Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
File: j7x_Fwe20LIrzYGA9Puxtj78mfk.mft (raw, json)
Hash identifier: 9e220RhGBW0G/QowDBP/G+V12MazAoES1iKEtL+43b8=
Subject key identifier: 6A:36:6D:35:B6:CB:41:E1:1A:A7:01:78:5B:E6:66:84:6B:3F:90:65
Authority key identifier: 8F:BC:7F:17:07:B6:D0:B2:2B:CD:81:80:F4:FB:B1:B6:3E:FC:99:F9
Certificate issuer: /CN=8fbc7f1707b6d0b22bcd8180f4fbb1b63efc99f9
Certificate serial: 019A4D7479B28402E93E5936770622F83319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 06:01:10 +0000
Manifest this update: Tue 04 Nov 2025 06:01:10 +0000
Manifest next update: Wed 05 Nov 2025 06:01:10 +0000
Files and hashes: 1: DSv-iSXA3wX9nDodPQXtYNJDYLQ.roa (hash: rLpTuxbTjwB1kMP3m7oQHgnYLtGjlIXTCssqGQyXU8s=)
2: abJHppOXbNRTL5BB9_dNqlKen94.roa (hash: yyWwgZa5PLui39TWj5tUmAj6wvoO0anzfsZ9NlvSNwI=)
3: j7x_Fwe20LIrzYGA9Puxtj78mfk.crl (hash: CJMRxb8DBdrtJ7HNl+1liCJ8WhTgwGGO3tEoCyuZ0tM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:79:b2:84:02:e9:3e:59:36:77:06:22:f8:33:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fbc7f1707b6d0b22bcd8180f4fbb1b63efc99f9
Validity
Not Before: Nov 4 06:01:10 2025 GMT
Not After : Nov 5 06:01:10 2025 GMT
Subject: CN=6a366d35b6cb41e11aa701785be666846b3f9065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ae:8a:80:74:7f:cd:9d:c9:40:7b:77:ab:6a:
3e:0d:6f:ca:30:0e:ee:09:e5:fd:1f:65:ce:ee:71:
ac:4c:e0:98:8a:22:50:f0:61:8c:9f:df:cc:e1:8a:
72:a9:2a:fb:6d:02:76:9c:4a:45:fb:c2:b1:c0:dd:
6c:99:0f:3f:2f:da:2e:f1:43:72:6d:d1:52:46:d8:
76:45:c5:59:64:3b:ea:2b:ee:d6:85:66:4a:05:bd:
ac:e0:2d:fc:5f:36:82:89:07:59:4e:d7:a7:d7:64:
cb:00:c8:66:d8:47:7a:71:74:84:10:e0:49:89:20:
ae:9f:2f:5c:d0:e7:01:de:db:0d:07:c1:90:ec:12:
8e:48:16:50:84:ee:a6:de:a8:12:cc:38:cb:14:87:
c3:6b:7b:27:2c:ee:54:ad:cd:ff:1b:6b:76:f3:a7:
c0:d9:37:c7:9c:01:68:04:42:dd:32:34:d1:a9:af:
79:03:05:07:1b:19:d6:a6:77:e9:19:ed:bb:f9:af:
74:cd:d2:eb:14:1c:fa:fb:ae:f1:3a:b4:73:41:63:
0b:cc:ad:16:76:97:bb:83:89:8c:91:fc:f6:a5:70:
bb:32:c3:ba:06:ef:1c:e7:6e:ee:1c:63:f5:7c:2b:
96:ac:bf:ef:d8:e5:c3:88:7b:e9:35:76:a0:44:ef:
2d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:36:6D:35:B6:CB:41:E1:1A:A7:01:78:5B:E6:66:84:6B:3F:90:65
X509v3 Authority Key Identifier:
keyid:8F:BC:7F:17:07:B6:D0:B2:2B:CD:81:80:F4:FB:B1:B6:3E:FC:99:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7x_Fwe20LIrzYGA9Puxtj78mfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/9355ef-e0bf-4c63-99a7-7852206213e0/1/j7x_Fwe20LIrzYGA9Puxtj78mfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:5a:78:bc:fe:6d:6a:d7:61:13:6f:34:40:23:55:f4:5f:01:
