Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft
File: J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft (raw, json)
Hash identifier: jK3ny1ONGw3LjBPR9HJEV7TcZU/3hifR3+jMgxM6jR8=
Subject key identifier: C0:A0:3A:BF:24:34:6B:F8:69:ED:3D:68:9B:C0:9D:C3:66:0E:69:B7
Authority key identifier: 27:D0:28:47:06:04:33:6F:DB:93:08:E5:1B:A5:3E:95:1A:E2:E0:98
Certificate issuer: /CN=27d028470604336fdb9308e51ba53e951ae2e098
Certificate serial: 0199FC8F136C201155914E173BEEF41BEDC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9AoRwYEM2_bkwjlG6U-lRri4Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft
Manifest number: 0A78
Signing time: Sun 19 Oct 2025 13:00:58 +0000
Manifest this update: Sun 19 Oct 2025 13:00:58 +0000
Manifest next update: Mon 20 Oct 2025 13:00:58 +0000
Files and hashes: 1: 8lytrNRAlkzl2XNEuoqT9hqGeHI.roa (hash: bsiOs3LeZM/7MgOmaqSi5ylqvDA5KYlcRdJP7/Y5e7k=)
2: J9AoRwYEM2_bkwjlG6U-lRri4Jg.crl (hash: qYVUjmbNVjEc/tD78sSUhlrZsl42b8X4PL0L4V0K9tI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9AoRwYEM2_bkwjlG6U-lRri4Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:13:6c:20:11:55:91:4e:17:3b:ee:f4:1b:ed:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d028470604336fdb9308e51ba53e951ae2e098
Validity
Not Before: Oct 19 13:00:58 2025 GMT
Not After : Oct 20 13:00:58 2025 GMT
Subject: CN=c0a03abf24346bf869ed3d689bc09dc3660e69b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:50:2c:8a:24:a5:0c:d7:ec:74:07:5e:e9:a7:
a5:24:cf:99:df:c6:cf:87:07:3f:d8:3e:b6:17:00:
fe:67:34:3e:ce:50:ae:64:d8:73:bc:99:28:73:78:
1a:39:78:ed:c9:e8:81:94:96:94:31:19:da:7e:16:
08:be:34:ca:8e:9a:a3:d9:25:aa:85:93:b9:bb:c1:
0a:57:63:c4:d4:04:39:9e:c8:5c:be:2c:e6:80:a2:
98:df:e8:47:82:0b:63:73:0d:ec:bb:f7:1b:43:6c:
3c:49:e5:b0:3f:f2:5d:85:bd:f7:0a:73:cb:96:f1:
26:89:8a:ff:9f:1d:5d:4a:92:69:5e:c1:27:68:89:
f4:46:56:c7:04:5a:df:8c:f6:29:b2:c3:49:eb:53:
5d:6e:69:e2:1c:10:13:a0:0d:ee:cd:13:70:e6:d0:
b6:12:fd:ed:e1:c9:3a:2a:aa:ba:38:1e:99:5d:9b:
cb:b3:2c:03:28:b3:05:06:2d:4e:89:9d:fb:6b:59:
52:a1:35:8b:5c:98:7f:71:64:97:af:6b:a4:37:bd:
99:bf:74:44:5b:9e:2c:66:d9:51:3b:bc:da:4f:f3:
f7:51:56:a0:81:cb:b2:04:47:19:c1:a1:6e:aa:51:
ee:ef:f4:81:db:85:36:e9:75:f3:52:a4:e0:a5:0e:
71:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A0:3A:BF:24:34:6B:F8:69:ED:3D:68:9B:C0:9D:C3:66:0E:69:B7
X509v3 Authority Key Identifier:
keyid:27:D0:28:47:06:04:33:6F:DB:93:08:E5:1B:A5:3E:95:1A:E2:E0:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9AoRwYEM2_bkwjlG6U-lRri4Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:2b:8d:33:58:14:0e:4b:69:dc:fa:76:0b:ef:a2:5c:7d:8a:
e6:25:88:00:85:9f:f0:c7:97:25:13:4d:0e:43:65:5b:c1:81:
47:66:e9:68:48:dc:ca:0c:69:67:81:eb:d5:dc:7d:cd:7e:35:
9e:74:21:fe:fe:07:c8:f6:2f:94:29:00:3c:bf:47:05:b9:94:
40:22:c7:c8:23:c3:25:98:60:ec:6a:24:68:7f:e8:cb:21:3b:
a1:46:e5:2c:05:26:8b:7a:5a:7b:9d:04:b5:d7:be:16:87:0d:
83:b7:01:a4:74:7b:e2:40:ec:2f:71:f2:40:3c:40:f6:9d:fb:
02:93:e9:3a:aa:1f:69:c0:88:66:f0:c3:4a:b1:58:d0:bc:35:
db:aa:6a:7e:fd:43:24:94:ea:b1:00:2e:71:86:45:cb:92:0d:
fd:c1:5a:c3:14:a4:3e:d6:36:e1:25:75:21:dc:6e:a0:4f:5c:
0e:74:16:51:06:9f:5e:d6:8b:8c:cb:f7:c1:ae:3e:4d:dc:11:
fb:22:53:37:62:ef:ad:5e:a9:12:d1:e3:6a:72:a0:0e:73:8f:
da:69:50:a9:77:66:d9:07:6a:a9:ec:1d:39:8b:3e:34:de:5c:
49:a2:b1:2b:cd:df:d1:07:c7:d9:a9:ff:a8:fe:f7:8e:91:0d:
0d:6f:de:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:15 2025 by rpki-client