Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
File: JzWNbTPibSr4Q9WB3PacDREKneg.mft (raw, json)
Hash identifier: uAWNNJ5Euynms6xnfj0p9r4BXiyiyIStTLycO8Pk36g=
Subject key identifier: 82:76:66:99:36:3D:41:FC:F7:12:92:9B:57:7C:3F:A5:4F:CD:85:68
Authority key identifier: 27:35:8D:6D:33:E2:6D:2A:F8:43:D5:81:DC:F6:9C:0D:11:0A:9D:E8
Certificate issuer: /CN=27358d6d33e26d2af843d581dcf69c0d110a9de8
Certificate serial: 019A725C930150CED4EB28C577A7350E7011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
Manifest number: 0339
Signing time: Tue 11 Nov 2025 10:01:00 +0000
Manifest this update: Tue 11 Nov 2025 10:01:00 +0000
Manifest next update: Wed 12 Nov 2025 10:01:00 +0000
Files and hashes: 1: JzWNbTPibSr4Q9WB3PacDREKneg.crl (hash: 1hDSjCDQcuQaEkXXQF3/OuqG/ZCXuKuKLH6UM3Bp32k=)
2: xCvl2MPRqLFevw92K1xWqEyP8xM.roa (hash: x5lJC5gSbKWJztGnWxiyT9yj/ffbvJ91buVaYTLqpME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:93:01:50:ce:d4:eb:28:c5:77:a7:35:0e:70:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27358d6d33e26d2af843d581dcf69c0d110a9de8
Validity
Not Before: Nov 11 10:01:00 2025 GMT
Not After : Nov 12 10:01:00 2025 GMT
Subject: CN=82766699363d41fcf712929b577c3fa54fcd8568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0d:49:e8:1e:c3:5d:84:cb:96:45:b7:ae:41:
3c:34:ab:f0:39:22:b1:2a:4a:2d:7f:b0:00:cc:c4:
fa:b0:dd:4d:6b:0a:1a:5b:ae:dc:8b:90:fe:9d:dc:
ea:31:31:6d:58:7a:6c:14:50:87:8d:d8:7c:86:f5:
8c:83:5c:ef:a3:03:91:5e:04:43:ca:a3:f5:7b:d4:
3a:a6:f3:0e:18:e7:f7:42:58:2a:1c:06:59:41:1b:
b6:49:a3:db:f4:04:59:79:4d:58:30:33:e8:29:72:
9d:76:6f:c4:38:80:5b:37:d9:55:d0:5e:a0:49:59:
48:02:9d:09:95:cb:2e:1e:e3:49:8b:4a:3d:4e:73:
ab:39:a5:bc:94:9d:6a:3e:70:d1:23:3f:29:85:84:
21:44:9b:c1:81:a6:51:12:89:a7:b2:d6:e2:4b:f1:
0f:b1:2d:9f:22:d7:47:50:7d:1a:5e:2b:97:57:4e:
8d:a2:0a:65:d2:24:96:3a:f5:4e:fd:7d:3a:ce:4b:
24:6a:77:38:e9:33:e2:d4:94:1d:a2:79:4d:4a:97:
ef:dd:db:00:9d:46:7b:e8:f6:04:19:5c:52:2c:65:
ba:a0:ca:65:6f:1d:03:3f:99:ec:43:89:29:8b:7e:
4a:56:ec:81:a5:5c:04:eb:15:bb:5f:db:8c:c8:0b:
fb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:76:66:99:36:3D:41:FC:F7:12:92:9B:57:7C:3F:A5:4F:CD:85:68
X509v3 Authority Key Identifier:
keyid:27:35:8D:6D:33:E2:6D:2A:F8:43:D5:81:DC:F6:9C:0D:11:0A:9D:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:3a:47:05:17:8e:b6:bd:03:ed:df:aa:5c:26:6e:16:6f:d3:
d9:16:6b:36:75:e8:84:7f:c8:61:6d:50:21:8f:f2:f4:4a:71:
96:2d:03:05:f7:9d:7f:e5:36:aa:5f:7e:1a:cf:0a:4b:28:43:
29:8b:1e:bb:83:c0:ce:6c:e0:9d:cd:4b:2a:2a:03:45:97:78:
4e:f4:16:ce:15:e4:55:d6:3a:94:6f:94:b6:65:6e:7b:19:c4:
7e:61:ed:59:fa:d1:f0:61:96:f1:17:38:a4:a9:c8:00:d7:33:
a0:ac:1e:c9:ca:5e:75:46:83:54:17:ca:b7:c5:73:11:8a:31:
5b:c7:27:01:24:bb:fd:24:14:3f:f6:cb:5b:05:4b:81:21:76:
a3:3d:00:2c:8c:67:af:d6:ef:07:fe:1b:b8:ab:3d:46:a4:c1:
ef:fb:27:f1:89:29:9f:9c:89:5f:47:96:76:e2:7c:6c:87:7a:
a7:21:f2:5f:17:e5:d2:61:f3:0b:e2:95:c3:c8:e1:2f:60:a1:
24:03:f5:d7:4e:fb:15:a8:59:7c:18:d5:5c:be:06:e2:94:4e:
71:11:6a:9d:cc:be:92:94:b6:5c:10:51:84:9c:7f:41:4a:19:
03:ac:81:11:6f:a6:ff:bc:f8:5d:59:f1:77:4a:e2:5a:c2:b5:
50:2f:03:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXJMBUM7U6yjFd6c1DnARMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MzU4ZDZkMzNlMjZkMmFmODQzZDU4MWRjZjY5YzBkMTEw
YTlkZTgwHhcNMjUxMTExMTAwMTAwWhcNMjUxMTEyMTAwMTAwWjAzMTEwLwYDVQQD
Eyg4Mjc2NjY5OTM2M2Q0MWZjZjcxMjkyOWI1NzdjM2ZhNTRmY2Q4NTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtA1J6B7DXYTLlkW3rkE8NKvwOSKx
Kkotf7AAzMT6sN1NawoaW67ci5D+ndzqMTFtWHpsFFCHjdh8hvWMg1zvowORXgRD
yqP1e9Q6pvMOGOf3QlgqHAZZQRu2SaPb9ARZeU1YMDPoKXKddm/EOIBbN9lV0F6g
SVlIAp0JlcsuHuNJi0o9TnOrOaW8lJ1qPnDRIz8phYQhRJvBgaZREomnstbiS/EP
sS2fItdHUH0aXiuXV06Nogpl0iSWOvVO/X06zkskanc46TPi1JQdonlNSpfv3dsA
nUZ76PYEGVxSLGW6oMplbx0DP5nsQ4kpi35KVuyBpVwE6xW7X9uMyAv7KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJ2Zpk2PUH89xKSm1d8P6VPzYVoMB8GA1UdIwQY
MBaAFCc1jW0z4m0q+EPVgdz2nA0RCp3oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnpXTmJUUGliU3I0UTlXQjNQYWNEUkVLbmVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mYzE4ZjMtYzBkYi00Y2QyLWEwODMt
NDI2ZDlmZjIwN2QxLzEvSnpXTmJUUGliU3I0UTlXQjNQYWNEUkVLbmVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mYzE4ZjMtYzBkYi00Y2QyLWEwODMtNDI2ZDlmZjIwN2Qx
LzEvSnpXTmJUUGliU3I0UTlXQjNQYWNEUkVLbmVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZDpHBReO
tr0D7d+qXCZuFm/T2RZrNnXohH/IYW1QIY/y9Epxli0DBfedf+U2ql9+Gs8KSyhD
KYseu4PAzmzgnc1LKioDRZd4TvQWzhXkVdY6lG+UtmVuexnEfmHtWfrR8GGW8Rc4
pKnIANczoKweycpedUaDVBfKt8VzEYoxW8cnASS7/SQUP/bLWwVLgSF2oz0ALIxn
r9bvB/4buKs9RqTB7/sn8Ykpn5yJX0eWduJ8bId6pyHyXxfl0mHzC+KVw8jhL2Ch
JAP11077FahZfBjVXL4G4pROcRFqncy+kpS2XBBRhJx/QUoZA6yBEW+m/7z4XVnx
d0riWsK1UC8DpQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:10 2025 by rpki-client