Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft
File: j-YTvuu37zaZLASRrROyZwcFcmA.mft (raw, json)
Hash identifier: FLemUdu15DpYrN1CxzmHks/JkDBOrRLxTlMSTm5UQDs=
Subject key identifier: 58:D2:31:72:13:60:68:63:93:42:F3:32:46:AF:8B:89:55:92:E7:C5
Authority key identifier: 8F:E6:13:BE:EB:B7:EF:36:99:2C:04:91:AD:13:B2:67:07:05:72:60
Certificate issuer: /CN=8fe613beebb7ef36992c0491ad13b26707057260
Certificate serial: 019A733814CDA3AC6D08431D316D11274C54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-YTvuu37zaZLASRrROyZwcFcmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft
Manifest number: 0CB0
Signing time: Tue 11 Nov 2025 14:00:46 +0000
Manifest this update: Tue 11 Nov 2025 14:00:46 +0000
Manifest next update: Wed 12 Nov 2025 14:00:46 +0000
Files and hashes: 1: M8YwlBl4UsZFSGK22ajYHB1I9kk.roa (hash: NMhetTmMl7auiquiJXvinAOe9UpVWlWTrYgSxnLH8n8=)
2: j-YTvuu37zaZLASRrROyZwcFcmA.crl (hash: uDgJAYIrqYYeQOEMhQkURw2L44GrspIRWNWXHBEXa0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/j-YTvuu37zaZLASRrROyZwcFcmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:14:cd:a3:ac:6d:08:43:1d:31:6d:11:27:4c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe613beebb7ef36992c0491ad13b26707057260
Validity
Not Before: Nov 11 14:00:46 2025 GMT
Not After : Nov 12 14:00:46 2025 GMT
Subject: CN=58d23172136068639342f33246af8b895592e7c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:54:bc:3e:73:2f:ab:a5:53:ce:04:05:30:9b:
82:0c:37:17:bc:bf:33:9f:b8:26:37:78:af:ca:44:
c4:00:ad:05:90:a0:88:5f:ff:f9:62:b8:8e:0e:50:
71:89:ff:27:13:86:34:2b:98:5e:4b:f2:a2:a6:97:
b9:b3:4f:25:74:5e:5f:e7:1c:96:d1:4a:f9:81:ea:
f4:b4:f7:54:03:34:a7:5b:c8:d8:b3:49:ba:31:5e:
9e:37:2b:d8:e5:6d:9c:b1:6d:3a:e4:c1:60:5c:04:
4b:80:d6:68:4c:63:3b:b7:e2:2e:78:34:d7:31:fd:
34:8a:fa:52:1a:55:55:11:93:91:3f:ff:d8:b7:7a:
71:41:ff:1c:ab:fe:f2:f3:11:dc:aa:ed:e7:a3:d6:
3a:63:ea:23:9f:08:63:8b:ed:9f:1e:ff:49:5c:81:
6b:ce:22:5c:6b:d1:7d:31:6c:10:3d:52:3c:4f:c6:
ca:db:62:49:fa:85:24:4a:d8:d6:05:05:ca:a4:5d:
1f:f5:87:42:16:3d:13:d4:f2:31:99:f5:4e:00:ce:
59:10:57:d4:10:a8:e8:bd:91:0d:54:2f:04:04:d7:
c2:6d:33:a8:e2:fa:6b:b7:6d:71:1a:08:21:89:27:
fa:6a:86:dd:5d:3c:25:d9:f0:ac:b8:eb:69:5a:28:
48:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D2:31:72:13:60:68:63:93:42:F3:32:46:AF:8B:89:55:92:E7:C5
X509v3 Authority Key Identifier:
keyid:8F:E6:13:BE:EB:B7:EF:36:99:2C:04:91:AD:13:B2:67:07:05:72:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-YTvuu37zaZLASRrROyZwcFcmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:a6:ad:5c:c3:78:46:85:ca:78:89:a5:d5:3b:2f:f7:b8:c1:
7f:28:f7:fb:10:d6:c4:ca:cc:c5:e8:ac:9b:bb:2d:66:c9:7e:
31:8d:5b:ef:e3:a2:2d:3f:19:52:0c:33:e6:8e:bb:82:b5:c3:
aa:0e:c6:6b:03:27:f4:34:85:7d:b4:3d:9f:f5:b8:32:47:a4:
c7:4b:e0:25:67:e6:17:09:57:37:51:0d:93:03:71:85:57:f9:
56:e0:47:47:bd:77:c5:c0:b8:09:df:2f:e3:e8:1e:e5:48:e3:
8d:b2:a1:f8:9c:47:bb:7b:ae:a7:7a:11:f2:3a:1e:55:06:70:
54:ee:62:e9:6a:c6:0e:29:25:ce:02:45:79:3a:87:38:f2:69:
63:aa:d5:e3:99:d8:05:21:67:78:79:30:0f:6b:8b:36:6b:bd:
3f:d9:fb:c3:ad:b8:f5:2b:a8:01:60:2d:86:3d:3f:36:e3:a6:
1c:07:83:bc:e6:fe:39:61:f0:f5:85:15:f7:4d:0a:cb:37:c7:
a2:eb:7e:fb:bc:5b:ed:b0:4e:6c:dc:b3:d4:5d:29:7c:89:19:
cf:c4:b2:3d:45:d6:31:6b:09:b2:fa:ca:2b:b6:55:eb:18:f8:
d0:33:5f:b7:59:84:65:0c:8d:98:1e:c5:cb:cd:2e:97:7f:47:
1d:50:d8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:06 2025 by rpki-client