Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/59facf-47b7-4ade-adf3-745eca6d958f/1/jZtZjBsrl6Djqapgk4Awksobe1g.mft
File: jZtZjBsrl6Djqapgk4Awksobe1g.mft (raw, json)
Hash identifier: X3AHdqdnx3ypsOkjA0gAfFOTUzgH5NdFSi3XeDZ/VW4=
Subject key identifier: 86:B6:13:9F:C8:C5:65:0C:E7:E3:85:FF:FE:02:3B:99:87:89:10:03
Authority key identifier: 8D:9B:59:8C:1B:2B:97:A0:E3:A9:AA:60:93:80:30:92:CA:1B:7B:58
Certificate issuer: /CN=8d9b598c1b2b97a0e3a9aa6093803092ca1b7b58
Certificate serial: 019A72934DAA87362C34508E844A1E10FDD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZtZjBsrl6Djqapgk4Awksobe1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/59facf-47b7-4ade-adf3-745eca6d958f/1/jZtZjBsrl6Djqapgk4Awksobe1g.mft
Manifest number: 0115
Signing time: Tue 11 Nov 2025 11:00:47 +0000
Manifest this update: Tue 11 Nov 2025 11:00:47 +0000
Manifest next update: Wed 12 Nov 2025 11:00:47 +0000
Files and hashes: 1: jZtZjBsrl6Djqapgk4Awksobe1g.crl (hash: sYTaxctwCyacNpxEz5KV/lolMTcOuIRXiHRv91veYY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/59facf-47b7-4ade-adf3-745eca6d958f/1/jZtZjBsrl6Djqapgk4Awksobe1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/59facf-47b7-4ade-adf3-745eca6d958f/1/jZtZjBsrl6Djqapgk4Awksobe1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZtZjBsrl6Djqapgk4Awksobe1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:4d:aa:87:36:2c:34:50:8e:84:4a:1e:10:fd:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d9b598c1b2b97a0e3a9aa6093803092ca1b7b58
Validity
Not Before: Nov 11 11:00:47 2025 GMT
Not After : Nov 12 11:00:47 2025 GMT
Subject: CN=86b6139fc8c5650ce7e385fffe023b9987891003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5f:b2:ed:94:09:4c:53:45:52:07:25:b6:d4:
ce:6e:fa:91:d4:72:10:35:25:dd:9e:60:f1:0f:f9:
62:c1:ff:9d:9b:00:b0:8b:29:c1:81:0d:79:1b:6c:
70:45:d5:6a:71:95:1a:74:2e:b5:0b:45:86:0f:76:
e3:51:a2:11:5c:a3:6f:86:31:c2:47:e6:1e:e4:a1:
fe:fb:28:9a:9c:bd:75:4f:1a:0a:6c:d4:fb:07:e3:
52:95:58:20:a0:7c:b7:1b:40:9b:31:a7:69:2e:27:
15:78:f8:7e:48:a6:39:17:05:44:08:6d:a8:0c:e4:
7a:35:4d:fd:5d:db:e5:cf:a0:fc:7e:e9:50:ce:19:
ad:fa:79:e9:87:94:07:f5:58:68:cb:43:93:fb:72:
a6:e5:43:24:af:e4:db:56:cc:7d:bf:b1:3d:2d:97:
9d:35:c0:8f:94:a4:d7:df:e9:54:b1:e5:00:09:2a:
f5:2c:ce:58:b3:df:7b:68:67:f3:9c:f3:f3:a2:23:
5c:fd:af:7e:68:27:7a:b0:d9:90:53:c0:19:d8:e6:
09:92:90:46:a0:05:75:aa:33:23:15:96:b0:be:67:
9d:27:df:74:0f:f9:8f:61:66:3c:9a:65:6a:1d:0b:
df:bc:7e:65:ad:8c:74:75:97:77:8f:be:44:e6:c2:
be:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B6:13:9F:C8:C5:65:0C:E7:E3:85:FF:FE:02:3B:99:87:89:10:03
X509v3 Authority Key Identifier:
