Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/59facf-47b7-4ade-adf3-745eca6d958f/1/jZtZjBsrl6Djqapgk4Awksobe1g.mft
File: jZtZjBsrl6Djqapgk4Awksobe1g.mft (raw, json)
Hash identifier: 9GLPAYs1m8QmZKVHRcoWWGYUxLJRt6vzBJ5LT7VGgac=
Subject key identifier: 4B:88:8C:6D:11:8D:42:06:47:F5:4A:CD:BE:CB:75:5E:01:53:CC:30
Authority key identifier: 8D:9B:59:8C:1B:2B:97:A0:E3:A9:AA:60:93:80:30:92:CA:1B:7B:58
Certificate issuer: /CN=8d9b598c1b2b97a0e3a9aa6093803092ca1b7b58
Certificate serial: 0199228CB9A44B1E8A61FA4E2AA38465F800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZtZjBsrl6Djqapgk4Awksobe1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/59facf-47b7-4ade-adf3-745eca6d958f/1/jZtZjBsrl6Djqapgk4Awksobe1g.mft
Manifest number: 67
Signing time: Sun 07 Sep 2025 05:01:11 +0000
Manifest this update: Sun 07 Sep 2025 05:01:11 +0000
Manifest next update: Mon 08 Sep 2025 05:01:11 +0000
Files and hashes: 1: jZtZjBsrl6Djqapgk4Awksobe1g.crl (hash: YXXfVZW3Ba1JeeqwaGfmkXF8boU0+paIkItYNNf7UzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/59facf-47b7-4ade-adf3-745eca6d958f/1/jZtZjBsrl6Djqapgk4Awksobe1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/59facf-47b7-4ade-adf3-745eca6d958f/1/jZtZjBsrl6Djqapgk4Awksobe1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZtZjBsrl6Djqapgk4Awksobe1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:b9:a4:4b:1e:8a:61:fa:4e:2a:a3:84:65:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d9b598c1b2b97a0e3a9aa6093803092ca1b7b58
Validity
Not Before: Sep 7 05:01:11 2025 GMT
Not After : Sep 8 05:01:11 2025 GMT
Subject: CN=4b888c6d118d420647f54acdbecb755e0153cc30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:51:d1:79:d4:47:b4:e7:51:47:ed:ea:05:b4:
8f:5d:c4:1c:23:f9:c9:2b:00:b2:29:d2:8a:66:50:
48:13:1b:16:5d:13:d3:37:32:fa:9a:76:a3:ad:28:
65:c2:7e:54:be:b7:46:25:19:0f:3e:80:d6:64:12:
4e:9b:08:22:cb:ee:b0:1b:aa:b4:ba:8e:d7:e9:47:
92:b9:3a:61:ef:90:a3:0e:61:d9:52:23:27:88:81:
94:1d:b8:d6:d7:b2:8b:53:12:78:b6:dc:4b:b9:1d:
a2:53:b3:f7:da:53:42:69:5d:98:a6:37:b1:20:41:
06:f4:1a:f2:60:f2:13:9b:74:1c:70:62:b5:66:5b:
a0:9e:f1:b5:f6:b5:51:df:b7:04:c7:49:7e:40:74:
ee:35:f4:0a:11:b9:84:bd:ed:b6:c3:ed:ad:ca:5e:
8f:33:12:55:ae:9e:46:14:bc:08:db:51:e0:8e:52:
77:c7:dc:4b:05:20:0d:5d:46:75:61:63:33:40:91:
0b:76:ab:8b:e4:e1:6d:c2:9a:a1:0d:b4:10:64:e0:
8a:20:7f:05:fe:78:cf:7d:22:16:ad:3b:90:88:0a:
a9:4c:b0:aa:32:7d:d0:56:c5:6d:81:e9:fd:af:3c:
34:ad:1c:d7:28:9d:7e:b4:cd:43:19:60:28:0d:71:
5a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:88:8C:6D:11:8D:42:06:47:F5:4A:CD:BE:CB:75:5E:01:53:CC:30
X509v3 Authority Key Identifier:
