Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
File: J8Y3pwndvn9iN6-NWykTtCI3FXw.mft (raw, json)
Hash identifier: llCsWS617hCSphq24QvMKbIZuc598zdBVRX8wnd26BA=
Subject key identifier: 7D:45:F4:B1:F9:3C:75:AC:18:92:89:4B:EE:11:54:61:3E:84:79:8E
Authority key identifier: 27:C6:37:A7:09:DD:BE:7F:62:37:AF:8D:5B:29:13:B4:22:37:15:7C
Certificate issuer: /CN=27c637a709ddbe7f6237af8d5b2913b42237157c
Certificate serial: 0199FDDA5C7A58C7022E2081CE1AA17249C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
Manifest number: 0DD9
Signing time: Sun 19 Oct 2025 19:02:49 +0000
Manifest this update: Sun 19 Oct 2025 19:02:49 +0000
Manifest next update: Mon 20 Oct 2025 19:02:49 +0000
Files and hashes: 1: J8Y3pwndvn9iN6-NWykTtCI3FXw.crl (hash: wG1zYHwsXMD5bDZDUbQ+2Vj2rCDnZoF+0ruSyjRFui4=)
2: dlmSMThgfzEt-EoGdzxxYyd6AvA.roa (hash: II2qv/R+riqTZycAWnh60efymgX6QJpKVeYxCLVnyks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:5c:7a:58:c7:02:2e:20:81:ce:1a:a1:72:49:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c637a709ddbe7f6237af8d5b2913b42237157c
Validity
Not Before: Oct 19 19:02:49 2025 GMT
Not After : Oct 20 19:02:49 2025 GMT
Subject: CN=7d45f4b1f93c75ac1892894bee1154613e84798e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:87:71:a0:a0:b1:aa:20:0b:95:67:8e:a4:08:
8d:04:bd:c7:89:f0:c3:fc:e4:54:cb:43:fa:e2:41:
2f:df:be:2f:cc:a2:70:79:83:dc:65:4b:1c:62:b1:
26:c8:db:83:33:a5:98:28:7d:64:94:a2:af:60:b4:
10:b4:9a:3a:ef:4a:ec:f5:c6:fc:db:15:c6:ba:34:
c0:4c:d7:7f:92:cc:bb:3b:05:f0:58:f6:2c:37:3c:
12:14:4a:ad:fe:2e:5d:f1:2c:52:4b:f0:e9:da:cf:
22:84:32:ee:c6:5a:0b:80:05:03:68:47:38:bc:e4:
92:04:e0:fa:3d:ba:52:fc:a3:e5:df:40:21:7d:07:
c6:b4:0c:b6:fd:53:23:ce:aa:ab:f3:9c:a7:16:80:
52:f6:2a:72:41:87:68:f7:c1:c2:1c:f3:d6:11:ed:
f5:5b:6c:91:eb:b5:1a:eb:21:6b:d1:af:5a:b6:fc:
2f:26:f2:30:70:25:96:c8:2d:50:a7:eb:06:bd:dd:
c4:3d:2a:08:d9:e8:6e:e7:7a:b9:8c:b0:d2:aa:26:
55:5a:5d:c7:7b:89:c3:25:cc:9a:e3:cd:ce:f4:ef:
4d:d1:49:fd:d9:3c:44:e4:de:e9:d4:78:76:39:65:
c5:07:c3:a7:81:29:c4:b2:4e:36:ac:a3:88:9a:d3:
5a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:45:F4:B1:F9:3C:75:AC:18:92:89:4B:EE:11:54:61:3E:84:79:8E
X509v3 Authority Key Identifier:
keyid:27:C6:37:A7:09:DD:BE:7F:62:37:AF:8D:5B:29:13:B4:22:37:15:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:c3:ba:c8:19:a3:9d:1b:48:2f:3a:12:81:26:fb:1d:85:e6:
