Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
File: jG6tuGWbxzTcyyn2OEIQNruSLjY.mft (raw, json)
Hash identifier: sIjOitPyn/OCDBvgOQvPJ/qWKsAApuzS7uxJbmSJQ34=
Subject key identifier: F3:E3:2D:60:B8:18:38:FE:83:E5:09:10:42:08:0E:8A:C6:76:58:66
Authority key identifier: 8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
Certificate issuer: /CN=8c6eadb8659bc734dccb29f638421036bb922e36
Certificate serial: 019A09A557CD676367EC7457CCED9C705623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
Manifest number: 15AE
Signing time: Wed 22 Oct 2025 02:00:22 +0000
Manifest this update: Wed 22 Oct 2025 02:00:22 +0000
Manifest next update: Thu 23 Oct 2025 02:00:22 +0000
Files and hashes: 1: KvT2aD-Nq99_oM197F2X-Rw9L6I.roa (hash: z15bd9Fqf6jzglQODAptaKPS3RXs1Yi0RA0HfH1lDmU=)
2: NarRGiguJ47YJ26p29Ce-F1nGL8.roa (hash: c5Octm28rGn9ztGD+Y+RSPjVs16OTUfeUQ0o7SxOT5c=)
3: jG6tuGWbxzTcyyn2OEIQNruSLjY.crl (hash: Edwvj4tgMde3GAW7T4eJ1tser0R722Hxp0ZO07io9Bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:09:a5:57:cd:67:63:67:ec:74:57:cc:ed:9c:70:56:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c6eadb8659bc734dccb29f638421036bb922e36
Validity
Not Before: Oct 22 02:00:22 2025 GMT
Not After : Oct 23 02:00:22 2025 GMT
Subject: CN=f3e32d60b81838fe83e5091042080e8ac6765866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:20:e1:de:09:c3:61:bb:34:a8:ca:1b:a9:a8:
28:93:99:1b:a9:15:85:dc:c2:d3:27:91:24:ff:73:
4e:aa:aa:5a:b3:32:79:56:a8:7e:4b:81:c0:9b:d3:
bf:1e:7a:54:96:e7:b1:22:7e:2d:b2:57:d4:7b:12:
d0:73:f5:d0:ec:d3:90:a7:40:24:b8:02:e9:40:e2:
11:d2:9b:b9:16:e1:85:dd:dd:54:2c:66:1a:a0:9b:
1f:03:be:23:08:38:36:e8:7f:d0:8d:49:94:17:7b:
19:72:b7:cd:1f:c3:35:7c:a4:79:27:21:5b:e1:19:
c8:4f:2c:9d:3e:28:11:df:7c:71:c9:d7:1c:a4:3a:
24:0f:0b:4b:0d:85:12:cc:58:d7:eb:12:cd:9f:5b:
9a:1f:2c:96:c0:31:7b:d8:af:af:a1:4f:60:fc:39:
77:bc:5b:8d:ed:f5:5f:89:a4:8b:fa:42:63:9a:ef:
41:fc:54:6b:0a:dc:14:c0:e6:de:d7:ba:6f:68:08:
36:31:2b:3c:33:c5:b0:fc:25:e8:3f:9c:ba:64:7a:
ab:51:b2:5a:70:df:13:1b:db:15:86:85:a4:e7:7d:
ba:ef:33:6c:32:86:c1:d6:97:c8:63:f2:b4:3e:43:
5d:01:a6:eb:71:81:be:44:e5:a1:41:ef:66:b4:6d:
d4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E3:2D:60:B8:18:38:FE:83:E5:09:10:42:08:0E:8A:C6:76:58:66
X509v3 Authority Key Identifier:
keyid:8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:07:23:2e:7a:13:34:d2:3a:1f:90:ac:e0:73:46:6c:ff:2c:
8c:4a:1f:3e:7c:f6:45:33:17:84:ce:e2:ef:50:9d:cb:c6:cb:
c1:6a:de:bc:5e:34:93:f1:50:b9:9f:0a:e4:c9:fc:d6:04:1f:
4d:83:64:18:89:2f:b9:01:3e:b2:be:e8:a5:5d:55:65:4e:f2:
bd:0d:b2:8a:13:65:18:0f:3a:14:5c:ee:d5:4e:b8:69:73:27:
1a:a4:06:5a:57:5f:c3:89:0b:87:49:2d:6f:08:49:91:af:21:
ca:86:bd:74:1a:26:c5:8f:14:c3:7f:ed:b4:96:c5:08:d4:10:
38:fc:da:ed:67:0a:81:5a:70:66:e1:e3:22:8a:a9:47:4a:58:
2f:c7:24:af:1d:15:a8:f8:8d:b7:ef:d7:14:c6:02:dd:70:d4:
24:8e:5f:f2:01:3a:cd:ce:0e:3a:17:ee:09:14:24:34:fa:f7:
07:2f:9f:08:90:c8:8d:77:2c:f5:86:61:87:bb:9c:4c:5c:1e:
21:cb:de:a3:6e:4e:19:3f:b3:28:e8:24:bd:de:2f:da:6e:4a:
6f:90:57:36:95:fc:1d:f3:9e:34:82:61:1b:43:9f:8a:99:6d:
08:f6:87:ad:b8:23:84:4b:df:06:d7:b2:f9:d0:0e:e2:75:ff:
e2:d0:40:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 12:10:41 2025 by rpki-client