Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.mft
File: jVhAatOLFVwZjjhanC9iG84h-Hc.mft (raw, json)
Hash identifier: eQCp2O9sJbcdnzkETdysGLJNQA8TVWbWrTBA5gcZQAk=
Subject key identifier: AF:42:FB:FE:2C:6E:77:F2:05:EE:EC:63:61:1C:7C:EC:85:37:7C:35
Authority key identifier: 8D:58:40:6A:D3:8B:15:5C:19:8E:38:5A:9C:2F:62:1B:CE:21:F8:77
Certificate issuer: /CN=8d58406ad38b155c198e385a9c2f621bce21f877
Certificate serial: 0199FBEB38BAAF2E0EAFAC91FC2F14D6002D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVhAatOLFVwZjjhanC9iG84h-Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.mft
Manifest number: 05A6
Signing time: Sun 19 Oct 2025 10:02:00 +0000
Manifest this update: Sun 19 Oct 2025 10:02:00 +0000
Manifest next update: Mon 20 Oct 2025 10:02:00 +0000
Files and hashes: 1: jVhAatOLFVwZjjhanC9iG84h-Hc.crl (hash: nn4n2IZ9BtM1bmF8nTjfdq2hDtktTVGJH5+D8t44tJA=)
2: w1gXAM10IC9pZqybLOONxjNQk9s.roa (hash: FswUkq5LiNvg83RjgvN+Lqt4aaAz4dRQ2S08k/Lt+qM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVhAatOLFVwZjjhanC9iG84h-Hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:38:ba:af:2e:0e:af:ac:91:fc:2f:14:d6:00:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d58406ad38b155c198e385a9c2f621bce21f877
Validity
Not Before: Oct 19 10:02:00 2025 GMT
Not After : Oct 20 10:02:00 2025 GMT
Subject: CN=af42fbfe2c6e77f205eeec63611c7cec85377c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bc:d9:a2:9a:11:1d:d4:49:53:98:8f:f0:78:
4d:20:0c:0c:53:79:51:25:2e:6b:a9:e3:41:2e:cc:
45:66:4a:ba:14:89:7e:00:9a:b9:e2:3a:7b:4a:94:
a1:fa:a0:3d:ac:db:3d:b1:2e:17:3d:c7:0c:00:8b:
fa:ec:c7:1f:0c:ce:41:80:b2:46:59:6b:13:04:2a:
eb:dd:a6:1e:9a:a4:f4:ac:8f:7b:93:ae:21:03:48:
bc:3a:9b:49:74:57:b0:8c:70:3a:98:a4:d0:0b:7c:
3d:51:83:d0:66:bf:1e:1a:b5:f2:44:fe:a7:f5:24:
80:cb:1b:0d:82:58:82:80:0c:16:3a:c9:05:ad:1b:
82:06:b4:6d:92:b6:43:d1:9b:3c:8a:0d:b7:24:a8:
22:6e:fd:2c:1f:49:20:d6:41:35:f1:9d:42:0a:51:
73:52:6d:61:40:dd:1c:4c:ee:ae:ad:91:d6:89:29:
ba:06:51:95:61:7e:f3:72:3c:a7:11:fe:0a:10:ba:
87:07:98:52:03:d7:b5:dc:10:17:78:56:63:56:45:
59:08:e8:77:f1:b3:df:3e:81:4d:32:11:f6:9a:7d:
7a:08:8d:9a:ba:1a:b0:2c:ed:0a:59:0b:7c:15:62:
15:a2:79:8d:32:4a:61:fd:4f:89:63:9c:62:41:3f:
61:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:42:FB:FE:2C:6E:77:F2:05:EE:EC:63:61:1C:7C:EC:85:37:7C:35
X509v3 Authority Key Identifier:
keyid:8D:58:40:6A:D3:8B:15:5C:19:8E:38:5A:9C:2F:62:1B:CE:21:F8:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVhAatOLFVwZjjhanC9iG84h-Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0ba51c-1770-4dfa-8367-28f68a4a143b/1/jVhAatOLFVwZjjhanC9iG84h-Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:68:da:cc:19:05:14:f2:6e:58:66:d7:32:29:67:5b:24:07:
d4:bc:5e:d8:d1:da:e1:6f:56:cf:ae:0e:bb:28:5e:84:f8:64:
00:9a:19:b0:e9:7e:e3:fb:40:18:45:ef:cc:1e:b5:b3:00:e8:
13:e2:a2:68:78:f0:56:ce:f9:56:56:f8:27:af:22:a5:57:5c:
b7:13:d5:b0:94:75:99:8e:c9:19:21:bb:7c:fc:cb:3c:7e:b8:
7f:be:9d:dd:ad:2c:d9:7b:90:94:6c:c4:f6:cf:0c:1d:24:cb:
32:e2:08:f1:27:51:a7:f4:f1:64:82:99:29:7a:06:f4:52:13:
c1:0f:92:cb:fc:98:44:c5:fe:ac:51:5e:ee:ae:ef:31:ab:16:
35:83:d1:6f:3e:17:b0:54:b7:aa:f4:71:5a:76:55:6c:4f:04:
fb:a4:aa:be:cf:d1:18:fb:5d:ec:14:c4:5b:ee:e8:ba:76:5b:
9c:ae:38:90:92:c3:ed:71:94:9f:63:6a:f5:08:8a:62:4d:4d:
c1:ce:f0:dd:31:de:d5:1a:29:74:1a:d0:27:25:a8:1b:fa:19:
7b:4b:46:09:af:f1:e9:0f:80:79:38:e6:79:1a:ef:c1:88:6a:
91:e7:a3:13:80:20:30:58:e6:6a:3b:11:bd:36:92:0e:43:d4:
82:72:ce:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:43 2025 by rpki-client