Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.mft
File: j_he_yRIxzZG41Sv6mQbz3nnx_k.mft (raw, json)
Hash identifier: VYmXvGRAfp7ynqHzHw2JF03DPhPD0SjCmWeNdxvs+HU=
Subject key identifier: 3D:2B:6F:80:A7:07:DE:5D:24:4E:EA:12:BE:99:69:16:A0:5C:DE:EA
Authority key identifier: 8F:F8:5E:FF:24:48:C7:36:46:E3:54:AF:EA:64:1B:CF:79:E7:C7:F9
Certificate issuer: /CN=8ff85eff2448c73646e354afea641bcf79e7c7f9
Certificate serial: 0199FBEBE986BB3DAAB6416DD767B60B6EDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j_he_yRIxzZG41Sv6mQbz3nnx_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.mft
Manifest number: 063E
Signing time: Sun 19 Oct 2025 10:02:45 +0000
Manifest this update: Sun 19 Oct 2025 10:02:45 +0000
Manifest next update: Mon 20 Oct 2025 10:02:45 +0000
Files and hashes: 1: izDgJyT_jFs6Afm1vFmx3IUq128.roa (hash: +piNMelo8kmyTOhWUH5qriIcmuElNVknleJSz/MJ2T8=)
2: j_he_yRIxzZG41Sv6mQbz3nnx_k.crl (hash: TyVY+vs8+ztWhaRfP82ztS4h4/aD+fHNTB87LnSL0aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/j_he_yRIxzZG41Sv6mQbz3nnx_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:e9:86:bb:3d:aa:b6:41:6d:d7:67:b6:0b:6e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ff85eff2448c73646e354afea641bcf79e7c7f9
Validity
Not Before: Oct 19 10:02:45 2025 GMT
Not After : Oct 20 10:02:45 2025 GMT
Subject: CN=3d2b6f80a707de5d244eea12be996916a05cdeea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:dc:62:bd:8c:1e:f1:3c:a8:40:5f:73:db:bd:
05:df:f8:55:27:45:bb:63:4c:61:a8:18:01:36:ae:
60:b8:71:22:9a:79:4e:ba:3e:ca:fe:7d:5b:f1:30:
2f:1c:4a:ac:74:b7:54:28:f0:76:61:30:9c:d8:9d:
3f:fb:90:6d:b1:70:5e:20:e7:a6:a4:ae:ca:b1:25:
f7:1c:08:d7:6c:3e:88:db:75:2b:62:bb:a0:b1:df:
f4:b2:ca:f0:36:bf:72:e7:98:3f:d2:9b:63:fa:1c:
ac:e2:46:1b:f1:fc:4d:d4:f8:ce:62:2c:c1:f7:f6:
eb:4e:d7:48:a3:3a:6f:bf:f6:83:ee:2d:80:dc:17:
05:ab:1c:4b:17:e8:fd:9d:91:e0:8a:18:5b:9a:46:
39:9e:26:29:81:59:71:5f:f0:7b:28:0f:71:0a:fc:
48:47:e3:3d:c4:70:81:bc:4f:7c:74:da:08:63:de:
06:60:94:b1:cb:f8:02:2f:16:e8:15:c0:6c:47:af:
5e:e0:ac:88:7a:25:5e:d7:9f:c7:d9:de:94:20:7d:
c8:9e:c0:7f:68:66:ba:92:fc:5c:65:d9:fd:28:1a:
0f:9c:4e:77:be:76:71:e6:18:85:52:51:f4:49:d6:
05:98:f1:dc:d3:de:ab:77:fc:c9:85:9f:df:ec:2a:
fa:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2B:6F:80:A7:07:DE:5D:24:4E:EA:12:BE:99:69:16:A0:5C:DE:EA
X509v3 Authority Key Identifier:
keyid:8F:F8:5E:FF:24:48:C7:36:46:E3:54:AF:EA:64:1B:CF:79:E7:C7:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_he_yRIxzZG41Sv6mQbz3nnx_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9fe53d-eb4e-4e6b-9022-e322087870d2/1/j_he_yRIxzZG41Sv6mQbz3nnx_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:61:d9:f4:88:14:4b:73:8d:df:5b:07:13:14:41:73:03:96:
19:2c:e4:aa:18:fa:86:ee:05:79:df:d8:0b:e1:a4:fd:95:af:
8c:fd:4d:cd:6b:b2:f6:91:01:2a:c1:2e:24:4b:a6:d5:31:11:
0a:5f:8b:25:5e:1f:98:58:53:7c:af:61:58:b8:b0:f7:4f:c7:
2f:21:56:e8:85:85:db:c6:05:15:69:9e:d0:84:fa:87:90:a4:
fd:76:82:31:b2:95:58:1c:1e:74:97:f3:45:c6:ee:e9:ae:62:
01:87:a9:3e:09:af:e2:a0:8a:3e:54:b7:af:c3:1e:9e:50:89:
c5:13:59:e2:62:7d:00:e2:08:dd:83:a2:da:80:bf:22:49:9c:
17:cb:22:8f:8c:06:d5:5c:34:4d:24:d5:90:b8:84:63:11:94:
07:bb:22:55:fd:9e:73:42:ee:0d:c0:88:d2:ca:ae:ab:3b:de:
20:90:8b:ed:7f:d7:a8:5f:9c:2b:4f:a3:3d:ae:06:e8:00:d4:
bc:c3:c9:53:96:9f:65:75:82:cf:71:63:4f:3a:7f:18:58:36:
e5:7f:80:fd:b9:bf:24:3b:29:4f:e9:1a:f4:76:85:16:57:43:
b1:e9:dc:fc:20:76:aa:0a:4f:0f:b5:98:8d:96:e4:e4:3d:cb:
9a:a9:7b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:57 2025 by rpki-client