Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft
File: j-YTvuu37zaZLASRrROyZwcFcmA.mft (raw, json)
Hash identifier: TcxG6Mv2syvh3FHOZclXYYEniSklD2W9RlPqcDXiAaE=
Subject key identifier: BB:1F:F6:5C:A0:0F:CA:5F:5C:9C:5E:74:77:CB:7F:DC:D6:39:CC:B3
Authority key identifier: 8F:E6:13:BE:EB:B7:EF:36:99:2C:04:91:AD:13:B2:67:07:05:72:60
Certificate issuer: /CN=8fe613beebb7ef36992c0491ad13b26707057260
Certificate serial: 0199FF594425EF2033747E2A89130333B2C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-YTvuu37zaZLASRrROyZwcFcmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft
Manifest number: 0C74
Signing time: Mon 20 Oct 2025 02:01:04 +0000
Manifest this update: Mon 20 Oct 2025 02:01:04 +0000
Manifest next update: Tue 21 Oct 2025 02:01:04 +0000
Files and hashes: 1: M8YwlBl4UsZFSGK22ajYHB1I9kk.roa (hash: NMhetTmMl7auiquiJXvinAOe9UpVWlWTrYgSxnLH8n8=)
2: j-YTvuu37zaZLASRrROyZwcFcmA.crl (hash: 7FLAE8nDEnixwOe9huPbxQoeBaH8A6s6NWAc7MKnjT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/j-YTvuu37zaZLASRrROyZwcFcmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:44:25:ef:20:33:74:7e:2a:89:13:03:33:b2:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe613beebb7ef36992c0491ad13b26707057260
Validity
Not Before: Oct 20 02:01:04 2025 GMT
Not After : Oct 21 02:01:04 2025 GMT
Subject: CN=bb1ff65ca00fca5f5c9c5e7477cb7fdcd639ccb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:41:3c:ee:66:65:80:42:23:c6:b2:6c:6c:74:
2f:19:5d:ee:0f:4c:b9:bd:d6:43:71:fb:65:6c:92:
2e:a8:13:53:ff:fa:76:61:0b:70:38:33:f5:ee:39:
0e:5e:4d:d8:de:69:72:39:90:48:50:b2:5a:5b:d5:
84:7f:bd:b7:4e:30:5a:f3:28:b4:c2:ed:6c:a4:cd:
f9:d5:01:43:36:43:06:ac:12:b5:eb:33:03:b0:0d:
1e:b7:1c:72:01:c7:c4:a0:02:1c:73:16:bd:22:33:
3c:2f:b0:44:f9:98:a0:72:0c:0d:48:63:a9:d1:5d:
79:ed:81:23:d7:d6:fe:a9:fb:46:d5:b6:07:cd:47:
7b:89:f0:3d:7b:55:c9:bd:5b:1b:bf:36:e7:88:35:
1c:d8:7a:bf:d7:bc:a3:55:05:3d:af:cd:01:2f:b8:
60:f6:e5:75:ee:fe:57:88:90:4a:04:d2:70:84:6f:
70:1c:1c:4c:f2:18:d1:c0:ce:67:76:8d:2a:47:37:
56:dd:1b:0c:4a:17:bd:87:84:1e:61:5b:9a:93:23:
27:81:8f:6f:ac:5c:fe:39:2e:6d:24:de:a8:95:3e:
c0:90:35:59:48:de:8e:b9:41:04:3a:d8:c3:a4:87:
f8:5c:11:c7:7d:a9:b2:70:fa:91:73:1c:50:e0:5c:
2b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:1F:F6:5C:A0:0F:CA:5F:5C:9C:5E:74:77:CB:7F:DC:D6:39:CC:B3
X509v3 Authority Key Identifier:
keyid:8F:E6:13:BE:EB:B7:EF:36:99:2C:04:91:AD:13:B2:67:07:05:72:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-YTvuu37zaZLASRrROyZwcFcmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:5d:cc:1b:c6:21:3c:6c:18:63:92:87:64:0c:01:29:19:30:
0c:f9:0f:5e:0d:73:7d:de:ce:5d:d8:69:7e:49:11:7f:18:6f:
44:79:39:5c:46:7d:d9:b2:2e:f2:4b:ef:41:0e:8f:48:33:00:
ee:61:c7:23:52:74:cb:31:93:7f:82:32:64:d0:a0:f7:a4:9d:
d8:c6:e5:a1:16:5a:5c:84:af:ce:64:01:73:cc:d7:dd:55:9e:
d2:59:43:5a:e2:80:8a:06:63:a5:65:d0:f5:8c:55:ba:c5:55:
c4:fa:e3:d9:c8:03:a4:13:a1:6e:bc:0e:48:70:9d:87:97:6f:
53:15:04:da:58:55:94:c7:0a:d1:8f:d0:06:d8:29:8f:cf:45:
2b:ab:3c:ee:aa:df:58:e1:78:40:f7:3c:02:ab:71:84:98:89:
52:e1:53:39:f1:8e:5b:52:62:f9:27:79:4c:d1:cf:b9:41:28:
47:18:a4:04:2b:a6:fd:2f:60:21:05:27:99:01:d6:b7:df:42:
db:e4:de:fe:d5:6f:91:bc:38:48:4a:d5:6f:ff:41:64:11:9b:
0d:97:0d:4b:19:a4:fa:9b:57:8a:71:58:b1:c8:fd:bf:f1:1c:
69:5b:94:c5:f4:8f:6a:e1:d4:92:37:36:8c:7f:15:bf:e9:26:
69:0c:a3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:26:49 2025 by rpki-client