Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft
File: n-JpKxvOewMnwf51yJKZ4vhiF_w.mft (raw, json)
Hash identifier: rGOXCiDzq9un4Oqcp3l0TXVjEt1z9MjQRshLti5Jbeo=
Subject key identifier: AE:77:6A:40:C7:EB:1F:C1:E7:65:C9:D9:D6:48:C4:8A:6C:01:8C:2B
Authority key identifier: 9F:E2:69:2B:1B:CE:7B:03:27:C1:FE:75:C8:92:99:E2:F8:62:17:FC
Certificate issuer: /CN=9fe2692b1bce7b0327c1fe75c89299e2f86217fc
Certificate serial: 019896DC8CD91152F57BDDD34CDD5149A971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-JpKxvOewMnwf51yJKZ4vhiF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft
Manifest number: 0379
Signing time: Mon 11 Aug 2025 02:01:33 +0000
Manifest this update: Mon 11 Aug 2025 02:01:33 +0000
Manifest next update: Tue 12 Aug 2025 02:01:33 +0000
Files and hashes: 1: n-JpKxvOewMnwf51yJKZ4vhiF_w.crl (hash: a+UcMM1XIYWrVcZpqnLh+u711faw7HZ85gkeolNtKkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-JpKxvOewMnwf51yJKZ4vhiF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:dc:8c:d9:11:52:f5:7b:dd:d3:4c:dd:51:49:a9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe2692b1bce7b0327c1fe75c89299e2f86217fc
Validity
Not Before: Aug 11 02:01:33 2025 GMT
Not After : Aug 12 02:01:33 2025 GMT
Subject: CN=ae776a40c7eb1fc1e765c9d9d648c48a6c018c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:58:92:1a:94:77:60:15:72:34:5b:71:76:06:
ab:e8:38:ea:dd:a5:9e:7f:1f:ed:13:39:5d:68:29:
da:b3:c2:34:94:b4:8f:10:b1:05:00:e4:77:be:62:
2f:18:e3:1d:dd:ad:8f:f7:da:ce:bb:b7:04:26:36:
c5:c2:af:02:07:35:04:25:a8:57:96:dc:67:8e:57:
a9:6c:4e:7b:80:ea:b0:06:31:ee:ad:8c:94:10:d6:
e3:ca:2d:4a:e4:d2:93:ac:6f:31:35:fb:51:aa:c4:
66:a7:71:15:7b:ae:e6:98:1d:0d:df:57:f7:94:b0:
bb:f6:36:37:e1:90:63:54:6b:de:be:3a:ea:55:0f:
1b:7b:13:cc:53:c0:2c:9c:43:54:04:8f:10:fa:31:
ec:2f:b3:06:0d:dc:f7:08:d9:7b:3e:6d:f9:fc:5f:
f5:42:7e:0a:bd:42:f3:77:87:4d:6b:08:7b:84:22:
b1:b3:47:a2:ad:b6:b2:b0:3b:e4:e5:8f:69:81:27:
2f:9b:e6:06:bd:e0:8e:0c:13:fe:4e:65:5f:7b:0e:
ff:35:96:c9:31:35:5e:c9:f5:fb:21:2e:86:0f:96:
b0:cb:f1:34:fb:72:03:2f:96:50:5b:f8:80:c6:8b:
93:2a:fb:5c:d7:29:5b:c5:dd:9a:1e:5e:69:8e:4f:
df:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:77:6A:40:C7:EB:1F:C1:E7:65:C9:D9:D6:48:C4:8A:6C:01:8C:2B
X509v3 Authority Key Identifier:
keyid:9F:E2:69:2B:1B:CE:7B:03:27:C1:FE:75:C8:92:99:E2:F8:62:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-JpKxvOewMnwf51yJKZ4vhiF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a3de62-11ed-4da6-9f32-70fc1eab54c1/1/n-JpKxvOewMnwf51yJKZ4vhiF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:2a:7b:af:c4:41:8b:3f:66:2b:8c:9f:b5:2f:f1:2b:af:eb:
