Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
File: jt9sKtes7K0Gbh93_gWSLwFpFTY.mft (raw, json)
Hash identifier: YBtoVbSsOUIEE2rQzQtUvaYuwRA2yT2eB1uMdddJ4cM=
Subject key identifier: C6:AB:8F:4D:17:F0:4E:09:B3:A8:19:E5:49:88:FA:5E:48:E4:48:3A
Authority key identifier: 8E:DF:6C:2A:D7:AC:EC:AD:06:6E:1F:77:FE:05:92:2F:01:69:15:36
Certificate issuer: /CN=8edf6c2ad7acecad066e1f77fe05922f01691536
Certificate serial: 01992D7E1812990B827A5E7AF30D62ABF4A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
Manifest number: 06B8
Signing time: Tue 09 Sep 2025 08:01:02 +0000
Manifest this update: Tue 09 Sep 2025 08:01:02 +0000
Manifest next update: Wed 10 Sep 2025 08:01:02 +0000
Files and hashes: 1: LZnMbOvKNCeS9warD4gVCngTQgc.roa (hash: 6Cg/OSuVm718gl/BiJrXMhTNmjh+ffJ7x+FKxzJQO0A=)
2: jt9sKtes7K0Gbh93_gWSLwFpFTY.crl (hash: 7oU73KsDKVAaZoJFPGygiI2zKLbegfkXePQjLQuk0Bw=)
3: yl9TGfZBXnKybJW81dLesyL85jw.roa (hash: 5T9nUKakC/d5Fj82Q3FOurA0Y8gDP1/Vr4z0jWpM3OA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 08:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:7e:18:12:99:0b:82:7a:5e:7a:f3:0d:62:ab:f4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8edf6c2ad7acecad066e1f77fe05922f01691536
Validity
Not Before: Sep 9 08:01:02 2025 GMT
Not After : Sep 10 08:01:02 2025 GMT
Subject: CN=c6ab8f4d17f04e09b3a819e54988fa5e48e4483a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:db:1f:da:4e:9b:b3:b0:d8:9c:c6:27:5c:9f:
ad:f9:11:4c:8b:ab:7d:d9:3b:a3:4c:34:16:a4:53:
8f:2f:ce:39:d9:48:3f:6d:26:1d:b9:22:f8:90:5c:
a1:70:61:c4:fe:c6:98:7f:6e:d6:2f:7b:82:89:38:
f4:e1:11:4d:f3:09:ae:d1:f1:29:22:bb:3e:12:18:
d2:f2:57:43:6f:54:7a:ab:b3:cf:48:44:23:36:b2:
d7:17:59:45:2f:93:fe:86:22:d9:f1:ee:a5:ed:6c:
fc:51:14:bd:f1:2a:77:f4:55:89:1c:66:3e:bb:2f:
fc:6a:b2:2f:c9:b6:39:5c:da:91:0b:14:e1:53:ee:
16:e7:a8:a2:f3:48:88:67:ea:07:50:43:28:cf:9c:
50:2f:13:86:8b:80:3b:e3:eb:a7:c1:5b:be:09:34:
7f:b4:26:30:3b:d2:c9:a6:69:f7:cf:1a:da:10:18:
e8:11:0f:9a:1c:b3:90:e6:1d:b8:b6:1c:05:42:2f:
b3:2c:61:d2:87:21:00:87:7d:71:0a:b5:68:9d:0d:
b6:98:57:92:e4:9a:01:b0:0c:07:41:bf:ae:6c:84:
6a:f9:9e:32:38:6e:7d:49:5a:f1:32:86:54:79:ad:
6b:93:6f:9c:73:f7:b4:89:75:30:df:40:51:16:61:
93:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AB:8F:4D:17:F0:4E:09:B3:A8:19:E5:49:88:FA:5E:48:E4:48:3A
X509v3 Authority Key Identifier:
keyid:8E:DF:6C:2A:D7:AC:EC:AD:06:6E:1F:77:FE:05:92:2F:01:69:15:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jt9sKtes7K0Gbh93_gWSLwFpFTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0e7ef7-1831-42f6-a2cc-ae290d55bdb7/1/jt9sKtes7K0Gbh93_gWSLwFpFTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f9:ee:d3:34:0f:24:e9:79:c6:9d:68:07:6e:09:35:40:16:
97:7b:f8:c0:72:00:dc:7b:c8:ae:0d:bf:03:64:5c:4d:28:93:
9c:69:83:f8:a2:9c:1b:c0:ab:c5:b3:f4:16:c8:3c:ea:ae:d4:
72:7f:4e:7e:75:ce:73:c7:dc:52:4f:f9:60:1d:23:ec:95:a4:
78:31:3d:84:bf:da:02:16:b0:89:46:fc:3e:e9:19:52:4c:f0:
e0:7a:82:22:30:7c:ac:b7:2e:ab:dd:a0:15:62:0a:ae:1e:e9:
df:b5:12:de:a8:66:a8:ad:80:43:69:32:ba:b4:17:1c:21:b5:
1d:ae:85:80:86:f1:04:d5:60:26:b0:62:1e:a1:d9:15:d4:61:
fa:57:41:35:a7:03:0f:b9:99:6d:5a:5c:66:53:a2:b0:25:14:
e7:dd:5a:b5:43:24:a2:8d:ee:c3:c2:31:cb:f1:01:15:54:50:
d6:4c:da:38:83:37:2c:6c:51:d6:38:d7:ae:38:94:a6:c1:8d:
73:7e:49:5c:5f:c8:55:a8:62:0c:d6:fa:d9:91:bd:fe:49:68:
51:bc:9f:ef:34:20:2d:0c:42:ad:84:a3:7b:54:7a:8a:4a:e8:
66:36:c0:68:e6:d9:c9:70:41:5c:f0:7b:5d:78:be:3f:df:6e:
0a:dc:02:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 14:32:56 2025 by rpki-client