Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft
File: j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft (raw, json)
Hash identifier: da66EG6O1jFtJaGP44gFjquDHGQz+1fweTELBmrWeGI=
Subject key identifier: 32:1D:1C:74:B9:DD:A3:7A:70:2B:7D:34:28:CE:3D:2A:35:73:CB:66
Authority key identifier: 8F:A6:98:C9:F8:03:03:25:79:20:10:48:B8:7C:19:C6:3C:8E:11:97
Certificate issuer: /CN=8fa698c9f803032579201048b87c19c63c8e1197
Certificate serial: 0199FCFD4AC7E7264E26B102FD6BADF01EF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6aYyfgDAyV5IBBIuHwZxjyOEZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft
Manifest number: 0169
Signing time: Sun 19 Oct 2025 15:01:22 +0000
Manifest this update: Sun 19 Oct 2025 15:01:22 +0000
Manifest next update: Mon 20 Oct 2025 15:01:22 +0000
Files and hashes: 1: j6aYyfgDAyV5IBBIuHwZxjyOEZc.crl (hash: 6/XnZDn50qxm8dIAD1Nzs4Kilr0ZqgHCPjC1a/3uzvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/j6aYyfgDAyV5IBBIuHwZxjyOEZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:4a:c7:e7:26:4e:26:b1:02:fd:6b:ad:f0:1e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fa698c9f803032579201048b87c19c63c8e1197
Validity
Not Before: Oct 19 15:01:22 2025 GMT
Not After : Oct 20 15:01:22 2025 GMT
Subject: CN=321d1c74b9dda37a702b7d3428ce3d2a3573cb66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:95:47:80:6b:28:ed:04:ef:e8:89:78:0e:2a:
40:c4:3f:75:7d:54:08:6c:41:a9:31:e0:a6:6b:f3:
c7:cf:2f:1a:2e:da:39:6b:5d:d4:7d:8a:b7:1f:16:
f0:ee:75:bb:59:c5:9c:98:21:f1:b3:dc:fd:bd:35:
66:6c:c7:31:be:14:93:a8:ed:31:62:d3:cb:05:27:
f4:b3:c5:7c:80:fe:be:2a:35:9e:fa:e4:01:16:f7:
ae:58:7b:ae:b2:8d:d6:76:b8:19:25:b0:85:af:58:
b9:21:6f:76:cb:02:dd:ec:af:19:b4:94:94:c6:4d:
3c:9b:8f:f2:8f:f9:7e:8a:c1:2d:37:e9:74:fb:0c:
16:9a:d9:38:90:e2:96:e1:19:b4:e8:65:b2:c8:b8:
fe:51:d2:2c:52:16:05:10:f1:00:17:02:49:86:bd:
52:a5:87:c4:ff:4c:20:1c:49:93:20:ea:13:47:31:
d4:78:57:50:7b:d8:c5:0c:e3:6e:4b:de:64:99:94:
b9:79:9f:0d:0a:74:0e:32:1a:3a:c0:d8:a5:47:aa:
86:6e:2f:d2:39:22:a7:1d:8c:00:91:f9:b8:ee:91:
e4:d9:b4:a2:14:26:bc:32:ac:71:b9:f8:33:7c:a7:
87:6c:4d:b0:19:4d:f9:b0:c1:59:d0:f8:9d:73:77:
df:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1D:1C:74:B9:DD:A3:7A:70:2B:7D:34:28:CE:3D:2A:35:73:CB:66
X509v3 Authority Key Identifier:
keyid:8F:A6:98:C9:F8:03:03:25:79:20:10:48:B8:7C:19:C6:3C:8E:11:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6aYyfgDAyV5IBBIuHwZxjyOEZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:6d:25:cf:81:ab:64:bb:88:d0:c2:8d:65:e8:44:42:5a:e8:
1a:78:8f:2f:79:84:dc:00:37:c8:80:4b:36:a5:41:30:25:63:
b2:0f:76:30:f9:fa:e8:7c:3d:a1:9c:ed:af:93:a7:8e:31:f7:
f4:a5:6d:48:aa:00:d6:51:ab:5c:8a:f9:6f:b9:da:91:1e:0f:
6a:79:5f:09:9c:01:14:b9:3b:89:e9:21:13:b2:e9:98:2e:8b:
42:90:70:d4:0e:b9:f7:8f:29:32:09:d3:d9:72:c5:73:c9:1e:
f8:1f:3e:8e:29:a0:32:93:83:06:70:49:7e:7c:76:8e:cc:7b:
f0:e4:66:79:3f:e3:1e:f6:63:36:f7:c7:d5:1d:1f:9a:fd:a6:
56:32:77:55:08:5f:85:fb:7a:1b:d8:22:90:dc:fc:f1:54:ad:
d4:4b:2c:4d:cf:79:69:af:0e:d4:fd:4c:9b:ba:6a:ff:6e:ff:
12:1e:e3:8c:6d:20:87:33:d8:52:38:a6:42:93:39:7c:2b:cf:
40:8b:bb:b7:e4:da:a8:ba:10:6c:17:68:c5:a5:e0:16:9c:1f:
66:69:3d:5c:eb:d9:0f:1f:3a:19:0f:8e:89:f8:e5:ef:63:66:
31:5a:9e:e3:fc:21:67:71:5f:71:92:c5:99:75:ec:29:26:f0:
be:e2:99:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:35 2025 by rpki-client