Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.mft
File: j6c6fMHk0392QDaHfEKB2osAkH8.mft (raw, json)
Hash identifier: BFM0c06XealgI+zkzMM7n+8WZk90DKJ2y5eoUDzsbnQ=
Subject key identifier: E3:1A:00:75:77:EB:27:F9:C4:A4:38:91:D0:BE:70:5D:A5:1C:2C:51
Authority key identifier: 8F:A7:3A:7C:C1:E4:D3:7F:76:40:36:87:7C:42:81:DA:8B:00:90:7F
Certificate issuer: /CN=8fa73a7cc1e4d37f764036877c4281da8b00907f
Certificate serial: 019A722624F4B1020F80F7114460EFE1E11C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6c6fMHk0392QDaHfEKB2osAkH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.mft
Manifest number: 0BFF
Signing time: Tue 11 Nov 2025 09:01:33 +0000
Manifest this update: Tue 11 Nov 2025 09:01:33 +0000
Manifest next update: Wed 12 Nov 2025 09:01:33 +0000
Files and hashes: 1: j6c6fMHk0392QDaHfEKB2osAkH8.crl (hash: VUbdsKKOb6CMCqaOH52Ohg1pYH4rBUVQI6kL2oCVxk4=)
2: olor_tHkoN8k1oKb8ve7r7Hwc2c.roa (hash: tMtLnjRmuVNk2beOyn14AwFTbvwBpk2hW+VYjVtGIZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/j6c6fMHk0392QDaHfEKB2osAkH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:24:f4:b1:02:0f:80:f7:11:44:60:ef:e1:e1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fa73a7cc1e4d37f764036877c4281da8b00907f
Validity
Not Before: Nov 11 09:01:33 2025 GMT
Not After : Nov 12 09:01:33 2025 GMT
Subject: CN=e31a007577eb27f9c4a43891d0be705da51c2c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1c:dd:3d:73:41:6a:e9:d0:fe:00:26:e2:fb:
f4:c1:81:22:a0:0c:a9:31:08:5b:42:68:e5:2c:84:
8c:97:72:3f:99:80:a2:31:c0:e1:31:3e:d7:7e:6a:
9d:69:7f:eb:30:4a:70:ff:b5:c1:e3:ae:05:43:cc:
cc:0f:df:e8:a7:09:33:77:29:b2:7f:b1:08:5c:9e:
5c:05:a9:54:db:27:80:ee:c8:09:2e:61:c7:6a:98:
73:e1:1c:7e:a4:6f:ab:da:85:e2:8d:b9:62:c9:ad:
fe:31:39:f0:ed:a9:86:0c:60:7c:65:b2:db:b0:5c:
16:0b:6e:f4:f9:20:98:34:10:41:be:dd:0d:b4:07:
49:4d:9e:09:71:09:25:9e:39:e7:cf:d7:65:50:90:
f8:44:03:d7:2c:ab:5b:5b:a1:5c:0b:64:3d:ac:d8:
a6:04:94:bc:84:37:17:c8:56:e8:30:dc:47:40:2f:
a4:c4:54:d3:7a:63:ba:6c:01:b1:6c:ec:f5:12:c5:
60:81:c8:eb:d7:a6:41:8c:da:e9:46:62:a0:67:60:
7a:09:d0:e7:bd:52:ee:ee:06:57:f1:8c:9b:64:ea:
54:52:47:97:25:1f:72:c6:52:0c:45:66:ca:72:b0:
97:0c:56:91:94:06:11:bf:1c:09:ec:9e:74:9b:03:
19:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:1A:00:75:77:EB:27:F9:C4:A4:38:91:D0:BE:70:5D:A5:1C:2C:51
X509v3 Authority Key Identifier:
keyid:8F:A7:3A:7C:C1:E4:D3:7F:76:40:36:87:7C:42:81:DA:8B:00:90:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6c6fMHk0392QDaHfEKB2osAkH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:36:3e:2d:b7:de:e5:a8:93:cf:14:a1:7d:7b:1c:f4:4d:c7:
66:d5:8b:10:6c:c4:67:0e:ca:47:28:d6:5b:17:c2:fd:a1:c6:
52:28:4c:cc:02:c2:c4:d9:01:66:50:b4:d9:4e:ce:7d:41:71:
46:e7:5e:4d:3f:33:c1:5e:92:2a:98:4f:d0:24:56:f4:e6:cf:
24:63:65:83:cf:5f:4f:55:51:a9:bd:00:e2:ee:2f:7d:94:b4:
24:d1:2e:62:a2:3b:88:7b:70:2c:32:7e:20:2b:3a:e2:37:58:
8b:f9:90:47:24:a0:b6:de:05:84:a3:4a:4e:ba:80:3a:d3:ff:
58:eb:ee:91:06:c6:0b:fe:8c:53:ca:5a:cd:b8:06:9d:9d:16:
70:98:63:9b:cd:ae:1c:71:4b:75:e5:4b:b9:eb:d4:3b:fd:f6:
47:3e:9d:01:78:7b:87:68:98:68:f8:da:76:c5:75:6b:25:34:
48:4b:aa:c7:7c:bc:b4:a4:fb:26:61:b6:32:09:e9:e7:00:b4:
f5:de:2f:0b:bd:6f:29:61:06:11:87:46:f5:44:30:50:38:57:
3b:76:a4:91:2a:bb:ae:08:2e:6d:31:ce:a3:bf:a4:c3:7e:6c:
3f:0e:44:0b:2a:1e:f4:d6:2c:dd:94:a1:63:80:a5:0c:d4:2d:
1a:fe:42:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:18 2025 by rpki-client