Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.mft
File: jsIqh2Rb03Xm2yqguBbooGEOelY.mft (raw, json)
Hash identifier: bEVwQz1oU5hzxo8zj0rk9wcL1D/2dG67Je6re3jRr18=
Subject key identifier: C1:FE:6C:10:C0:0B:D9:2B:BD:FE:0A:9F:0A:7D:F0:F1:A7:C0:6C:8C
Authority key identifier: 8E:C2:2A:87:64:5B:D3:75:E6:DB:2A:A0:B8:16:E8:A0:61:0E:7A:56
Certificate issuer: /CN=8ec22a87645bd375e6db2aa0b816e8a0610e7a56
Certificate serial: 019A7112B4DA5C8A7388E55CC770DF51A0B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsIqh2Rb03Xm2yqguBbooGEOelY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.mft
Manifest number: 07B7
Signing time: Tue 11 Nov 2025 04:00:42 +0000
Manifest this update: Tue 11 Nov 2025 04:00:42 +0000
Manifest next update: Wed 12 Nov 2025 04:00:42 +0000
Files and hashes: 1: jsIqh2Rb03Xm2yqguBbooGEOelY.crl (hash: h737sBnTbsCJ77UG/cWzjwCd6hIkW1UXHKyR7zgojKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsIqh2Rb03Xm2yqguBbooGEOelY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:b4:da:5c:8a:73:88:e5:5c:c7:70:df:51:a0:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec22a87645bd375e6db2aa0b816e8a0610e7a56
Validity
Not Before: Nov 11 04:00:42 2025 GMT
Not After : Nov 12 04:00:42 2025 GMT
Subject: CN=c1fe6c10c00bd92bbdfe0a9f0a7df0f1a7c06c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0a:3a:83:3d:c7:53:66:99:7f:52:73:8b:00:
ef:ca:ff:5b:49:54:d9:ea:f6:a9:99:16:4c:f6:b0:
c6:26:52:02:14:de:66:ad:f4:72:80:20:2e:06:06:
3c:ae:2b:a9:d3:d2:0c:10:8d:47:3c:aa:bb:af:5a:
01:3d:92:b0:7a:61:ba:d0:07:e0:83:0b:a7:2d:d7:
84:3b:a9:3a:2d:6a:cd:3b:32:7f:70:39:17:e9:12:
bc:9e:52:35:7f:47:b2:02:ec:be:16:e4:fd:72:43:
9a:39:44:ac:9a:33:42:1a:c5:30:bc:8c:44:93:95:
3e:fd:c5:16:84:7f:ba:03:54:4b:08:59:b7:9f:2e:
a9:d9:2d:d0:4f:30:89:2c:55:db:7d:65:53:5c:44:
bd:f9:8e:69:aa:ac:67:93:01:5d:92:10:4b:65:72:
f0:62:a6:be:2c:eb:e4:42:a8:76:a9:42:29:13:33:
5d:34:2b:ab:b6:3c:8b:35:55:a7:b4:f0:ff:45:c5:
2e:af:10:7b:5c:b9:5b:ad:7a:e1:b7:7a:ca:81:82:
3b:44:44:d9:6d:19:bb:00:ed:fe:48:ad:58:14:5a:
23:7e:f1:63:f1:3a:df:12:fe:00:ed:18:f7:ff:41:
a1:f5:31:99:e4:67:ea:80:d2:7b:3f:d5:b0:51:66:
cf:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FE:6C:10:C0:0B:D9:2B:BD:FE:0A:9F:0A:7D:F0:F1:A7:C0:6C:8C
X509v3 Authority Key Identifier:
keyid:8E:C2:2A:87:64:5B:D3:75:E6:DB:2A:A0:B8:16:E8:A0:61:0E:7A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsIqh2Rb03Xm2yqguBbooGEOelY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1298ea-a467-45b9-9117-8798ed75f289/1/jsIqh2Rb03Xm2yqguBbooGEOelY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:0a:4b:39:f3:28:8f:94:03:94:74:89:1f:a7:53:ea:9c:71:
15:86:63:4b:c8:0c:54:4e:e9:96:96:27:e2:d1:10:f7:54:ab:
b9:2e:d0:71:72:cf:8d:b5:a5:81:66:3f:c3:b4:1d:89:71:c7:
dc:83:58:01:d4:2c:a0:ce:fd:cb:31:bf:30:ca:a0:4b:fc:c0:
76:0b:36:9c:0d:2f:d1:85:ca:81:c0:c7:ed:3b:bb:aa:bc:6a:
81:1f:80:2c:15:5b:cc:0c:11:54:c2:e0:8e:70:b9:42:c9:44:
7f:a9:c1:8e:a2:0d:ec:20:11:ee:67:b0:b4:bd:2b:f9:86:d9:
f0:89:7e:b7:fd:dc:a4:62:d9:88:f3:da:eb:59:3e:49:4d:e3:
33:de:f9:7d:9f:db:0d:46:c6:f0:d7:a6:7d:92:92:e2:6a:f5:
04:76:59:a3:8e:bb:d8:cd:89:8a:51:82:ec:07:d7:13:b3:0f:
01:bb:f4:e9:d0:55:80:b9:b4:d7:89:c2:af:20:e1:f9:60:89:
39:b5:f7:e4:14:7c:bb:38:57:83:ce:29:e7:37:be:98:17:02:
e1:9a:90:5d:a9:b3:34:59:eb:b4:71:fc:23:3b:e1:4a:39:63:
2f:be:47:e4:54:ee:fc:58:48:b4:73:df:fa:f6:c8:2e:15:a9:
3b:9c:54:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxErTaXIpziOVcx3DfUaCxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYzIyYTg3NjQ1YmQzNzVlNmRiMmFhMGI4MTZlOGEwNjEw
ZTdhNTYwHhcNMjUxMTExMDQwMDQyWhcNMjUxMTEyMDQwMDQyWjAzMTEwLwYDVQQD
EyhjMWZlNmMxMGMwMGJkOTJiYmRmZTBhOWYwYTdkZjBmMWE3YzA2YzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwo6gz3HU2aZf1JziwDvyv9bSVTZ
6vapmRZM9rDGJlICFN5mrfRygCAuBgY8riup09IMEI1HPKq7r1oBPZKwemG60Afg
gwunLdeEO6k6LWrNOzJ/cDkX6RK8nlI1f0eyAuy+FuT9ckOaOUSsmjNCGsUwvIxE
k5U+/cUWhH+6A1RLCFm3ny6p2S3QTzCJLFXbfWVTXES9+Y5pqqxnkwFdkhBLZXLw
Yqa+LOvkQqh2qUIpEzNdNCurtjyLNVWntPD/RcUurxB7XLlbrXrht3rKgYI7RETZ
bRm7AO3+SK1YFFojfvFj8TrfEv4A7Rj3/0Gh9TGZ5GfqgNJ7P9WwUWbPLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMH+bBDAC9krvf4Knwp98PGnwGyMMB8GA1UdIwQY
MBaAFI7CKodkW9N15tsqoLgW6KBhDnpWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanNJcWgyUmIwM1htMnlxZ3VCYm9vR0VPZWxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xMjk4ZWEtYTQ2Ny00NWI5LTkxMTct
ODc5OGVkNzVmMjg5LzEvanNJcWgyUmIwM1htMnlxZ3VCYm9vR0VPZWxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8xMjk4ZWEtYTQ2Ny00NWI5LTkxMTctODc5OGVkNzVmMjg5
LzEvanNJcWgyUmIwM1htMnlxZ3VCYm9vR0VPZWxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASwpLOfMo
j5QDlHSJH6dT6pxxFYZjS8gMVE7plpYn4tEQ91SruS7QcXLPjbWlgWY/w7QdiXHH
3INYAdQsoM79yzG/MMqgS/zAdgs2nA0v0YXKgcDH7Tu7qrxqgR+ALBVbzAwRVMLg
jnC5QslEf6nBjqIN7CAR7mewtL0r+YbZ8Il+t/3cpGLZiPPa61k+SU3jM975fZ/b
DUbG8NemfZKS4mr1BHZZo4672M2JilGC7AfXE7MPAbv06dBVgLm014nCryDh+WCJ
ObX35BR8uzhXg84p5ze+mBcC4ZqQXamzNFnrtHH8IzvhSjljL75H5FTu/FhItHPf
+vbILhWpO5xUNA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:09 2025 by rpki-client