Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
File: 1-J4in4YLBY0j_SiikmFhuHhjMMY.mft (raw, json)
Hash identifier: 58rrh3YSC3K0zHnZEQyAhZODJxX/fPUr1fU2hLIcq9k=
Subject key identifier: 7E:64:EB:31:DC:DA:DF:F5:F8:EA:9A:0E:8C:A6:6A:74:2B:CE:CF:18
Authority key identifier: F8:9E:22:9F:86:0B:05:8D:23:FD:28:A2:92:61:61:B8:78:63:30:C6
Certificate issuer: /CN=f89e229f860b058d23fd28a2926161b8786330c6
Certificate serial: 0199FB7CD24476C633567299A3CCDB0C9A45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
Manifest number: 0FA6
Signing time: Sun 19 Oct 2025 08:01:25 +0000
Manifest this update: Sun 19 Oct 2025 08:01:25 +0000
Manifest next update: Mon 20 Oct 2025 08:01:25 +0000
Files and hashes: 1: 1-J4in4YLBY0j_SiikmFhuHhjMMY.crl (hash: ke8rA/6mXDto3nBVlAcLBVuWLIEPhcjWur9OhDzX9/g=)
2: Aa6sIwlX6_w5uXf2zsts3DwkhU4.roa (hash: LlENaZaigA7zDM+CDaj8xvJ6snfd5fy4W4jHwPOvoos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:d2:44:76:c6:33:56:72:99:a3:cc:db:0c:9a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89e229f860b058d23fd28a2926161b8786330c6
Validity
Not Before: Oct 19 08:01:25 2025 GMT
Not After : Oct 20 08:01:25 2025 GMT
Subject: CN=7e64eb31dcdadff5f8ea9a0e8ca66a742bcecf18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1c:78:3d:37:9e:c8:d3:18:72:99:fc:3a:be:
99:ab:9a:cf:bd:03:28:87:51:1f:7c:0b:1d:de:e6:
6c:d7:c9:51:30:97:f7:d7:f9:d5:10:87:c3:81:83:
ae:b1:49:bb:5e:aa:fd:f0:c0:df:d8:a0:4f:94:45:
36:90:52:97:fd:51:d6:f8:4a:b1:08:0d:a7:e2:04:
8f:cf:bc:91:45:9d:67:98:ab:00:b3:ab:51:4e:a1:
c3:18:37:bf:d4:45:ab:99:cd:65:b1:b3:3d:ea:df:
69:4d:d9:51:59:8a:fc:4f:27:07:a1:d3:72:46:e1:
e4:1e:25:a3:e3:5d:2d:cd:fc:cd:10:f7:d3:28:05:
c3:19:fb:1d:66:0d:1c:8d:ec:54:c0:b3:c0:d5:5d:
cd:0d:cc:39:63:61:00:7b:b1:ff:6a:60:a1:1c:c7:
41:84:2a:76:f7:51:c0:2a:9f:f5:b8:7d:85:89:71:
8b:18:15:e8:50:c8:92:91:dc:b1:2f:aa:0b:c9:2b:
16:bc:26:1e:66:dc:b8:ce:4e:ea:5d:e9:31:05:9f:
cf:a0:86:46:3d:ed:85:83:6d:42:21:3b:7e:38:b9:
55:7e:a9:66:42:6d:93:0c:71:c2:83:1a:f0:55:a2:
8e:eb:3d:6e:85:5e:ad:d4:89:29:0b:89:31:ed:23:
d1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:64:EB:31:DC:DA:DF:F5:F8:EA:9A:0E:8C:A6:6A:74:2B:CE:CF:18
X509v3 Authority Key Identifier:
keyid:F8:9E:22:9F:86:0B:05:8D:23:FD:28:A2:92:61:61:B8:78:63:30:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:87:f9:f6:a6:e9:b7:45:ac:c5:c2:5e:94:9b:e4:04:67:f4:
33:e6:52:03:c0:c3:fb:98:fb:8c:cc:47:5f:1d:8f:e3:87:cd:
08:ee:da:b9:4a:e3:e5:15:20:96:f2:cc:15:c0:6d:f6:f1:0f:
99:03:66:c4:09:05:bc:2e:37:f5:10:e9:8a:7b:20:51:56:fe:
3f:34:96:a9:de:54:55:0f:42:be:11:dc:12:69:e7:9e:fe:e9:
0b:21:bd:5f:a6:96:25:34:1e:50:30:f6:13:c4:2e:e7:e8:78:
87:50:42:8c:63:3e:26:7b:05:ba:d5:34:05:7e:8b:01:f3:94:
f8:aa:0b:51:07:fc:a8:2e:46:ec:cf:f4:8a:a5:b6:03:b1:9e:
2a:0a:0a:4e:43:5c:fb:e7:42:95:2b:f9:b0:f8:56:68:77:da:
b4:15:0f:a4:61:95:1f:54:fd:02:22:48:27:27:c0:b0:d1:f7:
89:21:d0:28:af:45:7e:5c:05:3c:fa:49:50:54:e1:43:d9:83:
2a:ca:a8:9e:9e:8d:41:53:52:79:f6:b8:7c:bb:b2:76:3d:d1:
e8:7e:34:54:c8:68:27:ac:d1:cd:d4:09:52:73:97:d8:5b:b5:
80:1e:f3:b6:12:45:38:b1:80:78:9b:e9:2b:bb:ae:ba:50:65:
40:35:29:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:33 2025 by rpki-client