Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
File: sjQvyZcw8qNNCe5LXukheHVs1NE.mft (raw, json)
Hash identifier: rgR6VmMSdz7xLDWHag0atsoJZczP1f4GGpsjBZVfHeY=
Subject key identifier: 30:0A:7E:8E:DC:89:9C:A9:C1:4F:1D:BB:AD:69:F7:A1:B9:97:7B:72
Authority key identifier: B2:34:2F:C9:97:30:F2:A3:4D:09:EE:4B:5E:E9:21:78:75:6C:D4:D1
Certificate issuer: /CN=b2342fc99730f2a34d09ee4b5ee92178756cd4d1
Certificate serial: 0199239EECFB91A81A307929788E4E9FF469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjQvyZcw8qNNCe5LXukheHVs1NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
Manifest number: 071E
Signing time: Sun 07 Sep 2025 10:00:41 +0000
Manifest this update: Sun 07 Sep 2025 10:00:41 +0000
Manifest next update: Mon 08 Sep 2025 10:00:41 +0000
Files and hashes: 1: sjQvyZcw8qNNCe5LXukheHVs1NE.crl (hash: tRINY40B59UeOnFdJiIBXr4fYlc8KySSnEugEDkQGdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjQvyZcw8qNNCe5LXukheHVs1NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:ec:fb:91:a8:1a:30:79:29:78:8e:4e:9f:f4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2342fc99730f2a34d09ee4b5ee92178756cd4d1
Validity
Not Before: Sep 7 10:00:41 2025 GMT
Not After : Sep 8 10:00:41 2025 GMT
Subject: CN=300a7e8edc899ca9c14f1dbbad69f7a1b9977b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fa:d2:a0:33:ba:d6:88:c6:7a:37:d1:a0:af:
6a:40:3b:0c:b1:88:f2:ec:6b:47:c5:11:8f:1e:53:
bb:0a:5a:66:de:90:62:5b:d1:50:ff:16:4e:4a:33:
70:8f:43:1a:e7:10:6d:10:90:7c:81:54:c3:9c:55:
14:a7:4a:4b:f9:3a:40:b4:c5:6f:1a:94:33:7a:73:
a8:4e:a3:1c:dd:f0:1d:7e:eb:43:b6:25:5e:c5:2e:
10:b6:88:75:ee:5e:57:08:fe:72:62:08:d9:78:67:
85:74:80:37:db:b0:f1:6e:ed:ef:9c:b1:16:70:e7:
89:dc:a6:82:d7:98:ce:6e:5b:f1:14:bd:fe:ee:79:
2d:4e:84:4b:a5:49:f1:50:a9:33:26:12:d2:36:5a:
06:8d:21:f8:f6:1b:73:5a:ad:73:06:22:86:3d:4f:
44:1d:67:3a:97:65:92:c9:00:74:00:ea:aa:83:b0:
2e:94:05:60:5e:8f:7a:16:58:0b:ac:95:be:64:58:
06:bc:f3:b1:3d:12:b4:b7:4d:15:09:19:28:c7:ee:
0f:2d:77:9a:93:1d:67:bd:1a:1d:ce:6b:45:23:6d:
2a:11:1d:15:36:17:e4:83:e8:4e:8b:91:38:73:76:
bc:4d:26:9a:be:47:88:c1:7d:e7:fc:07:f7:2c:26:
11:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:0A:7E:8E:DC:89:9C:A9:C1:4F:1D:BB:AD:69:F7:A1:B9:97:7B:72
X509v3 Authority Key Identifier:
keyid:B2:34:2F:C9:97:30:F2:A3:4D:09:EE:4B:5E:E9:21:78:75:6C:D4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjQvyZcw8qNNCe5LXukheHVs1NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:f0:00:e5:15:d5:cd:ac:a6:fb:02:8f:0b:de:ff:24:5c:95:
