Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
File: JFcCfjoIe2X5aLU15BX2dDJpWHY.mft (raw, json)
Hash identifier: JA0M1umQJCbmWutJ1zXkm2zJFvOWSlKQ5FXykztecm4=
Subject key identifier: 4F:A7:4A:B6:1F:90:85:E5:C7:4A:04:89:FE:43:26:F7:DB:5C:BF:1E
Authority key identifier: 24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
Certificate issuer: /CN=2457027e3a087b65f968b535e415f67432695876
Certificate serial: 0199380280151BA97930D11272E18EDA632A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
Manifest number: 0997
Signing time: Thu 11 Sep 2025 09:01:51 +0000
Manifest this update: Thu 11 Sep 2025 09:01:51 +0000
Manifest next update: Fri 12 Sep 2025 09:01:51 +0000
Files and hashes: 1: JFcCfjoIe2X5aLU15BX2dDJpWHY.crl (hash: cdcsVmmBLldC/jzr29kpVFn2H6drdIp8Nbe3X8Ngljk=)
2: YRQ4mvsGwzil4hFVAUOAk6dNVCU.roa (hash: X5eaS1qa/k5JOAN5WxaVK8Rkr/iQxPqJC1ctHVNkj8M=)
3: clLzc_fPy2OSfEJhnvCxw-gzmJg.roa (hash: QOQMhVAiztAASS43Dph/mctPcwas/jY/zxydrARjdnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:02:80:15:1b:a9:79:30:d1:12:72:e1:8e:da:63:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2457027e3a087b65f968b535e415f67432695876
Validity
Not Before: Sep 11 09:01:51 2025 GMT
Not After : Sep 12 09:01:51 2025 GMT
Subject: CN=4fa74ab61f9085e5c74a0489fe4326f7db5cbf1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4c:b3:1e:76:fc:a3:fc:b2:da:7e:a5:36:db:
84:5e:39:9e:6d:95:8e:90:ce:e8:1d:ca:00:e3:c3:
19:83:40:d0:69:65:3b:94:f0:5f:c7:65:cc:27:55:
4c:8b:fe:63:66:82:21:19:ee:a6:75:e7:a2:4e:9d:
f5:7a:db:7b:38:69:9a:58:f7:96:7e:c8:9e:30:26:
af:02:3c:0d:6e:45:b4:3e:0d:5e:a0:62:48:52:4d:
93:c9:3d:f0:c0:a7:93:75:e7:a4:31:24:41:85:37:
be:84:74:2c:0e:c7:9e:43:0c:29:47:15:d2:a7:9c:
5d:28:c0:1a:a2:98:36:21:6e:97:fe:76:45:ca:dd:
5d:e9:7d:2b:ae:2e:77:a3:aa:01:e9:75:6b:5b:83:
5a:ed:58:b1:06:07:4f:c5:4a:61:8b:39:6d:91:aa:
1a:7a:3d:e2:8e:74:53:85:8f:a0:8d:f5:fd:f6:1f:
7b:99:88:58:90:07:7f:55:62:eb:f5:b1:f7:d6:4a:
16:12:64:77:ae:ca:af:76:ec:f5:24:4b:08:41:4e:
27:93:d4:51:c0:fe:47:6c:ba:62:4a:af:9e:d7:96:
cd:6c:11:76:8a:3c:da:7d:12:dd:50:f7:be:78:c5:
67:08:00:16:47:91:74:12:0b:be:24:50:33:a8:db:
6c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A7:4A:B6:1F:90:85:E5:C7:4A:04:89:FE:43:26:F7:DB:5C:BF:1E
X509v3 Authority Key Identifier:
keyid:24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:09:38:b8:b8:2f:7b:54:69:3d:e7:46:8d:28:9d:53:55:3c:
59:dc:ce:6a:6a:be:5d:e4:4a:da:fa:f4:a5:d8:ea:e4:c3:c9:
5f:dc:24:52:40:46:46:6a:8b:2c:c9:f5:53:7b:24:b0:b0:db:
2d:01:13:37:dd:87:12:77:c1:78:8c:3a:cf:8c:09:6e:09:5b:
4d:c4:99:08:60:c2:d7:89:3d:81:80:57:aa:e8:7b:90:ec:3f:
ad:c1:10:18:68:44:77:f4:bb:0d:e3:b2:2b:a3:65:59:05:08:
23:eb:6f:97:05:62:af:88:d7:f2:3d:78:d1:5d:42:7c:4a:fb:
5d:14:6f:83:d8:23:73:8f:96:21:a0:eb:95:9f:b3:d4:ee:02:
ad:1a:37:be:aa:b4:79:47:77:0f:17:bb:2b:51:8a:77:9f:29:
7c:e4:ea:10:06:d1:b3:28:41:b4:f3:4e:27:23:56:dc:18:bb:
a1:1e:3a:c2:8b:9f:6f:33:34:c7:c7:e9:52:87:54:97:be:c1:
ab:7d:20:18:07:f6:80:02:ef:9f:d2:b8:59:8f:9b:47:bd:38:
c8:91:ee:a7:52:b7:e0:b9:87:a7:f8:26:18:8b:48:5b:3f:08:
79:13:42:7a:ec:d2:47:28:e5:7d:fe:e0:7e:19:92:99:29:ab:
92:8f:95:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk4AoAVG6l5MNEScuGO2mMqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NTcwMjdlM2EwODdiNjVmOTY4YjUzNWU0MTVmNjc0MzI2
OTU4NzYwHhcNMjUwOTExMDkwMTUxWhcNMjUwOTEyMDkwMTUxWjAzMTEwLwYDVQQD
Eyg0ZmE3NGFiNjFmOTA4NWU1Yzc0YTA0ODlmZTQzMjZmN2RiNWNiZjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0yzHnb8o/yy2n6lNtuEXjmebZWO
kM7oHcoA48MZg0DQaWU7lPBfx2XMJ1VMi/5jZoIhGe6mdeeiTp31ett7OGmaWPeW
fsieMCavAjwNbkW0Pg1eoGJIUk2TyT3wwKeTdeekMSRBhTe+hHQsDseeQwwpRxXS
p5xdKMAaopg2IW6X/nZFyt1d6X0rri53o6oB6XVrW4Na7VixBgdPxUphizltkaoa
ej3ijnRThY+gjfX99h97mYhYkAd/VWLr9bH31koWEmR3rsqvduz1JEsIQU4nk9RR
wP5HbLpiSq+e15bNbBF2ijzafRLdUPe+eMVnCAAWR5F0Egu+JFAzqNtshQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+nSrYfkIXlx0oEif5DJvfbXL8eMB8GA1UdIwQY
MBaAFCRXAn46CHtl+Wi1NeQV9nQyaVh2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkZjQ2Zqb0llMlg1YUxVMTVCWDJkREpwV0hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy85NWYzMjAtYzdkMy00MWRkLWIxMjUt
Yjc5ZDA4ZmExNzQ3LzEvSkZjQ2Zqb0llMlg1YUxVMTVCWDJkREpwV0hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy85NWYzMjAtYzdkMy00MWRkLWIxMjUtYjc5ZDA4ZmExNzQ3
LzEvSkZjQ2Zqb0llMlg1YUxVMTVCWDJkREpwV0hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARAk4uLgv
e1RpPedGjSidU1U8WdzOamq+XeRK2vr0pdjq5MPJX9wkUkBGRmqLLMn1U3sksLDb
LQETN92HEnfBeIw6z4wJbglbTcSZCGDC14k9gYBXquh7kOw/rcEQGGhEd/S7DeOy
K6NlWQUII+tvlwVir4jX8j140V1CfEr7XRRvg9gjc4+WIaDrlZ+z1O4CrRo3vqq0
eUd3Dxe7K1GKd58pfOTqEAbRsyhBtPNOJyNW3Bi7oR46woufbzM0x8fpUodUl77B
q30gGAf2gALvn9K4WY+bR704yJHup1K34LmHp/gmGItIWz8IeRNCeuzSRyjlff7g
fhmSmSmrko+VgA==
-----END CERTIFICATE-----
Generated at Thu Sep 11 11:20:13 2025 by rpki-client