Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
File: jWIohbCUzKumvc5vw6r92Pqn51Y.mft (raw, json)
Hash identifier: 3u9Y93WzXop29m8WxPXK1Kq+QvRi5y/p8S7xS3/kS6Y=
Subject key identifier: 78:95:1C:47:52:A5:C3:CB:17:34:DF:BC:7E:86:10:DD:67:A5:37:1D
Authority key identifier: 8D:62:28:85:B0:94:CC:AB:A6:BD:CE:6F:C3:AA:FD:D8:FA:A7:E7:56
Certificate issuer: /CN=8d622885b094ccaba6bdce6fc3aafdd8faa7e756
Certificate serial: 0199239EDA3D1178B133B22F3B8026EDB17B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWIohbCUzKumvc5vw6r92Pqn51Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
Manifest number: 0791
Signing time: Sun 07 Sep 2025 10:00:36 +0000
Manifest this update: Sun 07 Sep 2025 10:00:36 +0000
Manifest next update: Mon 08 Sep 2025 10:00:36 +0000
Files and hashes: 1: jWIohbCUzKumvc5vw6r92Pqn51Y.crl (hash: H9bQcY9eKH5li52zcn1V6ftJNtkI0xRWkyQVPCrDJ9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWIohbCUzKumvc5vw6r92Pqn51Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:da:3d:11:78:b1:33:b2:2f:3b:80:26:ed:b1:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d622885b094ccaba6bdce6fc3aafdd8faa7e756
Validity
Not Before: Sep 7 10:00:36 2025 GMT
Not After : Sep 8 10:00:36 2025 GMT
Subject: CN=78951c4752a5c3cb1734dfbc7e8610dd67a5371d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:80:a5:81:5d:6e:f8:ce:8c:d9:f9:4c:77:12:
ba:c4:48:ee:22:39:a4:bb:b4:e7:82:3f:8e:f8:bf:
8f:21:a3:52:e1:96:fe:80:69:81:06:71:c5:3f:d4:
6e:14:46:3b:68:27:b1:8a:5f:5d:2a:5c:96:37:ea:
26:ca:ac:6a:24:39:1d:f9:cb:85:d3:f6:88:82:6e:
e3:4e:2c:f5:11:ea:8c:c6:ec:17:f8:f6:ee:82:38:
b4:17:de:f5:5e:90:3f:db:af:a2:7d:ca:dd:2e:62:
68:b7:6e:bb:8d:7c:40:ea:2e:81:09:4c:41:71:60:
58:8d:e8:5b:b1:8f:54:8d:4e:93:76:4b:06:a8:32:
85:c6:65:46:b0:a9:b2:0f:06:58:eb:b5:14:4a:d5:
9e:8e:eb:c2:e8:ac:6d:41:2e:91:35:2a:f9:50:a0:
d9:7c:2b:95:61:6b:90:f6:07:9b:e7:81:a9:fe:71:
cd:89:67:80:4b:f1:14:70:90:8f:a4:36:77:a0:d4:
50:70:a5:74:b0:48:aa:85:e1:35:20:bc:af:b2:01:
07:98:38:61:e7:cb:18:77:6f:ee:3e:3b:e6:8c:e8:
64:12:6b:a8:1e:46:ff:bb:a7:31:55:40:20:5b:e6:
16:61:99:15:40:c7:97:97:04:3e:90:50:40:84:cf:
70:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:95:1C:47:52:A5:C3:CB:17:34:DF:BC:7E:86:10:DD:67:A5:37:1D
X509v3 Authority Key Identifier:
keyid:8D:62:28:85:B0:94:CC:AB:A6:BD:CE:6F:C3:AA:FD:D8:FA:A7:E7:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWIohbCUzKumvc5vw6r92Pqn51Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fc6822-0e83-4614-8780-789d2b5a86bc/1/jWIohbCUzKumvc5vw6r92Pqn51Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e1:f7:25:37:40:5e:e8:0b:64:17:6e:d7:27:58:6b:ce:e2:
77:ad:d9:15:bb:d0:1d:e9:30:f0:88:b7:ea:8f:70:fb:d6:4a:
43:7a:ba:7e:d8:bb:6f:15:c4:1e:e3:a5:b1:2d:2c:64:a8:d5:
f8:de:23:01:c5:18:68:16:cf:71:44:3c:53:44:67:47:8b:60:
bb:59:9a:f9:5b:51:78:93:3d:5d:e6:f1:f5:d6:d5:d4:8c:5a:
2c:c5:b9:c6:df:09:20:6a:6c:84:eb:31:fc:2c:3f:43:ae:79:
66:26:18:23:4f:4d:c3:94:20:06:88:3e:57:be:35:2b:4b:69:
b3:2b:97:08:de:39:ec:f0:a8:fe:fb:a7:a6:4f:39:92:60:9b:
93:e2:34:4f:e8:ec:e9:55:76:8b:9f:50:d5:80:65:41:2c:b0:
eb:1e:63:8f:aa:ad:1a:e1:70:bd:6e:4c:ed:81:3d:e7:8a:ef:
7d:5e:0a:e5:2c:e4:30:84:15:f7:82:96:59:9e:11:78:c3:c5:
af:6d:73:d4:ac:61:a9:c6:c3:6d:e8:b2:1b:70:dd:f6:0a:34:
31:93:e5:61:7f:92:6c:44:c9:80:bc:89:37:cc:63:52:d6:58:
df:0a:e1:38:f5:7b:fc:0e:03:c2:e8:c7:e9:9d:ef:1c:9d:35:
22:62:bf:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjnto9EXixM7IvO4Am7bF7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNjIyODg1YjA5NGNjYWJhNmJkY2U2ZmMzYWFmZGQ4ZmFh
N2U3NTYwHhcNMjUwOTA3MTAwMDM2WhcNMjUwOTA4MTAwMDM2WjAzMTEwLwYDVQQD
Eyg3ODk1MWM0NzUyYTVjM2NiMTczNGRmYmM3ZTg2MTBkZDY3YTUzNzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9oClgV1u+M6M2flMdxK6xEjuIjmk
u7Tngj+O+L+PIaNS4Zb+gGmBBnHFP9RuFEY7aCexil9dKlyWN+omyqxqJDkd+cuF
0/aIgm7jTiz1EeqMxuwX+Pbugji0F971XpA/26+ifcrdLmJot267jXxA6i6BCUxB
cWBYjehbsY9UjU6TdksGqDKFxmVGsKmyDwZY67UUStWejuvC6KxtQS6RNSr5UKDZ
fCuVYWuQ9geb54Gp/nHNiWeAS/EUcJCPpDZ3oNRQcKV0sEiqheE1ILyvsgEHmDhh
58sYd2/uPjvmjOhkEmuoHkb/u6cxVUAgW+YWYZkVQMeXlwQ+kFBAhM9wCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHiVHEdSpcPLFzTfvH6GEN1npTcdMB8GA1UdIwQY
MBaAFI1iKIWwlMyrpr3Ob8Oq/dj6p+dWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaldJb2hiQ1V6S3VtdmM1dnc2cjkyUHFuNTFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9mYzY4MjItMGU4My00NjE0LTg3ODAt
Nzg5ZDJiNWE4NmJjLzEvaldJb2hiQ1V6S3VtdmM1dnc2cjkyUHFuNTFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9mYzY4MjItMGU4My00NjE0LTg3ODAtNzg5ZDJiNWE4NmJj
LzEvaldJb2hiQ1V6S3VtdmM1dnc2cjkyUHFuNTFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe+H3JTdA
XugLZBdu1ydYa87id63ZFbvQHekw8Ii36o9w+9ZKQ3q6fti7bxXEHuOlsS0sZKjV
+N4jAcUYaBbPcUQ8U0RnR4tgu1ma+VtReJM9Xebx9dbV1IxaLMW5xt8JIGpshOsx
/Cw/Q655ZiYYI09Nw5QgBog+V741K0tpsyuXCN457PCo/vunpk85kmCbk+I0T+js
6VV2i59Q1YBlQSyw6x5jj6qtGuFwvW5M7YE954rvfV4K5SzkMIQV94KWWZ4ReMPF
r21z1KxhqcbDbeiyG3Dd9go0MZPlYX+SbETJgLyJN8xjUtZY3wrhOPV7/A4DwujH
6Z3vHJ01ImK/bQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:49:48 2025 by rpki-client