Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.mft
File: JkQpgYmVnJWm1KdLdU9JlqWltlw.mft (raw, json)
Hash identifier: tX2qayoWOuYq7WLR893o2xjBvr254IaoB2pUk7pXaFo=
Subject key identifier: D9:BF:7E:75:64:55:72:DB:71:84:EA:B8:19:75:31:D5:73:85:15:44
Authority key identifier: 26:44:29:81:89:95:9C:95:A6:D4:A7:4B:75:4F:49:96:A5:A5:B6:5C
Certificate issuer: /CN=2644298189959c95a6d4a74b754f4996a5a5b65c
Certificate serial: 0199239F73BF2C7A6112AD488CBE61AE7EF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkQpgYmVnJWm1KdLdU9JlqWltlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.mft
Manifest number: 166E
Signing time: Sun 07 Sep 2025 10:01:16 +0000
Manifest this update: Sun 07 Sep 2025 10:01:16 +0000
Manifest next update: Mon 08 Sep 2025 10:01:16 +0000
Files and hashes: 1: JkQpgYmVnJWm1KdLdU9JlqWltlw.crl (hash: lk2KQBF/gQqJzSEYIRP/HE/jGVc/C70KAk71sVGl23w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JkQpgYmVnJWm1KdLdU9JlqWltlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:73:bf:2c:7a:61:12:ad:48:8c:be:61:ae:7e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2644298189959c95a6d4a74b754f4996a5a5b65c
Validity
Not Before: Sep 7 10:01:16 2025 GMT
Not After : Sep 8 10:01:16 2025 GMT
Subject: CN=d9bf7e75645572db7184eab8197531d573851544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2d:66:7d:e9:ad:09:9e:a8:71:5c:1a:1b:c5:
b9:26:d0:48:92:91:8d:06:c4:3f:17:db:e7:dc:f0:
eb:00:ef:2a:66:e6:3e:e7:e3:95:3c:94:c2:86:2e:
3d:6b:9f:0e:32:a6:27:fc:9a:09:42:8a:fa:4c:cb:
65:53:d6:6c:22:e7:52:52:e7:6d:17:22:de:c7:d6:
2a:17:a1:22:4f:62:cd:26:94:93:e7:0d:db:12:1e:
5f:a2:4a:58:a4:03:e7:2b:f3:82:8e:f0:83:ed:6a:
5a:09:7d:3f:93:5b:5d:08:a6:a5:81:13:4d:b0:4e:
a1:63:f3:59:3b:e1:d0:8c:eb:37:e8:1d:27:79:f9:
c1:a1:8f:b4:bc:1b:98:c4:74:c9:cd:67:7b:b0:89:
4f:50:e4:95:93:89:e0:44:21:a9:29:9d:65:f0:ae:
2b:61:de:8b:3a:c3:06:15:e0:68:03:cb:6c:85:de:
56:17:16:66:22:3b:17:7d:23:e8:e6:80:9c:34:57:
86:71:7e:ce:d2:ae:69:71:dc:d6:e2:b9:d2:6e:a0:
a0:a4:75:55:19:e8:c2:14:dd:0b:b2:f6:d1:68:7b:
ad:79:ff:a1:c9:f6:d6:58:70:de:9b:b7:4b:e1:c6:
31:4c:7c:89:9d:77:c9:39:b8:e4:e1:e5:2c:25:22:
2b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BF:7E:75:64:55:72:DB:71:84:EA:B8:19:75:31:D5:73:85:15:44
X509v3 Authority Key Identifier:
keyid:26:44:29:81:89:95:9C:95:A6:D4:A7:4B:75:4F:49:96:A5:A5:B6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkQpgYmVnJWm1KdLdU9JlqWltlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d14d0-be8b-4170-9fd8-07cd4a061c80/1/JkQpgYmVnJWm1KdLdU9JlqWltlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:dc:ee:69:62:52:f4:72:42:06:2e:46:08:c5:10:dd:42:be:
