Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
File: J9TWlrrbEJTKoV176Gw5pxLg7hI.mft (raw, json)
Hash identifier: NuUYCEiNg7R0oy4ydP9L83qkleuIvHr2sHom6I0e+2I=
Subject key identifier: EE:84:CB:9E:C9:3F:A6:8A:8C:72:00:F3:5E:48:C0:52:A9:35:EC:DE
Authority key identifier: 27:D4:D6:96:BA:DB:10:94:CA:A1:5D:7B:E8:6C:39:A7:12:E0:EE:12
Certificate issuer: /CN=27d4d696badb1094caa15d7be86c39a712e0ee12
Certificate serial: 019A00A351ECAB0E3ADEE9E8C25DCF0523B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
Manifest number: 1673
Signing time: Mon 20 Oct 2025 08:01:34 +0000
Manifest this update: Mon 20 Oct 2025 08:01:34 +0000
Manifest next update: Tue 21 Oct 2025 08:01:34 +0000
Files and hashes: 1: J9TWlrrbEJTKoV176Gw5pxLg7hI.crl (hash: GkK6pMp7IqdeFw6kK6Em54NGgKtYK53qN9PrSz2qELI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:51:ec:ab:0e:3a:de:e9:e8:c2:5d:cf:05:23:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d4d696badb1094caa15d7be86c39a712e0ee12
Validity
Not Before: Oct 20 08:01:34 2025 GMT
Not After : Oct 21 08:01:34 2025 GMT
Subject: CN=ee84cb9ec93fa68a8c7200f35e48c052a935ecde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a2:8d:f5:58:ad:49:bd:c5:3f:3f:fd:1e:d1:
94:df:c7:15:8a:24:05:5d:27:ac:f6:dc:0a:59:64:
ba:ba:a2:a7:20:76:46:db:fb:46:a2:6d:e6:50:b1:
4b:05:35:9c:c8:1b:ea:77:bb:a4:ac:47:11:b2:3e:
79:e9:df:39:b8:c4:7a:7e:2f:62:ae:f1:bb:6b:67:
da:25:39:30:7b:49:05:0a:81:66:cf:4b:b9:4b:87:
73:c3:0a:bb:ec:97:73:6d:67:a0:7c:12:20:b8:bc:
c1:ba:3b:d6:d2:30:03:f0:ef:c0:5d:2e:6f:38:75:
3b:6e:c1:34:cf:5c:68:f9:37:55:12:68:3e:09:6e:
e6:3c:24:58:9b:61:df:53:c9:03:64:c3:bf:bd:4f:
41:91:31:27:4a:59:43:9c:46:96:9e:49:4d:c5:65:
67:51:92:2b:0e:e3:e8:82:89:80:28:72:c1:fe:88:
b1:60:f0:31:71:a9:12:56:c6:a3:7a:7f:cb:0f:92:
b4:f5:79:d9:7e:5f:1d:5c:ce:d7:39:e8:ae:f0:a7:
11:71:0a:68:ca:f0:2f:26:03:c5:65:44:4f:f2:94:
70:6b:56:36:c0:4b:02:cb:76:dc:aa:80:07:b2:7c:
ed:f9:ef:0b:11:f6:81:9e:ed:94:16:d0:b8:f2:e6:
16:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:84:CB:9E:C9:3F:A6:8A:8C:72:00:F3:5E:48:C0:52:A9:35:EC:DE
X509v3 Authority Key Identifier:
keyid:27:D4:D6:96:BA:DB:10:94:CA:A1:5D:7B:E8:6C:39:A7:12:E0:EE:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:38:59:b6:81:dc:90:a7:f5:67:11:10:b1:65:fd:3d:25:af:
cd:f1:96:1e:6b:b1:b0:8b:8d:7f:16:36:a7:a0:6d:13:cd:c7:
