Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft
File: Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft (raw, json)
Hash identifier: f005Vhxj5AkdAJAv3iS4xv/y8YP+1ReT+eph90oHFlc=
Subject key identifier: D3:2A:45:25:35:4C:90:B7:E9:71:FE:DB:E4:1B:2F:4F:34:E3:C7:F7
Authority key identifier: 25:BE:4E:90:9B:EB:6C:2A:1D:2D:66:82:B0:9C:68:2A:24:1C:4B:C6
Certificate issuer: /CN=25be4e909beb6c2a1d2d6682b09c682a241c4bc6
Certificate serial: 019922FACF4ABE632F365F1D986BC07E0205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft
Manifest number: 0FA3
Signing time: Sun 07 Sep 2025 07:01:26 +0000
Manifest this update: Sun 07 Sep 2025 07:01:26 +0000
Manifest next update: Mon 08 Sep 2025 07:01:26 +0000
Files and hashes: 1: Jb5OkJvrbCodLWaCsJxoKiQcS8Y.crl (hash: +jSMcAo/Zq+MrmJdsff+mcDnKB2034Ecq0BBSVZKLf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:cf:4a:be:63:2f:36:5f:1d:98:6b:c0:7e:02:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25be4e909beb6c2a1d2d6682b09c682a241c4bc6
Validity
Not Before: Sep 7 07:01:26 2025 GMT
Not After : Sep 8 07:01:26 2025 GMT
Subject: CN=d32a4525354c90b7e971fedbe41b2f4f34e3c7f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3d:e1:33:1e:5f:92:e1:36:6e:7b:a5:0d:78:
3d:a9:2f:d3:c3:f0:68:29:b8:d5:65:f9:82:60:bf:
63:0b:05:ff:c0:05:ce:ea:52:5c:ce:2e:c7:80:d7:
01:e6:23:dd:98:14:1d:6d:a8:58:05:c8:19:8f:f3:
c8:e4:7c:1a:29:3d:14:e8:8e:53:94:94:49:ce:e9:
81:d1:07:3b:94:7d:14:8b:50:11:0c:27:59:77:f0:
a8:8d:16:13:b6:c9:4b:16:54:28:f2:c3:fb:7f:0b:
c0:3b:af:86:f0:d9:29:d8:68:72:c2:95:8b:72:90:
06:79:d4:82:ec:e8:49:be:7b:35:4d:f2:8a:20:12:
4b:95:1d:f9:08:e7:a9:7a:8e:c4:7c:6d:e7:54:34:
f8:26:9b:4a:d6:0c:d9:f9:10:54:43:ac:75:aa:8c:
b4:9d:3e:29:e4:65:b9:ad:2e:7d:80:bc:b7:0f:96:
d0:e2:60:ab:78:f4:1c:1a:7a:71:db:af:5d:c7:28:
c8:e9:c0:9a:55:89:95:a9:7e:1f:3e:d4:1e:b5:41:
9e:ca:7a:4e:b2:1d:8c:03:9e:1c:54:1a:62:5c:2e:
88:89:f0:8e:76:ae:74:16:38:77:10:e2:8e:c3:77:
57:b9:d7:94:f3:c5:0b:78:f6:ff:bd:ef:2f:77:eb:
45:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:2A:45:25:35:4C:90:B7:E9:71:FE:DB:E4:1B:2F:4F:34:E3:C7:F7
X509v3 Authority Key Identifier:
keyid:25:BE:4E:90:9B:EB:6C:2A:1D:2D:66:82:B0:9C:68:2A:24:1C:4B:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/29cb7b-ed9e-4205-888a-753dfcdaa6bf/1/Jb5OkJvrbCodLWaCsJxoKiQcS8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:f5:4c:27:8b:ac:8e:de:1a:4a:64:cd:99:b3:96:71:4a:27:
a0:ba:d4:d2:db:19:c5:ec:55:b0:e3:40:50:fa:e8:41:5f:13:
29:36:16:89:89:61:c8:85:93:59:ac:e9:38:6a:8b:c3:fc:a1:
bb:ad:81:11:db:ce:81:4c:ae:f6:63:66:d1:08:3c:66:51:12:
2d:3e:93:aa:db:65:bd:d4:05:d1:b4:5a:e8:00:6d:bb:bf:ce:
07:39:e9:1a:7e:8a:70:7f:3f:5c:d7:6b:84:f8:72:84:7d:f5:
01:af:0b:1f:25:86:78:fc:73:2d:85:23:35:b0:a3:cf:3e:66:
bf:61:78:3c:8f:62:69:51:16:16:c3:59:5c:ea:9e:59:1d:91:
1a:44:dd:cd:5f:b8:64:6f:a7:36:5f:86:ba:ea:6d:1f:75:3f:
ce:1f:0e:2a:d2:36:d8:bb:0c:1c:98:70:a5:62:a8:db:b0:01:
07:b0:e6:7b:c0:1c:7d:21:01:32:e9:03:6f:25:65:93:4b:3c:
98:99:0e:45:41:e4:1c:d6:b6:7c:dd:56:e8:bb:18:e4:10:a6:
d4:30:60:cd:73:7a:0e:20:21:e6:78:05:35:ae:6c:57:a9:f5:
0d:32:a2:a8:ed:ef:9b:7f:06:37:66:94:44:bc:30:dc:61:eb:
16:62:c6:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+s9KvmMvNl8dmGvAfgIFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YmU0ZTkwOWJlYjZjMmExZDJkNjY4MmIwOWM2ODJhMjQx
YzRiYzYwHhcNMjUwOTA3MDcwMTI2WhcNMjUwOTA4MDcwMTI2WjAzMTEwLwYDVQQD
EyhkMzJhNDUyNTM1NGM5MGI3ZTk3MWZlZGJlNDFiMmY0ZjM0ZTNjN2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwD3hMx5fkuE2bnulDXg9qS/Tw/Bo
KbjVZfmCYL9jCwX/wAXO6lJczi7HgNcB5iPdmBQdbahYBcgZj/PI5HwaKT0U6I5T
lJRJzumB0Qc7lH0Ui1ARDCdZd/CojRYTtslLFlQo8sP7fwvAO6+G8Nkp2GhywpWL
cpAGedSC7OhJvns1TfKKIBJLlR35COepeo7EfG3nVDT4JptK1gzZ+RBUQ6x1qoy0
nT4p5GW5rS59gLy3D5bQ4mCrePQcGnpx269dxyjI6cCaVYmVqX4fPtQetUGeynpO
sh2MA54cVBpiXC6IifCOdq50Fjh3EOKOw3dXudeU88ULePb/ve8vd+tFJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNMqRSU1TJC36XH+2+QbL08048f3MB8GA1UdIwQY
MBaAFCW+TpCb62wqHS1mgrCcaCokHEvGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmI1T2tKdnJiQ29kTFdhQ3NKeG9LaVFjUzhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8yOWNiN2ItZWQ5ZS00MjA1LTg4OGEt
NzUzZGZjZGFhNmJmLzEvSmI1T2tKdnJiQ29kTFdhQ3NKeG9LaVFjUzhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8yOWNiN2ItZWQ5ZS00MjA1LTg4OGEtNzUzZGZjZGFhNmJm
LzEvSmI1T2tKdnJiQ29kTFdhQ3NKeG9LaVFjUzhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMPVMJ4us
jt4aSmTNmbOWcUonoLrU0tsZxexVsONAUProQV8TKTYWiYlhyIWTWazpOGqLw/yh
u62BEdvOgUyu9mNm0Qg8ZlESLT6TqttlvdQF0bRa6ABtu7/OBznpGn6KcH8/XNdr
hPhyhH31Aa8LHyWGePxzLYUjNbCjzz5mv2F4PI9iaVEWFsNZXOqeWR2RGkTdzV+4
ZG+nNl+GuuptH3U/zh8OKtI22LsMHJhwpWKo27ABB7Dme8AcfSEBMukDbyVlk0s8
mJkORUHkHNa2fN1W6LsY5BCm1DBgzXN6DiAh5ngFNa5sV6n1DTKiqO3vm38GN2aU
RLww3GHrFmLGsg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 09:58:23 2025 by rpki-client