Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.mft
File: j6L4iSbgvYQBxzztt36ZyU3MUtc.mft (raw, json)
Hash identifier: gcJOqi9AL69oqLxX0QGZuEmUbsU9uf46U9C1vx8QSgU=
Subject key identifier: E2:BB:AB:28:A6:B4:8C:4F:DF:B3:43:AD:B3:C6:E3:4A:47:AC:F0:81
Authority key identifier: 8F:A2:F8:89:26:E0:BD:84:01:C7:3C:ED:B7:7E:99:C9:4D:CC:52:D7
Certificate issuer: /CN=8fa2f88926e0bd8401c73cedb77e99c94dcc52d7
Certificate serial: 0199CCB56112F37BAA5A26F63D7195CD6972
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6L4iSbgvYQBxzztt36ZyU3MUtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.mft
Manifest number: 1525
Signing time: Fri 10 Oct 2025 06:01:02 +0000
Manifest this update: Fri 10 Oct 2025 06:01:02 +0000
Manifest next update: Sat 11 Oct 2025 06:01:02 +0000
Files and hashes: 1: hqd990q1gLSW7SBs-f4MtsS4OUs.roa (hash: Cj5NNPUEfRQP2HpFQ4Vq0r88rz0ljjQnf6HR7Q/0ozE=)
2: j6L4iSbgvYQBxzztt36ZyU3MUtc.crl (hash: 3EHzxO5K8wPA2fHR3jf0hhH5Jxs9iJCXeLmncRHuJ9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/j6L4iSbgvYQBxzztt36ZyU3MUtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Oct 2025 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cc:b5:61:12:f3:7b:aa:5a:26:f6:3d:71:95:cd:69:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fa2f88926e0bd8401c73cedb77e99c94dcc52d7
Validity
Not Before: Oct 10 06:01:02 2025 GMT
Not After : Oct 11 06:01:02 2025 GMT
Subject: CN=e2bbab28a6b48c4fdfb343adb3c6e34a47acf081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f4:06:6c:e3:3e:c4:55:99:79:bb:f4:83:b4:
24:ab:3a:a6:ca:bc:01:d7:6e:7d:75:80:c1:a2:03:
71:e2:92:5a:00:36:7a:b9:74:9c:76:9c:f7:9d:c8:
46:52:d0:e7:e0:00:0f:11:21:50:4c:e6:7b:6a:1f:
ec:af:44:6c:6d:b4:8d:2c:cb:18:0c:9b:d9:53:41:
ca:db:6b:44:41:d0:3b:b0:9f:7f:5a:b5:6f:58:7f:
1b:cc:ce:23:13:8d:4f:04:5a:4e:de:5a:e1:95:3b:
39:b1:a1:bf:f3:5e:12:f8:29:57:f1:0d:9f:77:2e:
2b:8a:c8:46:03:c3:c3:d6:3b:50:fe:85:3c:db:db:
7c:4a:0e:c4:88:7e:90:d9:6d:9a:31:fe:0a:4e:78:
97:1c:53:02:1a:e5:8d:75:8f:ce:c7:c1:2e:0c:e4:
e8:e6:4e:d9:14:ff:c8:aa:cb:cd:2e:6d:7f:d1:a1:
0f:bb:3f:9f:06:84:4d:a9:f9:b0:98:8c:18:26:ea:
e0:5e:97:7c:d2:24:06:48:05:60:e4:ff:98:1c:dd:
56:10:ec:80:64:a0:ee:54:c7:1a:88:9d:46:4a:7b:
7e:a9:f6:9c:82:23:75:c1:41:4e:9b:b0:a9:b2:82:
d6:88:7f:31:ae:fb:ed:3a:e7:76:25:89:db:bb:8e:
28:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:BB:AB:28:A6:B4:8C:4F:DF:B3:43:AD:B3:C6:E3:4A:47:AC:F0:81
X509v3 Authority Key Identifier:
keyid:8F:A2:F8:89:26:E0:BD:84:01:C7:3C:ED:B7:7E:99:C9:4D:CC:52:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6L4iSbgvYQBxzztt36ZyU3MUtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/deb648-f433-43f1-9c83-d0edec9728e5/1/j6L4iSbgvYQBxzztt36ZyU3MUtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:cd:d2:57:c8:7f:fc:00:c2:00:e7:7e:7a:8a:27:0e:96:6a:
98:c5:0e:36:ea:57:75:11:81:3c:00:cd:ad:50:20:24:82:9d:
80:b7:51:ea:4a:18:4b:00:5e:15:31:50:55:a6:d6:91:9d:13:
a2:13:a9:53:36:3f:7b:0b:5e:e4:09:09:b2:ff:86:d1:be:80:
23:65:71:7a:50:fc:90:5d:d5:c0:3e:2f:80:bd:35:22:ef:f3:
66:9d:ba:1e:41:08:71:13:b9:89:2d:cf:2f:6b:cf:4e:85:61:
7b:1b:28:a3:1a:5c:5e:41:88:41:25:99:c2:6b:43:03:6d:1a:
88:18:34:df:2e:ce:82:16:fd:a9:01:a1:8d:d6:87:93:92:43:
79:bf:4f:5e:94:e7:dd:41:13:c4:2c:6c:ea:24:dc:b9:44:24:
3e:7a:2d:fb:1f:32:ed:38:db:d6:47:7c:fa:6a:1f:b9:ea:3d:
8b:9e:9f:32:4d:f5:36:b1:6c:ce:a5:8f:20:4f:e2:c5:3d:56:
c5:b1:d6:71:e8:27:2d:e1:39:0c:98:f8:3d:d2:41:a0:f9:ba:
76:45:d6:98:24:67:ff:22:1d:9f:3b:01:7b:95:06:bd:cb:1d:
9e:c0:74:f4:8c:31:40:a3:27:58:d7:2a:5e:57:7f:9a:d2:03:
82:ce:3b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 14:03:39 2025 by rpki-client