Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
File: 0JH-jFQMROI0-bxmj4o7Fkes2wY.mft (raw, json)
Hash identifier: DPTNEeC1pmP6LCz1N7Ecj+U4EJpOLhCW9dsJq8oph/k=
Subject key identifier: 12:07:E7:F4:B3:6C:E0:BE:97:2E:23:D8:5F:30:95:33:3E:DC:1E:07
Authority key identifier: D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06
Certificate issuer: /CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06
Certificate serial: 019A22F7A544862E0D437B0A4E039786A3F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
Manifest number: 1479
Signing time: Mon 27 Oct 2025 00:00:46 +0000
Manifest this update: Mon 27 Oct 2025 00:00:46 +0000
Manifest next update: Tue 28 Oct 2025 00:00:46 +0000
Files and hashes: 1: 0JH-jFQMROI0-bxmj4o7Fkes2wY.crl (hash: 5h55lTz2YErYSvlpQcNhQt4E9pKje0xnvH8+KHy4egk=)
2: KEydF7bMk6RADdNKhYi6WFKpHSw.roa (hash: bl+U1VafH5Wzj+g/exETARmZ+DznhEsF7Fa2nlPP/i8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:a5:44:86:2e:0d:43:7b:0a:4e:03:97:86:a3:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d091fe8c540c44e234f9bc668f8a3b1647acdb06
Validity
Not Before: Oct 27 00:00:46 2025 GMT
Not After : Oct 28 00:00:46 2025 GMT
Subject: CN=1207e7f4b36ce0be972e23d85f3095333edc1e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:62:8a:57:64:3c:72:84:6a:f4:88:c0:dd:6b:
ab:6b:69:7b:c5:50:15:23:70:b1:0e:fb:1a:0b:bb:
94:90:b9:fd:f5:a2:72:0b:2c:e8:1a:0f:3e:14:09:
c4:1d:a0:f5:9a:61:17:3f:6d:42:63:fc:2a:46:5d:
e7:dd:fa:60:2b:61:d5:4c:c5:54:cf:4c:60:51:a0:
27:dc:1c:88:d7:c6:8c:17:af:dc:e1:ef:bc:48:ae:
ad:95:91:fd:81:13:6b:4a:d3:e1:9d:32:e7:ea:dd:
2c:a8:26:d3:54:9d:8c:04:0c:cc:89:97:b1:7a:3e:
7e:f0:d4:8d:e5:4b:fe:44:0c:f0:04:99:aa:d5:5f:
c2:52:42:7e:eb:0a:ec:bd:b8:79:e5:8e:66:33:66:
c1:00:9a:81:96:a3:c0:aa:b5:a8:ad:57:7f:a7:b3:
02:80:36:ec:30:a7:57:e0:d2:8f:9c:3a:b7:33:12:
60:f3:5a:04:af:87:14:aa:b4:24:d0:21:65:7e:d6:
3c:20:e2:14:31:e7:eb:52:06:59:6d:f3:e1:17:43:
86:cb:ec:88:4f:17:10:36:11:eb:c7:80:b2:1a:77:
6a:cf:95:35:fd:95:7f:49:5a:2e:30:43:a6:08:9b:
2b:d2:bc:6b:3a:91:8b:90:c0:6b:ef:09:0f:8a:78:
d5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:07:E7:F4:B3:6C:E0:BE:97:2E:23:D8:5F:30:95:33:3E:DC:1E:07
X509v3 Authority Key Identifier:
keyid:D0:91:FE:8C:54:0C:44:E2:34:F9:BC:66:8F:8A:3B:16:47:AC:DB:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JH-jFQMROI0-bxmj4o7Fkes2wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9a3aac-2a4c-4387-aea8-04e6f5764c52/1/0JH-jFQMROI0-bxmj4o7Fkes2wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:fd:e8:da:d0:cf:7d:ab:5c:e2:f8:18:9f:3f:6d:9e:90:31:
68:31:3c:51:d5:41:86:d0:c3:da:6a:6e:db:9a:a1:f1:c4:af:
e3:95:4b:65:15:35:e8:e7:00:15:d5:82:79:82:72:89:8f:fc:
72:41:fe:37:ac:a5:0e:3f:de:f1:48:fd:48:4b:84:b7:fe:c9:
26:26:ea:00:bc:d2:46:a3:83:3b:97:aa:5e:0e:58:89:47:53:
26:ac:a0:f0:72:91:36:35:ac:fa:5a:f9:06:61:98:9d:f4:e4:
8f:67:0a:d4:1a:98:c0:d6:04:70:10:b0:1b:df:e5:df:b9:05:
7b:e7:32:f6:6a:a1:13:48:e9:33:92:a0:31:02:44:9b:43:4d:
30:24:6d:f6:19:9b:64:e9:bb:49:cb:59:cf:73:bd:a1:5f:9e:
63:a1:3b:9f:19:28:42:f7:ee:71:90:76:1b:ac:16:68:89:3c:
78:19:64:77:1c:65:f2:46:f0:b4:50:4f:50:cb:c7:51:d9:58:
ef:6c:fa:dd:c5:b3:6f:e0:2f:ba:14:64:7f:d2:21:b9:a7:e5:
7d:34:51:5c:86:46:0b:70:05:57:d1:9b:f6:a1:e0:4f:eb:fb:
4d:fc:3c:85:d6:56:b0:8c:63:a2:08:de:6d:34:af:d1:c7:88:
2f:bf:d7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:04:03 2025 by rpki-client