76:db:68:fa:18:ae:ef:76:50:a3:c1:16:c7:fb:9c:69:6c:2d:
1b:93:cb:32:43:3e:40:21:e5:e9:72:a3:60:21:72:b5:7b:34:
93:bc:73:1e:06:96:b7:79:8f:83:9f:fb:82:86:68:68:08:19:
a2:9e:cd:3d:5b:b3:fd:d9:ea:dd:a1:c5:7f:19:ac:5e:33:e0:
2e:c3:2b:fb:68:9b:1c:5b:91:a6:1f:c6:63:6f:49:96:17:ef:
32:f9:ed:f0:b4:8f:8f:48:f7:42:2e:5b:10:8d:5f:4c:75:8a:
20:a7:3d:2e:c7:fc:77:28:19:7f:75:26:f0:a9:f9:4d:53:c1:
0c:e3:0c:c8:7b:88:b3:15:ac:1a:a3:2f:8d:b6:c2:95:7c:b7:
ee:9a:af:fc:9d:da:b3:33:ce:ca:75:63:9e:db:9e:f6:2e:a4:
6f:98:3b:5a:ce:82:58:09:dd:cd:5a:ad:f1:81:21:85:0a:20:
74:2a:35:51:6c:31:6d:8f:11:40:25:c5:74:00:7c:b1:48:0f:
cf:f3:81:63:4f:97:70:24:86:c5:9c:39:5e:a7:1a:ec:9c:7d:
ff:61:96:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAo1Hsqw463unowl3PBSOzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZDRkNjk2YmFkYjEwOTRjYWExNWQ3YmU4NmMzOWE3MTJl
MGVlMTIwHhcNMjUxMDIwMDgwMTM0WhcNMjUxMDIxMDgwMTM0WjAzMTEwLwYDVQQD
EyhlZTg0Y2I5ZWM5M2ZhNjhhOGM3MjAwZjM1ZTQ4YzA1MmE5MzVlY2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qKN9VitSb3FPz/9HtGU38cViiQF
XSes9twKWWS6uqKnIHZG2/tGom3mULFLBTWcyBvqd7ukrEcRsj556d85uMR6fi9i
rvG7a2faJTkwe0kFCoFmz0u5S4dzwwq77JdzbWegfBIguLzBujvW0jAD8O/AXS5v
OHU7bsE0z1xo+TdVEmg+CW7mPCRYm2HfU8kDZMO/vU9BkTEnSllDnEaWnklNxWVn
UZIrDuPogomAKHLB/oixYPAxcakSVsajen/LD5K09XnZfl8dXM7XOeiu8KcRcQpo
yvAvJgPFZURP8pRwa1Y2wEsCy3bcqoAHsnzt+e8LEfaBnu2UFtC48uYWpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO6Ey57JP6aKjHIA815IwFKpNezeMB8GA1UdIwQY
MBaAFCfU1pa62xCUyqFde+hsOacS4O4SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjlUV2xycmJFSlRLb1YxNzZHdzVweExnN2hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9kMGNlZDgtZjFiNS00Y2Y1LWI0NGQt
ZThhNGVjZTkzYTM1LzEvSjlUV2xycmJFSlRLb1YxNzZHdzVweExnN2hJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9kMGNlZDgtZjFiNS00Y2Y1LWI0NGQtZThhNGVjZTkzYTM1
LzEvSjlUV2xycmJFSlRLb1YxNzZHdzVweExnN2hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyDhZtoHc
kKf1ZxEQsWX9PSWvzfGWHmuxsIuNfxY2p6BtE83Hdtto+hiu73ZQo8EWx/ucaWwt
G5PLMkM+QCHl6XKjYCFytXs0k7xzHgaWt3mPg5/7goZoaAgZop7NPVuz/dnq3aHF
fxmsXjPgLsMr+2ibHFuRph/GY29JlhfvMvnt8LSPj0j3Qi5bEI1fTHWKIKc9Lsf8
dygZf3Um8Kn5TVPBDOMMyHuIsxWsGqMvjbbClXy37pqv/J3aszPOynVjntue9i6k
b5g7Ws6CWAndzVqt8YEhhQogdCo1UWwxbY8RQCXFdAB8sUgPz/OBY0+XcCSGxZw5
Xqca7Jx9/2GWUw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 14:36:49 2025 by rpki-client