26:44:6c:80:5a:80:42:24:32:1e:71:24:a6:65:65:35:7d:eb:
04:2a:ed:57:60:ed:6d:bf:32:5d:f4:ee:02:48:c8:d4:0e:89:
34:9e:43:38:27:4d:4d:9f:bd:25:47:1d:9d:89:88:1f:e5:4c:
9c:eb:32:93:04:f2:75:b0:e8:e2:d3:20:14:ca:5f:1c:5e:b5:
18:2b:b3:90:d7:1a:da:ee:d8:8c:3c:a9:24:b8:48:be:9f:3b:
6b:df:b0:0e:5f:7b:68:ee:06:db:fa:8c:95:41:0a:1a:cf:95:
aa:14:dc:7d:06:10:70:97:0f:79:a1:c0:d9:56:e1:e0:0d:4d:
d1:5f:e6:65:9e:fc:8d:32:d4:5c:2e:cd:1f:1d:b4:de:cb:76:
ee:df:fe:d2:72:51:9e:6e:c8:77:e7:93:83:b3:6d:c4:f2:e3:
ed:5f:5b:1b:2a:01:8b:ca:d6:07:15:b5:c6:b6:30:1c:8d:97:
5e:9c:88:5d:e5:98:d6:bb:a8:3d:52:8a:67:0e:40:50:a1:43:
71:f6:2c:9a:da:e5:69:90:02:ae:11:46:b1:49:af:c4:cb:e4:
6a:4f:22:9b:45:ff:4d:a7:ad:37:92:30:1c:41:9b:88:09:f4:
84:f4:fd:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiW3IzZEVL1e93TTN1RSalxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZTI2OTJiMWJjZTdiMDMyN2MxZmU3NWM4OTI5OWUyZjg2
MjE3ZmMwHhcNMjUwODExMDIwMTMzWhcNMjUwODEyMDIwMTMzWjAzMTEwLwYDVQQD
EyhhZTc3NmE0MGM3ZWIxZmMxZTc2NWM5ZDlkNjQ4YzQ4YTZjMDE4YzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/ViSGpR3YBVyNFtxdgar6Djq3aWe
fx/tEzldaCnas8I0lLSPELEFAOR3vmIvGOMd3a2P99rOu7cEJjbFwq8CBzUEJahX
ltxnjlepbE57gOqwBjHurYyUENbjyi1K5NKTrG8xNftRqsRmp3EVe67mmB0N31f3
lLC79jY34ZBjVGvevjrqVQ8bexPMU8AsnENUBI8Q+jHsL7MGDdz3CNl7Pm35/F/1
Qn4KvULzd4dNawh7hCKxs0eirbaysDvk5Y9pgScvm+YGveCODBP+TmVfew7/NZbJ
MTVeyfX7IS6GD5awy/E0+3IDL5ZQW/iAxouTKvtc1ylbxd2aHl5pjk/fxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK53akDH6x/B52XJ2dZIxIpsAYwrMB8GA1UdIwQY
MBaAFJ/iaSsbznsDJ8H+dciSmeL4Yhf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbi1KcEt4dk9ld01ud2Y1MXlKS1o0dmhpRl93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9hM2RlNjItMTFlZC00ZGE2LTlmMzIt
NzBmYzFlYWI1NGMxLzEvbi1KcEt4dk9ld01ud2Y1MXlKS1o0dmhpRl93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9hM2RlNjItMTFlZC00ZGE2LTlmMzItNzBmYzFlYWI1NGMx
LzEvbi1KcEt4dk9ld01ud2Y1MXlKS1o0dmhpRl93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaip7r8RB
iz9mK4yftS/xK6/rJkRsgFqAQiQyHnEkpmVlNX3rBCrtV2Dtbb8yXfTuAkjI1A6J
NJ5DOCdNTZ+9JUcdnYmIH+VMnOsykwTydbDo4tMgFMpfHF61GCuzkNca2u7YjDyp
JLhIvp87a9+wDl97aO4G2/qMlUEKGs+VqhTcfQYQcJcPeaHA2Vbh4A1N0V/mZZ78
jTLUXC7NHx203st27t/+0nJRnm7Id+eTg7NtxPLj7V9bGyoBi8rWBxW1xrYwHI2X
XpyIXeWY1ruoPVKKZw5AUKFDcfYsmtrlaZACrhFGsUmvxMvkak8im0X/TaetN5Iw
HEGbiAn0hPT9lQ==
-----END CERTIFICATE-----
Generated at Mon Aug 11 10:31:39 2025 by rpki-client