Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
File: joIj7fCuQlYOjwwssFnjyPWuTRo.mft (raw, json)
Hash identifier: BOOQXxFmGfaORH0KWTkHMRNQPLZftExY6IwpUgdd4e0=
Subject key identifier: C7:25:E0:95:E8:0C:D3:98:06:76:E0:46:8B:58:53:CA:79:56:6D:06
Authority key identifier: 8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A
Certificate issuer: /CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a
Certificate serial: 019A4DE1D59F0FB60D6067E94C52F663B2D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
Manifest number: 09D6
Signing time: Tue 04 Nov 2025 08:00:37 +0000
Manifest this update: Tue 04 Nov 2025 08:00:37 +0000
Manifest next update: Wed 05 Nov 2025 08:00:37 +0000
Files and hashes: 1: RpYPR1Gi-4IalDvM_FJ3EiJEySA.roa (hash: 5bL7bq1TTrrMHUlx6xb11JGKYBQ34VQ/azRdoDzlQjA=)
2: joIj7fCuQlYOjwwssFnjyPWuTRo.crl (hash: dJ8IOQarVnYKU96J0dPJDfccXckvKuhwSP/umAXIGRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:d5:9f:0f:b6:0d:60:67:e9:4c:52:f6:63:b2:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a
Validity
Not Before: Nov 4 08:00:37 2025 GMT
Not After : Nov 5 08:00:37 2025 GMT
Subject: CN=c725e095e80cd3980676e0468b5853ca79566d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5c:22:7e:30:cc:22:64:6a:75:77:e0:15:06:
d7:bf:e8:dc:ad:3e:a2:2b:97:2d:63:cb:c9:72:03:
04:ab:8a:30:8b:46:c4:cc:49:a3:d1:0c:2e:bc:5c:
12:c9:f7:66:7e:95:a8:1c:30:a6:78:8a:b0:3e:81:
a8:11:13:d5:72:af:5b:ea:49:1b:ba:aa:0f:21:73:
8d:52:73:89:2a:68:07:3b:f8:8a:da:f4:2a:a8:e1:
63:19:63:14:2c:6c:5b:a9:e8:9b:2a:16:3f:0c:f1:
9c:80:ec:a5:a7:2c:b0:51:8b:b7:f6:86:41:2c:96:
7a:5b:50:eb:1f:78:c1:68:4b:65:fd:6a:82:49:99:
f3:3c:38:ca:28:3d:72:aa:ce:6c:e7:4a:d3:59:60:
de:84:69:8a:ef:7f:5e:c4:74:45:e2:2d:cc:d4:97:
71:45:05:a2:7a:76:f3:6c:99:da:4e:bc:61:1b:e0:
0a:95:03:ba:19:cc:1f:f5:b3:33:98:f4:fc:17:00:
17:88:36:4a:40:57:4d:6f:f7:94:78:9a:95:df:9a:
d4:66:7f:f2:ba:ec:5f:fc:e9:ff:1c:c0:f1:9c:fa:
a1:66:52:ad:8a:ed:70:50:01:fb:81:18:90:b7:d3:
b2:c5:2f:9f:aa:33:13:2a:20:22:01:dd:5c:23:64:
b7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:25:E0:95:E8:0C:D3:98:06:76:E0:46:8B:58:53:CA:79:56:6D:06
X509v3 Authority Key Identifier:
keyid:8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:5f:2f:b8:83:24:e6:8d:a0:97:8d:ff:f4:1d:aa:d8:10:03:
78:8d:86:58:73:54:ac:93:53:45:4d:f0:8f:04:10:7e:8d:72:
aa:c5:8d:25:42:56:5a:0e:6b:0e:66:88:b4:fa:7d:38:65:7a:
5a:86:a8:33:59:4b:ef:7f:0d:fa:1b:e9:92:f3:ee:8e:5a:1c:
5a:88:f5:03:ec:ea:80:fc:f9:5d:f5:30:50:66:f8:80:d9:93:
af:28:ec:d9:7a:83:a2:58:82:52:bd:64:60:13:89:d9:dc:03:
fc:28:85:02:67:86:6b:49:01:50:37:33:42:83:3d:10:e9:f0:
50:ce:0e:e5:ce:44:5a:2b:c6:fc:dd:99:59:1b:b6:89:07:9c:
ae:6b:3c:be:cc:c4:a2:f6:01:5b:ae:99:b5:67:a3:86:10:c6:
64:6c:f1:ea:36:1d:ec:f7:91:b7:e2:6d:f4:96:ff:b3:27:7a:
59:84:87:49:d3:c6:95:28:81:9f:78:f5:6a:3b:43:ac:fb:67:
84:a5:f5:88:24:0e:25:8a:ff:9c:a3:77:c0:74:94:66:91:68:
7e:4f:48:77:7e:b3:c4:cf:af:d3:2a:bb:80:a8:6d:42:0b:6c:
d7:19:7d:8b:4d:d5:f0:2a:5e:9c:18:e6:3f:76:47:fe:a4:86:
1b:67:3f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:57:52 2025 by rpki-client