Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
File: tJjJexTDdKUoM9tqQAe1S0Zixak.mft (raw, json)
Hash identifier: hlHvwSLvrItMXlvxQaAh2TSW3IPONl9jqjWKs6Tu1ZY=
Subject key identifier: B6:DE:AF:C2:1A:E0:B2:04:18:27:9A:3A:E4:D8:60:6F:DF:51:43:FC
Authority key identifier: B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
Certificate issuer: /CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Certificate serial: 019A270AF5B840B444CADB65E1547D7C8128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
Manifest number: 0721
Signing time: Mon 27 Oct 2025 19:00:20 +0000
Manifest this update: Mon 27 Oct 2025 19:00:20 +0000
Manifest next update: Tue 28 Oct 2025 19:00:20 +0000
Files and hashes: 1: CvcmVd2qiQMCtgnMEuQp7Q5S4Vg.roa (hash: 6oEqjna8oaHJiSK9+x9VxezwWYrKn62GKKSEaLSxdDU=)
2: UKY-oSMIFmmicltNFFzSJHvvmLM.roa (hash: cA262Na30QfQdhfhBPxJOrAeDIB1dyAnD2XIGiuSUOI=)
3: tJjJexTDdKUoM9tqQAe1S0Zixak.crl (hash: rixBFN3SILDIzWyIC0oeUh1V+phxsXcQP3PPdeBHIDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:0a:f5:b8:40:b4:44:ca:db:65:e1:54:7d:7c:81:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b498c97b14c374a52833db6a4007b54b4662c5a9
Validity
Not Before: Oct 27 19:00:20 2025 GMT
Not After : Oct 28 19:00:20 2025 GMT
Subject: CN=b6deafc21ae0b20418279a3ae4d8606fdf5143fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0a:38:fa:a6:c3:54:1d:42:66:f9:7b:5d:5b:
82:83:dc:da:c3:92:63:ee:19:17:5f:33:7f:89:d1:
8f:f5:e0:85:33:d9:98:fd:b1:11:50:6c:43:0b:b9:
49:71:26:2c:52:8e:4c:b1:54:80:4e:24:8f:24:76:
ec:ec:86:15:58:67:b6:17:85:a4:97:cc:04:45:72:
3b:de:3f:a3:10:2b:31:43:b1:d3:10:ff:7b:89:ba:
c7:6c:0d:5f:0f:d4:d6:16:48:40:03:86:ef:53:c0:
8c:25:7c:84:c6:7e:32:23:f0:f1:df:90:41:da:10:
a9:56:b6:2a:c0:6d:66:19:c5:5c:7e:a4:9d:c4:32:
ea:97:30:bb:f3:f3:84:c3:11:bf:67:2d:21:1b:54:
e2:bd:a2:47:6e:5e:3e:1e:5d:55:65:19:ca:ed:91:
63:af:a2:16:ad:96:b5:a4:ec:4f:27:8b:48:a4:5c:
8f:92:fc:eb:ae:04:2e:a9:cb:08:fa:b2:a9:67:e5:
84:8c:0f:40:dd:d2:18:25:d2:98:e7:cd:c6:8a:ca:
ea:e8:ac:2f:03:ee:e9:f1:c0:7d:32:48:c9:30:c6:
c4:5d:12:2b:69:93:e6:75:71:8a:53:0b:5f:14:62:
51:68:61:cc:e2:c4:7f:f3:ab:ff:7d:40:ae:ca:68:
b3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DE:AF:C2:1A:E0:B2:04:18:27:9A:3A:E4:D8:60:6F:DF:51:43:FC
X509v3 Authority Key Identifier:
keyid:B4:98:C9:7B:14:C3:74:A5:28:33:DB:6A:40:07:B5:4B:46:62:C5:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJjJexTDdKUoM9tqQAe1S0Zixak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1470f5-c316-4fff-9c37-8654266457c6/1/tJjJexTDdKUoM9tqQAe1S0Zixak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:a8:96:f7:f8:1d:d7:4d:64:58:cb:00:51:f8:55:20:7f:de:
0d:68:d5:9e:2a:5a:69:e0:81:55:77:ad:d4:fa:d5:bf:e0:b4:
cb:99:51:28:4f:21:86:03:2b:6a:e1:c4:3a:d2:26:de:01:a8:
c5:13:bd:fc:e7:6f:92:dd:25:81:3c:d6:f1:34:bb:b8:75:6e:
05:61:3a:70:83:7d:70:91:86:5d:95:d8:f0:70:1a:d1:83:88:
4c:75:96:21:5e:02:53:4a:89:1b:25:89:4f:84:87:78:c1:d4:
5a:77:75:0d:fd:9d:80:57:d6:bd:f0:5d:02:8b:93:f9:7e:42:
ab:b6:d7:86:fd:96:ad:a6:60:ac:02:97:29:a4:70:ea:e9:66:
9c:1e:f8:cf:54:79:03:0c:e3:96:e2:34:4c:aa:ac:5f:0a:8f:
82:76:18:d0:ad:e3:5a:e4:86:a3:5f:f2:6d:0c:c5:29:13:d8:
b7:44:d1:df:06:70:6a:23:3e:60:e9:f4:56:dd:a2:97:67:f4:
82:2d:b9:4b:45:eb:0c:d3:ba:9c:5a:45:23:c7:07:b7:80:0c:
3e:b2:a8:5b:dc:61:0e:68:06:45:63:43:1b:e3:08:15:8f:71:
2a:4b:0c:7b:e5:e9:62:3b:a2:dd:df:3f:06:25:0b:ee:6f:8e:
3e:fb:57:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 21:08:51 2025 by rpki-client