keyid:8D:9B:59:8C:1B:2B:97:A0:E3:A9:AA:60:93:80:30:92:CA:1B:7B:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZtZjBsrl6Djqapgk4Awksobe1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/59facf-47b7-4ade-adf3-745eca6d958f/1/jZtZjBsrl6Djqapgk4Awksobe1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/59facf-47b7-4ade-adf3-745eca6d958f/1/jZtZjBsrl6Djqapgk4Awksobe1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:38:f3:6f:ed:68:90:1c:f3:25:1a:cd:70:df:d0:9b:d3:5a:
f1:b6:c8:fd:01:73:4b:15:e2:a5:60:43:05:c0:06:a5:67:a8:
80:ca:c5:7a:ed:9f:e8:10:8c:31:5a:00:9f:18:f2:64:be:a7:
95:6e:59:c2:ce:af:4e:ec:4c:71:a6:ed:7b:ce:f1:21:29:b8:
4c:3f:44:a8:e9:a3:b6:1a:89:56:db:c6:82:6b:c4:a8:68:27:
81:24:df:39:33:cd:44:f0:3e:2c:5d:62:f3:e4:39:29:ee:83:
cb:9b:0e:89:ad:2d:83:1f:b2:1c:ba:c0:ef:d4:2c:a2:96:35:
5a:7b:92:aa:e7:00:b8:7e:de:25:49:7f:47:0e:00:f3:cc:1f:
2b:51:c3:49:d6:e5:3e:96:ef:a3:27:9b:ed:84:59:05:b1:f1:
03:2a:2b:2d:58:bd:1d:9e:c1:f1:4f:17:98:4b:48:14:6f:fd:
d2:38:52:1d:53:9a:74:da:6b:76:22:5d:58:9c:58:00:40:c1:
0d:27:cd:64:20:72:39:75:38:47:22:ab:07:6a:2a:29:50:59:
27:f4:c5:d9:cc:07:99:c3:17:33:48:fc:b6:8e:50:77:25:f1:
9d:3a:49:ab:80:84:20:5c:fc:ee:21:c4:e2:87:3a:09:2a:7e:
35:75:b9:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk02qhzYsNFCOhEoeEP3VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkOWI1OThjMWIyYjk3YTBlM2E5YWE2MDkzODAzMDkyY2Ex
YjdiNTgwHhcNMjUxMTExMTEwMDQ3WhcNMjUxMTEyMTEwMDQ3WjAzMTEwLwYDVQQD
Eyg4NmI2MTM5ZmM4YzU2NTBjZTdlMzg1ZmZmZTAyM2I5OTg3ODkxMDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzF+y7ZQJTFNFUgclttTObvqR1HIQ
NSXdnmDxD/liwf+dmwCwiynBgQ15G2xwRdVqcZUadC61C0WGD3bjUaIRXKNvhjHC
R+Ye5KH++yianL11TxoKbNT7B+NSlVggoHy3G0CbMadpLicVePh+SKY5FwVECG2o
DOR6NU39Xdvlz6D8fulQzhmt+nnph5QH9Vhoy0OT+3Km5UMkr+TbVsx9v7E9LZed
NcCPlKTX3+lUseUACSr1LM5Ys997aGfznPPzoiNc/a9+aCd6sNmQU8AZ2OYJkpBG
oAV1qjMjFZawvmedJ990D/mPYWY8mmVqHQvfvH5lrYx0dZd3j75E5sK+wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIa2E5/IxWUM5+OF//4CO5mHiRADMB8GA1UdIwQY
MBaAFI2bWYwbK5eg46mqYJOAMJLKG3tYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalp0WmpCc3JsNkRqcWFwZ2s0QXdrc29iZTFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC81OWZhY2YtNDdiNy00YWRlLWFkZjMt
NzQ1ZWNhNmQ5NThmLzEvalp0WmpCc3JsNkRqcWFwZ2s0QXdrc29iZTFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC81OWZhY2YtNDdiNy00YWRlLWFkZjMtNzQ1ZWNhNmQ5NThm
LzEvalp0WmpCc3JsNkRqcWFwZ2s0QXdrc29iZTFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkTjzb+1o
kBzzJRrNcN/Qm9Na8bbI/QFzSxXipWBDBcAGpWeogMrFeu2f6BCMMVoAnxjyZL6n
lW5Zws6vTuxMcabte87xISm4TD9EqOmjthqJVtvGgmvEqGgngSTfOTPNRPA+LF1i
8+Q5Ke6Dy5sOia0tgx+yHLrA79QsopY1WnuSqucAuH7eJUl/Rw4A88wfK1HDSdbl
Ppbvoyeb7YRZBbHxAyorLVi9HZ7B8U8XmEtIFG/90jhSHVOadNprdiJdWJxYAEDB
DSfNZCByOXU4RyKrB2oqKVBZJ/TF2cwHmcMXM0j8to5QdyXxnTpJq4CEIFz87iHE
4oc6CSp+NXW5ZQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:46:51 2025 by rpki-client