Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
File: j3JEfEHiXE71t4N1UhxOl-katcA.mft (raw, json)
Hash identifier: +LzgAtwyAo0NFp5/Oxk2GQbgsc51H2+pLCDKhAeoxtE=
Subject key identifier: BB:0D:CF:0E:00:18:85:C8:FE:53:DA:15:2A:E7:EC:4E:DC:B4:D0:E1
Authority key identifier: 8F:72:44:7C:41:E2:5C:4E:F5:B7:83:75:52:1C:4E:97:E9:1A:B5:C0
Certificate issuer: /CN=8f72447c41e25c4ef5b78375521c4e97e91ab5c0
Certificate serial: 019A2289E6C3DE1E863DC187054701B24A84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3JEfEHiXE71t4N1UhxOl-katcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
Manifest number: 0942
Signing time: Sun 26 Oct 2025 22:00:54 +0000
Manifest this update: Sun 26 Oct 2025 22:00:54 +0000
Manifest next update: Mon 27 Oct 2025 22:00:54 +0000
Files and hashes: 1: j3JEfEHiXE71t4N1UhxOl-katcA.crl (hash: /tXLfaQsokvSdap0hhL6F1VgZpBqEHi7jI80yGDFXMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/j3JEfEHiXE71t4N1UhxOl-katcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:89:e6:c3:de:1e:86:3d:c1:87:05:47:01:b2:4a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f72447c41e25c4ef5b78375521c4e97e91ab5c0
Validity
Not Before: Oct 26 22:00:54 2025 GMT
Not After : Oct 27 22:00:54 2025 GMT
Subject: CN=bb0dcf0e001885c8fe53da152ae7ec4edcb4d0e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f7:ae:19:a0:52:9a:78:23:84:25:c9:f0:67:
4e:39:f5:2a:92:3f:ed:42:05:c6:5c:3c:f7:1c:cf:
6f:16:10:21:2d:13:b1:94:6f:c6:d9:b1:b2:da:2d:
b4:a7:a0:81:68:07:2d:68:79:c1:51:ba:26:ee:2b:
11:1c:48:19:3c:0b:eb:31:5e:8a:32:08:d8:be:8d:
75:fb:a2:20:7b:25:21:c1:29:bf:7a:ad:45:d2:f4:
65:d3:e4:4a:d3:67:ee:3a:ff:27:04:4f:98:e9:20:
9c:9c:ba:03:d1:c6:73:47:b6:e9:64:bf:1d:2b:c1:
95:98:d0:c5:34:7a:8d:77:51:c8:dd:b0:8a:74:8f:
cc:a2:23:06:bf:83:c0:a7:1d:ab:ba:e7:76:67:fe:
8b:a1:f8:65:b6:c5:76:2a:61:ae:8f:69:71:e9:70:
42:8a:27:0d:32:cc:11:ab:0e:dc:7c:58:63:74:c5:
30:2a:55:22:a6:f6:93:ed:9d:f2:07:4e:1e:4e:26:
50:10:1d:92:79:06:09:f2:4e:e4:45:61:37:72:b4:
0b:b1:39:59:1c:3b:f5:d5:59:26:c4:59:c3:c5:c8:
21:89:23:09:26:fc:5b:9e:2e:34:5b:93:eb:45:53:
ee:3c:f2:ac:8f:31:e8:e9:ac:f3:fa:3e:30:42:15:
c2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:0D:CF:0E:00:18:85:C8:FE:53:DA:15:2A:E7:EC:4E:DC:B4:D0:E1
X509v3 Authority Key Identifier:
keyid:8F:72:44:7C:41:E2:5C:4E:F5:B7:83:75:52:1C:4E:97:E9:1A:B5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3JEfEHiXE71t4N1UhxOl-katcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/739f10-a156-49ac-895b-36138bfc1c20/1/j3JEfEHiXE71t4N1UhxOl-katcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f4:e8:73:4b:61:7f:f5:b2:02:66:c4:f4:a8:e8:85:00:1e:
