Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft
File: _JNLA3cwXsv-ODshuHR0EGoeTdg.mft (raw, json)
Hash identifier: e61okmtjZrTsYvsRnshq/CB2hIdvuzcl8f7YA5Ogj0U=
Subject key identifier: 5B:CA:C7:84:E9:FB:5C:5F:6A:14:F9:AB:1E:20:0A:3E:B0:6B:D6:6F
Authority key identifier: FC:93:4B:03:77:30:5E:CB:FE:38:3B:21:B8:74:74:10:6A:1E:4D:D8
Certificate issuer: /CN=fc934b0377305ecbfe383b21b87474106a1e4dd8
Certificate serial: 019A7293402B826F9CA0F4598103D25EDC0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JNLA3cwXsv-ODshuHR0EGoeTdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft
Manifest number: 1261
Signing time: Tue 11 Nov 2025 11:00:44 +0000
Manifest this update: Tue 11 Nov 2025 11:00:44 +0000
Manifest next update: Wed 12 Nov 2025 11:00:44 +0000
Files and hashes: 1: _JNLA3cwXsv-ODshuHR0EGoeTdg.crl (hash: vou8tzYYf2t7cebAG9dqa1V/bAJXRgK6lwLsVGVQouE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JNLA3cwXsv-ODshuHR0EGoeTdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:40:2b:82:6f:9c:a0:f4:59:81:03:d2:5e:dc:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc934b0377305ecbfe383b21b87474106a1e4dd8
Validity
Not Before: Nov 11 11:00:44 2025 GMT
Not After : Nov 12 11:00:44 2025 GMT
Subject: CN=5bcac784e9fb5c5f6a14f9ab1e200a3eb06bd66f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4d:14:1c:e2:4a:8d:96:90:72:30:2d:9f:a5:
98:9a:cb:4a:e0:45:74:97:6d:fc:8f:38:3e:43:08:
04:93:99:20:87:49:0f:94:a3:3d:ef:9a:47:dd:ab:
84:47:25:45:f0:e2:f5:22:7d:22:dc:8d:27:8b:14:
be:91:e0:da:9b:e5:0a:7b:77:54:df:ac:de:34:74:
28:42:3e:7f:e9:de:e5:41:74:43:a8:8f:5f:86:ba:
d3:6a:2d:2f:09:1d:9d:cd:dc:0b:cb:18:d5:07:9f:
18:1d:83:35:04:4a:0a:d8:dc:49:3e:63:8c:c7:43:
6d:93:e2:01:9c:77:75:5b:e2:48:ce:02:ee:3c:5b:
fb:8e:5a:33:17:f6:d0:93:3c:49:b7:e7:87:af:01:
e3:c7:05:43:fa:ba:04:0f:ad:44:71:a9:1c:7c:7d:
d5:dc:dc:1d:3a:77:13:5c:ee:35:04:81:77:e1:f9:
1e:5e:49:59:c1:b5:e6:d2:f6:72:d0:2f:9e:c1:c4:
4c:02:94:c4:cd:12:fb:6e:24:19:70:00:c6:16:ef:
87:42:c0:d6:f1:54:f6:7f:c5:5f:77:e3:f3:06:6c:
5c:1f:92:11:b4:78:78:0a:05:c4:43:b3:60:24:e0:
2d:39:fb:21:dd:91:2e:ad:08:82:0d:bd:39:a0:6a:
dc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:CA:C7:84:E9:FB:5C:5F:6A:14:F9:AB:1E:20:0A:3E:B0:6B:D6:6F
X509v3 Authority Key Identifier:
keyid:FC:93:4B:03:77:30:5E:CB:FE:38:3B:21:B8:74:74:10:6A:1E:4D:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JNLA3cwXsv-ODshuHR0EGoeTdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/587051-ca84-431a-98bb-9de7f935fc01/1/_JNLA3cwXsv-ODshuHR0EGoeTdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:65:9f:1a:28:d1:a0:1d:8b:16:94:1b:e4:5a:00:1d:51:10:
