Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft
File: j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft (raw, json)
Hash identifier: YEx/nZTE3lSvj8SE29xR72sqw9edznfLnk+M5Zm48dA=
Subject key identifier: F8:20:19:C8:A6:B1:3B:F0:A6:AD:07:F9:D9:92:1A:C3:C2:EA:4E:84
Authority key identifier: 8F:A6:98:C9:F8:03:03:25:79:20:10:48:B8:7C:19:C6:3C:8E:11:97
Certificate issuer: /CN=8fa698c9f803032579201048b87c19c63c8e1197
Certificate serial: 019A72CA22319EFAF641C327D679E570DB0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6aYyfgDAyV5IBBIuHwZxjyOEZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft
Manifest number: 01A6
Signing time: Tue 11 Nov 2025 12:00:40 +0000
Manifest this update: Tue 11 Nov 2025 12:00:40 +0000
Manifest next update: Wed 12 Nov 2025 12:00:40 +0000
Files and hashes: 1: j6aYyfgDAyV5IBBIuHwZxjyOEZc.crl (hash: /S+lQh+y63v6ifUxmsnN/44/nxGeKD1EG4dLH4btwGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/j6aYyfgDAyV5IBBIuHwZxjyOEZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:22:31:9e:fa:f6:41:c3:27:d6:79:e5:70:db:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fa698c9f803032579201048b87c19c63c8e1197
Validity
Not Before: Nov 11 12:00:40 2025 GMT
Not After : Nov 12 12:00:40 2025 GMT
Subject: CN=f82019c8a6b13bf0a6ad07f9d9921ac3c2ea4e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:40:fe:2c:c3:b8:61:7a:82:27:75:d8:3d:f4:
7b:ff:b7:34:d0:94:c9:f8:33:8a:68:7d:5b:e2:f2:
55:ee:72:04:7f:1f:05:bc:a9:d2:04:1f:57:9a:65:
d8:0a:13:82:bf:4e:34:c2:3b:96:df:00:1c:94:df:
8e:e5:e1:8c:a7:b6:fa:a0:8b:09:d8:36:99:3e:d3:
2e:31:dd:81:0c:ac:96:ec:37:c9:de:90:5d:a6:f3:
2f:7d:9a:85:f4:0f:14:d3:fd:41:6a:67:45:4e:44:
21:0b:96:2e:cc:ef:2b:53:b6:e9:b1:7b:96:d3:21:
1a:0d:ca:e9:57:25:ab:bb:ba:f0:60:53:7d:90:57:
cb:bb:a9:86:72:d2:9d:9a:95:e6:77:66:c6:21:7d:
6c:07:a2:0f:da:b2:fc:a3:9d:b7:e9:68:54:8b:6c:
ef:c6:60:06:b4:ee:0f:f8:91:f8:03:a0:b2:78:80:
84:e8:87:fb:73:08:7d:9a:7a:ba:f5:d3:28:01:de:
5c:9e:ff:88:47:94:1e:3a:f6:2b:c3:1e:99:3c:45:
37:a7:12:ae:4c:22:92:11:e1:27:8e:e5:52:c8:d1:
75:ba:2b:42:cf:a3:58:13:98:72:f9:27:1f:c7:cc:
74:07:a9:96:7a:01:53:bf:de:73:7a:4d:18:a5:c4:
32:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:20:19:C8:A6:B1:3B:F0:A6:AD:07:F9:D9:92:1A:C3:C2:EA:4E:84
X509v3 Authority Key Identifier:
keyid:8F:A6:98:C9:F8:03:03:25:79:20:10:48:B8:7C:19:C6:3C:8E:11:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6aYyfgDAyV5IBBIuHwZxjyOEZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:58:23:ab:a4:28:61:b0:6b:81:0d:72:9e:ab:15:46:3c:9f:
84:7d:56:52:9a:2d:90:6a:35:22:37:47:6e:38:1e:3a:54:38:
40:be:c3:14:56:e4:b4:40:6f:8d:b8:55:04:a5:12:9c:f4:50:
d6:04:6d:50:30:61:15:b0:22:d4:98:68:0b:6e:e1:d5:7e:d7:
a0:de:94:8f:f4:18:03:92:60:11:68:69:da:2b:c7:c8:0e:bc:
7e:6e:0f:2e:55:b7:b5:81:f2:e9:9e:75:a6:fb:f8:54:2e:f0:
e5:35:b8:10:58:4a:57:35:97:5e:80:fe:12:36:f1:80:70:bc:
97:33:dd:11:7c:e0:32:64:64:d3:4c:a5:e7:23:14:d5:6b:eb:
e4:ef:e7:a0:15:c5:50:4b:90:f9:59:c8:c5:bc:fe:17:49:7a:
b8:01:ff:b1:67:4d:4c:a6:8f:95:71:96:f0:4a:cc:d0:47:ed:
0e:41:79:93:91:c6:fc:6f:d4:ce:ab:11:51:92:80:6d:e1:59:
bf:29:41:29:8a:c9:bd:bf:9b:1c:70:37:b9:35:53:1a:71:b0:
2b:4b:8c:eb:4d:2a:2f:c2:2f:03:55:ee:cd:61:b2:b2:19:9d:
84:a8:e9:eb:d9:f7:e5:d2:b0:6b:04:fc:44:0a:bb:9b:dd:d6:
dc:d1:b5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:34 2025 by rpki-client