Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
File: jDzPk_fIB93gQgrVSGrinrXcdfk.mft (raw, json)
Hash identifier: y4cIGMjsJJGTsft9NX8D3y9fSnAr9iDbpDtu+GtEywg=
Subject key identifier: 59:40:EE:4B:91:7C:C2:7F:A2:5F:70:44:B2:84:5C:65:C0:EE:5D:B6
Authority key identifier: 8C:3C:CF:93:F7:C8:07:DD:E0:42:0A:D5:48:6A:E2:9E:B5:DC:75:F9
Certificate issuer: /CN=8c3ccf93f7c807dde0420ad5486ae29eb5dc75f9
Certificate serial: 019A51876DC5E94F2895E7778E1C1B70FDE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 01:00:21 +0000
Manifest this update: Wed 05 Nov 2025 01:00:21 +0000
Manifest next update: Thu 06 Nov 2025 01:00:21 +0000
Files and hashes: 1: jDzPk_fIB93gQgrVSGrinrXcdfk.crl (hash: WVx8aEzOZcEGtOFmS14YYYRNJBm4x+18DKWwrVDq7VM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:6d:c5:e9:4f:28:95:e7:77:8e:1c:1b:70:fd:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c3ccf93f7c807dde0420ad5486ae29eb5dc75f9
Validity
Not Before: Nov 5 01:00:21 2025 GMT
Not After : Nov 6 01:00:21 2025 GMT
Subject: CN=5940ee4b917cc27fa25f7044b2845c65c0ee5db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0d:5a:b4:0e:75:2f:b0:e6:c1:0f:dd:eb:b9:
80:dc:57:ed:56:60:6c:e0:2f:14:9d:45:09:d3:41:
00:b7:30:14:ae:08:6e:b4:ea:57:71:86:11:50:d5:
48:06:01:45:3d:cf:85:e2:3d:85:7c:02:67:c6:e8:
66:fd:c7:47:d8:53:aa:4e:75:a8:02:5c:24:a9:0d:
13:12:3f:d8:13:d2:ca:28:a2:89:d0:36:21:5a:6d:
a3:bc:87:43:02:33:fc:d7:e4:ae:90:a9:ca:67:81:
dc:8a:a7:83:4c:15:12:91:8f:9e:f7:0e:a5:4a:7e:
e6:3e:e1:9e:f3:98:f6:ec:7b:a8:e3:3a:17:b2:5e:
2f:ae:20:a1:30:4f:6f:d6:ad:f0:3f:7c:5c:c1:8a:
70:06:8a:20:e9:ae:61:ba:ad:64:76:a8:d2:a3:69:
16:aa:8f:31:d3:ee:73:bd:d8:72:82:e3:db:65:ab:
ac:84:e8:2f:fb:2d:36:7e:51:33:bf:55:8a:04:5c:
e9:46:1d:df:06:f0:c2:7e:a8:5a:5a:62:44:73:8a:
72:04:bc:45:c5:1d:ee:cf:f1:ad:5a:5e:80:ca:85:
75:e3:c6:b2:59:e0:d5:98:c3:54:8c:22:10:0c:34:
ed:77:a7:b0:ac:9a:3a:77:0f:33:46:2a:f6:b4:87:
f3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:40:EE:4B:91:7C:C2:7F:A2:5F:70:44:B2:84:5C:65:C0:EE:5D:B6
X509v3 Authority Key Identifier:
keyid:8C:3C:CF:93:F7:C8:07:DD:E0:42:0A:D5:48:6A:E2:9E:B5:DC:75:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDzPk_fIB93gQgrVSGrinrXcdfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1834ac-2030-441f-82e2-681dbff8515e/1/jDzPk_fIB93gQgrVSGrinrXcdfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:35:72:0c:56:43:da:08:ac:bc:4d:e1:5c:7e:83:78:f2:c0:
a9:5a:e1:47:fe:eb:4b:39:81:ff:98:79:40:72:e1:27:92:d0:
99:24:34:b6:10:56:ef:8e:ba:1a:27:e0:59:d0:fd:de:34:af:
9c:46:6b:d1:46:38:85:5e:b3:4b:27:fe:c0:f0:2b:ae:1e:b4:
7b:88:a2:6b:3a:1f:c6:f8:0a:53:62:b8:54:59:18:e7:06:a7:
84:b9:5f:a7:bc:ed:87:2b:dc:6b:82:fd:eb:c8:8f:db:11:6f:
bf:cc:7e:2b:66:58:38:16:36:b6:a4:90:64:2f:94:a2:65:56:
93:1e:e7:e8:ab:ed:ae:72:8d:4b:db:d9:6b:f7:6a:da:1b:bd:
10:e1:08:71:36:e5:14:05:59:aa:f3:91:56:b4:1d:24:55:c3:
30:35:82:fb:dd:78:d1:47:19:81:a2:5b:cb:4b:04:98:84:10:
60:3a:8a:21:ca:93:03:54:60:c2:dc:98:b1:d8:9b:55:6d:ac:
ca:91:f1:25:1b:c3:55:5c:66:9b:ba:26:3d:ff:ba:e4:78:99:
9d:83:4b:71:42:83:97:3e:d7:5c:ed:5a:1a:eb:95:fb:fa:7c:
ba:5c:27:5e:b7:ef:c6:ec:36:b6:8e:09:19:d5:d2:a8:9a:e6:
9c:34:87:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRh23F6U8oled3jhwbcP3pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjM2NjZjkzZjdjODA3ZGRlMDQyMGFkNTQ4NmFlMjllYjVk
Yzc1ZjkwHhcNMjUxMTA1MDEwMDIxWhcNMjUxMTA2MDEwMDIxWjAzMTEwLwYDVQQD
Eyg1OTQwZWU0YjkxN2NjMjdmYTI1ZjcwNDRiMjg0NWM2NWMwZWU1ZGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0A1atA51L7DmwQ/d67mA3FftVmBs
4C8UnUUJ00EAtzAUrghutOpXcYYRUNVIBgFFPc+F4j2FfAJnxuhm/cdH2FOqTnWo
AlwkqQ0TEj/YE9LKKKKJ0DYhWm2jvIdDAjP81+SukKnKZ4HciqeDTBUSkY+e9w6l
Sn7mPuGe85j27Huo4zoXsl4vriChME9v1q3wP3xcwYpwBoog6a5huq1kdqjSo2kW
qo8x0+5zvdhyguPbZaushOgv+y02flEzv1WKBFzpRh3fBvDCfqhaWmJEc4pyBLxF
xR3uz/GtWl6AyoV148ayWeDVmMNUjCIQDDTtd6ewrJo6dw8zRir2tIfz7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFlA7kuRfMJ/ol9wRLKEXGXA7l22MB8GA1UdIwQY
MBaAFIw8z5P3yAfd4EIK1Uhq4p613HX5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakR6UGtfZklCOTNnUWdyVlNHcmluclhjZGZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8xODM0YWMtMjAzMC00NDFmLTgyZTIt
NjgxZGJmZjg1MTVlLzEvakR6UGtfZklCOTNnUWdyVlNHcmluclhjZGZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8xODM0YWMtMjAzMC00NDFmLTgyZTItNjgxZGJmZjg1MTVl
LzEvakR6UGtfZklCOTNnUWdyVlNHcmluclhjZGZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkzVyDFZD
2gisvE3hXH6DePLAqVrhR/7rSzmB/5h5QHLhJ5LQmSQ0thBW7466GifgWdD93jSv
nEZr0UY4hV6zSyf+wPArrh60e4iiazofxvgKU2K4VFkY5wanhLlfp7zthyvca4L9
68iP2xFvv8x+K2ZYOBY2tqSQZC+UomVWkx7n6KvtrnKNS9vZa/dq2hu9EOEIcTbl
FAVZqvORVrQdJFXDMDWC+9140UcZgaJby0sEmIQQYDqKIcqTA1RgwtyYsdibVW2s
ypHxJRvDVVxmm7omPf+65HiZnYNLcUKDlz7XXO1aGuuV+/p8ulwnXrfvxuw2to4J
GdXSqJrmnDSHKg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:53:09 2025 by rpki-client