Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft
File: JgGttY6Dyu5nXc94lUugiqkwGg4.mft (raw, json)
Hash identifier: DK4gCrWubhS28ig8owosInj+txPNYnFQ5JFwe7HmVZY=
Subject key identifier: 33:EE:BE:E9:0D:0D:CF:0F:62:6E:E4:EC:15:B1:86:54:AB:F7:A4:01
Authority key identifier: 26:01:AD:B5:8E:83:CA:EE:67:5D:CF:78:95:4B:A0:8A:A9:30:1A:0E
Certificate issuer: /CN=2601adb58e83caee675dcf78954ba08aa9301a0e
Certificate serial: 019A725CA9242CB34CBD8CB671932A4355C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft
Manifest number: 078E
Signing time: Tue 11 Nov 2025 10:01:06 +0000
Manifest this update: Tue 11 Nov 2025 10:01:06 +0000
Manifest next update: Wed 12 Nov 2025 10:01:06 +0000
Files and hashes: 1: JgGttY6Dyu5nXc94lUugiqkwGg4.crl (hash: zCd7PNigrqDnrBYVF0d+/tApniagjr40ipeN/fr4SqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:a9:24:2c:b3:4c:bd:8c:b6:71:93:2a:43:55:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2601adb58e83caee675dcf78954ba08aa9301a0e
Validity
Not Before: Nov 11 10:01:06 2025 GMT
Not After : Nov 12 10:01:06 2025 GMT
Subject: CN=33eebee90d0dcf0f626ee4ec15b18654abf7a401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:95:a9:a9:2f:fb:fb:ba:a5:64:c8:dd:a4:38:
7c:ea:2a:10:85:79:45:e0:c7:d8:85:4f:91:d8:c8:
f9:49:ab:04:ef:4b:b4:64:97:3a:90:09:95:13:75:
e4:52:58:80:33:c8:7f:14:1f:ae:aa:50:ea:bc:03:
0d:af:88:45:e5:72:a8:3f:f3:78:2f:06:8b:6f:f5:
0a:aa:18:6f:ed:04:85:5c:8e:7d:70:83:e9:85:bf:
e2:00:5e:f0:f6:74:13:43:38:c3:ec:cf:05:cf:69:
e8:36:ce:d1:dc:26:ca:99:0a:a3:5f:98:1a:37:18:
8f:00:ab:58:5f:74:fb:74:e6:bf:a0:21:27:04:68:
8b:e4:d8:c5:f3:9c:b7:c0:d1:24:a5:3e:de:d4:1f:
ff:ba:4c:9e:80:55:24:52:df:77:37:36:a7:51:c5:
87:ff:b7:10:f5:e5:e3:ad:92:21:77:01:a9:b1:2d:
a9:0f:a7:d3:c7:42:ec:a3:04:4a:86:38:a9:9b:47:
d7:38:96:ba:51:18:c1:71:0f:7c:1d:73:e4:29:14:
4a:b7:d3:82:29:5c:e4:9b:14:ba:a0:45:22:f4:a2:
11:fa:c8:c8:b9:ed:0a:e4:d3:dd:71:87:18:92:7c:
71:d0:e9:10:11:94:c9:22:ec:cd:31:e1:30:0f:6e:
9b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EE:BE:E9:0D:0D:CF:0F:62:6E:E4:EC:15:B1:86:54:AB:F7:A4:01
X509v3 Authority Key Identifier:
keyid:26:01:AD:B5:8E:83:CA:EE:67:5D:CF:78:95:4B:A0:8A:A9:30:1A:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgGttY6Dyu5nXc94lUugiqkwGg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/c699a3-7d51-4b38-809d-1529adb0c9d7/1/JgGttY6Dyu5nXc94lUugiqkwGg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:fd:b6:d1:c3:3b:20:fc:89:d7:ee:d2:4c:7c:c4:5a:31:7e:
a5:a2:1d:1f:00:72:be:5d:9a:8d:49:1f:00:a9:54:be:cc:bc:
74:ab:86:b9:6b:bf:f7:e4:03:53:3e:14:4f:6f:8f:c4:e2:f5:
45:4b:89:c0:cb:6a:f2:45:fe:2a:55:aa:79:a5:0a:71:cb:57:
31:f3:25:db:9f:cb:ce:db:7b:f9:5e:20:4d:36:cc:7c:08:fb:
dd:20:0b:9e:ba:b6:0f:6e:13:2e:30:dc:b2:03:6a:8e:2d:93:
c8:3a:de:22:64:19:57:b8:68:f9:82:46:93:bc:f4:0c:86:08:
ad:64:27:d5:c0:bc:d4:34:43:14:0c:c9:10:47:94:13:25:b4:
30:9d:fd:5b:95:6d:f6:c3:56:51:f6:54:64:1d:63:e1:94:a0:
40:c1:8f:c2:67:bf:9d:9e:24:4c:80:6e:da:14:a1:fb:43:8f:
d7:57:83:b8:fa:a6:4c:c0:1c:44:1f:d8:90:6e:bb:1a:2f:53:
b4:b6:06:52:3c:c0:67:76:69:86:1d:6a:08:f0:0a:28:3c:83:
bb:5a:ef:02:0d:5a:fd:af:8a:23:e8:92:f4:50:e9:0b:51:f7:
e5:23:c7:e2:62:a1:51:56:3c:52:38:0c:45:b4:73:bf:e4:0d:
8b:a8:a0:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyXKkkLLNMvYy2cZMqQ1XFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MDFhZGI1OGU4M2NhZWU2NzVkY2Y3ODk1NGJhMDhhYTkz
MDFhMGUwHhcNMjUxMTExMTAwMTA2WhcNMjUxMTEyMTAwMTA2WjAzMTEwLwYDVQQD
EygzM2VlYmVlOTBkMGRjZjBmNjI2ZWU0ZWMxNWIxODY1NGFiZjdhNDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipWpqS/7+7qlZMjdpDh86ioQhXlF
4MfYhU+R2Mj5SasE70u0ZJc6kAmVE3XkUliAM8h/FB+uqlDqvAMNr4hF5XKoP/N4
LwaLb/UKqhhv7QSFXI59cIPphb/iAF7w9nQTQzjD7M8Fz2noNs7R3CbKmQqjX5ga
NxiPAKtYX3T7dOa/oCEnBGiL5NjF85y3wNEkpT7e1B//ukyegFUkUt93NzanUcWH
/7cQ9eXjrZIhdwGpsS2pD6fTx0LsowRKhjipm0fXOJa6URjBcQ98HXPkKRRKt9OC
KVzkmxS6oEUi9KIR+sjIue0K5NPdcYcYknxx0OkQEZTJIuzNMeEwD26b9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPuvukNDc8PYm7k7BWxhlSr96QBMB8GA1UdIwQY
MBaAFCYBrbWOg8ruZ13PeJVLoIqpMBoOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmdHdHRZNkR5dTVuWGM5NGxVdWdpcWt3R2c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9jNjk5YTMtN2Q1MS00YjM4LTgwOWQt
MTUyOWFkYjBjOWQ3LzEvSmdHdHRZNkR5dTVuWGM5NGxVdWdpcWt3R2c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9jNjk5YTMtN2Q1MS00YjM4LTgwOWQtMTUyOWFkYjBjOWQ3
LzEvSmdHdHRZNkR5dTVuWGM5NGxVdWdpcWt3R2c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFf220cM7
IPyJ1+7STHzEWjF+paIdHwByvl2ajUkfAKlUvsy8dKuGuWu/9+QDUz4UT2+PxOL1
RUuJwMtq8kX+KlWqeaUKcctXMfMl25/Lztt7+V4gTTbMfAj73SALnrq2D24TLjDc
sgNqji2TyDreImQZV7ho+YJGk7z0DIYIrWQn1cC81DRDFAzJEEeUEyW0MJ39W5Vt
9sNWUfZUZB1j4ZSgQMGPwme/nZ4kTIBu2hSh+0OP11eDuPqmTMAcRB/YkG67Gi9T
tLYGUjzAZ3Zphh1qCPAKKDyDu1rvAg1a/a+KI+iS9FDpC1H35SPH4mKhUVY8UjgM
RbRzv+QNi6igjg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:32 2025 by rpki-client