Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft
File: J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft (raw, json)
Hash identifier: FaPM0OMROZgF9crublamuxlmG3q/9T734WB0+31Mc8o=
Subject key identifier: 90:97:E8:09:F3:95:A0:12:10:C3:86:40:2A:EB:57:A6:13:8F:67:5E
Authority key identifier: 27:D0:28:47:06:04:33:6F:DB:93:08:E5:1B:A5:3E:95:1A:E2:E0:98
Certificate issuer: /CN=27d028470604336fdb9308e51ba53e951ae2e098
Certificate serial: 0198D5159B4006866DC06C6725295CB62ECE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9AoRwYEM2_bkwjlG6U-lRri4Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft
Manifest number: 09DF
Signing time: Sat 23 Aug 2025 04:00:19 +0000
Manifest this update: Sat 23 Aug 2025 04:00:19 +0000
Manifest next update: Sun 24 Aug 2025 04:00:19 +0000
Files and hashes: 1: 8lytrNRAlkzl2XNEuoqT9hqGeHI.roa (hash: bsiOs3LeZM/7MgOmaqSi5ylqvDA5KYlcRdJP7/Y5e7k=)
2: J9AoRwYEM2_bkwjlG6U-lRri4Jg.crl (hash: 3WEXNvreGdqf9SaP1SkWz+fvux0zBAIC+vvhapmUeFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9AoRwYEM2_bkwjlG6U-lRri4Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:9b:40:06:86:6d:c0:6c:67:25:29:5c:b6:2e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d028470604336fdb9308e51ba53e951ae2e098
Validity
Not Before: Aug 23 04:00:19 2025 GMT
Not After : Aug 24 04:00:19 2025 GMT
Subject: CN=9097e809f395a01210c386402aeb57a6138f675e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:52:ac:c3:41:8e:1b:a7:82:d0:b3:44:af:0e:
53:4d:ac:0e:60:5e:f5:da:28:4a:de:d8:75:0c:89:
62:f5:c5:4d:67:d6:93:e6:dc:97:d1:15:f5:e0:f4:
eb:fb:64:9d:c4:03:d9:bf:c9:9c:1d:43:d4:9a:46:
43:70:4f:76:fe:ee:4b:ad:0e:1b:99:f9:ef:91:f4:
3f:68:72:05:57:3e:d4:ff:ec:7b:15:35:1b:b2:da:
71:44:ed:bc:c3:24:6b:7d:f0:9f:8c:e5:cd:04:9a:
90:f3:d8:30:4d:5c:7e:cb:c1:04:6f:5e:8a:04:0d:
1e:29:69:76:40:14:ae:61:22:63:a2:17:c8:6b:c5:
87:15:3b:41:bc:76:4a:e1:99:be:d8:02:3b:40:a0:
34:50:56:2a:24:a4:b0:72:98:c8:64:09:dd:96:f5:
8d:f1:ce:e1:9d:64:03:15:49:b7:af:f4:25:a3:d7:
62:54:8c:4f:5b:d0:c2:39:69:af:3e:2e:2c:b6:3f:
f3:f0:22:73:e9:75:6b:7e:75:5c:9b:5b:63:db:08:
38:e1:19:75:74:dc:37:7d:ac:c9:11:99:cc:1a:68:
c5:c9:fa:e8:5e:63:73:2c:b5:f9:62:37:09:44:c8:
d2:b8:77:1a:0d:8f:24:0e:1a:14:44:95:6d:64:0b:
7e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:97:E8:09:F3:95:A0:12:10:C3:86:40:2A:EB:57:A6:13:8F:67:5E
X509v3 Authority Key Identifier:
keyid:27:D0:28:47:06:04:33:6F:DB:93:08:E5:1B:A5:3E:95:1A:E2:E0:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9AoRwYEM2_bkwjlG6U-lRri4Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:4a:2d:31:09:36:0f:30:a8:5e:e6:12:9d:99:2b:2d:49:d9:
7b:42:86:78:e0:3e:95:ee:70:61:f8:a2:e9:86:90:e0:76:60:
08:08:f7:81:7c:59:3b:68:80:f2:ec:44:5b:61:6e:81:04:24:
f5:f7:03:9a:a4:89:a6:1c:5a:67:2b:6e:a3:ba:ab:ca:a6:9e:
d7:ef:f3:ea:13:73:bd:05:eb:c0:bd:7d:71:81:9c:bf:46:dd:
d6:4b:d4:7e:89:14:96:21:79:8a:bc:77:60:66:cb:32:b1:3d:
a6:dd:b5:11:2d:32:45:81:e4:70:df:39:29:c0:c9:3f:56:1f:
5f:3c:d3:fb:91:05:5b:d3:fa:73:ce:17:2d:55:b0:d7:e7:a8:
42:fe:7e:cf:af:2c:ff:64:fb:9a:60:2e:04:0c:ea:20:2f:3f:
8f:3e:d9:c4:1a:90:a0:8a:6a:22:85:5f:0f:23:af:b8:ad:ad:
04:a2:f0:db:9b:6f:70:0e:38:21:ff:48:92:f4:ed:50:77:44:
e5:15:ee:a4:0c:3d:2e:cb:53:e0:0e:32:06:a4:9e:ca:eb:82:
53:b5:63:1f:c0:c0:0d:ea:aa:b4:de:c0:43:f9:a9:f3:1a:01:
de:6e:53:bd:9a:fb:71:01:0a:9b:38:92:62:89:30:d1:58:5a:
2c:10:26:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:34:51 2025 by rpki-client