Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.mft
File: rJHyMKDi7to4EFIudKaYIAcT5iA.mft (raw, json)
Hash identifier: qr046TgHTJgoqFCXoS6s/oa/R5Bp0PbxUuY6aG62S6s=
Subject key identifier: B6:9F:7B:4E:C0:6F:C4:E8:75:34:C8:B9:D5:4D:3D:E7:F6:39:18:3D
Authority key identifier: AC:91:F2:30:A0:E2:EE:DA:38:10:52:2E:74:A6:98:20:07:13:E6:20
Certificate issuer: /CN=ac91f230a0e2eeda3810522e74a698200713e620
Certificate serial: 0199FB0ED26A40BBC0711AA0C112A2D0127D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJHyMKDi7to4EFIudKaYIAcT5iA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.mft
Manifest number: 0FF1
Signing time: Sun 19 Oct 2025 06:01:16 +0000
Manifest this update: Sun 19 Oct 2025 06:01:16 +0000
Manifest next update: Mon 20 Oct 2025 06:01:16 +0000
Files and hashes: 1: gP_zsXfkqrzssG9MD4Zd7ibjL_Y.roa (hash: I686Ip553hliGvYAsWQzyhxBsV7CF+b8RDLkN0tXgB4=)
2: rJHyMKDi7to4EFIudKaYIAcT5iA.crl (hash: s9zNahcSduUDUa3QNY+rJJ7eFGK6O+Ko3mD8mEpiJg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJHyMKDi7to4EFIudKaYIAcT5iA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:d2:6a:40:bb:c0:71:1a:a0:c1:12:a2:d0:12:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac91f230a0e2eeda3810522e74a698200713e620
Validity
Not Before: Oct 19 06:01:16 2025 GMT
Not After : Oct 20 06:01:16 2025 GMT
Subject: CN=b69f7b4ec06fc4e87534c8b9d54d3de7f639183d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:86:8b:56:c6:37:2c:b8:e8:65:70:d0:6a:52:
60:24:37:6a:02:f9:2f:40:34:76:3d:44:8d:20:53:
76:e0:cc:8a:e5:3c:d5:73:a3:81:6d:86:f9:9b:18:
df:38:bf:6d:11:56:f1:fb:47:93:2f:53:b4:39:6c:
1a:a2:f1:d7:b4:1d:7f:c4:3b:10:32:ea:6f:5a:25:
de:f3:f7:97:e4:80:06:82:cc:42:d2:5a:68:81:c8:
a4:24:10:f0:3d:bf:89:c8:dd:6c:7c:0a:6d:8e:55:
53:62:9b:d2:07:1d:20:f2:fd:11:ec:89:9f:2c:d7:
29:b6:85:a6:7b:be:a1:f6:d1:52:07:12:d6:9f:e1:
4d:9e:d7:b8:56:13:75:38:a4:e6:38:8e:f0:59:70:
3b:a7:45:ea:0f:89:2a:29:bf:02:62:35:32:61:91:
ed:c3:8c:5b:38:52:3b:cd:cf:3d:49:33:42:49:63:
9e:fc:7a:ca:b9:e9:c7:6c:f1:bf:ed:e2:2e:45:77:
92:cb:56:90:a0:02:fc:f3:4d:da:e3:cf:75:df:21:
21:c7:6a:4f:a2:d8:71:c5:8b:36:b1:ee:cb:2d:0b:
da:b6:f1:e9:23:ce:7d:e5:93:de:70:7b:15:c2:e6:
eb:22:c0:f0:39:00:84:c7:69:ac:b8:92:eb:7b:c1:
d7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9F:7B:4E:C0:6F:C4:E8:75:34:C8:B9:D5:4D:3D:E7:F6:39:18:3D
X509v3 Authority Key Identifier:
keyid:AC:91:F2:30:A0:E2:EE:DA:38:10:52:2E:74:A6:98:20:07:13:E6:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJHyMKDi7to4EFIudKaYIAcT5iA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/b463a6-282f-45f0-b4ba-cdf92fbe8f0b/1/rJHyMKDi7to4EFIudKaYIAcT5iA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:a3:3b:cc:23:df:d3:bf:dd:02:f9:5b:b9:1f:10:d3:b8:03:
0e:ba:05:80:9f:41:42:5d:cd:54:37:9b:97:be:ad:e0:5b:d4:
13:19:fd:3c:b3:7b:f8:85:ee:ac:d6:67:ed:58:16:f1:f6:95:
a3:5c:03:04:80:3b:21:d5:6c:d5:dd:a5:80:b0:8b:f1:cd:d1:
b9:03:52:f8:44:7c:43:81:e8:ad:af:ad:76:aa:6b:ea:62:25:
ed:ef:11:db:d6:01:4b:df:02:4d:13:c0:d4:ae:d7:56:f9:dc:
39:a2:83:24:16:81:e4:49:e4:d3:f1:41:59:7e:76:1b:f3:52:
9e:45:31:b8:b1:54:18:7b:1b:00:6b:60:48:24:fd:df:93:7b:
33:48:32:0f:96:64:8e:6d:8f:b0:f2:18:22:83:4e:d7:13:4d:
e7:59:cc:26:47:fd:01:46:f3:9a:d2:65:95:c1:7c:21:7f:02:
46:2c:e9:e4:2d:24:ec:94:95:1f:59:79:2c:55:1e:e6:6e:e5:
d0:de:32:48:ab:2a:d2:ed:ec:7e:1f:ed:4a:7d:b4:f4:a6:5f:
5e:31:9f:e6:16:a0:1f:52:a0:b0:59:00:5b:70:88:8e:ae:ad:
4c:aa:da:ff:47:76:9d:5f:67:00:8b:f6:d6:9f:c3:01:de:75:
5f:6e:02:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:23 2025 by rpki-client