b:25:40:23:d2:3e:9b:dc:1a:75:d5:
b5:89:63:11:af:2d:96:bd:5b:81:2f:07:e5:31:1d:5a:ea:be:
5d:0f:ca:cc:68:10:ac:9c:23:27:40:c2:33:ad:4d:9f:b7:b2:
b8:44:24:c0:b6:31:c2:da:f8:ec:10:3c:e0:de:7c:96:c9:9c:
8b:57:c3:96:68:22:05:82:40:e6:1d:f1:13:e8:7d:b4:d2:69:
ea:e2:0c:31
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZpP0EDyPwxtMI+UJOgiUUm4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4OTZjMzQ4OWZlZWJiYzA5NDI1NWQyN2VkY2Q4NjU1MTIx
MDI3YmMwHhcNMjUxMTA0MTcwMDM5WhcNMjUxMTA1MTcwMDM5WjAzMTEwLwYDVQQD
EygyMjU0YWUwYjZiY2JkYTAwZmEzOTRjNzhmYWQ5OWNiY2Q5NjgzMzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA150CHG1LT3cKV5kWaw7FnDxq88c+
5NWZLVjWMFlIN3HS7JX9KNB8ZoQT0aG0vPPyDBvtIpv9gVWGnRCS0ilFMVhc7CvC
qmSCYMuouY2zrrP9P1+O3G7eiV5REGtzXjjN5M/fN3oWOXUCYaza8mi87Nhlzp4n
yjA2NJ1LxRVw5cKVAW7HxConV8OwhQoxCtxrq2AxcydL6lqiYS5TmmoJo5RKYOOE
HVk6g+lWLXXzWzK9XNIE6JIbhq/vQjcoZCCiqOH/DL9J1XlyqJ4mb+Yl4BO/TlsP
f8QLIzfukamDGJiKquVy48o+ooU40Jm2gpYRDK8A4gTzHsx7WCqAHrg8XQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFCJUrgtry9oA+jlMePrZnLzZaDMzMB8GA1UdIwQY
MBaAFPiWw0if7rvAlCVdJ+3NhlUSECe8MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1KYkRTSl91dThDVUpWMG43YzJHVlJJUUo3dy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvNDhmZDFlLTBhYWItNDM3MS04OWM0
LWI1MWNjNGYwNWFhYS8xLzEtSmJEU0pfdXU4Q1VKVjBuN2MyR1ZSSVFKN3cubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2QyLzQ4ZmQxZS0wYWFiLTQzNzEtODljNC1iNTFjYzRmMDVh
YWEvMS8xLUpiRFNKX3V1OENVSlYwbjdjMkdWUklRSjd3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADjwo
+RmksiQ3X+SPfD4OVtYJZ4+Ks/iq1hSvOVCOjWLSZlJHFHsGGIX70BgukVqDZL2I
eO6EG5+8u0kT1Kw0wV36EHKIddmP81HyENVPM/9SET1DolnC79i3GtdEhxir5VNd
1hBNDROdjcWgPn91milPmH//xEso5DYxvW3Zptcez+QxeXN64/aYFu4dmE3bYFVg
j1ap4enr9iVqF0a20a/zjVjHxclLP5slQCPSPpvcGnXVtYljEa8tlr1bgS8H5TEd
Wuq+XQ/KzGgQrJwjJ0DCM61Nn7eyuEQkwLYxwtr47BA84N58lsmci1fDlmgiBYJA
5h3xE+h9tNJp6uIMMQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:39:00 2025 by rpki-client