Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft
File: jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft (raw, json)
Hash identifier: vQAM27Pa18aoLDnsp/S8KM0dBQ2EpunuxiQLP5/IGM8=
Subject key identifier: 70:9A:89:55:DE:7B:C0:5E:36:FF:42:63:69:25:A4:E9:9E:75:A9:D5
Authority key identifier: 8E:6D:75:B4:E4:98:6F:AC:CB:61:4B:33:4E:45:D5:E0:39:35:2A:9C
Certificate issuer: /CN=8e6d75b4e4986faccb614b334e45d5e039352a9c
Certificate serial: 0199FB45B0AEDD7E88B14B77ABACA639BF32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jm11tOSYb6zLYUszTkXV4Dk1Kpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft
Manifest number: 10DB
Signing time: Sun 19 Oct 2025 07:01:12 +0000
Manifest this update: Sun 19 Oct 2025 07:01:12 +0000
Manifest next update: Mon 20 Oct 2025 07:01:12 +0000
Files and hashes: 1: ekK1eE5a32VySivOIvx2lxJnCKs.roa (hash: R1iwy2ZxPxih68xnTXgeurMmYbkKLoEgJqs5giY8O4U=)
2: jm11tOSYb6zLYUszTkXV4Dk1Kpw.crl (hash: LAeoks8U1Cw0MhXodGbLq2+WAio8NEpevXtD1lqDL10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jm11tOSYb6zLYUszTkXV4Dk1Kpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:b0:ae:dd:7e:88:b1:4b:77:ab:ac:a6:39:bf:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e6d75b4e4986faccb614b334e45d5e039352a9c
Validity
Not Before: Oct 19 07:01:12 2025 GMT
Not After : Oct 20 07:01:12 2025 GMT
Subject: CN=709a8955de7bc05e36ff42636925a4e99e75a9d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f5:f4:e1:fd:7c:42:30:7d:5d:2c:54:68:0c:
92:be:5d:5b:d2:ad:a8:76:ef:af:a2:4a:99:86:72:
65:a3:21:be:94:9a:82:ca:c8:ac:e7:5d:27:78:f5:
62:47:78:34:ee:0b:c2:6c:0d:e6:da:17:ea:12:17:
30:c6:ef:8c:8b:f1:3e:0f:02:ca:bc:92:fd:b4:6f:
58:c7:f2:f6:69:f4:6b:0a:c8:f5:e0:c7:5a:ef:d3:
9b:79:96:85:ae:37:95:16:d6:04:96:f2:3d:c0:b3:
83:3f:ad:c3:27:15:dd:2d:49:44:d6:e4:8c:d0:86:
f0:a1:02:cf:1b:fe:86:c5:9f:d0:53:3d:d4:bf:84:
e8:b0:50:d4:09:a1:23:e4:58:bc:72:c2:a4:0f:6a:
d4:c0:32:5f:db:3e:97:85:2d:57:5f:b3:d3:bc:8f:
57:55:64:ec:2b:7e:be:4e:54:a1:52:ac:6f:a9:b3:
11:74:86:ed:73:a1:18:60:7c:64:03:2b:08:2f:46:
bc:dc:fe:f1:76:05:ce:54:10:25:25:54:e0:82:ac:
a4:af:b1:cc:cf:85:08:87:b2:88:53:de:ed:47:3f:
a2:5a:8b:1e:39:cb:fb:55:cf:d3:0d:82:b4:4c:ac:
a9:e5:74:ef:ef:df:db:15:a8:aa:eb:24:6c:06:75:
5d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9A:89:55:DE:7B:C0:5E:36:FF:42:63:69:25:A4:E9:9E:75:A9:D5
X509v3 Authority Key Identifier:
keyid:8E:6D:75:B4:E4:98:6F:AC:CB:61:4B:33:4E:45:D5:E0:39:35:2A:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jm11tOSYb6zLYUszTkXV4Dk1Kpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/aca994-f3c0-45a4-a642-6d7602d24c83/1/jm11tOSYb6zLYUszTkXV4Dk1Kpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:fd:9b:9a:13:02:5a:de:45:44:a5:e9:c9:59:d3:4c:33:5a:
c3:a0:7b:69:5e:66:5b:cf:70:c5:20:1c:59:c7:de:b4:5b:bf:
4d:f7:a4:51:5e:32:43:6c:cc:89:0b:b9:9e:12:72:ce:35:b0:
da:25:4a:a8:87:89:f6:52:af:df:30:b2:0b:47:3a:bf:95:61:
f6:06:fe:26:73:7a:64:57:28:9e:1c:51:4b:86:7c:57:81:2b:
e5:7a:1d:df:81:a2:b0:8d:b8:81:55:b2:e1:b8:3e:eb:13:ff:
67:26:46:5c:f0:b1:da:4f:62:1a:0b:f9:07:dd:f3:bf:07:05:
78:13:e9:b1:7a:44:d2:d5:92:2e:5b:f3:e2:c8:59:28:ca:6e:
f2:d3:35:de:85:36:aa:16:63:c1:db:ce:77:2c:59:e6:7b:b2:
5f:9a:30:f0:c4:89:64:c9:6f:84:24:1c:44:d0:03:3d:2e:ba:
d3:37:c3:ff:b0:90:d1:6e:f6:4a:95:ea:6d:c1:9b:56:fd:d2:
a1:99:a6:fe:aa:8e:d1:f3:3e:6f:5f:4d:cd:71:2b:3b:c2:31:
96:59:ef:e2:a1:52:f1:88:76:78:97:3f:db:de:d9:98:39:ea:
e0:fc:a2:52:25:66:f7:56:75:e7:3d:c9:73:8b:6e:0a:35:8b:
43:51:d1:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:13 2025 by rpki-client