Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft
File: J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft (raw, json)
Hash identifier: PcO3ZycP4iTHyGJthkvdq8TITrwnh8oaoXeJoWrTAHY=
Subject key identifier: 26:BB:84:6D:FB:E4:AE:59:62:F2:18:2B:4F:02:7D:F0:44:4C:80:4A
Authority key identifier: 27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
Certificate issuer: /CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Certificate serial: 0199FC8F687308DB02A2FB817A7E725AE1F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft
Manifest number: 13EF
Signing time: Sun 19 Oct 2025 13:01:20 +0000
Manifest this update: Sun 19 Oct 2025 13:01:20 +0000
Manifest next update: Mon 20 Oct 2025 13:01:20 +0000
Files and hashes: 1: J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl (hash: HJjMjOnZ65DsIQsfQfT+0ZhUwhr0DxHaM0oFLHviK4Y=)
2: qT62sQgJ7wYZrGkOwUrBAOZW36U.roa (hash: LRDn9R97dLgxGAtTPJOW62pBW4f3rWtLvCdfekL/e2M=)
3: u-G-BjNkzDN41_akwDoArPHas8I.roa (hash: 3oV8r7qGwqy7avjI+jDPXV4J2Rs9RBfex18bpzCreTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:68:73:08:db:02:a2:fb:81:7a:7e:72:5a:e1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Validity
Not Before: Oct 19 13:01:20 2025 GMT
Not After : Oct 20 13:01:20 2025 GMT
Subject: CN=26bb846dfbe4ae5962f2182b4f027df0444c804a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a4:66:28:7c:af:e7:ef:c0:ed:1c:49:73:9f:
2d:e9:b5:da:03:f6:ae:30:81:5b:22:1d:bc:b6:96:
1a:c2:cf:39:f2:75:76:1c:46:f4:be:d1:d8:a9:06:
6b:b8:d3:f6:0a:2c:71:c7:82:be:52:67:fd:51:85:
d4:76:63:6a:f5:87:20:2c:6e:8c:25:33:c7:64:d7:
24:04:4c:82:3b:c5:e4:4a:cb:30:a6:59:4b:ff:34:
90:4f:4b:1f:63:25:5e:b5:48:59:1d:eb:99:6a:a7:
77:80:54:d4:00:b1:46:07:71:ee:e4:c1:6a:91:02:
fc:f9:6e:8f:72:4b:37:fc:d7:7a:d7:f2:c1:eb:cd:
0f:64:5d:1b:62:d2:14:a5:18:af:ce:3d:af:33:3e:
fc:ca:87:c7:51:dc:2c:65:91:ca:9d:2e:1d:53:3e:
4e:d6:85:72:dc:a7:f8:77:16:39:d4:2b:ee:38:85:
12:eb:9b:72:fe:37:ea:b0:b8:6b:6d:9f:fc:06:19:
d8:64:7e:47:2e:26:2e:57:f9:dd:c8:b6:03:b5:66:
da:ae:d4:7d:ca:6f:94:78:02:ed:ea:b8:df:fb:aa:
0a:fe:9e:47:e1:fe:f4:4c:4f:b2:ce:86:98:e5:3f:
f3:e4:88:aa:b8:7e:cc:f7:47:64:ac:db:0a:9e:71:
88:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:BB:84:6D:FB:E4:AE:59:62:F2:18:2B:4F:02:7D:F0:44:4C:80:4A
X509v3 Authority Key Identifier:
keyid:27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:06:ea:70:df:bc:64:72:20:6f:46:e1:0b:26:34:97:9f:91:
24:d6:42:54:3c:0b:cb:b9:2d:f0:bf:ad:18:df:2f:3b:13:66:
f7:62:fc:76:5d:e3:91:23:1c:57:c4:b5:e2:86:8e:3a:c7:13:
6f:3c:40:ea:ed:97:ec:e9:60:3c:97:62:60:f7:f9:6e:38:d2:
23:44:ce:df:6f:60:60:de:0a:07:70:5d:55:9b:1d:6f:4e:68:
34:ca:f0:aa:75:a3:1d:9a:11:d5:d5:6d:63:3f:ff:9c:a9:fd:
b8:ef:16:d0:0b:3c:38:c4:2e:b8:7d:ff:95:a9:0a:fc:01:ad:
ae:57:3f:5c:2f:a8:10:d6:4d:12:9c:39:be:67:84:f2:f8:1b:
d0:64:78:a3:a4:c6:fa:89:2e:60:30:fe:2e:a9:e3:ae:fe:18:
91:35:b2:1a:3d:b1:99:bd:69:25:fe:b6:aa:de:4f:80:f5:6f:
81:e2:4d:04:66:d7:87:73:a2:f3:49:a1:8b:78:c0:e4:7a:41:
1a:16:38:7a:51:b2:1b:22:9b:4f:97:ea:8c:af:3c:07:a8:f4:
fd:9c:53:65:04:9c:16:62:3b:32:20:50:e6:5c:e5:ab:c7:99:
b5:0b:51:a5:45:35:6e:70:dc:d1:0c:38:79:28:e4:2e:f5:bd:
e9:c5:bc:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:56 2025 by rpki-client