Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
File: J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft (raw, json)
Hash identifier: 3rIcoZilNIZRZFP0BSXqrEI0ah61cDVY3dfswuW+pbw=
Subject key identifier: 4E:71:06:C1:96:28:FC:38:7D:06:90:AD:27:12:4A:41:81:59:9D:34
Authority key identifier: 27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C
Certificate issuer: /CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c
Certificate serial: 0199FEEBB06F66BD9F413CC83663D461EEA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
Manifest number: 16F9
Signing time: Mon 20 Oct 2025 00:01:22 +0000
Manifest this update: Mon 20 Oct 2025 00:01:22 +0000
Manifest next update: Tue 21 Oct 2025 00:01:22 +0000
Files and hashes: 1: 23bca3VQeIrruEqgH6VNWFAiuWs.roa (hash: AgG1ZxIJ9G4cx9MANuRKQ+cw/0IS8xxAcB1MqAzxpGw=)
2: 64rEanXhDA2OJWgNqMgPZ5FM7ec.roa (hash: 8qJk7sdPmgd5qyBKhZltol3z/GSxNSlFaZ8AUoHL904=)
3: J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl (hash: mk8CmE+otTOycVQs0L3LThSTmR/Gygn0lp50obWlxVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:b0:6f:66:bd:9f:41:3c:c8:36:63:d4:61:ee:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c
Validity
Not Before: Oct 20 00:01:22 2025 GMT
Not After : Oct 21 00:01:22 2025 GMT
Subject: CN=4e7106c19628fc387d0690ad27124a4181599d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:14:93:ce:49:e1:f6:f1:49:ed:66:24:31:db:
11:53:89:43:97:0f:df:2f:39:69:4a:e3:05:c2:49:
0f:f3:dd:b6:8a:7d:b3:33:c0:4e:cd:f9:03:3b:7b:
98:56:f6:6c:04:53:38:fb:0f:7d:2c:6f:2d:8c:fb:
1f:48:f3:9b:d8:b8:7d:88:22:fc:de:f6:8e:87:df:
37:40:8c:3b:be:33:c8:3f:0b:19:6b:06:5c:49:af:
0b:fd:03:72:1f:f7:33:be:05:ca:95:c0:c7:e1:f1:
4c:3d:70:da:e9:3a:19:d6:50:1f:11:e7:6a:b5:f9:
3e:32:4f:38:56:ab:50:3d:c2:1c:7b:3a:93:86:47:
f6:8a:e4:2d:43:d3:3b:13:03:d9:8e:32:1b:15:7e:
36:be:d0:e8:21:db:d9:b4:98:22:8e:e5:b9:0f:28:
33:c7:d6:35:ce:d0:e8:66:f4:8d:6e:f8:9e:63:b7:
db:2a:33:29:4e:db:86:50:81:ae:13:e3:38:3e:4e:
f3:2a:ce:2b:12:7c:64:9f:73:5f:28:0c:11:21:4d:
27:62:57:39:84:b3:fc:76:48:fc:03:f0:70:c1:fb:
17:3d:17:65:9f:38:af:85:79:0c:23:1c:12:d1:8c:
81:20:4c:dc:a6:57:f8:65:70:a6:5d:59:91:72:b6:
a1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:71:06:C1:96:28:FC:38:7D:06:90:AD:27:12:4A:41:81:59:9D:34
X509v3 Authority Key Identifier:
keyid:27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:0e:fb:4b:10:23:d5:c2:5c:23:23:c1:ba:91:f2:44:c7:56:
15:8e:ad:92:0e:40:c5:8f:e5:bb:9c:a5:fe:7c:28:94:d7:21:
bb:c2:6a:eb:39:59:fd:59:b4:95:70:bb:6c:e2:68:3a:a1:89:
60:9a:06:72:04:03:27:65:d7:de:99:d3:d5:2c:d7:a5:22:53:
5e:82:ff:85:30:05:c5:25:f0:24:18:5a:9e:5d:5f:ac:9b:40:
26:7b:e9:c5:e7:d8:bb:67:63:e0:9b:c6:2f:e5:18:b7:64:68:
55:e5:9b:68:f4:b9:7e:ca:88:21:2c:d2:a0:3d:33:04:a4:e7:
f5:dc:e6:2b:8b:f8:50:3a:33:d1:40:33:c6:58:60:7e:3c:59:
6a:4e:89:ae:28:45:26:b3:6e:8b:98:7d:d7:fb:8b:38:6f:e0:
be:d5:bb:52:5b:4b:1f:82:02:bf:83:cb:ea:6f:9f:a0:cd:f8:
87:79:d1:29:19:d7:0b:1a:0d:e2:a0:1c:f1:90:f9:f7:cf:52:
e2:62:34:c2:53:b1:db:eb:5e:d1:3c:73:53:e4:b9:8b:dd:f9:
2a:ef:73:99:31:81:f5:d5:f4:5b:7c:95:e8:de:39:59:3b:11:
df:7d:bb:e9:d1:3c:c3:97:22:ff:90:ed:58:a4:c7:46:00:fd:
56:b2:fb:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:04:25 2025 by rpki-client