Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
File: x8JN6ZEB-v33S8opP9bZUGDVCmM.mft (raw, json)
Hash identifier: 3+K0kW3Fi3QQGVJWSY2yvITJVjsYxQdzJSVPgpVTAG8=
Subject key identifier: 9A:4A:F5:7F:C5:1D:C0:50:D6:49:F7:EC:FC:8E:2E:3C:5B:38:85:88
Authority key identifier: C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
Certificate issuer: /CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Certificate serial: 019A4DE1594B14D7AD3BF9EDF6EFCE7D5072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
Manifest number: 1221
Signing time: Tue 04 Nov 2025 08:00:05 +0000
Manifest this update: Tue 04 Nov 2025 08:00:05 +0000
Manifest next update: Wed 05 Nov 2025 08:00:05 +0000
Files and hashes: 1: 6Cj8H-p47dvCNhMHuB2pJCnFujI.roa (hash: etPYOFcz4B7xl7Yvi1fe6awoP2aM1hrkcXjgzl1XW2c=)
2: iNe91R6y78p-QSDXxoxxAjDA_Og.roa (hash: HR8YO++Y/qB7B+dcbqN5/SgR3c8dd7aULLQGyyrd4j8=)
3: tK6dqORitjCE9QSeqzn0Dd8QVZY.roa (hash: d9AZ6zPbtFV6hygn8HjICm+c22UNHE83e16IdW/3Zl4=)
4: uHPtlU3qdVrOCAD4M6mdiGrDzqE.roa (hash: AeMGCTul+AJixElOuUQNIP59RKHExeTwQIkWiWRzSzs=)
5: x8JN6ZEB-v33S8opP9bZUGDVCmM.crl (hash: 5j9CbQufRB4oJ77QTAYvmk+RQPCGBs5crINTADINAKU=)
6: ydG33gjsDAOMifL-LMV8iBUmj5I.roa (hash: mGme2Sxc1/UzWWlnkXXzLuxU/TszYoE3oiJl3a+U4Tg=)
7: z131uKF1Jpc6EpB3kAHYRRM7XIQ.roa (hash: Z5tMUZHaMA8Bu87tPX511k88Z6BiQWZ5tSalbDOuIEw=)
8: zbII4RxH17JoDR9ukyJuiEde7IM.roa (hash: xBWfldiZFP31dGe7bTsuSEU+4Mx9LEr9W5jDRfUDGfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:59:4b:14:d7:ad:3b:f9:ed:f6:ef:ce:7d:50:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Validity
Not Before: Nov 4 08:00:05 2025 GMT
Not After : Nov 5 08:00:05 2025 GMT
Subject: CN=9a4af57fc51dc050d649f7ecfc8e2e3c5b388588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bb:f8:29:87:ac:51:0a:d0:6c:b1:d3:37:25:
1e:f6:1a:0e:12:08:c8:fe:60:00:a6:78:92:48:ea:
2c:d6:b2:c6:4e:fe:1b:dd:51:5b:b8:70:58:f8:27:
17:67:83:fb:e6:29:21:0e:02:0b:df:3e:e8:7e:f6:
f5:46:9b:51:88:7b:c5:ad:f7:12:c6:24:58:e6:d2:
f1:88:e4:16:02:da:21:80:f2:bf:9a:d0:3c:55:3d:
3a:b1:0f:b8:6d:72:cb:6d:6b:48:c9:e1:aa:01:85:
73:42:7f:94:ef:e1:a2:0d:7f:92:27:d2:af:fe:69:
67:8c:e6:b9:af:72:35:91:2e:b0:74:ce:52:47:db:
8d:dc:0e:ed:55:25:7b:d5:73:df:50:f1:72:b2:e0:
e4:8a:e2:a4:08:92:a1:3d:d3:3e:08:b3:58:7d:84:
eb:83:2e:22:b3:69:ea:3a:2a:6b:a6:87:0f:86:f6:
fd:9d:ca:19:fa:48:2e:67:a1:30:40:ae:76:c3:f8:
bb:a5:22:cf:3a:81:82:bd:9e:a0:8a:79:f4:37:d2:
2f:10:ab:37:72:82:c4:df:f4:50:60:68:e5:6f:36:
89:46:e2:bc:09:77:81:04:08:c8:7b:2c:31:d8:7c:
e3:29:a2:b3:6e:d2:12:b7:75:97:08:b9:70:06:b4:
0c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:4A:F5:7F:C5:1D:C0:50:D6:49:F7:EC:FC:8E:2E:3C:5B:38:85:88
X509v3 Authority Key Identifier:
keyid:C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:01:ec:84:83:61:8a:d4:dc:a9:92:35:49:66:80:8e:d0:47:
ec:cc:26:b6:97:91:3f:0e:70:5b:db:a5:40:0a:9a:2f:43:21:
7e:75:d2:c2:52:a6:66:83:72:49:c5:10:26:1c:0f:d6:f7:5b:
e7:d5:fd:7e:ac:66:dd:66:4a:b1:1f:8b:ce:f6:91:18:51:52:
f8:a9:e5:ec:84:11:1f:f4:0d:85:62:3f:ac:de:c8:29:06:5b:
c1:39:0f:82:8c:ac:43:26:d3:c3:00:22:5e:63:65:cb:4b:24:
b5:24:69:bf:b2:a8:e8:07:d4:53:82:a1:58:c3:32:21:4b:47:
34:c8:c3:c5:27:c7:27:96:39:92:51:a7:25:f1:f8:a9:18:d8:
6e:44:17:13:81:45:fb:75:e3:60:69:a6:45:a4:61:56:c5:43:
2a:33:7d:c7:8a:e3:1d:cc:a4:c0:8d:9b:48:06:eb:56:52:57:
ab:0b:b5:0e:e3:59:ca:fb:d0:5b:58:d6:a5:02:25:61:3e:72:
95:c0:27:12:e7:c6:1c:5a:13:a5:db:d5:d4:ee:f7:83:74:75:
1f:9c:ca:ac:ca:ad:32:17:7d:20:8f:6e:84:6e:90:14:86:32:
74:e4:bf:5d:c2:dd:c4:8d:98:96:2b:bb:1a:5c:42:e7:14:fb:
2d:13:54:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:43:40 2025 by rpki-client