Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
File: Jd40sXxTewli5M272bxnKcix2Qo.mft (raw, json)
Hash identifier: oUoURSQe8ok8DpiEE9dCaZqIvpaLNmTapH2aMnWhdsI=
Subject key identifier: 03:D4:D3:78:58:B3:F9:29:84:A8:90:B9:F9:CD:D1:04:21:A1:5C:3D
Authority key identifier: 25:DE:34:B1:7C:53:7B:09:62:E4:CD:BB:D9:BC:67:29:C8:B1:D9:0A
Certificate issuer: /CN=25de34b17c537b0962e4cdbbd9bc6729c8b1d90a
Certificate serial: 0199FB7CF567AC7E1DB5DD7BA6629FCD5A66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
Manifest number: C6
Signing time: Sun 19 Oct 2025 08:01:34 +0000
Manifest this update: Sun 19 Oct 2025 08:01:34 +0000
Manifest next update: Mon 20 Oct 2025 08:01:34 +0000
Files and hashes: 1: Jd40sXxTewli5M272bxnKcix2Qo.crl (hash: JfCN47bxat3bhBcjHS5qMejWjYW5boKZ2xfH74Gli80=)
2: h6iYTxkEjd04WV05dd6fQmp61L8.roa (hash: R2cWVyoWjWNVsdNIi8vnopbDtThlhMuHspPbR0pD3jU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:f5:67:ac:7e:1d:b5:dd:7b:a6:62:9f:cd:5a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25de34b17c537b0962e4cdbbd9bc6729c8b1d90a
Validity
Not Before: Oct 19 08:01:34 2025 GMT
Not After : Oct 20 08:01:34 2025 GMT
Subject: CN=03d4d37858b3f92984a890b9f9cdd10421a15c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:90:7c:ba:f7:95:81:f0:41:2f:90:e6:c6:4e:
7b:f1:1c:1f:da:10:52:43:bb:4f:6c:1a:6a:d6:dd:
ce:22:4c:84:4d:dc:b9:31:4c:3b:5f:57:4e:25:bf:
0f:03:99:b8:00:6c:74:cb:d9:9e:92:cb:b9:62:f6:
93:aa:5d:71:22:2b:94:bb:1c:2a:e6:f3:22:ca:63:
7b:ae:bf:41:5a:2f:ea:f0:17:85:be:30:1a:56:84:
08:75:9a:3a:82:05:f8:4f:74:f0:b6:00:41:e4:72:
6e:bd:c6:c2:18:d1:27:4a:0b:62:cc:a8:66:45:53:
5b:d9:a8:99:97:10:7e:03:07:bf:fb:42:b7:e0:15:
0e:9e:bc:95:64:51:ba:85:fb:11:80:db:41:18:07:
4f:bd:e5:4d:84:91:34:df:ec:00:70:af:f5:83:07:
5e:32:30:3a:14:0d:8f:92:fc:21:f3:a0:3f:67:5a:
c0:c1:fd:31:0a:f7:11:2c:4e:e2:84:31:8d:59:1b:
40:1b:21:ba:5f:31:66:4c:5f:3e:de:a1:52:e7:c0:
e6:7f:87:3f:4d:e8:a9:dd:81:f7:28:67:11:87:2c:
3a:ea:5c:1c:e7:5f:8e:1c:57:d0:ce:83:69:0f:88:
a7:88:19:a3:01:31:f4:b6:84:7a:65:84:e9:4d:d0:
d2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D4:D3:78:58:B3:F9:29:84:A8:90:B9:F9:CD:D1:04:21:A1:5C:3D
X509v3 Authority Key Identifier:
keyid:25:DE:34:B1:7C:53:7B:09:62:E4:CD:BB:D9:BC:67:29:C8:B1:D9:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jd40sXxTewli5M272bxnKcix2Qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7fd3e1-35c0-4528-9854-0989494588bf/1/Jd40sXxTewli5M272bxnKcix2Qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c9:66:1b:1d:e4:94:69:30:b8:71:36:68:be:6b:b4:b3:4e:
c4:e6:2b:2c:23:0f:09:66:a2:a9:fc:ef:8f:52:fa:5d:c0:8c:
79:0b:60:ec:e2:69:60:e3:3c:ef:7e:b0:be:a0:d0:d6:25:d2:
9d:26:14:6f:82:52:18:9d:9e:32:df:c5:19:0c:57:d9:a0:03:
b8:40:83:46:cf:d3:4c:04:a2:cf:96:d2:1b:4d:d1:10:e7:2d:
39:d5:91:f9:9b:d4:12:b6:b4:f0:96:a9:f8:47:9e:6c:e2:44:
77:34:66:32:f6:ba:13:8a:46:e0:76:2a:60:45:26:f7:64:c2:
37:4c:bb:7e:9a:05:fd:9c:b9:a1:24:23:98:13:9b:7e:91:bb:
76:10:c9:c7:f8:af:e6:63:8a:df:e2:e7:da:cf:25:e9:24:c8:
36:eb:7b:a5:b5:96:23:96:3e:1f:b9:ed:04:bd:4c:66:c6:79:
86:92:25:04:5c:e5:a7:ca:ba:13:e2:8b:c0:fc:0b:d4:2e:d1:
aa:4a:27:de:47:86:7f:6b:d6:c8:79:b1:79:ac:79:0a:ac:1b:
5e:93:3c:aa:a7:15:12:b8:fd:1b:73:d6:db:91:78:05:bf:be:
61:d3:2e:03:2c:ee:8d:04:ea:09:7b:8f:b8:d0:7f:db:4e:fa:
0e:6a:84:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:09 2025 by rpki-client