Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
File: 1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft (raw, json)
Hash identifier: 5TasTGOflpKCIWwRkSLHaKYAwNwD4XOtE/XFQdA0BmM=
Subject key identifier: 9C:1E:89:E3:5B:1A:79:58:30:96:C1:3D:D8:3E:58:0B:8A:A9:78:D1
Authority key identifier: F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0
Certificate issuer: /CN=f9124ce7b99124defb55b8247358dfdda35f6ce0
Certificate serial: 019A71B7BF3D4E753AC6B7D6925AA28EFE4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
Manifest number: 0FB8
Signing time: Tue 11 Nov 2025 07:00:58 +0000
Manifest this update: Tue 11 Nov 2025 07:00:58 +0000
Manifest next update: Wed 12 Nov 2025 07:00:58 +0000
Files and hashes: 1: 1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl (hash: x/mu6BSRX0aiyzsguc30+M0wQvt9qMQDNyOjzECVxUc=)
2: fIHxOTR4AusDjkUMl4F2Dw2GHL4.roa (hash: Sb4ZUnFbCp/emt+K6hXULcd6ikLK+m62aHUuIK4higk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:bf:3d:4e:75:3a:c6:b7:d6:92:5a:a2:8e:fe:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9124ce7b99124defb55b8247358dfdda35f6ce0
Validity
Not Before: Nov 11 07:00:58 2025 GMT
Not After : Nov 12 07:00:58 2025 GMT
Subject: CN=9c1e89e35b1a79583096c13dd83e580b8aa978d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d0:f4:a7:6b:1f:88:b2:31:93:28:5e:c1:58:
3b:96:31:04:8c:e4:93:e3:51:43:22:0c:75:80:d8:
c6:47:f0:4a:47:08:38:57:3f:74:6d:25:7a:f1:bc:
30:69:97:00:33:bb:7b:4e:3e:bf:32:98:b7:0e:38:
f7:a8:60:89:0c:b4:8c:54:ef:fb:6a:d3:03:60:d7:
82:10:f9:33:68:37:3c:5e:dd:3f:ff:7c:14:fe:c9:
5f:67:19:59:de:38:1a:61:31:fb:ab:ec:c8:4c:05:
81:19:21:1b:5e:b7:fa:78:87:4d:7e:bc:43:f9:0f:
37:cb:77:9e:65:79:a2:82:e5:5c:86:b3:d8:32:59:
ed:ec:fb:e6:a3:f8:a3:91:b0:68:d2:59:c4:61:51:
e6:24:ec:d3:7a:42:73:7f:a2:3b:54:41:8a:cb:3c:
12:71:6c:02:99:6e:cb:30:51:ed:d6:e4:49:2e:a5:
fe:1f:1f:14:10:6e:a4:1d:bb:ea:41:bc:a6:52:03:
85:05:66:1b:30:c7:0c:50:dc:1a:6c:7e:de:2f:6c:
a7:5b:1c:5f:38:24:75:5a:be:7f:49:65:bd:13:09:
2f:85:dd:84:86:6c:ae:bc:5d:7b:44:6f:ce:eb:2d:
4d:af:90:00:15:53:8e:14:ca:2d:23:89:25:60:7d:
3b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1E:89:E3:5B:1A:79:58:30:96:C1:3D:D8:3E:58:0B:8A:A9:78:D1
X509v3 Authority Key Identifier:
keyid:F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a5:60:44:19:e6:06:20:b5:d2:e6:67:89:51:77:44:e9:a2:
a0:62:78:a4:e2:56:2f:51:d4:a9:c0:d8:cb:18:df:56:15:3e:
bb:17:0f:4b:5e:2d:30:42:d7:48:d6:41:bc:9f:05:d7:9e:86:
10:39:91:0d:7b:90:65:ee:68:77:4d:f9:4a:f5:8d:df:6b:ad:
07:cb:c1:c4:36:41:d1:7f:5f:75:c5:85:d6:ff:52:a2:85:2d:
cd:1c:31:a5:98:a2:75:3b:97:2d:35:29:32:68:2a:b3:fe:38:
c4:2d:92:c5:1e:f0:ce:42:64:02:78:db:68:e1:39:b8:3c:53:
be:5b:f8:66:95:9e:bb:3e:59:56:65:de:79:b2:97:e6:78:27:
b6:2b:c0:48:18:d8:57:6f:ae:ac:d1:7a:00:da:4e:ab:6a:98:
7d:cc:40:99:2b:a2:04:5d:98:fd:58:9c:bd:d0:3d:a0:11:9d:
f5:4e:2b:f8:a9:75:c2:f5:f2:30:3e:cf:be:6e:89:aa:6a:f3:
39:88:8e:42:67:6e:86:4f:12:9d:97:c4:55:07:d8:85:1b:21:
91:1f:91:79:3c:88:dc:2e:68:58:dd:34:d0:75:4d:2a:2d:74:
b7:d6:5e:cc:b1:1b:85:2d:a4:c1:4c:85:ea:db:d2:ec:c3:c3:
bc:6c:f4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:39 2025 by rpki-client