Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
File: J0VyDZpVOOo1ix9D0I-Izeb267Y.mft (raw, json)
Hash identifier: 5xO6/jq3PQtmajdggJ/UslHlqAHaEETSaSYXY45ZAaA=
Subject key identifier: 90:C6:EA:8F:D5:5A:D1:A1:23:BC:4A:7C:3C:B3:22:B9:07:D6:B3:05
Authority key identifier: 27:45:72:0D:9A:55:38:EA:35:8B:1F:43:D0:8F:88:CD:E6:F6:EB:B6
Certificate issuer: /CN=2745720d9a5538ea358b1f43d08f88cde6f6ebb6
Certificate serial: 0199228CE68159464D856ACA318CB026B9FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0VyDZpVOOo1ix9D0I-Izeb267Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
Manifest number: 1242
Signing time: Sun 07 Sep 2025 05:01:23 +0000
Manifest this update: Sun 07 Sep 2025 05:01:23 +0000
Manifest next update: Mon 08 Sep 2025 05:01:23 +0000
Files and hashes: 1: J0VyDZpVOOo1ix9D0I-Izeb267Y.crl (hash: uBFvZ/yw4DFQ4WbJG67TwHXudrzZOOY65Y0lB0Mp4zQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0VyDZpVOOo1ix9D0I-Izeb267Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:e6:81:59:46:4d:85:6a:ca:31:8c:b0:26:b9:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2745720d9a5538ea358b1f43d08f88cde6f6ebb6
Validity
Not Before: Sep 7 05:01:23 2025 GMT
Not After : Sep 8 05:01:23 2025 GMT
Subject: CN=90c6ea8fd55ad1a123bc4a7c3cb322b907d6b305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c7:b5:94:d8:d7:d3:b8:a5:f9:e5:34:a6:c9:
91:08:41:f1:62:65:68:3b:ef:5c:b6:77:16:e4:92:
b7:4b:d2:14:8e:42:e8:52:d0:fa:6c:a9:26:3d:4d:
56:b7:18:aa:2a:bb:de:5f:2d:97:3f:07:6a:fd:ba:
d9:61:0f:2f:a9:c0:06:c1:63:34:6a:7f:7d:f1:82:
6f:7f:b4:c1:a3:f3:a1:1e:b2:37:bd:97:a8:92:b8:
3c:47:58:d4:a4:65:5e:21:48:86:b7:56:38:67:1a:
c0:59:95:b0:19:2a:62:d2:35:f3:f9:7c:7d:66:da:
85:39:bb:59:3b:64:3d:aa:15:4b:46:18:35:1c:c6:
39:a5:27:9b:ba:87:ff:ea:3b:e0:7c:dc:47:80:f7:
b3:2e:1d:9a:e9:fb:db:56:ef:d1:b3:38:06:95:e5:
c3:7f:cf:05:03:37:04:13:d3:3a:40:cf:de:00:38:
0a:b2:b0:2d:b4:4f:b8:e6:da:61:f9:7b:41:e0:70:
3a:6a:1f:aa:34:39:f9:e1:a4:17:ec:d6:4c:ee:bc:
23:5a:5f:f5:07:61:46:91:25:bb:94:df:46:73:92:
9a:18:a1:66:09:88:d1:5e:af:37:6e:29:c5:b3:23:
45:7e:24:7e:3c:ea:4e:dd:bf:2c:d2:92:9d:37:81:
8d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C6:EA:8F:D5:5A:D1:A1:23:BC:4A:7C:3C:B3:22:B9:07:D6:B3:05
X509v3 Authority Key Identifier:
keyid:27:45:72:0D:9A:55:38:EA:35:8B:1F:43:D0:8F:88:CD:E6:F6:EB:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0VyDZpVOOo1ix9D0I-Izeb267Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/af9cb4-8574-42bf-9d05-c3ef73771286/1/J0VyDZpVOOo1ix9D0I-Izeb267Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a9:2a:0f:32:e7:38:68:d7:e3:b8:ed:b8:d9:ad:59:15:4d:
