Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
File: j2xCTP6ScDEA1QooMiU3RN11ZFI.mft (raw, json)
Hash identifier: wymcqOv4Z9Bv8qJpgF2E2u3+1UJvMSD6IbNazZgnZ88=
Subject key identifier: A8:C9:D3:42:B8:81:10:5C:58:C8:8D:D1:EC:F4:A0:78:1A:3D:27:C9
Authority key identifier: 8F:6C:42:4C:FE:92:70:31:00:D5:0A:28:32:25:37:44:DD:75:64:52
Certificate issuer: /CN=8f6c424cfe92703100d50a2832253744dd756452
Certificate serial: 0199FDD968D40EBCF8A7ADC74BD39B04C4DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
Manifest number: 0FA4
Signing time: Sun 19 Oct 2025 19:01:47 +0000
Manifest this update: Sun 19 Oct 2025 19:01:47 +0000
Manifest next update: Mon 20 Oct 2025 19:01:47 +0000
Files and hashes: 1: GQxkJdIQ2mMnuH7dZw47ZjRqiOY.roa (hash: j81MHjapkMDfvn23UflaNVCyJQMSfhc/nd+jMYFAbFo=)
2: j2xCTP6ScDEA1QooMiU3RN11ZFI.crl (hash: 5Lg60mfKV/mB0ZTJtmMnKXu3Da8l4Me40LL8cc5QncY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:68:d4:0e:bc:f8:a7:ad:c7:4b:d3:9b:04:c4:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f6c424cfe92703100d50a2832253744dd756452
Validity
Not Before: Oct 19 19:01:47 2025 GMT
Not After : Oct 20 19:01:47 2025 GMT
Subject: CN=a8c9d342b881105c58c88dd1ecf4a0781a3d27c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9b:c4:95:9b:a1:e4:35:15:e7:67:d1:eb:f0:
76:e6:03:5a:45:9b:76:c5:e7:e8:8e:09:8b:37:60:
a3:a1:04:bd:ca:ec:93:6f:93:24:18:28:25:ae:56:
2f:ae:a2:4d:0c:83:bb:4e:80:18:b2:27:f6:e0:b1:
44:16:12:c6:d9:3c:6f:71:6e:2b:7c:c3:57:dd:51:
b0:97:b4:ee:bd:b9:e6:b4:ab:73:1a:85:61:bc:c9:
33:85:7c:c4:f3:07:b1:3c:69:66:f6:11:88:ca:9c:
19:38:b8:ed:7d:d8:e6:f4:93:9d:2d:e9:7f:d2:72:
2f:c5:a4:a7:58:cb:c4:bd:a5:c2:7c:81:81:79:93:
82:63:36:15:e5:1f:8a:bb:2d:0f:80:78:76:42:fa:
ae:9e:80:48:36:c8:44:d0:35:e0:5b:29:6f:8b:f5:
b5:be:41:3e:43:d9:d0:70:e6:55:6d:f3:f6:85:82:
51:b3:be:14:13:07:65:dc:a8:f4:5e:0a:9b:ea:7b:
d4:87:19:6f:22:3c:a0:ab:85:b0:1d:22:b1:a4:1d:
27:f6:20:27:04:2d:33:29:ed:95:32:59:cc:26:1d:
ca:25:5c:bc:b8:d7:71:41:4e:ad:21:cf:97:27:bb:
c1:47:d2:41:08:60:f1:4d:a7:e3:16:fc:cf:d8:08:
0d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C9:D3:42:B8:81:10:5C:58:C8:8D:D1:EC:F4:A0:78:1A:3D:27:C9
X509v3 Authority Key Identifier:
keyid:8F:6C:42:4C:FE:92:70:31:00:D5:0A:28:32:25:37:44:DD:75:64:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j2xCTP6ScDEA1QooMiU3RN11ZFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/aeb84a-7e75-48f5-ba38-0cb218e5e707/1/j2xCTP6ScDEA1QooMiU3RN11ZFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:4a:20:1c:86:58:44:b0:de:02:58:bc:38:b0:36:11:4f:71:
8d:b1:ec:88:5e:50:ac:6f:05:b2:53:37:f5:ae:74:d7:8e:1a:
0c:b7:17:bc:be:74:47:79:9f:94:29:10:2c:b0:35:39:a4:6a:
74:7f:02:c3:26:cc:ca:6d:4a:8a:1f:ff:94:6f:a5:00:12:cd:
24:38:d2:13:98:5d:0c:af:b7:24:75:51:c8:80:10:fb:16:c0:
21:b0:b4:15:18:22:85:f0:7e:63:e2:9c:f5:33:b3:a5:a7:bb:
fc:fe:9f:be:3a:e5:c2:06:f1:9d:70:c5:3d:b9:ba:3f:09:ca:
c0:c4:a2:cc:17:16:2f:83:1a:a2:fe:a7:fe:e2:9f:38:b3:db:
e8:b0:4d:34:fa:b1:0e:6b:d8:de:73:2f:8b:8b:60:02:6f:4d:
0e:2c:23:a8:ac:85:92:c7:29:2d:05:97:e4:d2:5b:4a:91:91:
46:c4:8b:c9:4d:79:be:b6:af:0a:fe:76:33:f1:fa:26:a4:0a:
9e:71:12:ac:c2:57:00:61:33:0c:51:58:56:42:1b:36:92:96:
c7:60:bf:e7:27:bf:67:d3:78:15:9c:f6:c6:49:6c:7a:7f:6d:
56:d7:2c:13:62:d8:92:3c:d1:24:c8:8b:70:a2:81:d8:98:7f:
7f:e4:f0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:48:51 2025 by rpki-client