Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft
File: jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft (raw, json)
Hash identifier: MavCpj+ZUrhIn+zhJeByoXH1HDJGyFkQtrt64RUhsfE=
Subject key identifier: D8:FF:22:31:A1:88:84:40:2D:A7:DB:A7:D3:91:91:41:0C:08:B1:80
Authority key identifier: 8D:9C:07:E7:E8:DE:85:8B:2E:68:13:D0:0F:9B:39:92:DF:53:82:7F
Certificate issuer: /CN=8d9c07e7e8de858b2e6813d00f9b3992df53827f
Certificate serial: 019922555437037E8BF51A221B191FE6B647
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZwH5-jehYsuaBPQD5s5kt9Tgn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft
Manifest number: 04A8
Signing time: Sun 07 Sep 2025 04:00:41 +0000
Manifest this update: Sun 07 Sep 2025 04:00:41 +0000
Manifest next update: Mon 08 Sep 2025 04:00:41 +0000
Files and hashes: 1: jZwH5-jehYsuaBPQD5s5kt9Tgn8.crl (hash: cU1z5ZY9bS5OeeIvDjxVhrPRFPdVNdAhTurlaFLpE/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZwH5-jehYsuaBPQD5s5kt9Tgn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:54:37:03:7e:8b:f5:1a:22:1b:19:1f:e6:b6:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d9c07e7e8de858b2e6813d00f9b3992df53827f
Validity
Not Before: Sep 7 04:00:41 2025 GMT
Not After : Sep 8 04:00:41 2025 GMT
Subject: CN=d8ff2231a18884402da7dba7d39191410c08b180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:eb:a5:4d:81:0b:4b:1b:df:9c:05:0c:0f:0e:
f3:3d:14:89:05:1e:35:21:34:88:f1:69:87:c2:d9:
3d:84:f3:40:bf:91:0a:38:d3:b7:0d:08:c0:7e:31:
fd:33:23:a8:24:28:3b:f5:8f:b6:e3:7c:15:66:45:
f1:70:e2:67:87:e9:47:96:53:82:9b:98:47:6d:e2:
3a:59:10:a6:3e:24:24:4a:c3:29:35:c7:3f:31:82:
15:99:70:cf:cd:71:f3:1f:29:da:68:d7:56:1d:66:
3f:e4:7a:aa:69:53:fb:f6:55:46:9d:c8:4d:22:2b:
30:f7:40:a4:3c:0c:05:e9:9c:4f:d5:6f:ad:8b:f1:
cf:f4:c2:ba:67:ee:1d:6a:b4:5e:89:47:18:09:36:
dc:d7:aa:b3:03:eb:d3:20:ca:1b:85:3b:20:89:0d:
fd:8c:66:ae:c3:43:96:48:9a:7f:f3:7b:b9:56:f9:
40:19:4e:82:2c:0f:dd:84:fc:71:a9:41:22:ad:3c:
a5:54:a7:26:01:b3:b9:2c:7a:9b:14:04:ce:69:2b:
eb:2f:1e:6b:66:bd:de:7d:c4:86:b7:88:2a:f4:9c:
5f:52:d3:02:51:ef:d5:45:7b:85:ff:a3:01:07:53:
73:04:0d:0d:f1:ee:2f:cf:13:42:48:93:c0:29:90:
8d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:FF:22:31:A1:88:84:40:2D:A7:DB:A7:D3:91:91:41:0C:08:B1:80
X509v3 Authority Key Identifier:
keyid:8D:9C:07:E7:E8:DE:85:8B:2E:68:13:D0:0F:9B:39:92:DF:53:82:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZwH5-jehYsuaBPQD5s5kt9Tgn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e14e2a-a0ea-43d9-b05f-f363c5138702/1/jZwH5-jehYsuaBPQD5s5kt9Tgn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:02:d7:83:56:76:6f:fa:34:e4:ce:ff:9e:2e:4a:e4:ba:7d:
57:cd:a8:b1:da:39:09:09:17:e7:9f:0a:32:9d:dd:ea:64:13:
76:0e:af:f4:f7:18:fb:85:47:cf:76:2e:27:db:06:d3:45:e3:
12:c4:58:c5:59:81:bb:d4:5f:13:10:74:27:c2:f8:3a:cb:35:
3d:d8:7b:49:10:ac:83:7a:7b:01:1c:3f:d2:96:b2:95:22:a9:
a9:58:6d:9d:9f:8b:37:b2:bf:ef:db:fc:97:fd:13:f6:8b:40:
64:b2:db:22:b4:ae:fa:b5:a2:29:af:4b:7d:e9:3e:b7:44:cf:
21:94:30:ea:d0:17:d7:c9:b0:3d:b2:82:a8:77:90:5e:2b:d9:
d4:2e:49:89:2f:9a:67:7f:d4:c6:13:78:08:a1:02:1d:82:d6:
ba:9d:b8:53:19:17:a9:cc:2f:20:ce:c0:f8:8d:fb:72:eb:b0:
3e:a2:35:58:02:8d:da:b1:18:73:94:8a:71:e4:0f:8e:18:8a:
2e:47:61:65:5c:ea:eb:5c:fa:e0:12:3e:a4:60:70:0f:48:9a:
33:81:b5:87:e8:d6:16:74:e9:77:46:d0:de:6f:e1:a7:13:61:
1a:b9:47:2f:17:fb:cb:60:d4:fe:55:07:52:ee:6c:b1:db:68:
f6:1a:d4:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVVQ3A36L9RoiGxkf5rZHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkOWMwN2U3ZThkZTg1OGIyZTY4MTNkMDBmOWIzOTkyZGY1
MzgyN2YwHhcNMjUwOTA3MDQwMDQxWhcNMjUwOTA4MDQwMDQxWjAzMTEwLwYDVQQD
EyhkOGZmMjIzMWExODg4NDQwMmRhN2RiYTdkMzkxOTE0MTBjMDhiMTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+ulTYELSxvfnAUMDw7zPRSJBR41
ITSI8WmHwtk9hPNAv5EKONO3DQjAfjH9MyOoJCg79Y+243wVZkXxcOJnh+lHllOC
m5hHbeI6WRCmPiQkSsMpNcc/MYIVmXDPzXHzHynaaNdWHWY/5HqqaVP79lVGnchN
Iisw90CkPAwF6ZxP1W+ti/HP9MK6Z+4darReiUcYCTbc16qzA+vTIMobhTsgiQ39
jGauw0OWSJp/83u5VvlAGU6CLA/dhPxxqUEirTylVKcmAbO5LHqbFATOaSvrLx5r
Zr3efcSGt4gq9JxfUtMCUe/VRXuF/6MBB1NzBA0N8e4vzxNCSJPAKZCNfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNj/IjGhiIRALafbp9ORkUEMCLGAMB8GA1UdIwQY
MBaAFI2cB+fo3oWLLmgT0A+bOZLfU4J/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalp3SDUtamVoWXN1YUJQUUQ1czVrdDlUZ244LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lMTRlMmEtYTBlYS00M2Q5LWIwNWYt
ZjM2M2M1MTM4NzAyLzEvalp3SDUtamVoWXN1YUJQUUQ1czVrdDlUZ244Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9lMTRlMmEtYTBlYS00M2Q5LWIwNWYtZjM2M2M1MTM4NzAy
LzEvalp3SDUtamVoWXN1YUJQUUQ1czVrdDlUZ244LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXQLXg1Z2
b/o05M7/ni5K5Lp9V82osdo5CQkX558KMp3d6mQTdg6v9PcY+4VHz3YuJ9sG00Xj
EsRYxVmBu9RfExB0J8L4Oss1Pdh7SRCsg3p7ARw/0paylSKpqVhtnZ+LN7K/79v8
l/0T9otAZLLbIrSu+rWiKa9Lfek+t0TPIZQw6tAX18mwPbKCqHeQXivZ1C5JiS+a
Z3/UxhN4CKECHYLWup24UxkXqcwvIM7A+I37cuuwPqI1WAKN2rEYc5SKceQPjhiK
LkdhZVzq61z64BI+pGBwD0iaM4G1h+jWFnTpd0bQ3m/hpxNhGrlHLxf7y2DU/lUH
Uu5ssdto9hrUpQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:38:10 2025 by rpki-client