Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft
File: jo6Xer76Kh-ZXonJR_79Rja3lhw.mft (raw, json)
Hash identifier: p+DycXKvbzgmYJTXifDiTnuQkuqa2iLR3XWFoYOf9YA=
Subject key identifier: 51:B7:F7:C8:0F:45:88:4D:B9:7A:B1:24:11:D3:84:B8:A3:8F:43:04
Authority key identifier: 8E:8E:97:7A:BE:FA:2A:1F:99:5E:89:C9:47:FE:FD:46:36:B7:96:1C
Certificate issuer: /CN=8e8e977abefa2a1f995e89c947fefd4636b7961c
Certificate serial: 019A21E4BECBD3E58FC1B20F376096B8BF62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft
Manifest number: 1A
Signing time: Sun 26 Oct 2025 19:00:29 +0000
Manifest this update: Sun 26 Oct 2025 19:00:29 +0000
Manifest next update: Mon 27 Oct 2025 19:00:29 +0000
Files and hashes: 1: 1-1JiGSnRfJkGIdCY6ITAZRKA8LI.roa (hash: NxHneWDr/Bysr9GfZGnTiOG68S5eU/eXkBxXj/MldpQ=)
2: jo6Xer76Kh-ZXonJR_79Rja3lhw.crl (hash: puZUnGpq3nSWdKJPEK4dXb9TaRj939T0Q+3F8hRdUpk=)
3: ow60WK19GLScvXjofKcYY7rIu7Q.roa (hash: k9aBIwcpyP8JupLuwo0clAFTDBkWTnr5IYecYXpvwdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:e4:be:cb:d3:e5:8f:c1:b2:0f:37:60:96:b8:bf:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8e977abefa2a1f995e89c947fefd4636b7961c
Validity
Not Before: Oct 26 19:00:29 2025 GMT
Not After : Oct 27 19:00:29 2025 GMT
Subject: CN=51b7f7c80f45884db97ab12411d384b8a38f4304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:0f:11:5a:18:c2:45:c0:8b:91:34:75:01:ee:
27:97:07:40:2a:bb:a5:1a:d0:33:cd:a9:eb:0c:52:
ea:ae:27:5c:e5:b7:95:76:86:7a:1e:4b:fd:6c:56:
e6:80:03:1a:54:e8:9e:62:1e:d4:29:0f:0d:6f:2b:
5a:59:dd:b5:b6:c4:34:f6:d2:25:5b:da:31:c4:6e:
de:a9:b9:7a:a2:cb:57:02:5e:db:9d:23:8b:1c:54:
1e:30:79:29:30:c8:49:3c:33:46:81:5b:9b:1c:ce:
95:5c:3b:c5:4b:7b:6a:dd:94:22:31:b0:41:23:80:
ee:f3:1a:11:aa:19:fe:0c:48:49:7a:04:33:af:a6:
66:29:07:bb:42:e1:8f:7f:af:a0:61:ec:1e:ca:90:
89:cf:b8:56:15:1b:78:9e:67:ed:09:0b:dd:f3:8c:
d3:a9:2b:c8:8a:0a:75:c0:61:5e:b9:c7:e2:d6:8f:
cf:e1:06:3f:a0:c7:53:75:c0:10:e9:14:f3:c5:dd:
bc:27:ec:e0:70:30:0b:c1:b5:2f:13:d5:60:57:77:
66:3b:74:f8:70:fe:3b:33:3f:97:4d:68:2f:9b:e0:
6e:e6:45:08:82:ad:f5:9a:23:a9:11:e1:4f:f1:41:
21:60:73:7b:31:a4:1a:d6:19:88:dc:ab:b0:0d:41:
d7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B7:F7:C8:0F:45:88:4D:B9:7A:B1:24:11:D3:84:B8:A3:8F:43:04
X509v3 Authority Key Identifier:
keyid:8E:8E:97:7A:BE:FA:2A:1F:99:5E:89:C9:47:FE:FD:46:36:B7:96:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jo6Xer76Kh-ZXonJR_79Rja3lhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3d572-3dc7-4b46-9269-3c30a0ad13f6/1/jo6Xer76Kh-ZXonJR_79Rja3lhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:fe:2b:7f:ac:aa:28:23:54:11:42:d2:9d:ad:60:7d:63:23:
ab:eb:8d:56:10:05:46:ba:99:76:e2:36:75:ff:59:96:c2:62:
2a:3e:cd:b8:31:d2:1c:80:2e:2f:1a:d5:c0:68:46:42:0b:91:
71:04:c1:0c:34:32:d3:4e:7d:db:f1:5e:ad:5b:01:3f:04:96:
5e:cc:16:9b:2a:82:22:d7:f1:12:ad:20:91:a6:cd:8c:6b:ef:
0b:d4:07:04:7a:20:d5:c1:7b:ab:11:44:d0:9b:e1:03:cf:b2:
41:fd:2e:50:6d:2c:8e:f6:31:bb:f3:c6:75:22:7a:b4:3c:51:
26:71:1b:06:ba:09:33:27:ff:03:87:28:e5:95:16:68:27:a1:
03:3b:51:5d:ef:7d:26:a2:7f:fc:8d:4d:a2:19:85:92:10:dd:
e4:16:7c:35:d9:c1:88:34:42:8c:f9:11:47:06:10:12:c1:c2:
a3:68:28:0b:b6:bd:e6:9f:d4:40:6d:81:8e:24:d8:ab:a8:a0:
53:af:22:c5:14:fd:22:2a:49:3f:7a:71:8f:fc:a1:4e:db:6a:
30:55:52:ac:e7:45:2d:b8:9c:4f:cb:55:e6:e2:ad:c2:0b:68:
01:26:7c:d4:2d:94:f1:a1:89:22:21:98:54:8b:78:c4:19:72:
93:55:1c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:23:48 2025 by rpki-client