84:3d:17:d2:a9:5e:65:78:d1:e9:4b:eb:d2:d7:64:0f:96:07:
71:09:75:c1:92:91:8c:2f:b0:b7:93:7f:45:38:f1:dd:43:50:
2a:a0:71:92:60:c6:46:cd:be:40:84:78:46:c0:3d:48:85:81:
e8:9b:6c:a6:a3:1e:ce:97:ed:7b:52:24:6a:b5:29:10:4e:6b:
cd:0b:48:db:8d:4e:11:77:87:d3:41:fe:f4:3f:7f:2d:ee:89:
53:4c:b3:c0:b3:9d:ae:71:3e:b8:a0:b9:17:82:92:6d:b6:b7:
2d:66:e2:88:e2:5c:7c:8d:19:3c:7c:e5:2f:a2:9e:a4:35:ae:
21:4c:20:03:d7:5c:0b:33:26:32:10:50:2e:41:1e:d7:d5:70:
7a:06:e6:9a:20:a5:f3:a2:9e:d4:38:c3:ad:d8:56:ed:35:69:
32:22:72:af:1d:da:0e:21:09:b6:f9:60:67:89:e9:93:44:8d:
c1:d0:98:47:6d:f6:1c:4a:e9:a9:53:04:99:fc:d2:f3:05:fa:
8a:9d:88:db:23:56:14:eb:91:1c:05:28:4b:c1:e1:b0:44:bb:
15:fb:55:25:9c:9c:9f:da:f8:bb:2d:58:93:32:e7:af:7a:a4:
be:65:a6:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjn3O/LHphEq1IjL5hrn7yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NDQyOTgxODk5NTljOTVhNmQ0YTc0Yjc1NGY0OTk2YTVh
NWI2NWMwHhcNMjUwOTA3MTAwMTE2WhcNMjUwOTA4MTAwMTE2WjAzMTEwLwYDVQQD
EyhkOWJmN2U3NTY0NTU3MmRiNzE4NGVhYjgxOTc1MzFkNTczODUxNTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmy1mfemtCZ6ocVwaG8W5JtBIkpGN
BsQ/F9vn3PDrAO8qZuY+5+OVPJTChi49a58OMqYn/JoJQor6TMtlU9ZsIudSUudt
FyLex9YqF6EiT2LNJpST5w3bEh5fokpYpAPnK/OCjvCD7WpaCX0/k1tdCKalgRNN
sE6hY/NZO+HQjOs36B0nefnBoY+0vBuYxHTJzWd7sIlPUOSVk4ngRCGpKZ1l8K4r
Yd6LOsMGFeBoA8tshd5WFxZmIjsXfSPo5oCcNFeGcX7O0q5pcdzW4rnSbqCgpHVV
GejCFN0LsvbRaHutef+hyfbWWHDem7dL4cYxTHyJnXfJObjk4eUsJSIr7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNm/fnVkVXLbcYTquBl1MdVzhRVEMB8GA1UdIwQY
MBaAFCZEKYGJlZyVptSnS3VPSZalpbZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmtRcGdZbVZuSldtMUtkTGRVOUpscVdsdGx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZDE0ZDAtYmU4Yi00MTcwLTlmZDgt
MDdjZDRhMDYxYzgwLzEvSmtRcGdZbVZuSldtMUtkTGRVOUpscVdsdGx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8wZDE0ZDAtYmU4Yi00MTcwLTlmZDgtMDdjZDRhMDYxYzgw
LzEvSmtRcGdZbVZuSldtMUtkTGRVOUpscVdsdGx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC9zuaWJS
9HJCBi5GCMUQ3UK+hD0X0qleZXjR6Uvr0tdkD5YHcQl1wZKRjC+wt5N/RTjx3UNQ
KqBxkmDGRs2+QIR4RsA9SIWB6JtspqMezpfte1IkarUpEE5rzQtI241OEXeH00H+
9D9/Le6JU0yzwLOdrnE+uKC5F4KSbba3LWbiiOJcfI0ZPHzlL6KepDWuIUwgA9dc
CzMmMhBQLkEe19VwegbmmiCl86Ke1DjDrdhW7TVpMiJyrx3aDiEJtvlgZ4npk0SN
wdCYR232HErpqVMEmfzS8wX6ip2I2yNWFOuRHAUoS8HhsES7FftVJZycn9r4uy1Y
kzLnr3qkvmWmXg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:09 2025 by rpki-client