Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft
File: tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft (raw, json)
Hash identifier: 3F92XZgw1naOcqrHgwNDMThnIDQzwFz9YtZSM5zq2pQ=
Subject key identifier: FC:F9:15:73:E5:9E:FA:83:23:2C:35:10:91:83:2C:89:70:9E:D5:F7
Authority key identifier: B6:3F:97:69:DF:97:B8:B9:AA:88:BD:22:E9:F4:1C:C2:7F:CF:16:A7
Certificate issuer: /CN=b63f9769df97b8b9aa88bd22e9f41cc27fcf16a7
Certificate serial: 019A4DE193C7CC0C51F86A13BFF655673001
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tj-Xad-XuLmqiL0i6fQcwn_PFqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft
Manifest number: 05F7
Signing time: Tue 04 Nov 2025 08:00:20 +0000
Manifest this update: Tue 04 Nov 2025 08:00:20 +0000
Manifest next update: Wed 05 Nov 2025 08:00:20 +0000
Files and hashes: 1: Zw8tldKF4IamTYiqaUWTp-ORWaM.roa (hash: +YY2MSi0DHjKWNmQtrNLuY1Ni5g7MizVHlrZ12WPMsk=)
2: tj-Xad-XuLmqiL0i6fQcwn_PFqc.crl (hash: hH7zzFM7UkS+XRanHGv/Y1HuKpjYfialk8qSakcimHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/tj-Xad-XuLmqiL0i6fQcwn_PFqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:93:c7:cc:0c:51:f8:6a:13:bf:f6:55:67:30:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b63f9769df97b8b9aa88bd22e9f41cc27fcf16a7
Validity
Not Before: Nov 4 08:00:20 2025 GMT
Not After : Nov 5 08:00:20 2025 GMT
Subject: CN=fcf91573e59efa83232c351091832c89709ed5f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:38:17:a5:0e:f4:1e:e8:15:e7:35:dd:26:90:
75:c5:0b:63:c8:3a:f0:f0:61:39:e4:f0:54:0a:ea:
a2:27:88:4e:0f:bb:20:01:ad:1c:c0:1e:a4:ce:22:
24:23:f5:f4:26:93:98:11:8e:a8:0e:f1:68:01:05:
17:4b:e5:ea:8a:65:5c:c2:a8:f6:0c:b3:35:d8:b1:
37:d0:7c:aa:70:c1:65:79:80:96:b7:b3:02:e5:6f:
fd:55:8f:3b:0d:40:09:16:70:6e:a7:40:d3:b4:38:
bc:81:7a:83:6d:d1:ff:76:d7:23:b1:07:51:9e:c4:
be:39:76:e4:df:f0:b3:59:77:e1:f7:99:7f:44:6c:
42:11:d5:40:aa:5d:12:99:a0:df:a5:40:1a:1f:71:
08:85:e2:66:e5:0e:78:87:4c:9e:0a:21:1c:54:00:
b2:2c:e5:60:59:e2:2c:3b:2f:2e:07:6f:e3:30:3c:
5e:f6:80:05:6b:f3:11:67:fe:f8:d0:72:28:af:3d:
06:28:44:84:aa:f5:da:1e:46:a4:0a:90:d8:c2:38:
3f:bd:e6:a5:00:1b:0e:95:77:b8:7b:25:6e:05:aa:
18:ba:25:cb:3a:23:9b:9f:ab:a7:0f:1b:33:a9:7a:
d2:c1:ac:6a:97:e1:3f:d0:ff:52:84:f7:6a:47:ab:
92:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F9:15:73:E5:9E:FA:83:23:2C:35:10:91:83:2C:89:70:9E:D5:F7
X509v3 Authority Key Identifier:
keyid:B6:3F:97:69:DF:97:B8:B9:AA:88:BD:22:E9:F4:1C:C2:7F:CF:16:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tj-Xad-XuLmqiL0i6fQcwn_PFqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:7b:07:cf:87:c1:dd:6d:4c:7a:97:7f:6a:d0:34:c3:be:ec:
af:01:15:ca:d1:47:99:46:e2:00:67:30:1f:82:72:ea:55:07:
0e:7a:08:97:b0:79:26:bf:4a:47:b3:b9:0f:d5:a9:ee:b2:7b:
d7:97:87:fa:fc:71:ad:8e:92:20:88:a1:77:49:ed:67:ac:66:
f0:83:22:e1:a5:55:eb:d7:13:f7:31:30:7f:b4:09:fe:ae:90:
36:33:62:06:2e:3a:b6:52:c7:2b:cc:da:cb:bb:c6:48:61:2f:
af:bf:a6:cd:d6:e0:28:87:ba:46:24:9e:a6:b1:d9:46:2f:0c:
2c:88:a6:1e:7e:4c:fa:89:90:a8:eb:09:56:b4:e6:17:9f:0c:
5d:e3:e8:ef:b1:ed:f1:8c:08:04:12:05:89:ad:01:9c:70:ab:
08:68:57:d7:22:cd:ce:c7:8f:6f:3c:89:f8:17:26:0f:8d:9f:
91:dc:ac:45:1e:ad:d7:8d:c0:bb:94:2c:05:35:46:c5:0e:60:
ad:97:da:07:0f:33:e5:5d:8d:86:f8:dd:9d:c8:de:08:62:ce:
09:08:01:f0:5d:42:ed:c7:6d:b7:16:4b:07:2b:95:4c:50:6e:
16:66:73:bd:ff:f3:fa:c4:1d:17:a7:02:0d:f2:d8:e5:89:ac:
ab:96:ec:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:49:22 2025 by rpki-client