Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft
File: J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft (raw, json)
Hash identifier: fVlurqfVY4oCfFoMcB45K0XEZUDXs7aof3rPfa45PiE=
Subject key identifier: 8F:40:01:26:0B:02:16:A0:F7:1D:B5:E4:69:12:CB:FA:EB:BD:AA:BE
Authority key identifier: 27:C0:07:E5:08:2B:8E:8D:82:89:01:87:18:CF:D5:27:A7:89:3E:5E
Certificate issuer: /CN=27c007e5082b8e8d8289018718cfd527a7893e5e
Certificate serial: 019A4EF49E21CFA254AF6D7648AACB49CBF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft
Manifest number: 154B
Signing time: Tue 04 Nov 2025 13:00:45 +0000
Manifest this update: Tue 04 Nov 2025 13:00:45 +0000
Manifest next update: Wed 05 Nov 2025 13:00:45 +0000
Files and hashes: 1: 32DmFG6eckwT_cmIA6P2GvExV8o.roa (hash: QAbNn1NoMo9kTBTTYBudg/heTTEApB1Axs6m2LEO3wM=)
2: 8mfWKUaTIk1RDd44sNUtQ4HsM2s.roa (hash: GuIpyglmMkqHqRdMJ131I6La+nXiqbtWAj+MwrMR+Yc=)
3: Ht6FsCIGKxXaA3P0oIyjphKEPpk.roa (hash: jQWJMmY8DgPGrpE2GgmGMr1+l/UtziWDhgw2WyC6x2Q=)
4: J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl (hash: RrbrsFRo72O9GC+4bgMXyW/LV14nM43Um7863KsLDU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:9e:21:cf:a2:54:af:6d:76:48:aa:cb:49:cb:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c007e5082b8e8d8289018718cfd527a7893e5e
Validity
Not Before: Nov 4 13:00:45 2025 GMT
Not After : Nov 5 13:00:45 2025 GMT
Subject: CN=8f4001260b0216a0f71db5e46912cbfaebbdaabe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b7:52:d8:0e:97:f9:b8:42:58:13:1a:3d:53:
9a:d5:fe:d0:91:26:6f:e7:9f:b9:77:b4:3f:29:e2:
14:2a:5c:34:29:c5:ce:e1:19:92:df:d5:b6:08:5c:
5e:cd:63:a1:a4:d0:33:2a:e6:d1:58:62:56:7d:2b:
78:10:44:49:95:9e:9d:9a:a8:63:01:5d:8d:b3:ab:
64:5f:1c:f3:76:47:53:8c:e6:e5:3f:86:e7:09:42:
33:27:9a:f3:80:5f:cb:39:fe:cc:63:02:73:c4:e3:
2c:17:a4:d2:30:8f:7e:15:07:4b:ad:14:4a:4d:41:
0c:7f:2b:54:0d:99:45:d4:23:95:dc:6d:c5:c5:51:
b3:5a:63:c2:7b:5e:46:d7:e7:fd:90:f6:00:0f:fb:
ef:39:44:e8:86:25:66:c3:8c:e7:19:55:4a:9a:c5:
fb:5e:8f:3b:48:99:9c:bd:35:8a:4f:5c:4c:a5:b3:
b8:4b:62:e4:a2:9c:b4:00:f2:36:a6:b4:04:f3:ab:
8c:df:8c:79:f5:7f:d6:7b:96:36:5f:af:9b:1d:de:
9a:c6:6f:3b:63:30:f4:66:2e:3e:86:44:00:65:ff:
64:4f:1d:f8:d7:63:fe:be:b9:25:03:1b:be:20:54:
e6:5c:1f:66:cc:3a:9d:5d:06:40:0f:7b:f7:a2:d2:
b1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:40:01:26:0B:02:16:A0:F7:1D:B5:E4:69:12:CB:FA:EB:BD:AA:BE
X509v3 Authority Key Identifier:
keyid:27:C0:07:E5:08:2B:8E:8D:82:89:01:87:18:CF:D5:27:A7:89:3E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06fe14-d146-4e66-a841-2c64c291353e/1/J8AH5Qgrjo2CiQGHGM_VJ6eJPl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:aa:64:97:4c:72:cc:a9:4f:e7:ee:40:9f:73:29:f5:55:30:
9a:3d:87:f9:9a:94:7d:ed:b1:de:70:83:c6:f4:05:cb:ed:75:
79:d0:72:fc:36:47:2e:79:83:05:4d:c8:64:31:a5:d2:e1:c9:
4a:15:d3:ed:17:c9:79:b0:ac:71:3f:e2:58:07:ed:1b:93:7d:
09:fb:0a:df:00:f9:a5:fb:88:dc:8d:5f:e2:12:dd:74:d2:af:
47:2b:51:31:a0:2d:a1:75:3d:32:57:06:76:25:2a:55:c0:21:
b9:a7:3e:dc:1b:a5:e4:67:4e:3d:5e:b1:be:db:75:1e:e1:e2:
ad:26:11:39:cc:98:74:9a:62:b5:d2:38:c1:ee:13:d2:3b:ec:
df:dd:da:5f:d1:91:02:93:1f:65:84:ef:5d:c1:63:32:7e:e8:
78:36:59:3d:11:7e:d7:66:8a:f7:71:4f:5d:70:1a:bb:8a:d2:
ce:72:55:f5:15:29:a4:44:85:dc:ff:47:40:ef:7f:83:ed:82:
4f:db:f5:56:43:b7:33:da:db:e6:66:fe:2a:bf:1a:a0:ad:c5:
05:1f:3e:7b:10:4f:15:6b:5b:d9:7a:04:d7:63:ed:b4:69:4c:
86:5f:56:fa:7f:7f:b5:fd:46:b4:68:0b:4c:cc:8b:09:6b:9b:
07:22:51:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:06:03 2025 by rpki-client