Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft
File: j06-YGSqsD8mniKBWs1JSab7cmU.mft (raw, json)
Hash identifier: 48ZAual4hrdKnMVUtJ+X8A6kbC5jvi3ZswJb821OWlo=
Subject key identifier: FA:CC:C7:6E:C2:D6:89:E4:95:BA:27:FB:FA:CE:AB:7F:EE:46:4F:48
Authority key identifier: 8F:4E:BE:60:64:AA:B0:3F:26:9E:22:81:5A:CD:49:49:A6:FB:72:65
Certificate issuer: /CN=8f4ebe6064aab03f269e22815acd4949a6fb7265
Certificate serial: 0199FCC65EE45E1AAA0FA0288233C56DC2FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j06-YGSqsD8mniKBWs1JSab7cmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 14:01:22 +0000
Manifest this update: Sun 19 Oct 2025 14:01:22 +0000
Manifest next update: Mon 20 Oct 2025 14:01:22 +0000
Files and hashes: 1: dkbIFUT0Q5SimShUWdItYFUftjw.roa (hash: 05gsaTcl9nN2hM3ENc01cGsgdyNAx0BVpk6E3+GjptE=)
2: j06-YGSqsD8mniKBWs1JSab7cmU.crl (hash: vcI/AArlYAs54pd3XIdP5tVaqplYJlc2pijcd+VN0Bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/j06-YGSqsD8mniKBWs1JSab7cmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:5e:e4:5e:1a:aa:0f:a0:28:82:33:c5:6d:c2:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ebe6064aab03f269e22815acd4949a6fb7265
Validity
Not Before: Oct 19 14:01:22 2025 GMT
Not After : Oct 20 14:01:22 2025 GMT
Subject: CN=faccc76ec2d689e495ba27fbfaceab7fee464f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6a:24:d9:23:da:a8:72:94:e6:5e:f6:14:d6:
d4:ff:33:da:a3:d5:d6:a1:a5:60:4b:fd:36:44:89:
97:23:f5:98:27:6b:9a:88:12:90:ac:78:da:15:e7:
17:4c:a3:4b:63:41:35:f4:3a:36:74:cc:a9:ea:0e:
71:bf:03:59:c4:d9:4f:d4:7f:ee:33:22:20:f7:0b:
0f:00:16:f4:ed:a0:7b:b1:c3:69:df:d0:63:6e:14:
fb:ce:f2:37:a0:3b:2d:69:c5:d4:d9:96:13:ce:f3:
52:7e:66:47:df:2f:51:8a:5e:e9:8d:86:84:4d:b3:
df:0b:4f:ba:4e:b4:f0:38:9c:16:19:32:22:bb:c9:
db:40:65:d2:86:9c:9f:18:c5:93:9b:6b:8b:c5:f4:
bb:36:84:8f:d8:39:8e:39:db:c1:ee:95:c9:de:90:
b9:15:b4:49:b6:ed:ef:b0:28:01:a6:66:0e:c8:5e:
1a:66:5d:37:59:aa:f1:61:5c:b2:36:d7:7d:d9:f3:
5f:9e:ee:51:4a:8b:bc:44:4a:65:22:f5:b4:7d:07:
93:43:39:76:24:69:4e:34:5d:71:dd:d4:9d:dc:26:
f8:34:b2:02:f2:80:c2:19:f2:53:62:5c:49:de:44:
29:d2:40:89:29:a2:69:0a:cd:3f:df:8c:4c:88:a8:
aa:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CC:C7:6E:C2:D6:89:E4:95:BA:27:FB:FA:CE:AB:7F:EE:46:4F:48
X509v3 Authority Key Identifier:
keyid:8F:4E:BE:60:64:AA:B0:3F:26:9E:22:81:5A:CD:49:49:A6:FB:72:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j06-YGSqsD8mniKBWs1JSab7cmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/d2987d-3db9-40ce-9554-16c350b7d79d/1/j06-YGSqsD8mniKBWs1JSab7cmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:67:fd:fe:37:81:f5:fd:0f:1e:bf:93:ec:c2:e3:76:62:c6:
6c:f7:e7:1b:0d:55:ae:6d:f3:3a:0a:a8:4e:2d:06:2a:b0:b9:
b8:d4:0d:41:18:c5:fa:98:a1:62:aa:b1:6f:57:81:49:f0:0b:
81:81:54:0c:14:76:f3:2e:7a:db:80:4b:de:92:41:8b:d2:87:
47:a9:1f:50:81:cf:aa:88:27:dc:ad:51:eb:92:71:b4:7d:b2:
d4:e5:67:dc:4e:8b:fa:e6:e7:bf:93:c5:58:b3:7e:b5:bc:90:
39:3c:7e:c2:c9:52:73:11:72:d7:2f:df:89:2d:f3:e0:c3:62:
f9:27:e0:1c:13:eb:c1:2c:2f:8c:d0:53:8b:e8:1d:59:49:97:
3f:bc:1c:d1:b9:bb:5c:2d:44:2e:fd:71:ad:7c:7e:85:50:80:
a7:2c:41:48:4d:48:32:08:f1:d6:c9:59:fe:5c:96:df:08:b6:
9d:ed:ca:63:81:91:78:ad:22:85:16:fc:58:ea:18:c3:31:f5:
1c:79:01:30:26:6e:d6:ba:6e:c4:8c:18:3e:76:cd:1b:02:1e:
0f:c9:86:02:a3:eb:52:b1:73:ea:e5:39:3a:f1:c7:74:d5:cd:
b0:b9:c0:ac:b7:3c:c2:ed:87:81:24:20:b8:9f:be:f2:fc:50:
b6:80:7b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:39:33 2025 by rpki-client