Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft
File: j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft (raw, json)
Hash identifier: rhUPjPio/p7MLJFYTzPDKsU1A3MwFc3G9Tmyl3+wmkI=
Subject key identifier: 8E:73:BC:48:5F:EE:A1:4C:A7:6B:2C:94:30:54:D2:CB:EB:BB:EA:B8
Authority key identifier: 8F:51:B5:B8:13:2F:9E:30:7B:71:7A:3E:1E:54:D1:F7:F4:5A:E5:17
Certificate issuer: /CN=8f51b5b8132f9e307b717a3e1e54d1f7f45ae517
Certificate serial: 019A7225DEB71233531C2B45E4ABE3D613C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft
Manifest number: 0F54
Signing time: Tue 11 Nov 2025 09:01:15 +0000
Manifest this update: Tue 11 Nov 2025 09:01:15 +0000
Manifest next update: Wed 12 Nov 2025 09:01:15 +0000
Files and hashes: 1: 0hR_0c7RQJiSWec5GOXGTkJBB-o.roa (hash: 6B95v6L3QKq5sJN6SrWqfMlBSuwCIbwLv0Gvp6AwXSs=)
2: HWJyqOYgKmYyzjid7IInVzpFlwA.roa (hash: 3+ag2Dw5tuJ29n6cQ1euqcvO0rPVdHqsSUSY7z8He/0=)
3: SA-KGCApQAk5dV-uBcL4crTpK78.roa (hash: U4+vxtQUb5bot1HWyDwYpTjdt9NcKSDTCzFzv9zH3l8=)
4: j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl (hash: tpFsg3Og1T9Ezga0C87W52orwCjEgg3R+raLimzPyQg=)
5: l_EpL9DerXvkoi9mgtKAqNomA8k.roa (hash: NYPx355N2XC2PNV7lGv0qgOFwLrFg0uF6l0cLL8mgHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:de:b7:12:33:53:1c:2b:45:e4:ab:e3:d6:13:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f51b5b8132f9e307b717a3e1e54d1f7f45ae517
Validity
Not Before: Nov 11 09:01:15 2025 GMT
Not After : Nov 12 09:01:15 2025 GMT
Subject: CN=8e73bc485feea14ca76b2c943054d2cbebbbeab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cc:fd:85:df:61:fc:79:b9:e0:b9:d5:a9:cc:
d5:a0:9f:03:90:16:15:58:dd:0f:a4:d0:ff:61:66:
00:c9:80:20:08:4f:5c:fb:c0:9b:fc:b4:f3:de:a0:
bc:43:96:78:40:51:34:56:a4:5e:84:19:82:b7:36:
d4:14:e0:e8:f8:e9:5a:df:8f:64:83:c5:bc:48:e0:
d6:b4:cf:8d:dc:16:99:34:b2:5c:9f:66:78:6e:32:
39:a1:0d:3e:1f:c3:36:8d:b5:60:07:7a:33:9c:47:
3e:45:7b:45:60:52:dd:e2:15:87:f2:ff:0b:3f:bd:
08:fa:d8:70:cc:c0:65:fb:f9:5e:00:6c:8d:90:13:
dc:19:41:01:ca:28:1f:67:95:a1:8a:36:a5:38:bb:
e8:a4:ef:3b:59:c6:af:66:56:9e:d6:df:fd:1f:6c:
ce:ad:38:a0:ec:a7:58:59:ea:f4:dd:7b:0e:4d:65:
a4:7f:32:0e:56:a2:98:52:66:6d:83:87:06:06:01:
c4:43:45:64:8b:b9:16:41:b7:0c:bb:2d:f7:bf:ed:
a7:6a:9f:4b:ec:94:8f:b6:b7:dc:e2:26:b7:f8:1e:
8f:86:1a:1e:3c:0a:d8:99:e0:1e:45:0c:df:e8:96:
54:bb:ac:f2:b0:d5:96:df:08:cf:53:4d:4f:91:57:
af:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:73:BC:48:5F:EE:A1:4C:A7:6B:2C:94:30:54:D2:CB:EB:BB:EA:B8
X509v3 Authority Key Identifier:
keyid:8F:51:B5:B8:13:2F:9E:30:7B:71:7A:3E:1E:54:D1:F7:F4:5A:E5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/da2427-b33b-4b81-af37-e2251e489cbb/1/j1G1uBMvnjB7cXo-HlTR9_Ra5Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:0b:e9:97:61:a9:dd:c1:78:b3:5a:34:db:5c:9d:30:c6:fb:
d7:3c:98:bc:e3:0f:47:07:cd:cc:03:55:f7:80:6c:59:dc:d1:
38:71:15:04:54:60:2e:94:19:82:04:37:4a:17:85:77:ef:a8:
27:01:d9:54:a1:73:82:86:de:bf:43:cb:6e:b9:1a:e2:50:60:
76:96:e9:8d:65:bd:fe:95:50:a0:92:0b:56:5d:9f:6b:72:4d:
bb:37:38:40:a3:e5:38:ba:af:2a:a9:08:0d:02:41:06:58:77:
ff:13:99:9d:4b:5d:66:93:74:e0:ab:35:9b:bc:42:b9:57:7f:
11:fa:d6:de:bd:36:29:3b:8a:5f:1a:20:5a:de:bf:5f:e7:c1:
01:45:91:d1:3b:d7:c7:ce:8d:90:64:ba:17:a8:a9:eb:42:27:
28:92:55:df:81:cc:90:29:1a:71:67:d6:b9:76:fa:4a:75:d0:
05:d1:31:6c:a0:b0:0e:87:a3:77:3b:9b:ea:f7:fe:d1:27:01:
a8:5f:43:b5:75:c2:24:0b:33:44:72:ba:e8:d2:21:f9:51:c9:
5b:30:06:3e:73:2e:12:82:09:dd:f0:1e:e6:33:30:63:40:47:
b9:2f:ca:92:7a:1f:fe:92:d2:57:8f:b2:a5:48:70:d9:94:8c:
d2:8a:82:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:38:09 2025 by rpki-client