Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
File: jG6tuGWbxzTcyyn2OEIQNruSLjY.mft (raw, json)
Hash identifier: +0mrAZHG4nYysouf8PSVqKDfwUGyZhkuntBrgz5YQD0=
Subject key identifier: B6:23:2A:5B:E7:9A:34:66:04:FF:3B:4A:35:B8:60:F9:41:BB:7D:2C
Authority key identifier: 8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
Certificate issuer: /CN=8c6eadb8659bc734dccb29f638421036bb922e36
Certificate serial: 019A4D3D37365A81507D72B7031ABB0D3F9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
Manifest number: 15D1
Signing time: Tue 04 Nov 2025 05:00:48 +0000
Manifest this update: Tue 04 Nov 2025 05:00:48 +0000
Manifest next update: Wed 05 Nov 2025 05:00:48 +0000
Files and hashes: 1: KvT2aD-Nq99_oM197F2X-Rw9L6I.roa (hash: z15bd9Fqf6jzglQODAptaKPS3RXs1Yi0RA0HfH1lDmU=)
2: NarRGiguJ47YJ26p29Ce-F1nGL8.roa (hash: c5Octm28rGn9ztGD+Y+RSPjVs16OTUfeUQ0o7SxOT5c=)
3: jG6tuGWbxzTcyyn2OEIQNruSLjY.crl (hash: V3N2GgtFdtNPacwFaaN3R9cWSGiZgQBe92O/hUxssLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:37:36:5a:81:50:7d:72:b7:03:1a:bb:0d:3f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c6eadb8659bc734dccb29f638421036bb922e36
Validity
Not Before: Nov 4 05:00:48 2025 GMT
Not After : Nov 5 05:00:48 2025 GMT
Subject: CN=b6232a5be79a346604ff3b4a35b860f941bb7d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:97:bf:5b:bb:d3:41:dd:df:2d:34:e0:23:2d:
71:ac:df:88:0a:1f:5b:ad:b2:46:29:e8:e8:28:ab:
92:cb:c9:f4:57:bd:b7:d9:86:b0:fb:a0:6c:1c:1e:
8b:58:48:c7:0e:6e:66:2c:78:b7:4d:64:35:6e:a1:
6b:7d:4a:dd:89:aa:ba:c1:f3:6f:25:ec:9c:22:77:
bf:29:16:90:7e:51:1e:8e:66:be:a3:d2:ab:db:eb:
da:f3:6a:d6:86:dc:84:5f:ef:81:a3:f4:04:8f:c0:
7d:c1:3e:d6:1a:d4:49:50:54:3a:8e:3c:76:3e:c6:
de:b6:04:6c:3e:3e:95:ee:c8:74:1f:8f:f5:b3:72:
ca:7f:f7:46:4f:9e:95:4b:42:68:cf:01:93:b4:c1:
72:32:b6:b5:41:4e:9a:e1:b9:83:82:6e:26:dc:75:
5c:b9:cd:06:ce:2e:63:0d:93:b8:1e:4d:a3:d6:a1:
8b:b4:6d:ad:80:14:10:5a:e9:41:86:6a:cc:63:2a:
77:70:dd:55:51:b8:e5:86:ac:16:46:a1:45:bd:97:
15:f4:62:a9:6e:96:2e:6d:d3:33:42:b9:37:44:69:
64:c9:c0:c3:46:ab:e7:86:8d:16:ce:cb:0c:a4:7d:
45:38:22:cd:1e:03:51:ca:53:55:7d:9f:81:5c:72:
38:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:23:2A:5B:E7:9A:34:66:04:FF:3B:4A:35:B8:60:F9:41:BB:7D:2C
X509v3 Authority Key Identifier:
keyid:8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:a7:39:33:04:a6:22:7e:a7:70:a9:a0:f0:ba:4e:97:bd:52:
a0:c7:68:9b:d7:3f:83:f6:d7:76:58:0f:ef:38:29:d3:e9:4c:
e1:83:93:d4:40:c4:6e:04:1f:3f:fc:9b:81:3f:c0:ff:a7:10:
d1:3f:46:c4:93:f8:aa:c1:83:4c:f4:69:cf:d5:5f:52:06:ef:
68:60:9f:db:8f:5c:0e:09:38:85:ed:a1:66:0d:82:ba:b6:88:
d6:a8:e1:b8:73:83:02:cb:0e:e2:1c:57:7e:57:c6:7a:f3:67:
18:d0:b1:f9:f9:be:ce:0e:55:c7:b5:42:f3:71:98:15:48:fe:
12:22:08:9a:b9:2c:22:37:fe:b2:44:3a:34:c4:27:38:1e:40:
13:89:0b:d1:2d:e2:77:e0:48:9f:63:c1:f6:64:09:44:94:2c:
b3:49:d1:7c:f3:18:05:7b:75:81:ba:b4:35:ff:eb:7a:31:9d:
79:e9:79:ef:1d:85:59:c6:0d:0c:62:35:81:43:34:2b:09:e2:
86:a6:a3:6f:d4:26:1f:be:32:43:e6:8b:85:c7:45:03:86:f2:
e3:2a:98:a0:25:a0:12:3d:1b:2a:e0:4b:78:63:9b:d6:36:36:
23:11:33:7b:aa:b4:0c:e9:76:b0:ab:4b:9f:52:90:dc:0d:10:
75:60:b1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:59:00 2025 by rpki-client