Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft
File: tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft (raw, json)
Hash identifier: nIqAWeHphFAdl5gBGvq0wvZtRGjbxkJbeGggaDUodI0=
Subject key identifier: BB:9F:2B:F5:4C:6A:13:AE:1A:13:19:27:9B:BA:84:41:59:31:57:F3
Authority key identifier: B6:3F:97:69:DF:97:B8:B9:AA:88:BD:22:E9:F4:1C:C2:7F:CF:16:A7
Certificate issuer: /CN=b63f9769df97b8b9aa88bd22e9f41cc27fcf16a7
Certificate serial: 019A729335070EB1D7FCE59E134E90875297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tj-Xad-XuLmqiL0i6fQcwn_PFqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft
Manifest number: 060A
Signing time: Tue 11 Nov 2025 11:00:41 +0000
Manifest this update: Tue 11 Nov 2025 11:00:41 +0000
Manifest next update: Wed 12 Nov 2025 11:00:41 +0000
Files and hashes: 1: Zw8tldKF4IamTYiqaUWTp-ORWaM.roa (hash: +YY2MSi0DHjKWNmQtrNLuY1Ni5g7MizVHlrZ12WPMsk=)
2: tj-Xad-XuLmqiL0i6fQcwn_PFqc.crl (hash: JtodoRJCFAtRpp1/jL9XTrtxe8YpKdpINGTaqQW7tZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tj-Xad-XuLmqiL0i6fQcwn_PFqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:35:07:0e:b1:d7:fc:e5:9e:13:4e:90:87:52:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b63f9769df97b8b9aa88bd22e9f41cc27fcf16a7
Validity
Not Before: Nov 11 11:00:41 2025 GMT
Not After : Nov 12 11:00:41 2025 GMT
Subject: CN=bb9f2bf54c6a13ae1a1319279bba8441593157f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cd:01:09:af:2e:79:02:39:92:c1:44:dd:3d:
12:d0:e9:ef:60:c0:6a:e0:b7:08:31:24:53:f2:25:
f5:e1:2d:10:89:65:30:8e:54:a1:6b:4e:b5:b0:d1:
fb:26:9b:33:5e:58:3c:f8:b5:f9:cc:dc:79:00:d7:
cd:b1:4b:30:92:3c:c4:15:23:d9:94:00:ca:bb:d0:
4c:44:95:8f:95:9f:76:70:aa:82:82:f5:b4:c5:e3:
71:bf:84:7d:b0:c3:19:21:fc:33:33:c8:47:3a:98:
6e:24:8b:34:26:de:84:1e:b2:f1:38:dc:24:e5:9f:
5b:8e:f5:b5:3a:a4:32:21:0f:c0:83:27:75:c3:dc:
3b:f4:e6:c4:55:79:ba:7f:b3:70:9a:52:c5:17:be:
d6:c7:c0:75:40:55:68:87:e9:09:34:86:2c:97:38:
cf:ed:54:c6:b1:05:17:4b:58:1b:23:96:85:bf:09:
11:78:95:ae:7e:9d:8c:11:40:4f:a7:ae:06:a0:74:
bf:7d:ba:22:05:53:4a:d0:26:de:f7:20:e0:87:d3:
10:36:c8:01:8a:20:e8:9f:10:f8:ea:44:07:b6:53:
99:fc:dc:33:90:4c:6d:70:3c:26:1d:86:87:30:5b:
a7:29:26:1b:7e:e5:4b:d7:97:a7:a5:f4:3e:52:33:
26:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9F:2B:F5:4C:6A:13:AE:1A:13:19:27:9B:BA:84:41:59:31:57:F3
X509v3 Authority Key Identifier:
keyid:B6:3F:97:69:DF:97:B8:B9:AA:88:BD:22:E9:F4:1C:C2:7F:CF:16:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tj-Xad-XuLmqiL0i6fQcwn_PFqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ef:f9:c5:68:54:48:8e:f6:00:b9:07:76:01:2c:e3:bb:a4:
5b:67:f9:15:b6:4c:bb:80:19:fb:b6:3e:d7:b8:76:73:79:a4:
40:4f:60:77:94:a3:87:61:7b:3c:41:94:a6:c5:0d:09:fb:38:
72:5c:ae:b3:54:1b:1b:17:a7:05:6c:bb:38:91:da:6a:9b:57:
46:9d:5b:d0:e4:3f:99:d9:cf:a8:1d:d1:10:51:8e:18:56:b1:
52:1f:90:d9:66:94:d0:76:63:c5:4d:3c:95:d4:10:b0:be:72:
5e:e7:cc:a5:30:72:66:e9:c2:33:0b:5f:fa:79:65:25:17:e1:
9f:a1:e7:7a:99:82:2d:e6:51:07:1e:4a:28:76:1e:6e:20:f3:
5d:f3:6c:1c:e1:d3:a8:71:9a:d6:de:d1:c8:d5:f9:e4:df:69:
9d:de:6d:8d:e4:99:be:7f:99:de:31:f7:0d:62:21:d5:e1:52:
04:3c:af:21:9f:75:77:04:7b:9c:d7:62:f3:da:c9:77:3e:e6:
8e:2e:96:c3:ec:59:7c:10:f8:4a:36:4c:3b:b9:2a:e6:39:9b:
df:10:57:29:e9:e4:5f:70:70:ef:7d:bf:bd:7c:f6:9a:d8:6f:
ad:53:9e:0d:72:72:96:0f:e7:38:08:03:b7:d4:75:9c:4c:9c:
5e:a1:26:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:47 2025 by rpki-client