Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.mft
File: j6mutCbCijSAh3b5Vok107nsngg.mft (raw, json)
Hash identifier: HyvdXU1pT6tL7vhc66UlSLqtCWEP3Dukb0DdEPtkKqs=
Subject key identifier: 45:A0:C7:43:B1:68:E9:0D:68:8E:51:4C:B6:A7:79:E6:F2:28:2E:83
Authority key identifier: 8F:A9:AE:B4:26:C2:8A:34:80:87:76:F9:56:89:35:D3:B9:EC:9E:08
Certificate issuer: /CN=8fa9aeb426c28a34808776f9568935d3b9ec9e08
Certificate serial: 019A71EEEDFF142B28BF7383F13758F7A491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6mutCbCijSAh3b5Vok107nsngg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.mft
Manifest number: 11AE
Signing time: Tue 11 Nov 2025 08:01:15 +0000
Manifest this update: Tue 11 Nov 2025 08:01:15 +0000
Manifest next update: Wed 12 Nov 2025 08:01:15 +0000
Files and hashes: 1: j6mutCbCijSAh3b5Vok107nsngg.crl (hash: sCgX2MVZgSQjIvq2bpQZowKO7GL3r8r/ZHRT6VrMyv4=)
2: pqaKQ_TLLBYikhcnNcdXTfV_Qqg.roa (hash: hN1kuDdul6eCFSiEm2Z9+yxnk4jIcJ1yoCv4DPl4iuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.mft
rsync://rpki.ripe.net/repository/DEFAULT/j6mutCbCijSAh3b5Vok107nsngg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ed:ff:14:2b:28:bf:73:83:f1:37:58:f7:a4:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fa9aeb426c28a34808776f9568935d3b9ec9e08
Validity
Not Before: Nov 11 08:01:15 2025 GMT
Not After : Nov 12 08:01:15 2025 GMT
Subject: CN=45a0c743b168e90d688e514cb6a779e6f2282e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:09:9c:54:05:60:6d:45:76:69:f4:61:e1:af:
88:e5:78:a9:be:fe:cf:20:2f:45:85:31:41:20:61:
f1:3f:6a:77:0d:c7:1b:17:93:67:ee:0e:05:bf:89:
2d:eb:82:ff:c4:58:12:d0:52:64:cf:e6:3a:71:dd:
d9:1d:f8:b6:f9:63:c9:38:da:ad:09:68:87:64:e5:
e0:6d:e4:52:18:d9:35:0c:76:53:eb:1b:ad:e4:d8:
ea:0e:59:43:de:e1:ec:56:bc:25:99:89:f8:11:14:
78:62:44:4e:03:5a:57:f8:66:ca:18:60:64:3d:2e:
94:52:d1:f5:af:fe:21:87:22:ae:9d:31:00:00:95:
cd:4d:30:e5:23:50:1c:62:8f:0d:04:26:8f:db:9a:
f1:41:5d:f7:32:c5:18:74:e2:ab:eb:69:09:aa:ad:
f9:9a:4e:1f:d5:68:68:3d:c7:cc:b5:fa:44:c9:7e:
a9:3c:8a:52:7c:42:2c:7a:eb:dd:34:e5:af:50:1c:
0f:85:8b:8c:db:f0:b6:77:03:db:1a:0a:a6:ac:87:
d8:c2:67:2d:66:ad:5e:3b:56:1f:83:3f:20:35:4b:
26:0d:c4:75:25:95:76:d1:86:84:6b:e9:e1:5e:cf:
84:cf:62:de:a9:a4:0a:3c:1a:e9:73:1e:7b:93:2f:
e3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A0:C7:43:B1:68:E9:0D:68:8E:51:4C:B6:A7:79:E6:F2:28:2E:83
X509v3 Authority Key Identifier:
keyid:8F:A9:AE:B4:26:C2:8A:34:80:87:76:F9:56:89:35:D3:B9:EC:9E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6mutCbCijSAh3b5Vok107nsngg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:7f:96:cb:f9:98:16:b2:35:af:68:3d:92:a4:e6:0b:15:a4:
d5:de:67:87:56:7e:7a:9f:7b:88:69:f5:58:2d:57:b0:3e:c8:
4e:ab:5b:95:68:17:06:ee:f5:04:be:2c:69:7c:24:9a:58:0b:
6c:46:f9:7d:f4:9e:22:c9:95:40:cb:1b:e5:cf:63:cf:84:73:
7e:8e:3d:dc:77:23:07:65:78:ed:54:96:4c:94:ee:fb:8e:bd:
62:71:9b:60:1a:10:f3:92:0f:ec:cd:66:6b:18:bc:4c:79:6f:
35:df:65:de:19:7f:a1:77:f3:9b:99:fc:5b:c0:55:c4:2c:0d:
6f:bf:06:f8:a0:1c:68:37:ad:2d:aa:cb:48:60:4d:06:4c:4e:
7d:1b:c9:13:90:ca:bb:36:28:63:6a:d6:1b:d1:f6:44:5a:c8:
3d:f2:8a:4f:6b:ee:ed:61:10:04:72:98:f4:20:ca:fd:04:37:
ea:5c:cc:2a:27:ff:84:44:9f:75:c4:77:ee:dc:a4:49:8e:82:
e5:c7:15:a1:97:f8:b5:21:15:31:64:8b:ec:4d:17:ab:95:fc:
01:48:ec:28:0e:80:95:e7:11:30:53:37:cb:b5:bd:63:89:26:
9b:46:31:34:a9:48:7f:ff:32:f7:13:2e:59:a2:a5:b2:8e:c8:
86:4a:51:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:23 2025 by rpki-client