Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft
File: 36JPgpi-GMimnxgSjwZOcAPh090.mft (raw, json)
Hash identifier: YEIJnUQtj4XK/e2BnBTEljfomgaHMnEypBwk8De7Rc8=
Subject key identifier: F6:24:41:FC:89:C4:C9:31:E4:43:40:C7:77:B9:40:44:8D:52:56:88
Authority key identifier: DF:A2:4F:82:98:BE:18:C8:A6:9F:18:12:8F:06:4E:70:03:E1:D3:DD
Certificate issuer: /CN=dfa24f8298be18c8a69f18128f064e7003e1d3dd
Certificate serial: 019A23D35A85A20A8089ABCD7C0AFBEABD51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36JPgpi-GMimnxgSjwZOcAPh090.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft
Manifest number: 0DEC
Signing time: Mon 27 Oct 2025 04:00:45 +0000
Manifest this update: Mon 27 Oct 2025 04:00:45 +0000
Manifest next update: Tue 28 Oct 2025 04:00:45 +0000
Files and hashes: 1: 36JPgpi-GMimnxgSjwZOcAPh090.crl (hash: AOG4OWvmsdIK70RrDMBPdB4OeBGTMpIz+lUea4JepAQ=)
2: Ng0Z_Y8YOqJU-aJwUaovvEl0tDk.roa (hash: hZn0EBlBpjbO2T+dcLbeLS+VLWtfhrO+ME9lcig54Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft
rsync://rpki.ripe.net/repository/DEFAULT/36JPgpi-GMimnxgSjwZOcAPh090.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d3:5a:85:a2:0a:80:89:ab:cd:7c:0a:fb:ea:bd:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfa24f8298be18c8a69f18128f064e7003e1d3dd
Validity
Not Before: Oct 27 04:00:45 2025 GMT
Not After : Oct 28 04:00:45 2025 GMT
Subject: CN=f62441fc89c4c931e44340c777b940448d525688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a3:6a:81:76:ce:28:f1:1f:1a:38:ac:13:bf:
86:08:83:5c:ff:40:36:10:59:12:1b:ce:f0:86:a1:
d5:4b:eb:c0:a8:e8:fb:7c:7c:d6:1e:06:56:db:82:
ba:01:18:88:e9:71:55:63:5e:18:7e:ed:44:4b:3b:
aa:b8:d0:f4:86:8e:a4:a9:4c:33:79:82:8d:be:0c:
09:e1:ed:6c:4c:98:5f:88:3b:f1:40:b7:95:f9:c3:
19:22:83:0b:6d:11:39:a1:29:4f:1e:c2:8c:25:e9:
8b:11:3e:89:5a:ea:69:a8:92:f3:ac:d2:82:70:fa:
76:b5:21:ea:f4:56:8b:00:8f:bc:41:ca:5e:e9:cb:
77:3d:8a:1c:a3:9e:be:68:6d:c8:68:eb:86:ea:59:
be:29:cf:17:3c:19:ff:d7:5b:72:a8:86:34:93:00:
e3:c5:32:79:18:b7:e9:c0:3a:76:ea:56:c0:a8:e8:
77:f0:6a:de:06:20:4a:cb:6a:99:e1:82:24:0d:55:
cc:fe:3e:44:1a:39:22:fb:d1:52:f8:c7:94:00:a5:
f0:96:bf:da:15:60:8d:9b:c6:ab:dc:ef:8f:1d:e2:
42:d7:d8:0f:85:17:75:a1:7b:d6:d5:77:db:07:18:
47:67:36:ac:8c:0e:49:a8:df:16:2a:52:ad:37:bd:
0b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:24:41:FC:89:C4:C9:31:E4:43:40:C7:77:B9:40:44:8D:52:56:88
X509v3 Authority Key Identifier:
keyid:DF:A2:4F:82:98:BE:18:C8:A6:9F:18:12:8F:06:4E:70:03:E1:D3:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36JPgpi-GMimnxgSjwZOcAPh090.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c1fe4d-ab5a-4071-ba2a-d5a06d8ab984/1/36JPgpi-GMimnxgSjwZOcAPh090.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:26:46:bf:b8:d5:ca:be:b2:19:1e:4e:fa:af:d8:f3:a4:bd:
ea:d1:4d:96:18:46:39:1b:ea:37:47:dd:e3:10:de:17:30:46:
aa:ca:f6:9a:82:02:20:88:d0:f3:eb:f4:3b:8e:93:9f:5e:a4:
69:28:9b:df:3f:a5:5c:a5:95:9c:86:f5:9e:fd:78:03:1b:00:
2d:fb:cb:3e:c7:0b:00:6d:78:06:93:16:13:1b:aa:70:26:b6:
52:8a:88:58:2b:9b:d5:6d:79:fc:2c:c6:5b:37:ac:47:b3:f8:
8a:ea:d2:da:32:f0:16:39:af:3c:cd:bf:4d:b8:f6:01:73:1f:
2d:ba:68:28:d0:21:a9:38:19:9d:5b:ec:9f:03:09:e2:43:35:
92:73:55:80:de:62:12:c0:ef:fc:38:9e:06:69:50:74:0f:d0:
68:a1:94:c4:1e:00:af:bd:7b:c1:b0:17:af:2a:a2:65:a3:d0:
b2:3d:27:9a:a7:7b:7c:62:0f:56:69:6a:34:87:da:a8:6f:2f:
d0:c2:97:d9:41:65:6e:94:1e:0a:56:c2:b3:ee:b0:c3:9d:5e:
b0:df:d5:09:36:b9:91:86:bb:97:d9:53:58:8b:a1:e3:e1:c7:
1b:88:fc:7c:b4:a5:78:c0:bc:e5:e6:05:16:e4:b7:ec:f2:70:
47:a0:3c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:08:48 2025 by rpki-client