keyid:8D:9B:59:8C:1B:2B:97:A0:E3:A9:AA:60:93:80:30:92:CA:1B:7B:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZtZjBsrl6Djqapgk4Awksobe1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/59facf-47b7-4ade-adf3-745eca6d958f/1/jZtZjBsrl6Djqapgk4Awksobe1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/59facf-47b7-4ade-adf3-745eca6d958f/1/jZtZjBsrl6Djqapgk4Awksobe1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:66:3f:8a:7d:f2:a1:06:42:5a:48:33:e0:8d:33:57:4b:ad:
13:b0:b8:28:2d:75:bc:5d:b8:c7:e3:21:7f:93:8f:01:79:da:
4d:fb:19:3e:1e:ce:fa:b9:9d:06:36:f9:5f:66:b1:67:cf:78:
a5:7c:7c:e1:94:55:f8:7f:f3:9e:0e:2a:be:18:c6:f1:ce:74:
17:da:d3:54:4d:54:b4:69:4e:87:d7:5b:07:2d:ed:45:94:fd:
06:52:ad:dc:11:f4:a4:83:1a:21:e1:f8:49:42:b3:08:79:b9:
f6:7b:6a:3c:87:ed:e1:7a:ac:dc:aa:b5:86:e6:a3:3c:e5:8b:
b2:09:19:d6:3c:04:d5:96:77:fc:3f:7e:8e:07:83:69:2c:e5:
84:a3:30:af:6c:20:27:a3:0b:5b:df:3a:c7:e8:9a:d8:0c:c1:
a5:e8:ea:3b:f3:4f:0e:d8:c5:d7:4c:cb:5c:22:3e:10:10:5d:
ee:54:3e:48:89:99:bf:a5:f6:0a:cd:60:21:28:a0:43:52:36:
ee:58:0f:57:ec:26:41:b1:f6:28:61:ec:c1:c0:34:b1:b1:19:
52:1a:e9:00:70:b8:8a:2f:fd:db:65:c3:e7:39:5d:6b:fe:2e:
e2:63:8d:e5:5f:97:e2:cc:bd:a6:13:aa:f0:2c:d0:d6:c2:4f:
5a:78:39:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijLmkSx6KYfpOKqOEZfgAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkOWI1OThjMWIyYjk3YTBlM2E5YWE2MDkzODAzMDkyY2Ex
YjdiNTgwHhcNMjUwOTA3MDUwMTExWhcNMjUwOTA4MDUwMTExWjAzMTEwLwYDVQQD
Eyg0Yjg4OGM2ZDExOGQ0MjA2NDdmNTRhY2RiZWNiNzU1ZTAxNTNjYzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFHRedRHtOdRR+3qBbSPXcQcI/nJ
KwCyKdKKZlBIExsWXRPTNzL6mnajrShlwn5UvrdGJRkPPoDWZBJOmwgiy+6wG6q0
uo7X6UeSuTph75CjDmHZUiMniIGUHbjW17KLUxJ4ttxLuR2iU7P32lNCaV2Ypjex
IEEG9BryYPITm3QccGK1ZlugnvG19rVR37cEx0l+QHTuNfQKEbmEve22w+2tyl6P
MxJVrp5GFLwI21HgjlJ3x9xLBSANXUZ1YWMzQJELdquL5OFtwpqhDbQQZOCKIH8F
/njPfSIWrTuQiAqpTLCqMn3QVsVtgen9rzw0rRzXKJ1+tM1DGWAoDXFaZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEuIjG0RjUIGR/VKzb7LdV4BU8wwMB8GA1UdIwQY
MBaAFI2bWYwbK5eg46mqYJOAMJLKG3tYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalp0WmpCc3JsNkRqcWFwZ2s0QXdrc29iZTFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC81OWZhY2YtNDdiNy00YWRlLWFkZjMt
NzQ1ZWNhNmQ5NThmLzEvalp0WmpCc3JsNkRqcWFwZ2s0QXdrc29iZTFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC81OWZhY2YtNDdiNy00YWRlLWFkZjMtNzQ1ZWNhNmQ5NThm
LzEvalp0WmpCc3JsNkRqcWFwZ2s0QXdrc29iZTFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHWY/in3y
oQZCWkgz4I0zV0utE7C4KC11vF24x+Mhf5OPAXnaTfsZPh7O+rmdBjb5X2axZ894
pXx84ZRV+H/zng4qvhjG8c50F9rTVE1UtGlOh9dbBy3tRZT9BlKt3BH0pIMaIeH4
SUKzCHm59ntqPIft4Xqs3Kq1huajPOWLsgkZ1jwE1ZZ3/D9+jgeDaSzlhKMwr2wg
J6MLW986x+ia2AzBpejqO/NPDtjF10zLXCI+EBBd7lQ+SImZv6X2Cs1gISigQ1I2
7lgPV+wmQbH2KGHswcA0sbEZUhrpAHC4ii/922XD5zlda/4u4mON5V+X4sy9phOq
8CzQ1sJPWng5wA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:24 2025 by rpki-client