Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.mft
File: jcCppeacVIJgmLsg00Hwc4_2fmU.mft (raw, json)
Hash identifier: doNJA1sOHpA5KKrw/BIhheVMLAjwlNReME8CGBE2S5c=
Subject key identifier: E5:A0:F5:22:C9:16:71:8E:5E:52:83:F9:BF:2D:A7:33:FF:0D:94:7C
Authority key identifier: 8D:C0:A9:A5:E6:9C:54:82:60:98:BB:20:D3:41:F0:73:8F:F6:7E:65
Certificate issuer: /CN=8dc0a9a5e69c54826098bb20d341f0738ff67e65
Certificate serial: 019A72262F796696296E48A37CFBCC3B28EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcCppeacVIJgmLsg00Hwc4_2fmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.mft
Manifest number: 1368
Signing time: Tue 11 Nov 2025 09:01:36 +0000
Manifest this update: Tue 11 Nov 2025 09:01:36 +0000
Manifest next update: Wed 12 Nov 2025 09:01:36 +0000
Files and hashes: 1: jcCppeacVIJgmLsg00Hwc4_2fmU.crl (hash: Of7V7dImeM1w3CW5OsZn8Z5pWcY8hjXUPf9pBk8CjLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcCppeacVIJgmLsg00Hwc4_2fmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:2f:79:66:96:29:6e:48:a3:7c:fb:cc:3b:28:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc0a9a5e69c54826098bb20d341f0738ff67e65
Validity
Not Before: Nov 11 09:01:36 2025 GMT
Not After : Nov 12 09:01:36 2025 GMT
Subject: CN=e5a0f522c916718e5e5283f9bf2da733ff0d947c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bf:fb:ab:16:34:c4:85:bc:d8:a3:aa:4c:f5:
a0:5b:ed:23:b8:56:67:31:1b:98:a8:27:13:b5:ed:
7b:d9:f9:8c:e3:6c:db:3c:31:44:4b:14:94:bc:b4:
3b:34:a9:af:0a:11:7b:6a:44:8d:ec:da:c3:6b:73:
51:33:7f:98:de:74:fc:2a:5d:9d:6a:86:4c:45:c4:
5b:59:b4:bf:25:cd:d9:6a:90:66:f1:e1:a7:c6:73:
fc:b6:3e:71:8d:a7:f5:1f:7d:3a:9b:f1:6b:44:4f:
cd:ef:f0:59:17:3c:5f:43:33:79:2b:c7:bb:0e:d8:
01:02:1e:c2:bd:23:98:a7:59:54:49:c4:ac:8c:5c:
5e:60:64:a1:7a:09:ff:91:6e:c1:41:f7:0a:22:bb:
5d:ec:53:05:b7:c1:0e:36:bf:c8:ee:66:98:1a:89:
32:7d:8f:8f:93:23:1e:3d:54:fb:e2:f4:5e:52:c0:
94:13:fb:75:6c:76:35:93:3f:cd:77:64:b3:5c:1c:
32:25:98:7f:59:d3:4c:4e:7a:99:04:27:59:80:41:
75:2a:2b:5f:4f:07:87:47:53:10:cf:62:3b:1f:d8:
73:98:45:96:75:6c:f4:0a:dc:17:ef:93:cb:db:b0:
52:9f:8d:b7:24:26:3b:45:8a:11:1c:f1:d5:14:f4:
2c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A0:F5:22:C9:16:71:8E:5E:52:83:F9:BF:2D:A7:33:FF:0D:94:7C
X509v3 Authority Key Identifier:
keyid:8D:C0:A9:A5:E6:9C:54:82:60:98:BB:20:D3:41:F0:73:8F:F6:7E:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcCppeacVIJgmLsg00Hwc4_2fmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/869473-8996-4b27-9465-6c5292d34e54/1/jcCppeacVIJgmLsg00Hwc4_2fmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:fd:bb:e7:8f:52:37:43:bc:30:83:18:7f:51:72:25:a4:d3:
31:ac:45:6f:95:73:6f:9c:2e:12:4d:a6:2f:9b:77:4a:b0:79:
02:55:8c:33:14:b3:9b:f4:ce:8d:2b:fa:7e:fe:e1:ec:f8:83:
3c:f0:53:b4:1b:61:9d:11:2a:62:6b:61:d0:38:46:b6:1c:c5:
7c:e3:87:8c:2e:e6:aa:42:91:60:ac:45:98:76:87:d6:5b:78:
35:47:46:90:92:6c:ec:d4:49:2b:cc:91:ef:b1:37:8f:02:57:
aa:e7:21:cd:5f:f1:8d:48:14:bf:25:98:06:9a:af:c3:ee:2a:
e7:c6:e5:8d:cc:0a:35:8e:d6:52:35:65:80:61:b3:d4:12:f0:
82:8a:51:76:5f:46:ed:78:35:24:81:22:95:68:06:a5:2c:92:
2e:80:bf:cb:42:47:f5:96:d5:dc:e0:8f:89:63:d4:e7:9b:d1:
3e:26:08:de:09:b4:be:1a:4a:57:ad:73:c2:03:6b:cc:dd:1c:
f7:92:36:30:e4:0d:f3:fd:5b:24:7c:43:de:26:cf:a2:0d:17:
1b:43:4a:be:d5:2f:5d:11:7c:05:f7:b3:dc:cd:54:46:41:d4:
00:b2:ce:79:e2:2e:d4:d7:46:a7:b1:85:e5:f4:c9:ba:56:8b:
b6:70:de:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJi95ZpYpbkijfPvMOyjuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYzBhOWE1ZTY5YzU0ODI2MDk4YmIyMGQzNDFmMDczOGZm
NjdlNjUwHhcNMjUxMTExMDkwMTM2WhcNMjUxMTEyMDkwMTM2WjAzMTEwLwYDVQQD
EyhlNWEwZjUyMmM5MTY3MThlNWU1MjgzZjliZjJkYTczM2ZmMGQ5NDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3b/7qxY0xIW82KOqTPWgW+0juFZn
MRuYqCcTte172fmM42zbPDFESxSUvLQ7NKmvChF7akSN7NrDa3NRM3+Y3nT8Kl2d
aoZMRcRbWbS/Jc3ZapBm8eGnxnP8tj5xjaf1H306m/FrRE/N7/BZFzxfQzN5K8e7
DtgBAh7CvSOYp1lUScSsjFxeYGShegn/kW7BQfcKIrtd7FMFt8EONr/I7maYGoky
fY+PkyMePVT74vReUsCUE/t1bHY1kz/Nd2SzXBwyJZh/WdNMTnqZBCdZgEF1Kitf
TweHR1MQz2I7H9hzmEWWdWz0CtwX75PL27BSn423JCY7RYoRHPHVFPQsmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWg9SLJFnGOXlKD+b8tpzP/DZR8MB8GA1UdIwQY
MBaAFI3AqaXmnFSCYJi7INNB8HOP9n5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamNDcHBlYWNWSUpnbUxzZzAwSHdjNF8yZm1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny84Njk0NzMtODk5Ni00YjI3LTk0NjUt
NmM1MjkyZDM0ZTU0LzEvamNDcHBlYWNWSUpnbUxzZzAwSHdjNF8yZm1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny84Njk0NzMtODk5Ni00YjI3LTk0NjUtNmM1MjkyZDM0ZTU0
LzEvamNDcHBlYWNWSUpnbUxzZzAwSHdjNF8yZm1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV/27549S
N0O8MIMYf1FyJaTTMaxFb5Vzb5wuEk2mL5t3SrB5AlWMMxSzm/TOjSv6fv7h7PiD
PPBTtBthnREqYmth0DhGthzFfOOHjC7mqkKRYKxFmHaH1lt4NUdGkJJs7NRJK8yR
77E3jwJXquchzV/xjUgUvyWYBpqvw+4q58bljcwKNY7WUjVlgGGz1BLwgopRdl9G
7Xg1JIEilWgGpSySLoC/y0JH9ZbV3OCPiWPU55vRPiYI3gm0vhpKV61zwgNrzN0c
95I2MOQN8/1bJHxD3ibPog0XG0NKvtUvXRF8Bfez3M1URkHUALLOeeIu1NdGp7GF
5fTJulaLtnDepQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:40:18 2025 by rpki-client