82:27:48:27:4a:37:50:c1:4b:96:10:65:0e:51:31:98:0d:39:
94:f2:2c:76:56:a0:90:ad:0c:ad:b8:00:cc:f0:01:b5:18:6e:
3d:8a:f6:93:09:2b:5f:12:91:60:07:8d:c3:c2:b8:c5:48:8f:
d5:97:f3:87:a2:42:a8:16:e0:5d:99:62:43:19:d9:db:f8:e9:
bc:46:72:12:ca:b2:2d:f8:e7:99:36:cc:cb:78:b9:09:89:dd:
ea:6a:45:48:42:b7:1b:49:18:bf:24:d9:4f:d3:4d:f0:26:58:
d9:d5:a8:62:db:1f:6d:21:71:ea:ca:4b:e5:35:32:cb:0c:81:
ae:3d:55:8c:a9:c3:f1:53:94:00:15:8f:b6:82:29:b5:92:b2:
83:1b:af:1f:c5:0b:b5:67:1f:4b:30:41:fc:c9:f7:9f:8b:fa:
0b:10:de:39:c2:7f:d3:a1:5e:73:bc:9a:02:da:f6:bc:3d:1b:
fb:60:d2:a2:26:35:59:63:36:e9:e9:69:a9:46:ce:77:79:33:
37:47:00:a5:6a:39:ed:12:a2:8f:ad:c3:10:39:aa:54:f8:6e:
af:bf:98:4b:67:56:f2:4c:85:44:36:30:00:1f:3c:27:1b:7f:
16:91:2e:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjnuz7kagaMHkpeI5On/RpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMzQyZmM5OTczMGYyYTM0ZDA5ZWU0YjVlZTkyMTc4NzU2
Y2Q0ZDEwHhcNMjUwOTA3MTAwMDQxWhcNMjUwOTA4MTAwMDQxWjAzMTEwLwYDVQQD
EygzMDBhN2U4ZWRjODk5Y2E5YzE0ZjFkYmJhZDY5ZjdhMWI5OTc3YjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2frSoDO61ojGejfRoK9qQDsMsYjy
7GtHxRGPHlO7Clpm3pBiW9FQ/xZOSjNwj0Ma5xBtEJB8gVTDnFUUp0pL+TpAtMVv
GpQzenOoTqMc3fAdfutDtiVexS4Qtoh17l5XCP5yYgjZeGeFdIA327Dxbu3vnLEW
cOeJ3KaC15jOblvxFL3+7nktToRLpUnxUKkzJhLSNloGjSH49htzWq1zBiKGPU9E
HWc6l2WSyQB0AOqqg7AulAVgXo96FlgLrJW+ZFgGvPOxPRK0t00VCRkox+4PLXea
kx1nvRodzmtFI20qER0VNhfkg+hOi5E4c3a8TSaavkeIwX3n/Af3LCYRNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDAKfo7ciZypwU8du61p96G5l3tyMB8GA1UdIwQY
MBaAFLI0L8mXMPKjTQnuS17pIXh1bNTRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2pRdnlaY3c4cU5OQ2U1TFh1a2hlSFZzMU5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi81ODRjMGQtODg1Yy00NGEwLTliZWYt
N2E4ZTM4OTIwMjUwLzEvc2pRdnlaY3c4cU5OQ2U1TFh1a2hlSFZzMU5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi81ODRjMGQtODg1Yy00NGEwLTliZWYtN2E4ZTM4OTIwMjUw
LzEvc2pRdnlaY3c4cU5OQ2U1TFh1a2hlSFZzMU5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUPAA5RXV
zaym+wKPC97/JFyVgidIJ0o3UMFLlhBlDlExmA05lPIsdlagkK0MrbgAzPABtRhu
PYr2kwkrXxKRYAeNw8K4xUiP1Zfzh6JCqBbgXZliQxnZ2/jpvEZyEsqyLfjnmTbM
y3i5CYnd6mpFSEK3G0kYvyTZT9NN8CZY2dWoYtsfbSFx6spL5TUyywyBrj1VjKnD
8VOUABWPtoIptZKygxuvH8ULtWcfSzBB/Mn3n4v6CxDeOcJ/06Fec7yaAtr2vD0b
+2DSoiY1WWM26elpqUbOd3kzN0cApWo57RKij63DEDmqVPhur7+YS2dW8kyFRDYw
AB88Jxt/FpEuAQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:53:32 2025 by rpki-client