d3:49:95:60:2f:30:bd:b4:d6:89:e1:f9:1f:c7:9f:96:fa:5f:
31:f4:24:6b:3e:e0:58:09:ec:b7:49:01:6a:7a:e6:1a:96:08:
c1:8a:f4:00:7f:59:71:97:e3:a6:99:81:59:72:d0:e6:14:4c:
1c:79:d1:0f:80:26:8e:2f:ab:47:c0:71:9f:13:88:a6:bc:4b:
38:89:25:f9:14:50:c5:0c:57:7d:6b:8d:ba:44:8e:35:74:21:
4d:ad:a2:ca:79:68:fe:f4:42:62:97:1c:58:47:76:6b:94:fb:
44:5a:e1:e2:5a:db:d7:3b:20:0d:00:a1:89:1a:38:a1:57:7d:
99:16:c7:83:05:70:b5:80:e4:78:8c:2e:00:f2:6d:fb:e5:e9:
19:db:60:99:29:49:75:28:a0:31:b9:71:6e:89:dd:bd:99:f4:
81:41:41:e6:f9:1f:9d:33:f8:5c:7c:cf:c8:80:48:53:e4:f5:
98:9e:ea:04:df:41:4b:b4:ac:1f:f7:b7:95:8a:9e:18:af:74:
06:64:e4:55:99:4a:5c:33:ac:d0:5a:62:77:db:c5:30:d6:02:
ef:c8:ab:e8:2c:2e:30:79:67:d4:06:8a:3b:a2:47:61:d5:4b:
e5:87:c0:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijOaBWUZNhWrKMYywJrn7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NDU3MjBkOWE1NTM4ZWEzNThiMWY0M2QwOGY4OGNkZTZm
NmViYjYwHhcNMjUwOTA3MDUwMTIzWhcNMjUwOTA4MDUwMTIzWjAzMTEwLwYDVQQD
Eyg5MGM2ZWE4ZmQ1NWFkMWExMjNiYzRhN2MzY2IzMjJiOTA3ZDZiMzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzce1lNjX07il+eU0psmRCEHxYmVo
O+9ctncW5JK3S9IUjkLoUtD6bKkmPU1WtxiqKrveXy2XPwdq/brZYQ8vqcAGwWM0
an998YJvf7TBo/OhHrI3vZeokrg8R1jUpGVeIUiGt1Y4ZxrAWZWwGSpi0jXz+Xx9
ZtqFObtZO2Q9qhVLRhg1HMY5pSebuof/6jvgfNxHgPezLh2a6fvbVu/RszgGleXD
f88FAzcEE9M6QM/eADgKsrAttE+45tph+XtB4HA6ah+qNDn54aQX7NZM7rwjWl/1
B2FGkSW7lN9Gc5KaGKFmCYjRXq83binFsyNFfiR+POpO3b8s0pKdN4GN4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJDG6o/VWtGhI7xKfDyzIrkH1rMFMB8GA1UdIwQY
MBaAFCdFcg2aVTjqNYsfQ9CPiM3m9uu2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjBWeURacFZPT28xaXg5RDBJLUl6ZWIyNjdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9hZjljYjQtODU3NC00MmJmLTlkMDUt
YzNlZjczNzcxMjg2LzEvSjBWeURacFZPT28xaXg5RDBJLUl6ZWIyNjdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9hZjljYjQtODU3NC00MmJmLTlkMDUtYzNlZjczNzcxMjg2
LzEvSjBWeURacFZPT28xaXg5RDBJLUl6ZWIyNjdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASKkqDzLn
OGjX47jtuNmtWRVN00mVYC8wvbTWieH5H8eflvpfMfQkaz7gWAnst0kBanrmGpYI
wYr0AH9ZcZfjppmBWXLQ5hRMHHnRD4Amji+rR8BxnxOIprxLOIkl+RRQxQxXfWuN
ukSONXQhTa2iynlo/vRCYpccWEd2a5T7RFrh4lrb1zsgDQChiRo4oVd9mRbHgwVw
tYDkeIwuAPJt++XpGdtgmSlJdSigMblxbondvZn0gUFB5vkfnTP4XHzPyIBIU+T1
mJ7qBN9BS7SsH/e3lYqeGK90BmTkVZlKXDOs0Fpid9vFMNYC78ir6CwuMHln1AaK
O6JHYdVL5YfAEw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 15:00:33 2025 by rpki-client