
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft
File: _j0jo57TZW-aYGS2CdAqL25KOCc.mft (raw, json)
Hash identifier: qpqxdpODQIty52cpJFgMMCJ3RQZdjSJaJ6F4jf/p+3U=
Subject key identifier: 61:04:61:E4:A1:BA:9C:FB:46:A3:AD:EF:8E:D3:1B:AB:32:25:A4:D8
Authority key identifier: FE:3D:23:A3:9E:D3:65:6F:9A:60:64:B6:09:D0:2A:2F:6E:4A:38:27
Certificate issuer: /CN=fe3d23a39ed3656f9a6064b609d02a2f6e4a3827
Certificate serial: 019A02C7610AC08DF252FD3911F34852C309
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_j0jo57TZW-aYGS2CdAqL25KOCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft
Manifest number: 05C6
Signing time: Mon 20 Oct 2025 18:00:12 +0000
Manifest this update: Mon 20 Oct 2025 18:00:12 +0000
Manifest next update: Tue 21 Oct 2025 18:00:12 +0000
Files and hashes: 1: CdS0S5h1e306IjdNNYaIbNOac9U.roa (hash: ns5KjwP5PT64eyVqbgP83KTbHXq14r1yzW0yvkof0v8=)
2: _j0jo57TZW-aYGS2CdAqL25KOCc.crl (hash: rmvVDH/AMxUEgBjXVwp67N9Kj2MjNstcjF5avdOW4mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_j0jo57TZW-aYGS2CdAqL25KOCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 18:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:c7:61:0a:c0:8d:f2:52:fd:39:11:f3:48:52:c3:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe3d23a39ed3656f9a6064b609d02a2f6e4a3827
Validity
Not Before: Oct 20 18:00:12 2025 GMT
Not After : Oct 21 18:00:12 2025 GMT
Subject: CN=610461e4a1ba9cfb46a3adef8ed31bab3225a4d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:eb:50:bb:a3:4b:ce:b8:9f:f7:a5:b5:7d:d1:
3f:c3:05:4a:ab:03:bc:60:50:8d:0c:11:25:c0:c0:
22:2e:fb:7e:3a:7b:6e:55:5c:c0:3e:10:af:44:e8:
7b:e5:91:71:91:0f:a3:1a:29:2a:3a:5b:77:d8:6d:
91:e0:59:89:5f:63:dc:99:a8:5e:db:43:36:0e:9f:
bb:aa:20:77:23:32:92:43:e5:0a:8c:b8:6f:90:a4:
13:7a:17:ed:82:c2:7d:72:e3:83:a4:2f:1e:07:b6:
1d:b7:93:5d:f9:a6:80:17:b0:b3:ab:f7:b9:52:4d:
03:96:83:8d:ff:5e:ee:0c:b4:cd:8a:3c:9b:5f:27:
e5:1c:f4:ab:fd:cf:3d:4e:85:cd:ca:4c:b7:94:fa:
cc:96:16:55:ec:f1:a9:72:69:ab:3d:f3:e1:09:c0:
d6:26:99:28:05:38:16:95:89:f8:67:b6:e3:4d:74:
34:94:18:b8:92:be:df:66:c3:65:03:57:33:de:71:
e6:4f:57:1b:72:42:5c:fc:a3:be:dc:ee:a5:b9:1c:
b1:3a:f8:8b:d8:94:bb:fb:f8:52:ca:57:93:17:c5:
83:6b:87:53:a2:2b:11:26:f3:ce:6c:30:d7:5b:7e:
d3:78:aa:7b:fd:55:30:e0:30:31:cb:33:64:2e:db:
4b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:04:61:E4:A1:BA:9C:FB:46:A3:AD:EF:8E:D3:1B:AB:32:25:A4:D8
X509v3 Authority Key Identifier:
keyid:FE:3D:23:A3:9E:D3:65:6F:9A:60:64:B6:09:D0:2A:2F:6E:4A:38:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_j0jo57TZW-aYGS2CdAqL25KOCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:8a:d4:6b:b5:4e:05:57:bf:38:3f:b1:77:03:1b:c5:c1:a4:
d7:34:56:a2:81:c5:31:00:ce:2f:b5:85:07:d2:b0:08:3b:ca:
4c:86:71:e8:fb:d1:1d:31:dd:d3:35:5e:91:8c:c1:6e:14:c9:
ac:06:68:cc:fc:3a:23:69:c7:b4:5f:73:c2:2d:a7:56:4f:07:
17:77:9c:aa:33:63:e4:bf:51:66:ef:9e:2b:f9:98:eb:0f:40:
97:45:5d:8c:4f:c4:0d:e9:38:9c:40:fb:e1:b6:7c:57:97:c7:
9d:ea:79:d0:f7:f8:93:36:48:d9:22:4e:4c:40:b2:a7:ca:52:
96:58:d1:95:1e:ac:84:6f:7a:b8:d5:f8:fa:19:5d:5d:65:6b:
c7:a2:b3:40:ea:b7:8f:75:78:c5:da:99:59:70:39:ee:fb:3c:
bd:ca:71:2d:1b:72:ab:42:8f:31:4a:8c:7f:d5:72:8d:54:21:
33:d1:49:ce:1e:c0:a4:bb:fa:e2:ed:e1:53:55:a9:34:4a:c0:
db:e7:2f:82:87:ea:fb:6a:cd:a0:8c:c9:b5:c5:25:67:24:7f:
4a:af:a3:d5:19:84:33:70:04:2e:ed:4f:79:84:8d:ed:89:47:
ff:17:d1:7e:df:05:b0:7d:8d:51:9a:e8:36:85:f8:08:89:bb:
1d:b6:8c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:36:41 2025 by rpki-client