Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft
File: sj64SeC2lA5P9UfeC0GwA_nhEFw.mft (raw, json)
Hash identifier: EUhNbB3z2YXcnw8hq3juYAA98kQMQKGEOG3zx8R9dF4=
Subject key identifier: 11:FA:7B:88:0E:F4:0F:CA:9B:56:8F:7F:44:2B:E3:16:35:EF:4A:15
Authority key identifier: B2:3E:B8:49:E0:B6:94:0E:4F:F5:47:DE:0B:41:B0:03:F9:E1:10:5C
Certificate issuer: /CN=b23eb849e0b6940e4ff547de0b41b003f9e1105c
Certificate serial: 019A232E482BCDD12D0BC6FFD42D75587680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft
Manifest number: 0A61
Signing time: Mon 27 Oct 2025 01:00:26 +0000
Manifest this update: Mon 27 Oct 2025 01:00:26 +0000
Manifest next update: Tue 28 Oct 2025 01:00:26 +0000
Files and hashes: 1: 9svgo4bGRBf8fMpSXvge7RoyrHM.roa (hash: teVQdkK97LTCrE/CLpJAuLsspKcnHRjqSI/rfD5Q6hA=)
2: fetFKuopmwnkmS4GdVahSkuSTYA.roa (hash: COKnfUPWTvK88/nI2sTAGQJZnRfr5E0q/yyW5/NYsSI=)
3: sj64SeC2lA5P9UfeC0GwA_nhEFw.crl (hash: lNXznjF9m4xul0OjnMzJJbm6jvLoUQSvoR7hbRnY7CI=)
4: tYCsQPIyFJmQyf9thG5Is7jI5NY.roa (hash: b/PwLfTfSmleVVur7ZKT8j1+gDLO4fZy6WoOsM743EE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:2e:48:2b:cd:d1:2d:0b:c6:ff:d4:2d:75:58:76:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b23eb849e0b6940e4ff547de0b41b003f9e1105c
Validity
Not Before: Oct 27 01:00:26 2025 GMT
Not After : Oct 28 01:00:26 2025 GMT
Subject: CN=11fa7b880ef40fca9b568f7f442be31635ef4a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5a:42:e5:ae:15:86:fa:5d:41:b5:5e:c2:df:
0b:e3:a7:3a:2a:2e:87:32:19:a8:1e:21:11:bd:1c:
1c:d6:af:bd:43:b0:b6:e1:2b:5c:81:8f:ae:c2:ce:
a5:b0:2e:38:06:52:84:e0:a0:25:8a:8b:b8:51:52:
4e:aa:4d:a5:3f:9c:c6:dc:68:68:a0:4b:62:08:b0:
67:74:c1:ad:e2:39:12:9c:00:b5:f4:af:4f:89:dc:
51:d8:1b:50:49:f5:58:9b:88:25:f9:86:0a:0d:1b:
42:db:f1:b3:76:e8:54:43:87:5c:86:9b:d8:d6:d5:
1f:5f:f7:18:79:49:23:fb:ed:1e:ab:51:b2:27:c9:
17:cc:f2:d9:c8:1e:c8:d0:7b:ad:18:05:9f:52:9f:
9c:b1:7a:e8:38:e5:01:f2:15:cd:bf:bc:de:20:63:
9a:07:04:c4:8f:f1:2a:f5:9a:d8:99:72:8d:4e:40:
a6:6d:91:71:51:99:d4:27:9a:3a:c9:63:e0:5d:db:
20:69:54:37:0d:3c:ad:b4:e1:34:a6:73:a6:ab:65:
8f:87:9e:47:77:cb:f2:ae:6d:a5:35:cc:b7:7b:3a:
34:c0:3b:96:5a:46:7c:0d:df:ea:c2:c3:e4:2d:cd:
1c:76:97:54:34:ca:62:20:5a:d1:d1:80:af:49:47:
5d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FA:7B:88:0E:F4:0F:CA:9B:56:8F:7F:44:2B:E3:16:35:EF:4A:15
X509v3 Authority Key Identifier:
keyid:B2:3E:B8:49:E0:B6:94:0E:4F:F5:47:DE:0B:41:B0:03:F9:E1:10:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sj64SeC2lA5P9UfeC0GwA_nhEFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/sj64SeC2lA5P9UfeC0GwA_nhEFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:35:25:cc:22:59:77:b9:b2:78:56:43:0e:66:d8:f4:8e:3a:
ff:38:ad:9d:a4:cb:ff:16:51:b9:61:16:39:40:3d:0a:dc:db:
6f:2d:fa:d3:42:d3:01:aa:4c:26:62:10:0b:48:02:bc:28:9d:
f2:4e:84:5b:f4:64:4f:b0:9c:ea:3d:81:8f:5e:66:10:85:5c:
62:7f:cd:51:88:61:0d:f2:29:a4:49:08:5a:8f:2e:b9:16:1b:
6c:49:44:bb:dc:94:59:9f:d2:bf:4b:90:83:9e:fc:16:d7:98:
c0:5e:d0:ad:7e:c6:74:38:45:3e:3a:ca:73:0c:28:99:67:bd:
be:74:62:99:3b:84:2d:20:12:61:32:7a:46:7d:cb:68:2d:0c:
0d:88:9e:97:21:c1:1f:5d:3e:e6:8f:e8:90:41:de:33:7f:ba:
39:8a:e3:56:bf:b7:3e:64:35:be:2b:21:5d:74:c6:6a:3a:f8:
14:d7:20:d6:4c:c1:8a:e5:e7:f5:eb:50:9b:24:a2:e2:76:2a:
f9:09:31:65:b4:eb:51:be:9b:90:fb:b7:79:0e:81:c0:45:d8:
26:8d:18:1e:5e:70:3a:27:24:87:ad:a5:d8:42:9a:dc:80:45:
28:6f:13:ff:76:ec:10:62:60:78:04:be:52:67:61:be:c3:67:
5c:e4:39:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:04:04 2025 by rpki-client