Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
File: jt9sKtes7K0Gbh93_gWSLwFpFTY.mft (raw, json)
Hash identifier: hCX1eIZwkbehAvVYZ23lzD0XsOlJvO3CRw4QVb7uNuQ=
Subject key identifier: 67:15:9F:FD:20:DB:28:0B:9A:BD:DE:02:13:5B:FE:C9:B1:A9:71:11
Authority key identifier: 8E:DF:6C:2A:D7:AC:EC:AD:06:6E:1F:77:FE:05:92:2F:01:69:15:36
Certificate issuer: /CN=8edf6c2ad7acecad066e1f77fe05922f01691536
Certificate serial: 019A269D63F87997F9ED9D0C70945B15F538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
Manifest number: 0739
Signing time: Mon 27 Oct 2025 17:00:40 +0000
Manifest this update: Mon 27 Oct 2025 17:00:40 +0000
Manifest next update: Tue 28 Oct 2025 17:00:40 +0000
Files and hashes: 1: LZnMbOvKNCeS9warD4gVCngTQgc.roa (hash: 6Cg/OSuVm718gl/BiJrXMhTNmjh+ffJ7x+FKxzJQO0A=)
2: jt9sKtes7K0Gbh93_gWSLwFpFTY.crl (hash: I7+ft7SKGGiC/DEFbWbuhSpj7J3J5J5yKi4GJ9CsZxs=)
3: yl9TGfZBXnKybJW81dLesyL85jw.roa (hash: 5T9nUKakC/d5Fj82Q3FOurA0Y8gDP1/Vr4z0jWpM3OA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:9d:63:f8:79:97:f9:ed:9d:0c:70:94:5b:15:f5:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8edf6c2ad7acecad066e1f77fe05922f01691536
Validity
Not Before: Oct 27 17:00:40 2025 GMT
Not After : Oct 28 17:00:40 2025 GMT
Subject: CN=67159ffd20db280b9abdde02135bfec9b1a97111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:7d:af:00:ac:c2:25:66:52:6e:97:71:51:be:
97:12:dc:48:4a:a5:d4:dd:b9:43:35:9a:f6:eb:fa:
fc:b0:28:81:80:9f:af:30:61:be:83:a2:c0:15:71:
12:75:31:e8:69:c3:32:8b:ec:f5:87:47:2a:c3:e3:
d7:8c:f3:ea:2d:d5:ee:9e:b6:47:ed:d7:37:b0:cc:
2e:ac:95:53:ae:aa:b2:22:4e:da:40:b7:b2:f3:9b:
c8:94:89:d9:db:d9:24:ce:23:45:59:9b:6b:54:15:
71:e5:1a:c7:81:1b:52:ef:fd:bb:6d:7b:66:f7:97:
af:ff:e3:fd:63:19:c6:d0:56:a8:2a:6c:0c:9b:fc:
5e:cf:8d:42:f3:a5:28:e5:c8:ea:de:5a:16:b2:b7:
c5:d5:c1:e9:a0:21:06:21:09:de:8f:94:e1:9e:13:
c7:8a:24:39:7b:f3:3c:ef:da:d5:c2:2c:85:93:fe:
5e:b0:db:fd:cd:b7:07:fa:aa:6c:47:ad:38:8a:ff:
4f:40:cf:a8:c0:f8:9d:8b:3b:82:77:f4:95:b6:14:
50:7d:d4:c5:68:14:b7:16:aa:0a:77:18:fe:00:c9:
46:0a:c0:3b:7e:ed:b1:bc:7a:73:6a:ce:07:ff:d4:
67:6f:c7:2a:1a:ce:ac:0e:a4:39:8c:08:f7:d0:76:
29:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:15:9F:FD:20:DB:28:0B:9A:BD:DE:02:13:5B:FE:C9:B1:A9:71:11
X509v3 Authority Key Identifier:
keyid:8E:DF:6C:2A:D7:AC:EC:AD:06:6E:1F:77:FE:05:92:2F:01:69:15:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:5f:cb:68:93:48:c2:2f:35:0c:f5:30:49:ef:7a:cb:50:3b:
2a:d3:bf:d1:1b:65:bf:9e:a5:1d:94:23:1d:bd:ee:5a:39:0b:
83:c7:d7:d9:2e:f9:ec:f8:17:9e:62:cb:4d:83:8a:16:ec:c2:
6c:77:b0:47:c3:25:a5:da:38:44:2b:0e:d6:38:86:c8:c1:1d:
5b:a5:80:d7:1d:7e:d6:b5:72:1b:56:dd:52:16:10:8b:87:22:
98:31:73:f5:71:62:c7:8b:f6:88:03:7b:c0:18:f2:9b:ce:c4:
c2:8d:5d:20:5c:b6:04:40:ef:2c:0e:44:b4:e9:28:46:dc:d6:
52:14:27:c4:ef:c4:52:7e:82:c0:c6:d9:32:8c:c9:44:90:d0:
01:0e:6d:a8:bc:f0:32:cc:25:61:f6:a8:d6:a1:5c:18:c6:7e:
d4:f5:02:36:44:1b:aa:34:2f:f0:6d:e0:5b:4a:bd:49:5e:1c:
63:3b:82:ff:37:19:29:e6:7c:61:b8:0d:92:3b:a8:aa:de:2f:
c4:41:19:81:e4:21:7b:7f:10:8a:a8:84:b2:b1:49:d2:8d:58:
04:0f:8f:d7:ca:1b:96:cd:6c:9a:9d:74:9d:a9:d5:0b:2e:19:
50:6b:37:b8:2e:5d:c3:36:7c:ed:01:f1:aa:6f:d3:f9:5f:87:
bc:af:1d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 21:39:40 2025 by rpki-client