
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.mft
File: J9fQ03vwSUWJRyGJ4DwZMFfjc6s.mft (raw, json)
Hash identifier: q/Z5D9Uk5TZw7xagDGpQfj4DexHOT9Anw+9fZ9DLLEI=
Subject key identifier: 99:96:1F:90:BD:64:4E:05:04:66:DA:5A:48:7F:C8:73:C3:34:D6:A8
Authority key identifier: 27:D7:D0:D3:7B:F0:49:45:89:47:21:89:E0:3C:19:30:57:E3:73:AB
Certificate issuer: /CN=27d7d0d37bf0494589472189e03c193057e373ab
Certificate serial: 0199FD342D16C76F5CFD9FD2115420C398F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.mft
Manifest number: 0998
Signing time: Sun 19 Oct 2025 16:01:19 +0000
Manifest this update: Sun 19 Oct 2025 16:01:19 +0000
Manifest next update: Mon 20 Oct 2025 16:01:19 +0000
Files and hashes: 1: APV-yd4iM5ft2_CZQSdpqn3Znl0.roa (hash: zO2jXcNxwkx67uSbTL8ewK9Q+yKE4kHcIhGP4291jJw=)
2: J9fQ03vwSUWJRyGJ4DwZMFfjc6s.crl (hash: kZJI4uqh0fn6ffVczw9Uz9HUDKNzIC67Ntl69pI/ybY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:2d:16:c7:6f:5c:fd:9f:d2:11:54:20:c3:98:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d7d0d37bf0494589472189e03c193057e373ab
Validity
Not Before: Oct 19 16:01:19 2025 GMT
Not After : Oct 20 16:01:19 2025 GMT
Subject: CN=99961f90bd644e050466da5a487fc873c334d6a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:be:d4:a7:f7:10:26:95:30:be:5b:1b:00:09:
a5:36:d6:97:d4:e7:20:f3:4f:d5:5e:7a:e7:55:c9:
3b:fa:2f:34:9d:7d:11:85:d4:9d:3a:d4:4b:f4:8c:
c9:ad:ac:f4:c4:30:e7:b2:03:57:b2:9f:3d:3b:f0:
ae:95:e1:da:b4:73:f1:95:96:65:6b:e4:94:ff:0d:
74:ab:1b:48:f9:12:49:71:54:3b:3b:44:11:59:88:
55:b4:f1:b4:62:80:ee:12:0f:a4:46:fd:64:54:74:
f3:79:90:1d:d2:15:60:10:6f:3b:65:4e:93:50:e8:
ed:a6:71:1a:c7:04:9d:8c:e1:04:d0:cd:8d:a7:7a:
7b:32:d8:32:3b:39:49:92:39:8b:37:a3:88:8a:9d:
a7:75:d2:67:61:7d:a1:6a:02:5b:4d:34:ba:26:aa:
a1:b0:29:c8:93:95:81:e9:02:d0:0a:1f:1e:a1:7e:
b4:27:4e:2b:a2:2b:8c:a7:5e:42:02:99:4d:27:29:
41:d7:9a:c1:1b:07:e7:aa:c1:55:f9:70:7a:e3:92:
f2:d0:2f:c8:8e:a5:b9:d4:89:da:5f:98:e0:c9:43:
63:3b:ff:07:fc:c6:2d:51:9c:18:e6:1f:ef:c2:8f:
86:14:9f:8b:34:b0:25:21:c4:8c:b7:8c:4c:9d:c4:
05:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:96:1F:90:BD:64:4E:05:04:66:DA:5A:48:7F:C8:73:C3:34:D6:A8
X509v3 Authority Key Identifier:
keyid:27:D7:D0:D3:7B:F0:49:45:89:47:21:89:E0:3C:19:30:57:E3:73:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:a0:97:2a:8f:9d:0b:f3:ac:71:11:0e:b3:cd:67:7d:98:19:
36:b8:51:c1:08:47:ec:d9:aa:a1:f2:35:7f:81:d1:c0:a7:d2:
d9:34:fe:e4:af:a5:15:5c:85:bc:c4:21:3f:ac:75:c1:41:6d:
93:33:ed:90:a6:45:8f:0c:42:f8:c2:34:6f:23:d2:b7:72:44:
61:e8:90:61:11:7e:7a:29:84:46:ab:cd:8f:3b:96:2b:aa:06:
53:6f:74:33:bd:0e:41:3d:76:10:50:50:ce:59:3c:31:32:9c:
1d:09:86:bb:d2:30:44:e6:91:36:bf:95:9c:f3:4b:e6:0c:70:
16:97:8d:c2:c2:1f:a4:01:9b:66:ba:ca:6d:5d:38:fa:4f:aa:
65:ca:ed:b5:6f:bf:62:eb:62:79:1e:a3:fd:8f:44:99:b5:82:
81:a7:e7:5b:95:81:71:f2:df:9a:86:18:02:8e:ca:ef:3d:24:
9c:6e:11:eb:ce:1d:5c:7d:a6:43:6a:a8:e0:94:e0:f8:3c:1e:
38:13:e4:22:15:18:25:eb:df:7f:7f:dc:84:b5:86:58:ff:e5:
22:1c:f6:e5:6b:2c:0e:7c:ac:ae:aa:4b:37:30:72:e5:8b:c3:
09:94:f3:37:2f:10:91:26:31:69:ed:de:05:5d:c2:b1:37:bd:
b1:cb:a3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:45:03 2025 by rpki-client