bc:61:ce:90:bd:8c:f6:ca:c0:27:3c:dd:8e:80:8b:6d:e3:a6:
a2:d3:19:05:e4:12:ac:2a:11:c8:f9:fb:e9:6c:b8:e3:b5:38:
4b:30:bf:5e:f6:59:52:37:0f:d3:41:b0:b8:42:0d:e4:ea:91:
23:fa:96:68:57:fa:e1:24:ce:a0:b6:cf:3a:db:77:2d:b7:fe:
5a:06:8a:45:13:b5:a3:a2:78:19:03:0c:3b:60:15:61:a6:76:
1a:0d:f0:4c:0c:aa:c2:51:7f:fa:f3:9d:b3:97:85:57:99:5a:
96:66:3c:41:64:38:be:39:93:bd:e0:6b:54:5f:46:42:26:62:
6e:5b:03:9a:6c:8c:c0:3a:d3:8e:b2:c6:54:7a:26:9b:9a:5b:
74:fb:6e:d6:01:28:69:6d:b1:63:35:bc:00:c2:02:74:86:95:
e2:32:92:42:71:cb:b1:21:33:29:ae:fc:83:79:45:c0:66:a0:
a2:48:e0:aa:20:18:fb:8c:65:8b:c4:89:be:e9:39:34:64:20:
a4:ab:ed:5c:30:2c:3e:e6:e8:9b:fa:a8:31:88:17:22:7e:4f:
a3:c4:aa:4d:83:9c:be:fa:4c:f0:d5:83:46:7d:40:4b:44:5b:
fd:c7:ac:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNdHmyhALpPlk2dwYi+DMZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYmM3ZjE3MDdiNmQwYjIyYmNkODE4MGY0ZmJiMWI2M2Vm
Yzk5ZjkwHhcNMjUxMTA0MDYwMTEwWhcNMjUxMTA1MDYwMTEwWjAzMTEwLwYDVQQD
Eyg2YTM2NmQzNWI2Y2I0MWUxMWFhNzAxNzg1YmU2NjY4NDZiM2Y5MDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm66KgHR/zZ3JQHt3q2o+DW/KMA7u
CeX9H2XO7nGsTOCYiiJQ8GGMn9/M4YpyqSr7bQJ2nEpF+8KxwN1smQ8/L9ou8UNy
bdFSRth2RcVZZDvqK+7WhWZKBb2s4C38XzaCiQdZTten12TLAMhm2Ed6cXSEEOBJ
iSCuny9c0OcB3tsNB8GQ7BKOSBZQhO6m3qgSzDjLFIfDa3snLO5Urc3/G2t286fA
2TfHnAFoBELdMjTRqa95AwUHGxnWpnfpGe27+a90zdLrFBz6+67xOrRzQWMLzK0W
dpe7g4mMkfz2pXC7MsO6Bu8c527uHGP1fCuWrL/v2OXDiHvpNXagRO8tlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGo2bTW2y0HhGqcBeFvmZoRrP5BlMB8GA1UdIwQY
MBaAFI+8fxcHttCyK82BgPT7sbY+/Jn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajd4X0Z3ZTIwTElyellHQTlQdXh0ajc4bWZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS85MzU1ZWYtZTBiZi00YzYzLTk5YTct
Nzg1MjIwNjIxM2UwLzEvajd4X0Z3ZTIwTElyellHQTlQdXh0ajc4bWZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS85MzU1ZWYtZTBiZi00YzYzLTk5YTctNzg1MjIwNjIxM2Uw
LzEvajd4X0Z3ZTIwTElyellHQTlQdXh0ajc4bWZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAalp4vP5t
atdhE280QCNV9F8BvGHOkL2M9srAJzzdjoCLbeOmotMZBeQSrCoRyPn76Wy447U4
SzC/XvZZUjcP00GwuEIN5OqRI/qWaFf64STOoLbPOtt3Lbf+WgaKRRO1o6J4GQMM
O2AVYaZ2Gg3wTAyqwlF/+vOds5eFV5lalmY8QWQ4vjmTveBrVF9GQiZiblsDmmyM
wDrTjrLGVHomm5pbdPtu1gEoaW2xYzW8AMICdIaV4jKSQnHLsSEzKa78g3lFwGag
okjgqiAY+4xli8SJvuk5NGQgpKvtXDAsPubom/qoMYgXIn5Po8SqTYOcvvpM8NWD
Rn1AS0Rb/ceslg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:34 2025 by rpki-client