Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.mft
File: rJHyMKDi7to4EFIudKaYIAcT5iA.mft (raw, json)
Hash identifier: J7QRO2S03nwIZ2aSGDWJ8fmmduSflpxynOM5JOszH3s=
Subject key identifier: C8:1B:91:2A:97:BE:0D:CE:C8:CF:F7:B7:0F:BD:12:D7:E9:85:98:CE
Authority key identifier: AC:91:F2:30:A0:E2:EE:DA:38:10:52:2E:74:A6:98:20:07:13:E6:20
Certificate issuer: /CN=ac91f230a0e2eeda3810522e74a698200713e620
Certificate serial: 019A27792C96A7E3E84F971410B5E254261B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJHyMKDi7to4EFIudKaYIAcT5iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.mft
Manifest number: 1008
Signing time: Mon 27 Oct 2025 21:00:43 +0000
Manifest this update: Mon 27 Oct 2025 21:00:43 +0000
Manifest next update: Tue 28 Oct 2025 21:00:43 +0000
Files and hashes: 1: gP_zsXfkqrzssG9MD4Zd7ibjL_Y.roa (hash: I686Ip553hliGvYAsWQzyhxBsV7CF+b8RDLkN0tXgB4=)
2: rJHyMKDi7to4EFIudKaYIAcT5iA.crl (hash: k+TYPsZVW3X/ydaJFyqg7Tv4GQ/6M8gQp2C79CIJY/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJHyMKDi7to4EFIudKaYIAcT5iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:79:2c:96:a7:e3:e8:4f:97:14:10:b5:e2:54:26:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac91f230a0e2eeda3810522e74a698200713e620
Validity
Not Before: Oct 27 21:00:43 2025 GMT
Not After : Oct 28 21:00:43 2025 GMT
Subject: CN=c81b912a97be0dcec8cff7b70fbd12d7e98598ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c5:06:08:78:56:5d:bd:a7:1d:9e:5b:68:63:
05:04:76:f9:ff:05:6c:e3:7b:5b:78:e1:16:c8:8d:
cf:b6:d8:32:40:5f:36:57:d0:a0:fb:d8:52:3a:5a:
31:58:7c:e8:6f:f0:76:7e:52:c0:4a:7e:c0:20:89:
36:be:95:ec:8f:fb:56:60:af:68:c9:74:e2:04:10:
d0:d0:37:5b:66:ad:ce:a7:6e:72:28:c3:84:b3:32:
21:83:cc:df:6c:dc:89:85:5c:6b:51:d1:f6:c0:37:
66:9f:3a:a9:aa:c9:bd:3b:e9:e8:e9:a7:6f:df:1e:
bb:65:e9:af:b5:36:eb:4f:8f:5f:01:4f:20:5b:4b:
8c:3e:d8:ee:70:13:a6:9f:60:57:20:2b:7a:71:69:
b3:86:4e:85:04:27:73:f7:59:d5:2b:0b:76:85:62:
69:0b:0a:a5:f4:28:ce:40:41:aa:e5:45:ca:c8:f1:
35:08:b9:b4:15:6e:80:4f:7a:6a:e3:f3:87:ed:58:
aa:63:eb:a9:53:27:34:27:5b:3c:dd:a1:01:d2:36:
68:11:29:bd:91:3a:9a:0c:27:6f:2f:c5:68:19:b5:
55:91:1e:ed:4b:16:8a:e8:dd:9b:56:b3:f9:e9:a3:
85:0c:c2:29:bb:f4:1b:10:92:5f:98:c1:7d:87:ca:
3c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1B:91:2A:97:BE:0D:CE:C8:CF:F7:B7:0F:BD:12:D7:E9:85:98:CE
X509v3 Authority Key Identifier:
keyid:AC:91:F2:30:A0:E2:EE:DA:38:10:52:2E:74:A6:98:20:07:13:E6:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJHyMKDi7to4EFIudKaYIAcT5iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:8a:f8:72:f2:8f:a0:94:48:25:1f:5a:e0:96:72:1c:29:a1:
85:bc:0d:74:77:3e:04:54:54:a6:d0:f6:8e:e7:15:69:ff:39:
a3:cb:a2:4a:07:da:4b:c6:29:91:36:86:9e:a7:e8:b3:2a:70:
a6:90:5a:8a:7d:1f:b6:dc:9f:25:a8:da:d6:1d:69:17:f1:53:
51:59:4a:13:e4:01:52:f2:1e:b5:ae:ea:c8:59:0f:29:ae:99:
bf:d7:d1:65:a9:2d:7f:99:3a:6b:d6:18:49:2e:fd:c2:b0:4b:
a1:f8:3d:be:90:ee:10:0a:85:7d:10:e8:b3:74:e5:7a:2b:d2:
be:39:77:16:2b:9c:1c:bd:b9:03:80:d1:f0:e9:1a:68:9a:22:
db:09:46:fe:53:e3:1b:47:76:d7:24:ca:e9:01:b0:24:af:3d:
e0:b3:38:01:3b:9a:bc:fd:0f:bd:43:e7:41:81:78:dd:9f:30:
a9:45:10:c3:93:a7:a8:8a:f3:c3:06:63:ef:30:2d:65:24:33:
4c:e2:8d:89:68:51:cf:d3:d2:aa:bb:f5:10:15:e5:d8:27:e6:
7a:cd:e0:fb:40:75:67:1c:46:5f:b6:f0:a0:93:b8:ff:f8:1f:
9e:9b:00:88:e5:55:0f:60:3f:f2:ca:55:b0:fa:22:db:44:95:
c5:f3:9c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 02:41:09 2025 by rpki-client