Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft
File: jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft (raw, json)
Hash identifier: hBBL5nD16317knqtBjHvIZbShThRif/1/mjuDWO3B8E=
Subject key identifier: D7:09:54:DA:5F:11:94:EE:AA:71:B2:65:85:8C:55:26:B7:95:47:3D
Authority key identifier: 8C:57:DC:C7:E5:2F:58:B3:42:B7:0C:83:DA:A2:1A:10:6A:C5:92:91
Certificate issuer: /CN=8c57dcc7e52f58b342b70c83daa21a106ac59291
Certificate serial: 019873E30BF9E9F7CB723A73AF9F323D60B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFfcx-UvWLNCtwyD2qIaEGrFkpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft
Manifest number: 0831
Signing time: Mon 04 Aug 2025 07:01:56 +0000
Manifest this update: Mon 04 Aug 2025 07:01:56 +0000
Manifest next update: Tue 05 Aug 2025 07:01:56 +0000
Files and hashes: 1: jFfcx-UvWLNCtwyD2qIaEGrFkpE.crl (hash: fYCpTbs37b8KHR9+y/eRiD80UXL6RHGD4Uq19blQPvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jFfcx-UvWLNCtwyD2qIaEGrFkpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:0b:f9:e9:f7:cb:72:3a:73:af:9f:32:3d:60:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c57dcc7e52f58b342b70c83daa21a106ac59291
Validity
Not Before: Aug 4 07:01:56 2025 GMT
Not After : Aug 5 07:01:56 2025 GMT
Subject: CN=d70954da5f1194eeaa71b265858c5526b795473d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:60:1f:06:da:c2:b5:e2:28:31:bc:de:a7:49:
61:fc:7c:99:6d:f4:a9:c2:11:fb:e6:ec:8a:e0:2a:
ea:2d:cf:28:da:5c:ff:25:4f:f1:b1:2b:74:cd:77:
25:74:dd:08:c7:a7:83:50:f8:35:94:85:7d:24:03:
f3:33:45:3d:53:f2:79:42:5a:d2:79:50:cd:96:1e:
b0:a9:34:4d:d8:7d:47:55:35:55:61:75:66:2d:1b:
9e:e6:ce:32:80:3e:79:40:2a:93:30:bf:06:f5:7a:
0a:4e:ac:59:bc:ee:87:b7:5e:6f:c5:23:8e:ba:16:
78:83:34:60:25:38:3d:47:88:f9:00:51:5a:be:89:
7e:b3:bc:53:3a:1a:e4:64:40:d1:3f:5d:22:1a:2c:
3f:fe:0b:64:a0:73:75:dd:bb:fd:b4:bc:39:b2:af:
eb:7f:56:d5:bb:51:ea:83:0a:7d:d6:d2:24:35:f0:
37:ee:6e:ab:ff:6a:d9:44:87:89:15:54:be:b3:ab:
b9:5f:4f:d7:5f:a9:4f:98:2a:53:1a:15:87:41:7f:
4b:ca:9c:26:1e:53:c1:b2:4b:ed:50:58:21:18:5d:
35:44:e3:3e:69:24:aa:63:7a:9a:a3:86:35:3f:94:
ed:c5:91:60:d5:66:05:54:9b:25:1b:a7:44:39:14:
16:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:09:54:DA:5F:11:94:EE:AA:71:B2:65:85:8C:55:26:B7:95:47:3D
X509v3 Authority Key Identifier:
keyid:8C:57:DC:C7:E5:2F:58:B3:42:B7:0C:83:DA:A2:1A:10:6A:C5:92:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFfcx-UvWLNCtwyD2qIaEGrFkpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:60:aa:1d:e6:da:c9:d1:4b:3d:bb:5f:8a:4d:77:d4:c3:22:
