Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft
File: JgGttY6Dyu5nXc94lUugiqkwGg4.mft (raw, json)
Hash identifier: T/bG3njHFgsVKpBcgz21W8Z2sYKob7OQxrdpKf7BfW8=
Subject key identifier: 23:B5:3D:56:90:6C:38:8C:94:1E:A6:32:E6:27:47:0C:B9:6A:BC:94
Authority key identifier: 26:01:AD:B5:8E:83:CA:EE:67:5D:CF:78:95:4B:A0:8A:A9:30:1A:0E
Certificate issuer: /CN=2601adb58e83caee675dcf78954ba08aa9301a0e
Certificate serial: 019A4F98FA811E8A0F9B227F98F57E283BD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft
Manifest number: 077C
Signing time: Tue 04 Nov 2025 16:00:16 +0000
Manifest this update: Tue 04 Nov 2025 16:00:16 +0000
Manifest next update: Wed 05 Nov 2025 16:00:16 +0000
Files and hashes: 1: JgGttY6Dyu5nXc94lUugiqkwGg4.crl (hash: 5JXpQmIhPZLVLy21bOrmwVcpFDo482UhpcDzZtf631s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:fa:81:1e:8a:0f:9b:22:7f:98:f5:7e:28:3b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2601adb58e83caee675dcf78954ba08aa9301a0e
Validity
Not Before: Nov 4 16:00:16 2025 GMT
Not After : Nov 5 16:00:16 2025 GMT
Subject: CN=23b53d56906c388c941ea632e627470cb96abc94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b2:01:7b:11:c5:97:d4:9d:ad:f2:bd:ed:fd:
47:37:35:4a:a4:99:ea:c6:f1:68:62:bb:85:75:66:
dc:ea:38:76:fc:bf:3e:1c:f8:73:85:ef:c3:67:04:
68:ab:f2:d3:f4:7f:e8:75:ba:a7:26:f6:58:d2:a9:
32:e7:98:c8:5b:f2:b4:9a:bf:23:10:81:6f:ef:a6:
f6:72:62:f6:63:ba:5b:53:d3:06:f5:6a:6e:8c:d6:
a8:a5:06:e7:ae:bd:4b:3e:15:5c:ad:57:eb:9e:be:
ae:f3:18:c8:0e:00:59:91:9a:ac:25:b2:d4:87:74:
44:06:86:03:04:e1:11:cf:1b:fe:e4:ef:5f:34:bf:
b8:50:f0:37:ff:05:96:77:66:dc:3b:1b:18:d0:6b:
9d:44:de:2a:72:0b:4e:fb:dc:26:d7:28:09:f9:37:
ad:d5:44:75:42:e1:9a:59:fc:ba:d2:4a:bf:7a:c2:
6f:b1:db:1f:66:04:00:aa:b2:11:0e:7d:4a:e3:c8:
da:2e:e8:f9:7b:ba:24:f1:ae:45:e5:47:03:bf:44:
23:e6:30:ff:96:01:03:8a:48:46:ed:3a:70:bd:47:
a8:da:e1:a4:f7:1f:52:19:09:bf:0e:82:3b:fa:6e:
f6:88:0a:98:8d:85:f8:ef:41:d1:b0:4a:8d:6b:19:
c0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B5:3D:56:90:6C:38:8C:94:1E:A6:32:E6:27:47:0C:B9:6A:BC:94
X509v3 Authority Key Identifier:
keyid:26:01:AD:B5:8E:83:CA:EE:67:5D:CF:78:95:4B:A0:8A:A9:30:1A:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:5c:b9:f5:15:e7:7b:fb:50:0f:c6:8f:f8:3b:c9:26:f7:32:
57:b0:95:5e:de:3a:50:b2:62:40:da:28:7e:b1:ba:2d:c4:b8:
