Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
File: jG6tuGWbxzTcyyn2OEIQNruSLjY.mft (raw, json)
Hash identifier: scu0PFaSYDtbeH4fQ/nF25UwZqSPlD5k67+Ya4zdAs4=
Subject key identifier: 1B:25:43:F1:51:0C:A8:49:C9:7F:01:F3:CC:24:A9:31:0C:A6:28:D3
Authority key identifier: 8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
Certificate issuer: /CN=8c6eadb8659bc734dccb29f638421036bb922e36
Certificate serial: 0199FC214691653635AA02CC30CAD283F211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
Manifest number: 15A7
Signing time: Sun 19 Oct 2025 11:01:02 +0000
Manifest this update: Sun 19 Oct 2025 11:01:02 +0000
Manifest next update: Mon 20 Oct 2025 11:01:02 +0000
Files and hashes: 1: KvT2aD-Nq99_oM197F2X-Rw9L6I.roa (hash: z15bd9Fqf6jzglQODAptaKPS3RXs1Yi0RA0HfH1lDmU=)
2: NarRGiguJ47YJ26p29Ce-F1nGL8.roa (hash: c5Octm28rGn9ztGD+Y+RSPjVs16OTUfeUQ0o7SxOT5c=)
3: jG6tuGWbxzTcyyn2OEIQNruSLjY.crl (hash: f4u9qlvMf0FM7mboexoXpCUPMMNhmDhGNymz1h5C7LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:46:91:65:36:35:aa:02:cc:30:ca:d2:83:f2:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c6eadb8659bc734dccb29f638421036bb922e36
Validity
Not Before: Oct 19 11:01:02 2025 GMT
Not After : Oct 20 11:01:02 2025 GMT
Subject: CN=1b2543f1510ca849c97f01f3cc24a9310ca628d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a8:94:58:da:8a:3d:7b:9e:6f:79:be:83:ac:
7a:a5:c8:69:f5:9f:28:e1:71:1e:a3:50:79:de:15:
2f:c7:14:2d:cf:89:5b:2f:9a:ee:91:ff:69:39:d2:
55:a4:31:7a:15:5d:84:c4:88:fa:82:1d:18:65:2e:
6c:a4:53:0e:a6:05:c5:9c:e3:fa:da:81:73:95:90:
32:57:b7:b5:ca:63:4d:af:e7:1b:69:5c:39:22:22:
72:b4:73:0b:b7:02:20:0d:ba:26:4e:38:7e:4d:f7:
9c:b3:20:53:08:cf:0b:37:c1:b3:dd:71:1c:eb:cd:
f7:6a:c0:e8:5d:aa:e1:83:7a:d9:54:44:df:81:03:
4d:39:4b:f1:b3:f2:af:57:3e:10:67:a4:19:d4:3a:
1a:67:da:7d:6e:53:23:98:f6:a2:e6:60:65:42:c2:
14:cc:5c:34:ac:e8:7c:a1:3f:9e:bb:fc:e9:4a:ef:
06:de:54:75:35:54:74:f8:3f:5f:01:55:b9:7b:92:
46:4b:ff:85:96:62:40:ad:cb:44:c0:41:c3:78:a3:
91:50:90:eb:41:39:6f:39:90:6f:75:09:72:c7:c6:
2b:93:87:05:dc:71:88:bb:8a:d6:a9:20:93:5b:c7:
78:38:e9:76:d1:fd:0f:f4:de:b5:df:f9:ca:b9:8c:
f7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:25:43:F1:51:0C:A8:49:C9:7F:01:F3:CC:24:A9:31:0C:A6:28:D3
X509v3 Authority Key Identifier:
keyid:8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:f0:c2:0f:b5:f2:55:a6:36:2a:3e:1d:15:a4:cf:52:c5:64:
37:e5:dd:67:22:1c:07:26:fd:c2:7d:97:f7:5b:9c:a8:fb:d9:
d3:f8:4f:ba:13:27:da:4f:01:8f:9a:25:0e:ef:a6:8c:d9:b7:
63:3f:e7:4b:9a:0a:55:e6:5d:55:a4:e7:57:44:df:05:ab:80:
1b:78:d4:4b:5e:8a:38:2f:47:3a:3e:47:47:59:22:ad:f5:63:
2a:2a:7c:18:d0:53:24:39:46:c4:8f:bb:49:f1:17:bb:f4:ba:
a4:d7:c2:73:16:60:4c:05:ef:cd:14:ed:83:03:c9:f4:50:e0:
9d:ae:b0:e8:73:18:4c:24:f3:13:1d:5e:1e:4e:94:27:26:75:
4e:38:f3:96:01:0c:fd:77:0d:7b:26:ef:ef:ec:42:1f:f8:f0:
95:6d:ee:64:96:56:01:6e:94:37:3f:df:22:d7:d8:7d:8d:07:
a2:91:8b:02:23:e4:31:c3:8b:4d:9e:19:9c:c8:c5:4b:9c:fa:
03:38:fe:b9:6d:ee:83:3f:ff:84:ca:e5:21:90:26:b4:f3:06:
45:fc:fa:98:f3:c5:0b:a9:eb:3c:9c:32:24:9b:d2:8a:2d:48:
16:e5:be:01:6f:3f:e6:3c:b8:38:60:0b:32:30:89:5f:26:5d:
ff:27:1c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:45 2025 by rpki-client