Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
File: j41-pH0bcAw9a3mTWKp-peyos9I.mft (raw, json)
Hash identifier: rKauGpqTmDNoMmhCvTPWlCg5FaSU4vI1LokbPIUcMj0=
Subject key identifier: D7:0B:13:5E:DF:FA:42:6D:A0:FD:4E:AC:C0:F9:38:19:33:5B:A5:80
Authority key identifier: 8F:8D:7E:A4:7D:1B:70:0C:3D:6B:79:93:58:AA:7E:A5:EC:A8:B3:D2
Certificate issuer: /CN=8f8d7ea47d1b700c3d6b799358aa7ea5eca8b3d2
Certificate serial: 0199FC2176DFE3D2E7FF35D47763E4DDB2B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
Manifest number: 13BD
Signing time: Sun 19 Oct 2025 11:01:15 +0000
Manifest this update: Sun 19 Oct 2025 11:01:15 +0000
Manifest next update: Mon 20 Oct 2025 11:01:15 +0000
Files and hashes: 1: Cq1uwQrHFQPm5xvJu9eVPDpYJfg.roa (hash: N4jarbfAl3jZNu3gv2b+Z58QVCigDfUQbqsuaDI8gko=)
2: j41-pH0bcAw9a3mTWKp-peyos9I.crl (hash: 1k/M87DGANC7UVDzNWsXefboOKyg4xQL43IZyWqsyEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:76:df:e3:d2:e7:ff:35:d4:77:63:e4:dd:b2:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f8d7ea47d1b700c3d6b799358aa7ea5eca8b3d2
Validity
Not Before: Oct 19 11:01:15 2025 GMT
Not After : Oct 20 11:01:15 2025 GMT
Subject: CN=d70b135edffa426da0fd4eacc0f93819335ba580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:64:a5:41:b3:61:87:4c:52:83:ba:c9:0b:47:
0b:59:a2:5f:8a:05:f6:45:6f:5d:15:70:b6:f6:0d:
dd:b6:67:6c:3c:c3:5c:54:8b:80:a5:4b:0b:1b:24:
14:dc:da:5f:8e:45:f2:1a:0a:f8:f0:92:01:fd:cf:
b7:09:20:e8:24:60:9a:b9:ca:a8:a8:44:af:58:59:
ae:ea:56:4a:2f:32:38:84:18:24:30:fa:ae:0c:a9:
aa:31:96:57:a9:e1:c4:4f:c8:0d:ad:36:d2:15:df:
06:1d:7b:2b:89:71:4b:51:f0:c9:83:1d:ee:3c:f9:
d6:c3:23:67:92:e8:da:6e:8a:af:57:85:48:82:fa:
14:e2:31:db:76:2c:7a:0b:63:c8:70:00:6d:e7:1f:
a5:06:47:3f:56:36:f4:30:f5:e8:6f:2f:b8:41:90:
59:1a:4f:63:e4:f5:c6:8b:dd:7c:fe:6b:7d:78:82:
24:3f:f2:e5:1e:99:75:8c:2d:6c:93:eb:4a:9b:6c:
b8:99:12:7e:ce:70:c2:51:6e:ef:7f:fa:7f:a2:0d:
bb:05:5b:4c:85:fc:8f:6f:47:80:a5:8a:c4:31:e8:
6a:40:27:ca:2a:20:a6:d6:04:1e:9d:85:34:09:c5:
4e:27:85:17:9c:46:3e:ef:27:cd:66:bb:08:c8:d0:
af:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0B:13:5E:DF:FA:42:6D:A0:FD:4E:AC:C0:F9:38:19:33:5B:A5:80
X509v3 Authority Key Identifier:
keyid:8F:8D:7E:A4:7D:1B:70:0C:3D:6B:79:93:58:AA:7E:A5:EC:A8:B3:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j41-pH0bcAw9a3mTWKp-peyos9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6314e5-a964-44f6-ada1-20520e6b617a/1/j41-pH0bcAw9a3mTWKp-peyos9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:53:21:37:8a:76:d2:2d:96:47:8b:8b:43:aa:5c:0c:92:39:
cd:4d:7d:79:3c:43:2c:d2:e5:54:3e:e3:f6:ab:d7:f3:dd:fe:
5d:9b:e7:f6:0f:02:40:5f:13:98:89:80:1a:72:b6:7d:52:c7:
75:82:e4:fb:86:b7:7e:14:27:26:b1:82:b6:21:b0:ac:27:4c:
66:0c:46:76:c2:e9:e6:95:e9:58:1d:aa:21:ec:05:07:b0:ce:
b6:11:27:fe:4f:3d:47:76:a2:5d:6e:a2:fd:fa:10:83:75:05:
05:91:d4:a7:a6:78:8c:58:e9:31:8d:08:e1:cd:2a:42:df:4a:
d4:09:bf:e3:a1:db:eb:f1:f8:9e:66:c5:a0:23:28:50:b5:74:
10:a0:e2:d8:a7:db:ca:ff:79:59:76:41:2a:b8:58:6c:52:db:
2f:b1:35:b6:dc:61:8b:fd:c2:51:aa:c0:04:de:ce:05:13:72:
33:5e:8b:9b:27:c8:f4:c1:40:74:f9:af:a8:7b:ff:1f:62:85:
0f:42:d2:83:d1:66:98:7b:2b:fa:d5:62:3b:88:e1:50:76:86:
eb:d6:ba:07:7c:e4:ec:8f:4c:57:e3:b0:c9:60:5e:23:20:cb:
ca:41:ab:c7:92:83:f6:bd:77:16:d8:f1:69:d2:8b:6c:7d:97:
8a:e2:05:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:30:24 2025 by rpki-client