a6:88:70:69:b1:34:8c:56:13:d9:15:91:b6:ad:45:a2:b8:5a:
71:79:37:83:61:80:76:28:c4:b5:23:7c:90:93:95:1f:4d:36:
93:5b:da:02:55:a0:51:2f:d5:ed:e1:14:db:cc:d5:3b:10:48:
43:1e:10:61:35:16:56:ce:bc:b1:62:d9:6e:4c:60:f7:dc:76:
c8:a8:6f:44:51:dd:5d:13:aa:7a:47:36:f8:59:18:80:70:06:
cc:85:66:1c:59:9a:e3:e3:d1:2f:f1:7e:54:df:b9:de:9b:36:
38:90:d4:c5:89:45:5c:e4:bd:95:20:d1:7b:08:ed:53:b4:2d:
3c:c4:d6:8b:77:51:e7:de:7a:7d:43:11:68:43:47:9b:8c:ba:
b0:43:bb:5b:e3:eb:e8:b7:67:2e:30:f3:24:a8:1f:d6:c3:8d:
5c:34:8f:e5:55:46:2a:5a:3d:e4:d1:cc:13:47:ec:9e:bf:fd:
7f:66:32:b5:57:03:64:46:88:2a:fb:2c:c0:de:8b:2c:3d:7f:
da:dd:89:60:c3:34:d3:c3:f5:ac:ad:9c:20:d1:dc:e5:3f:e5:
42:da:e0:df:8e:ad:31:b6:4d:a3:b7:b6:90:09:10:b3:88:8b:
af:8c:65:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoiiebD3h6GPcGHBUcBskqEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmNzI0NDdjNDFlMjVjNGVmNWI3ODM3NTUyMWM0ZTk3ZTkx
YWI1YzAwHhcNMjUxMDI2MjIwMDU0WhcNMjUxMDI3MjIwMDU0WjAzMTEwLwYDVQQD
EyhiYjBkY2YwZTAwMTg4NWM4ZmU1M2RhMTUyYWU3ZWM0ZWRjYjRkMGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPeuGaBSmngjhCXJ8GdOOfUqkj/t
QgXGXDz3HM9vFhAhLROxlG/G2bGy2i20p6CBaActaHnBUbom7isRHEgZPAvrMV6K
MgjYvo11+6IgeyUhwSm/eq1F0vRl0+RK02fuOv8nBE+Y6SCcnLoD0cZzR7bpZL8d
K8GVmNDFNHqNd1HI3bCKdI/MoiMGv4PApx2ruud2Z/6LofhltsV2KmGuj2lx6XBC
iicNMswRqw7cfFhjdMUwKlUipvaT7Z3yB04eTiZQEB2SeQYJ8k7kRWE3crQLsTlZ
HDv11VkmxFnDxcghiSMJJvxbni40W5PrRVPuPPKsjzHo6azz+j4wQhXC6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLsNzw4AGIXI/lPaFSrn7E7ctNDhMB8GA1UdIwQY
MBaAFI9yRHxB4lxO9beDdVIcTpfpGrXAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajNKRWZFSGlYRTcxdDROMVVoeE9sLWthdGNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi83MzlmMTAtYTE1Ni00OWFjLTg5NWIt
MzYxMzhiZmMxYzIwLzEvajNKRWZFSGlYRTcxdDROMVVoeE9sLWthdGNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi83MzlmMTAtYTE1Ni00OWFjLTg5NWItMzYxMzhiZmMxYzIw
LzEvajNKRWZFSGlYRTcxdDROMVVoeE9sLWthdGNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAPToc0th
f/WyAmbE9KjohQAepohwabE0jFYT2RWRtq1ForhacXk3g2GAdijEtSN8kJOVH002
k1vaAlWgUS/V7eEU28zVOxBIQx4QYTUWVs68sWLZbkxg99x2yKhvRFHdXROqekc2
+FkYgHAGzIVmHFma4+PRL/F+VN+53ps2OJDUxYlFXOS9lSDRewjtU7QtPMTWi3dR
5956fUMRaENHm4y6sEO7W+Pr6LdnLjDzJKgf1sONXDSP5VVGKlo95NHME0fsnr/9
f2YytVcDZEaIKvsswN6LLD1/2t2JYMM008P1rK2cINHc5T/lQtrg346tMbZNo7e2
kAkQs4iLr4xlXw==
-----END CERTIFICATE-----
Generated at Mon Oct 27 07:08:52 2025 by rpki-client