Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft
File: 0jbg4txaKEOOMOv9HWpqlNs9HEA.mft (raw, json)
Hash identifier: wMH1aY5qrA8BXpX/RNT4Qdp3O0CUmCPO/1Vbbb/Srxk=
Subject key identifier: 80:27:7F:0A:95:C6:FD:A1:C0:6A:97:89:5F:78:B8:29:D6:10:23:37
Authority key identifier: D2:36:E0:E2:DC:5A:28:43:8E:30:EB:FD:1D:6A:6A:94:DB:3D:1C:40
Certificate issuer: /CN=d236e0e2dc5a28438e30ebfd1d6a6a94db3d1c40
Certificate serial: 019A71B8719ED4D44C77F70689E3E9E123E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jbg4txaKEOOMOv9HWpqlNs9HEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft
Manifest number: 1199
Signing time: Tue 11 Nov 2025 07:01:44 +0000
Manifest this update: Tue 11 Nov 2025 07:01:44 +0000
Manifest next update: Wed 12 Nov 2025 07:01:44 +0000
Files and hashes: 1: 0jbg4txaKEOOMOv9HWpqlNs9HEA.crl (hash: 8wVngCaJ3FprCXdZ3eET7T6RAUrCKN1tQDRGOGXfhhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0jbg4txaKEOOMOv9HWpqlNs9HEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:71:9e:d4:d4:4c:77:f7:06:89:e3:e9:e1:23:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d236e0e2dc5a28438e30ebfd1d6a6a94db3d1c40
Validity
Not Before: Nov 11 07:01:44 2025 GMT
Not After : Nov 12 07:01:44 2025 GMT
Subject: CN=80277f0a95c6fda1c06a97895f78b829d6102337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f9:8e:1a:1f:c0:05:01:1e:7a:2f:ba:99:2c:
8c:44:ef:f5:07:d8:37:7e:ff:08:58:37:0b:33:de:
d7:4f:93:f9:b2:cd:5a:e9:ac:a1:7b:ca:6a:2e:34:
c3:3d:af:00:03:50:56:61:9a:c4:f0:15:da:07:8a:
77:2b:08:2c:86:71:24:2a:e5:3c:35:95:6d:c4:99:
37:8a:2e:62:e9:80:24:c4:dd:be:2a:95:9e:84:7c:
02:e0:29:fc:31:df:5f:27:6d:c9:73:1d:ef:af:75:
b2:93:0c:d2:66:98:0a:84:57:07:89:e4:76:8c:de:
09:5f:43:3c:f4:91:62:17:76:b9:ac:1e:39:f0:c6:
7c:66:c3:c0:8a:71:59:63:42:4c:f2:01:0b:0a:d0:
3b:1d:c1:41:0f:1e:48:f6:8e:82:ca:1c:4d:16:91:
29:77:4c:2d:bf:30:24:e4:a4:d3:e3:9e:07:62:31:
8a:17:16:cb:76:36:51:3b:c3:f3:49:55:3a:98:9b:
67:cd:e2:26:3b:6a:e3:f5:30:17:1e:fe:fc:08:64:
a9:63:44:19:91:fa:d5:ec:c9:71:6d:ec:dc:85:5f:
d7:69:0e:02:c0:ce:a4:da:a8:78:8e:8f:7e:9c:b3:
b5:e9:bd:6d:20:05:ff:03:40:42:19:e7:09:87:41:
d6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:27:7F:0A:95:C6:FD:A1:C0:6A:97:89:5F:78:B8:29:D6:10:23:37
X509v3 Authority Key Identifier:
keyid:D2:36:E0:E2:DC:5A:28:43:8E:30:EB:FD:1D:6A:6A:94:DB:3D:1C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jbg4txaKEOOMOv9HWpqlNs9HEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ca:ee:83:12:f1:2a:c8:5a:89:01:48:da:4c:dd:d2:4b:78:
d1:61:a1:05:06:75:20:3b:8c:7c:67:d2:e5:b5:7c:f5:c8:b3:
2e:4a:d3:5c:0d:37:5d:88:8e:73:f3:fa:51:4b:a1:5a:a6:09:
98:01:f8:2e:61:a4:5a:48:43:44:18:d2:ff:a3:c7:a8:4d:c9:
ac:a9:f9:5e:1e:98:91:63:80:2a:4a:85:b6:81:ba:b4:0f:fe:
d0:ff:40:8e:34:b3:2a:be:97:74:36:82:4e:36:50:26:cf:5b:
e9:f7:16:94:ba:95:ec:a2:57:4e:a5:ac:a3:8d:d2:c3:b1:5f:
26:e8:9d:93:f2:a5:c9:24:28:15:77:cb:da:0c:d9:43:24:11:
1b:57:d9:bb:f7:ee:8c:b9:d7:b0:b2:9c:b8:19:2d:a1:ac:db:
af:24:d6:aa:b9:2c:15:d2:48:cf:dc:67:48:b3:06:e6:49:b8:
78:e6:56:51:3a:50:57:df:ca:dc:95:d4:71:ed:19:f6:2c:c7:
df:a3:10:0f:ba:2a:e5:e5:a7:67:8f:db:d8:ef:6d:dd:9f:ee:
53:e6:5d:27:52:25:91:1c:5d:3f:76:3c:90:79:cd:04:41:b0:
a7:bd:01:c4:26:9f:fe:4c:43:39:97:67:29:45:dd:31:c0:00:
5b:31:ee:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuHGe1NRMd/cGiePp4SPoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMzZlMGUyZGM1YTI4NDM4ZTMwZWJmZDFkNmE2YTk0ZGIz
ZDFjNDAwHhcNMjUxMTExMDcwMTQ0WhcNMjUxMTEyMDcwMTQ0WjAzMTEwLwYDVQQD
Eyg4MDI3N2YwYTk1YzZmZGExYzA2YTk3ODk1Zjc4YjgyOWQ2MTAyMzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPmOGh/ABQEeei+6mSyMRO/1B9g3
fv8IWDcLM97XT5P5ss1a6ayhe8pqLjTDPa8AA1BWYZrE8BXaB4p3KwgshnEkKuU8
NZVtxJk3ii5i6YAkxN2+KpWehHwC4Cn8Md9fJ23Jcx3vr3WykwzSZpgKhFcHieR2
jN4JX0M89JFiF3a5rB458MZ8ZsPAinFZY0JM8gELCtA7HcFBDx5I9o6CyhxNFpEp
d0wtvzAk5KTT454HYjGKFxbLdjZRO8PzSVU6mJtnzeImO2rj9TAXHv78CGSpY0QZ
kfrV7MlxbezchV/XaQ4CwM6k2qh4jo9+nLO16b1tIAX/A0BCGecJh0HWdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIAnfwqVxv2hwGqXiV94uCnWECM3MB8GA1UdIwQY
MBaAFNI24OLcWihDjjDr/R1qapTbPRxAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGpiZzR0eGFLRU9PTU92OUhXcHFsTnM5SEVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83MTZhMjMtYjU5NC00OWU5LTg5NTkt
OWQ0MzJmMTI4YTI1LzEvMGpiZzR0eGFLRU9PTU92OUhXcHFsTnM5SEVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS83MTZhMjMtYjU5NC00OWU5LTg5NTktOWQ0MzJmMTI4YTI1
LzEvMGpiZzR0eGFLRU9PTU92OUhXcHFsTnM5SEVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc8rugxLx
KshaiQFI2kzd0kt40WGhBQZ1IDuMfGfS5bV89cizLkrTXA03XYiOc/P6UUuhWqYJ
mAH4LmGkWkhDRBjS/6PHqE3JrKn5Xh6YkWOAKkqFtoG6tA/+0P9AjjSzKr6XdDaC
TjZQJs9b6fcWlLqV7KJXTqWso43Sw7FfJuidk/KlySQoFXfL2gzZQyQRG1fZu/fu
jLnXsLKcuBktoazbryTWqrksFdJIz9xnSLMG5km4eOZWUTpQV9/K3JXUce0Z9izH
36MQD7oq5eWnZ4/b2O9t3Z/uU+ZdJ1IlkRxdP3Y8kHnNBEGwp70BxCaf/kxDOZdn
KUXdMcAAWzHuQA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:39:38 2025 by rpki-client