Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
File: jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft (raw, json)
Hash identifier: 5o7iDz6LItPf6Mfwo+btqx0++kCWQx9z8AgBVukOhmY=
Subject key identifier: 07:E6:C2:4A:EC:77:96:7D:6E:59:33:89:3E:CD:06:E1:68:D6:A1:D6
Authority key identifier: 8C:3F:53:8F:8A:01:ED:D0:A7:6B:00:8B:4D:45:D4:1F:67:82:1B:D2
Certificate issuer: /CN=8c3f538f8a01edd0a76b008b4d45d41f67821bd2
Certificate serial: 019A29303880CE467831AB7D58DC28EAE13D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
Manifest number: 0A6A
Signing time: Tue 28 Oct 2025 05:00:17 +0000
Manifest this update: Tue 28 Oct 2025 05:00:17 +0000
Manifest next update: Wed 29 Oct 2025 05:00:17 +0000
Files and hashes: 1: jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl (hash: lAPbq/jXxgFneFHZ6X8wTUa0oNGrumZFVw3aK/7WNWI=)
2: y1KtkhbJcf8xMKGegKszt0QDaOo.roa (hash: MP5sL9q4mE2nj3U5Tn7LLkafXsvaYmUnSKWAsDGsqZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:30:38:80:ce:46:78:31:ab:7d:58:dc:28:ea:e1:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c3f538f8a01edd0a76b008b4d45d41f67821bd2
Validity
Not Before: Oct 28 05:00:17 2025 GMT
Not After : Oct 29 05:00:17 2025 GMT
Subject: CN=07e6c24aec77967d6e5933893ecd06e168d6a1d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:13:87:64:fe:22:80:72:a4:2d:c4:e1:85:5f:
8c:1d:91:65:c1:39:f4:60:be:04:77:75:0c:ef:5a:
23:2d:d6:e7:ae:6c:7c:9b:77:68:dd:91:2f:4c:91:
1c:fe:b9:83:2b:b9:8d:90:ae:68:f3:6f:82:2a:1d:
d0:55:24:13:d6:b0:62:66:2b:3e:8d:e0:76:f6:4b:
6e:28:6f:b0:c1:ee:ab:bc:03:50:be:7b:e3:b4:d9:
a8:1c:66:dd:ff:2f:03:b0:a9:ba:68:14:76:43:21:
52:39:dc:29:79:70:ba:e8:81:08:22:09:27:fb:4e:
8c:c5:26:07:d1:ae:b6:c0:af:dc:ee:42:45:c3:77:
ed:42:72:30:04:56:86:3b:1c:ba:e3:15:80:ef:af:
82:32:44:82:75:65:45:22:54:c5:9c:ee:bd:76:aa:
1a:8e:ed:04:06:d9:6a:26:0c:8e:96:d0:05:40:d3:
82:a5:36:06:95:2e:56:ac:50:ab:bd:a3:59:63:ef:
c2:65:69:36:82:a0:bc:02:9b:ca:50:44:0e:60:17:
da:25:37:5e:12:c5:79:e7:ce:51:ac:ad:92:9f:ab:
b5:94:e1:84:70:61:b0:3a:63:6f:f2:70:77:b3:70:
21:85:18:e2:9c:94:92:76:13:c7:0e:cf:80:e8:89:
4b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E6:C2:4A:EC:77:96:7D:6E:59:33:89:3E:CD:06:E1:68:D6:A1:D6
X509v3 Authority Key Identifier:
keyid:8C:3F:53:8F:8A:01:ED:D0:A7:6B:00:8B:4D:45:D4:1F:67:82:1B:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jD9Tj4oB7dCnawCLTUXUH2eCG9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a1882e-0c4c-4696-885d-cd6a503163d6/1/jD9Tj4oB7dCnawCLTUXUH2eCG9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:70:55:c2:25:45:2a:7a:cf:51:ea:4c:04:d5:8a:c3:16:ca:
f4:29:6f:51:46:87:cb:81:e8:f5:bf:e0:e7:81:e6:17:6d:57:
33:ab:18:f4:e0:e8:7a:52:97:51:6c:b4:7e:40:7a:dd:f3:3c:
e5:a5:7b:74:72:14:6e:f8:e9:12:b3:07:29:39:a4:38:ce:a8:
d2:77:2f:ce:34:c3:e2:f7:19:8a:29:11:21:44:1f:c7:66:0b:
c3:86:8f:17:ca:03:d1:f4:8d:3f:17:00:a3:39:6e:e3:f2:04:
a1:c2:ae:64:ac:e1:55:53:63:28:b5:1f:5a:b6:bb:dc:2d:07:
59:f2:37:74:74:b8:c2:92:b1:08:50:4f:13:df:96:dc:f8:19:
6e:28:29:ce:00:41:69:e5:3a:7e:85:7f:dc:d3:16:8b:c1:83:
7c:f6:1e:8b:fd:f5:0e:1f:8f:b7:e6:3b:85:21:67:eb:ad:23:
27:23:e9:0c:28:ab:be:a0:7d:2c:a5:2e:08:55:fb:83:a5:04:
77:5c:a4:1e:2d:00:fa:a9:3b:6c:1d:3a:32:9d:25:2f:f7:68:
bc:78:1e:ba:39:58:62:51:af:c9:b2:04:e3:5e:f5:c5:77:0a:
52:e7:96:ba:42:dc:df:14:82:20:ee:9b:ec:2f:b0:4d:c0:be:
fb:31:58:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 14:09:27 2025 by rpki-client