Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.mft
File: j6c6fMHk0392QDaHfEKB2osAkH8.mft (raw, json)
Hash identifier: yldGZM6b32deHnkwtnTIMcwbqTBPwlcz+R8XaB+DFlw=
Subject key identifier: 21:DE:13:8D:D0:16:89:0D:6C:6F:81:40:9E:1E:C0:E0:7E:4D:AF:18
Authority key identifier: 8F:A7:3A:7C:C1:E4:D3:7F:76:40:36:87:7C:42:81:DA:8B:00:90:7F
Certificate issuer: /CN=8fa73a7cc1e4d37f764036877c4281da8b00907f
Certificate serial: 019A4F626AA50271D992BC13CA12929ECBD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6c6fMHk0392QDaHfEKB2osAkH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.mft
Manifest number: 0BED
Signing time: Tue 04 Nov 2025 15:00:40 +0000
Manifest this update: Tue 04 Nov 2025 15:00:40 +0000
Manifest next update: Wed 05 Nov 2025 15:00:40 +0000
Files and hashes: 1: j6c6fMHk0392QDaHfEKB2osAkH8.crl (hash: nGdsLwNOVfcJW0y9AnLQIINvh5Uyf/vd3ws7DP4FHe0=)
2: olor_tHkoN8k1oKb8ve7r7Hwc2c.roa (hash: tMtLnjRmuVNk2beOyn14AwFTbvwBpk2hW+VYjVtGIZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/j6c6fMHk0392QDaHfEKB2osAkH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:6a:a5:02:71:d9:92:bc:13:ca:12:92:9e:cb:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fa73a7cc1e4d37f764036877c4281da8b00907f
Validity
Not Before: Nov 4 15:00:40 2025 GMT
Not After : Nov 5 15:00:40 2025 GMT
Subject: CN=21de138dd016890d6c6f81409e1ec0e07e4daf18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ed:66:d6:87:ce:b2:8e:89:be:a9:25:f9:2b:
56:4f:7c:76:ab:3f:0c:0b:45:91:21:0f:56:ac:21:
be:96:88:fd:26:d2:00:8f:30:54:6e:34:d2:e7:b0:
dd:b4:53:c8:15:99:a5:17:44:f5:45:ba:60:c1:7f:
96:b0:69:57:c8:e1:e9:eb:7b:6a:a7:05:be:a7:25:
8e:93:33:e0:f4:a7:f2:25:cc:5a:b8:88:71:0a:be:
78:0c:65:0e:15:fd:1e:ce:44:d4:20:46:97:f6:4e:
0d:e8:7d:85:c3:2e:3b:77:ac:e1:39:f2:83:48:0d:
fb:cf:74:d8:e5:25:91:45:e4:2e:8f:3d:58:57:72:
96:dd:fa:8a:d4:88:93:e8:b5:07:8e:12:8d:c9:0c:
82:6a:11:b5:88:07:94:8d:98:fe:2c:61:0b:1a:ae:
be:db:f2:52:0c:14:13:de:83:49:0f:94:4c:79:f1:
4f:90:a9:f5:6c:82:03:e4:91:60:02:0f:5a:70:2b:
8b:8b:f2:41:89:60:4e:6f:e7:42:17:77:b2:a2:a4:
3a:e3:7e:94:52:92:fd:ba:32:1f:bb:94:10:d2:d4:
fd:17:e6:c5:78:ec:60:7f:b6:ce:3e:14:7c:44:df:
6a:96:ec:17:92:ed:71:44:22:60:21:d7:56:25:30:
f4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DE:13:8D:D0:16:89:0D:6C:6F:81:40:9E:1E:C0:E0:7E:4D:AF:18
X509v3 Authority Key Identifier:
keyid:8F:A7:3A:7C:C1:E4:D3:7F:76:40:36:87:7C:42:81:DA:8B:00:90:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6c6fMHk0392QDaHfEKB2osAkH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:d7:11:29:23:ce:74:40:fb:ab:9f:85:d7:b5:4b:13:ca:57:
a0:f1:66:9d:dc:b3:20:bd:4c:76:a3:a0:0e:ad:3f:5a:2f:bd:
e3:af:6d:70:3e:d5:3a:41:6f:2f:28:07:00:13:c3:3a:b3:8d:
bc:5c:4d:78:8c:9b:53:d2:5a:c3:25:bd:03:24:69:64:fe:3b:
11:96:e5:71:10:28:06:71:f6:ee:6f:e6:99:b9:a2:cb:7f:52:
8c:dc:31:1b:5e:db:1b:f5:98:fd:4c:41:1d:52:30:00:90:9c:
3d:97:a9:5d:4d:c2:9f:f4:4f:e1:fc:74:15:00:f9:89:78:bc:
bd:31:af:e5:02:70:aa:24:11:da:48:a2:54:1a:6e:8d:5f:82:
b0:62:5c:47:f5:4c:d2:dc:69:92:96:b1:36:6b:77:11:68:77:
26:bf:4d:9c:5d:09:50:4a:a5:c2:b9:fb:b9:38:66:59:96:b3:
04:6f:40:48:60:c6:a9:90:75:f2:77:f7:ba:ea:93:fc:07:de:
f9:f2:19:46:92:f0:bd:00:77:ef:b1:8b:03:a2:3e:48:03:1e:
1c:06:e3:d8:75:9f:d1:26:70:fa:cf:a0:ef:68:0c:6e:eb:aa:
2d:2b:17:82:60:30:a9:d0:45:7b:4e:b9:43:1e:db:4b:33:a8:
5b:3f:1f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:16:53 2025 by rpki-client