Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft
File: J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft (raw, json)
Hash identifier: HzkKJmXPyM5I+mRJKjDnpNFIS+EZ1xl0WaVPtzKj/GI=
Subject key identifier: 68:7A:A0:B2:F9:36:1C:4C:1A:23:97:E4:A5:44:76:0A:24:1F:5B:8D
Authority key identifier: 27:C0:07:E5:08:2B:8E:8D:82:89:01:87:18:CF:D5:27:A7:89:3E:5E
Certificate issuer: /CN=27c007e5082b8e8d8289018718cfd527a7893e5e
Certificate serial: 0199FDD9640F9519ACCC8D397893717C58E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft
Manifest number: 1521
Signing time: Sun 19 Oct 2025 19:01:46 +0000
Manifest this update: Sun 19 Oct 2025 19:01:46 +0000
Manifest next update: Mon 20 Oct 2025 19:01:46 +0000
Files and hashes: 1: 32DmFG6eckwT_cmIA6P2GvExV8o.roa (hash: QAbNn1NoMo9kTBTTYBudg/heTTEApB1Axs6m2LEO3wM=)
2: 8mfWKUaTIk1RDd44sNUtQ4HsM2s.roa (hash: GuIpyglmMkqHqRdMJ131I6La+nXiqbtWAj+MwrMR+Yc=)
3: Ht6FsCIGKxXaA3P0oIyjphKEPpk.roa (hash: jQWJMmY8DgPGrpE2GgmGMr1+l/UtziWDhgw2WyC6x2Q=)
4: J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl (hash: aK+OS5MXHkJlguqImzRusLuheiGnaPtJ0s+6PRwuWHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:64:0f:95:19:ac:cc:8d:39:78:93:71:7c:58:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c007e5082b8e8d8289018718cfd527a7893e5e
Validity
Not Before: Oct 19 19:01:46 2025 GMT
Not After : Oct 20 19:01:46 2025 GMT
Subject: CN=687aa0b2f9361c4c1a2397e4a544760a241f5b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e9:f3:f3:48:e9:8a:c2:0a:22:99:c0:64:14:
cd:fc:9d:81:ae:6f:ce:98:9c:45:b0:96:76:34:9f:
5e:b0:a8:ca:32:d4:81:5d:36:e1:d7:78:d2:fa:13:
2b:9b:2c:04:af:f4:36:25:65:86:c7:73:b8:69:4d:
f7:3d:37:a7:22:ab:f1:bb:17:a3:79:f1:bb:34:03:
56:5e:12:be:6c:08:c1:5f:f9:fd:db:15:c5:20:b7:
a9:e0:2d:9d:aa:09:a8:60:d7:0f:1b:68:a6:dc:2c:
97:8a:51:d3:bf:e5:da:df:c1:32:0b:95:a6:ad:db:
64:1b:98:de:26:8a:67:14:58:b4:6a:72:58:69:4d:
82:62:fb:a1:8c:c1:ec:f4:a0:30:c5:bc:9f:a9:92:
95:1b:c1:41:85:51:48:aa:09:80:6e:8f:bd:61:76:
27:56:9b:db:ec:72:51:b4:f7:f1:e3:89:b2:22:15:
ad:ef:ae:62:bc:1c:4c:af:9c:12:cc:94:0a:65:88:
67:87:ef:b4:b9:51:e0:7b:76:c2:b4:9d:a3:6c:d9:
10:bb:aa:05:6a:1e:9f:ec:3e:58:ab:89:cf:d3:f2:
69:b2:88:19:df:42:c6:f5:57:2a:50:ac:2a:eb:b1:
91:15:a4:10:eb:3e:16:32:53:0a:0a:ea:19:0d:fc:
d6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:7A:A0:B2:F9:36:1C:4C:1A:23:97:E4:A5:44:76:0A:24:1F:5B:8D
X509v3 Authority Key Identifier:
keyid:27:C0:07:E5:08:2B:8E:8D:82:89:01:87:18:CF:D5:27:A7:89:3E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:6a:fe:39:7d:78:18:b0:4a:b0:f6:e0:2d:42:93:63:35:84:
c2:41:a4:ed:38:84:9f:4d:a2:58:ac:79:33:1f:f6:9a:f8:d2:
5b:ee:46:bf:b9:d1:52:62:68:54:db:dd:d1:04:89:a8:1c:c1:
59:1f:d6:1e:5d:d1:f0:68:cc:10:e6:9f:9b:46:a5:64:c5:49:
9b:60:16:9a:4f:ff:94:d6:b5:9d:f4:f9:dc:e4:74:96:d0:6d:
f5:29:83:15:bc:e8:b2:f6:49:7c:cb:a3:03:1c:d9:ce:cb:2b:
c9:da:f5:e0:5c:cb:36:cf:c0:d0:f6:5b:75:95:e8:29:97:f1:
7c:16:a4:17:d7:e0:4a:94:fc:48:35:f5:3c:af:13:a1:60:e7:
31:a8:14:1a:c6:58:2c:36:45:85:01:50:90:3b:2a:70:02:19:
eb:6f:17:ca:b9:b9:dc:ce:47:80:1e:dd:7c:36:eb:66:06:50:
60:88:70:43:36:f3:9f:a6:42:22:7c:80:6b:85:4a:77:d1:9e:
60:24:e7:4b:34:53:f0:d8:fe:12:c6:b8:00:9f:e3:52:0e:5d:
26:b9:29:dd:a6:88:8f:19:1e:bb:25:94:7e:ed:28:92:7a:39:
3b:85:75:17:3b:a5:93:61:23:a3:4c:e7:b8:97:01:c3:79:9c:
30:7d:1c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:57:12 2025 by rpki-client