fe:b9:b5:76:89:81:56:10:42:c1:50:a7:4d:f4:fd:ef:c4:35:
6c:09:7f:09:4c:00:cc:bc:43:2a:b4:7a:3e:07:eb:c4:10:48:
8f:9d:a9:99:3b:18:b9:a4:4c:c9:b5:dd:ab:5d:a3:ae:0f:14:
3e:81:40:48:72:5d:e7:37:67:74:41:5e:c5:a0:fa:4e:7d:5a:
a6:2f:bb:2d:48:b6:2f:94:e4:c7:2b:b8:dc:38:ce:91:7f:1f:
e6:c0:3c:f9:7a:64:d9:c8:78:1d:b5:1d:1f:5e:25:70:16:58:
76:cb:6f:f9:65:3e:5e:6e:56:f2:e0:d1:0c:ef:34:cb:8d:21:
71:06:4e:b2:3c:ed:65:b7:45:b0:e4:6d:d1:6a:6f:49:56:0b:
84:fd:4c:64:eb:74:2f:50:af:aa:be:51:3b:3c:6b:25:e3:e5:
d8:75:0e:50:65:d1:99:22:76:e5:b4:ea:50:9e:82:50:4b:31:
8a:34:fa:35:ed:65:5c:b1:de:d5:c2:9b:93:2a:a1:2a:19:25:
32:ac:1a:b7:cb:61:d4:a9:98:63:bc:6d:41:35:23:1f:37:d9:
8f:5c:cb:9b:76:6c:1b:8f:dd:fe:38:19:a4:6a:a1:c3:b8:f4:
c2:f7:35:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92lx6WMcCLiCBzhqhcknFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YzYzN2E3MDlkZGJlN2Y2MjM3YWY4ZDViMjkxM2I0MjIz
NzE1N2MwHhcNMjUxMDE5MTkwMjQ5WhcNMjUxMDIwMTkwMjQ5WjAzMTEwLwYDVQQD
Eyg3ZDQ1ZjRiMWY5M2M3NWFjMTg5Mjg5NGJlZTExNTQ2MTNlODQ3OThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4dxoKCxqiALlWeOpAiNBL3HifDD
/ORUy0P64kEv374vzKJweYPcZUscYrEmyNuDM6WYKH1klKKvYLQQtJo670rs9cb8
2xXGujTATNd/ksy7OwXwWPYsNzwSFEqt/i5d8SxSS/Dp2s8ihDLuxloLgAUDaEc4
vOSSBOD6PbpS/KPl30AhfQfGtAy2/VMjzqqr85ynFoBS9ipyQYdo98HCHPPWEe31
W2yR67Ua6yFr0a9atvwvJvIwcCWWyC1Qp+sGvd3EPSoI2ehu53q5jLDSqiZVWl3H
e4nDJcya483O9O9N0Un92TxE5N7p1Hh2OWXFB8OngSnEsk42rKOImtNa2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1F9LH5PHWsGJKJS+4RVGE+hHmOMB8GA1UdIwQY
MBaAFCfGN6cJ3b5/YjevjVspE7QiNxV8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjhZM3B3bmR2bjlpTjYtTld5a1R0Q0kzRlh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9jYzdlNmItOGM4Ni00NWFiLWFjMDMt
Y2JhZGI2NDM0MGUwLzEvSjhZM3B3bmR2bjlpTjYtTld5a1R0Q0kzRlh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9jYzdlNmItOGM4Ni00NWFiLWFjMDMtY2JhZGI2NDM0MGUw
LzEvSjhZM3B3bmR2bjlpTjYtTld5a1R0Q0kzRlh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAasO6yBmj
nRtILzoSgSb7HYXm/rm1domBVhBCwVCnTfT978Q1bAl/CUwAzLxDKrR6PgfrxBBI
j52pmTsYuaRMybXdq12jrg8UPoFASHJd5zdndEFexaD6Tn1api+7LUi2L5Tkxyu4
3DjOkX8f5sA8+Xpk2ch4HbUdH14lcBZYdstv+WU+Xm5W8uDRDO80y40hcQZOsjzt
ZbdFsORt0WpvSVYLhP1MZOt0L1Cvqr5ROzxrJePl2HUOUGXRmSJ25bTqUJ6CUEsx
ijT6Ne1lXLHe1cKbkyqhKhklMqwat8th1KmYY7xtQTUjHzfZj1zLm3ZsG4/d/jgZ
pGqhw7j0wvc1AA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:56:10 2025 by rpki-client