ef:c3:00:40:d1:37:7d:71:5f:36:2a:33:08:df:ea:04:bd:43:
17:16:a5:56:0e:95:93:a0:16:d9:6d:bc:39:69:4c:7c:5b:7f:
7b:d5:17:53:c6:01:0c:6b:a1:87:da:97:13:ee:5c:21:80:60:
b5:a1:c7:47:4c:0d:86:75:71:73:ad:37:51:7a:69:b4:43:31:
3e:f5:c5:e2:5f:8d:77:85:9f:17:0e:d7:71:c7:a5:d0:71:2e:
59:44:f5:97:37:12:0e:17:4a:af:a2:0c:94:39:ed:16:a5:e9:
ae:24:39:3d:69:30:09:a9:43:e5:23:b7:59:75:be:f0:c7:24:
36:6d:e1:1c:1b:9a:87:91:d0:df:49:ef:75:74:b6:76:ca:eb:
de:c9:80:9c:03:5c:70:b9:fc:37:49:fd:ac:24:3e:5a:35:92:
56:d1:9c:4f:b2:c5:d9:bc:05:64:f3:74:0b:ae:77:27:31:f2:
87:20:b6:83:78:8d:9c:ad:02:0f:7d:0a:82:cd:ba:62:6b:72:
8d:41:cb:6f:ff:8e:fd:c9:e0:ae:8d:72:35:9b:86:11:a1:60:
19:a9:1d:39:5c:b8:1e:32:d6:ef:9c:56:96:14:01:0b:17:51:
b2:bf:3b:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4wv56ffLcjpzr58yPWC4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjNTdkY2M3ZTUyZjU4YjM0MmI3MGM4M2RhYTIxYTEwNmFj
NTkyOTEwHhcNMjUwODA0MDcwMTU2WhcNMjUwODA1MDcwMTU2WjAzMTEwLwYDVQQD
EyhkNzA5NTRkYTVmMTE5NGVlYWE3MWIyNjU4NThjNTUyNmI3OTU0NzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGAfBtrCteIoMbzep0lh/HyZbfSp
whH75uyK4CrqLc8o2lz/JU/xsSt0zXcldN0Ix6eDUPg1lIV9JAPzM0U9U/J5QlrS
eVDNlh6wqTRN2H1HVTVVYXVmLRue5s4ygD55QCqTML8G9XoKTqxZvO6Ht15vxSOO
uhZ4gzRgJTg9R4j5AFFavol+s7xTOhrkZEDRP10iGiw//gtkoHN13bv9tLw5sq/r
f1bVu1Hqgwp91tIkNfA37m6r/2rZRIeJFVS+s6u5X0/XX6lPmCpTGhWHQX9Lypwm
HlPBskvtUFghGF01ROM+aSSqY3qao4Y1P5TtxZFg1WYFVJslG6dEORQWRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNcJVNpfEZTuqnGyZYWMVSa3lUc9MB8GA1UdIwQY
MBaAFIxX3MflL1izQrcMg9qiGhBqxZKRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakZmY3gtVXZXTE5DdHd5RDJxSWFFR3JGa3BFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lODMzOTktMGExNC00MmFjLTlmZDYt
NDEzMDZjMjdkNmYwLzEvakZmY3gtVXZXTE5DdHd5RDJxSWFFR3JGa3BFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lODMzOTktMGExNC00MmFjLTlmZDYtNDEzMDZjMjdkNmYw
LzEvakZmY3gtVXZXTE5DdHd5RDJxSWFFR3JGa3BFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ2CqHeba
ydFLPbtfik131MMi78MAQNE3fXFfNiozCN/qBL1DFxalVg6Vk6AW2W28OWlMfFt/
e9UXU8YBDGuhh9qXE+5cIYBgtaHHR0wNhnVxc603UXpptEMxPvXF4l+Nd4WfFw7X
ccel0HEuWUT1lzcSDhdKr6IMlDntFqXpriQ5PWkwCalD5SO3WXW+8MckNm3hHBua
h5HQ30nvdXS2dsrr3smAnANccLn8N0n9rCQ+WjWSVtGcT7LF2bwFZPN0C653JzHy
hyC2g3iNnK0CD30Kgs26YmtyjUHLb/+O/cngro1yNZuGEaFgGakdOVy4HjLW75xW
lhQBCxdRsr87hw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:37:48 2025 by rpki-client