c1:dd:91:fc:c3:44:53:92:f1:72:94:ff:87:2d:22:d4:77:66:
0f:e0:db:6a:88:98:b2:cc:10:38:90:5f:89:5a:04:2e:46:09:
6e:99:ab:dd:a8:37:59:1c:da:a4:b4:af:d4:b8:94:e7:35:c9:
0b:ff:b7:fc:bc:e6:bc:0d:63:d8:6e:00:60:0a:03:a9:c7:c2:
39:89:ae:d0:42:a3:98:8e:1e:12:d7:7f:fc:d9:d5:0c:42:e2:
bc:f9:fe:56:3c:9f:ac:b0:2a:b2:d7:05:42:a5:ba:47:89:7c:
90:33:68:a0:05:56:ce:7d:ea:08:4a:36:57:ec:67:f1:fb:78:
1d:07:10:f9:f1:8f:ea:df:1e:dc:a4:d6:65:1c:65:82:05:0d:
6e:05:40:df:14:64:73:0f:c6:30:11:11:c0:cf:8c:ee:73:b6:
46:65:7c:bb:66:68:bc:bd:03:33:9f:dc:98:db:e5:8e:06:cd:
fa:b5:69:c3:b7:62:8f:b8:e9:66:3e:e9:8b:a2:e9:ae:3c:59:
82:25:b6:a9:c5:ef:a8:ed:2e:6b:5a:d3:05:dd:b2:82:93:ec:
9f:51:7e:44:5f:f6:60:9c:67:6c:ab:c6:86:fe:26:c2:f6:5d:
73:5c:8f:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk0Argm+coPRZgQPSXtwOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjOTM0YjAzNzczMDVlY2JmZTM4M2IyMWI4NzQ3NDEwNmEx
ZTRkZDgwHhcNMjUxMTExMTEwMDQ0WhcNMjUxMTEyMTEwMDQ0WjAzMTEwLwYDVQQD
Eyg1YmNhYzc4NGU5ZmI1YzVmNmExNGY5YWIxZTIwMGEzZWIwNmJkNjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk0UHOJKjZaQcjAtn6WYmstK4EV0
l238jzg+QwgEk5kgh0kPlKM975pH3auERyVF8OL1In0i3I0nixS+keDam+UKe3dU
36zeNHQoQj5/6d7lQXRDqI9fhrrTai0vCR2dzdwLyxjVB58YHYM1BEoK2NxJPmOM
x0Ntk+IBnHd1W+JIzgLuPFv7jlozF/bQkzxJt+eHrwHjxwVD+roED61EcakcfH3V
3NwdOncTXO41BIF34fkeXklZwbXm0vZy0C+ewcRMApTEzRL7biQZcADGFu+HQsDW
8VT2f8Vfd+PzBmxcH5IRtHh4CgXEQ7NgJOAtOfsh3ZEurQiCDb05oGrcSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFvKx4Tp+1xfahT5qx4gCj6wa9ZvMB8GA1UdIwQY
MBaAFPyTSwN3MF7L/jg7Ibh0dBBqHk3YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0pOTEEzY3dYc3YtT0RzaHVIUjBFR29lVGRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS81ODcwNTEtY2E4NC00MzFhLTk4YmIt
OWRlN2Y5MzVmYzAxLzEvX0pOTEEzY3dYc3YtT0RzaHVIUjBFR29lVGRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS81ODcwNTEtY2E4NC00MzFhLTk4YmItOWRlN2Y5MzVmYzAx
LzEvX0pOTEEzY3dYc3YtT0RzaHVIUjBFR29lVGRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi2WfGijR
oB2LFpQb5FoAHVEQwd2R/MNEU5LxcpT/hy0i1HdmD+DbaoiYsswQOJBfiVoELkYJ
bpmr3ag3WRzapLSv1LiU5zXJC/+3/LzmvA1j2G4AYAoDqcfCOYmu0EKjmI4eEtd/
/NnVDELivPn+VjyfrLAqstcFQqW6R4l8kDNooAVWzn3qCEo2V+xn8ft4HQcQ+fGP
6t8e3KTWZRxlggUNbgVA3xRkcw/GMBERwM+M7nO2RmV8u2ZovL0DM5/cmNvljgbN
+rVpw7dij7jpZj7pi6LprjxZgiW2qcXvqO0ua1rTBd2ygpPsn1F+RF/2YJxnbKvG
hv4mwvZdc1yPwQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:31:15 2025 by rpki-client