9c:00:0f:26:e1:8a:81:52:d0:e4:95:ab:25:f2:33:52:00:d9:
1a:c7:3f:65:86:25:b5:7f:61:84:10:05:6a:3d:6e:f9:d7:ba:
b5:50:6c:23:b2:fa:53:02:16:58:6e:dd:bc:4f:83:69:e2:85:
d1:23:64:aa:c5:1e:ca:b1:7c:08:d5:98:4f:92:22:45:1f:bb:
50:4e:0d:bb:d6:4b:46:7c:17:61:90:a7:f3:26:18:d4:14:94:
71:7d:51:ea:49:03:d4:58:16:c6:ed:01:0c:a3:82:71:0b:72:
d4:ef:81:62:34:43:ca:39:34:39:7e:04:65:c3:a4:c1:91:ee:
2b:40:88:50:eb:df:d9:c5:ee:5a:5b:a7:0d:68:29:58:fd:a3:
61:5e:43:1e:e9:01:c8:2e:5f:84:64:73:83:09:f6:43:93:c6:
c2:56:fc:b9:0b:08:39:5c:db:4a:7b:a5:0e:22:a3:e4:e0:63:
05:71:b1:df:7f:5a:42:d4:8b:9c:a7:47:54:16:c8:09:a4:0b:
81:d0:e3:b9:a3:1f:a0:28:d3:db:a7:9e:be:d5:64:e0:6c:cc:
40:a5:39:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmPqBHooPmyJ/mPV+KDvUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MDFhZGI1OGU4M2NhZWU2NzVkY2Y3ODk1NGJhMDhhYTkz
MDFhMGUwHhcNMjUxMTA0MTYwMDE2WhcNMjUxMTA1MTYwMDE2WjAzMTEwLwYDVQQD
EygyM2I1M2Q1NjkwNmMzODhjOTQxZWE2MzJlNjI3NDcwY2I5NmFiYzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bIBexHFl9SdrfK97f1HNzVKpJnq
xvFoYruFdWbc6jh2/L8+HPhzhe/DZwRoq/LT9H/odbqnJvZY0qky55jIW/K0mr8j
EIFv76b2cmL2Y7pbU9MG9WpujNaopQbnrr1LPhVcrVfrnr6u8xjIDgBZkZqsJbLU
h3REBoYDBOERzxv+5O9fNL+4UPA3/wWWd2bcOxsY0GudRN4qcgtO+9wm1ygJ+Tet
1UR1QuGaWfy60kq/esJvsdsfZgQAqrIRDn1K48jaLuj5e7ok8a5F5UcDv0Qj5jD/
lgEDikhG7TpwvUeo2uGk9x9SGQm/DoI7+m72iAqYjYX470HRsEqNaxnAqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCO1PVaQbDiMlB6mMuYnRwy5aryUMB8GA1UdIwQY
MBaAFCYBrbWOg8ruZ13PeJVLoIqpMBoOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmdHdHRZNkR5dTVuWGM5NGxVdWdpcWt3R2c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9jNjk5YTMtN2Q1MS00YjM4LTgwOWQt
MTUyOWFkYjBjOWQ3LzEvSmdHdHRZNkR5dTVuWGM5NGxVdWdpcWt3R2c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9jNjk5YTMtN2Q1MS00YjM4LTgwOWQtMTUyOWFkYjBjOWQ3
LzEvSmdHdHRZNkR5dTVuWGM5NGxVdWdpcWt3R2c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcVy59RXn
e/tQD8aP+DvJJvcyV7CVXt46ULJiQNoofrG6LcS4nAAPJuGKgVLQ5JWrJfIzUgDZ
Gsc/ZYYltX9hhBAFaj1u+de6tVBsI7L6UwIWWG7dvE+DaeKF0SNkqsUeyrF8CNWY
T5IiRR+7UE4Nu9ZLRnwXYZCn8yYY1BSUcX1R6kkD1FgWxu0BDKOCcQty1O+BYjRD
yjk0OX4EZcOkwZHuK0CIUOvf2cXuWlunDWgpWP2jYV5DHukByC5fhGRzgwn2Q5PG
wlb8uQsIOVzbSnulDiKj5OBjBXGx339aQtSLnKdHVBbICaQLgdDjuaMfoCjT26ee
vtVk4GzMQKU5IQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:45:54 2025 by rpki-client