
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
File: J9ivflbIDRjclo9NvOyBP4XqMKQ.mft (raw, json)
Hash identifier: PZGxjLOcz54yxapIfOGSUOW40TQ17tULLGSEKidwHzA=
Subject key identifier: 1E:0F:10:7F:38:4F:1F:EB:BA:1C:1D:C7:59:41:95:82:68:08:D9:13
Authority key identifier: 27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4
Certificate issuer: /CN=27d8af7e56c80d18dc968f4dbcec813f85ea30a4
Certificate serial: 0199FE1051762AAAD3F952B9D0FB10E33AAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
Manifest number: 0EA1
Signing time: Sun 19 Oct 2025 20:01:46 +0000
Manifest this update: Sun 19 Oct 2025 20:01:46 +0000
Manifest next update: Mon 20 Oct 2025 20:01:46 +0000
Files and hashes: 1: EfwLikTBq1BQAGfNQNV1E8qGDAc.roa (hash: yRt0hCbp/cepFk2zNBBsY1KquLoFtQD0MeEg7vy0YTA=)
2: J9ivflbIDRjclo9NvOyBP4XqMKQ.crl (hash: VT0aCpmIdNHrYC+Irk1HFGi20xgpfzHOIRitHa8PzzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:51:76:2a:aa:d3:f9:52:b9:d0:fb:10:e3:3a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d8af7e56c80d18dc968f4dbcec813f85ea30a4
Validity
Not Before: Oct 19 20:01:46 2025 GMT
Not After : Oct 20 20:01:46 2025 GMT
Subject: CN=1e0f107f384f1febba1c1dc7594195826808d913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a8:fc:f6:fc:c8:d4:19:ea:72:f0:93:b7:fa:
d0:41:cc:15:72:d1:b6:ee:b1:50:b8:5b:43:bf:d3:
b8:f9:ce:47:4c:65:b4:8b:9d:15:33:76:98:81:8e:
14:20:d7:71:83:d8:42:f7:cd:0c:ef:03:c3:52:e6:
d8:9c:2a:f5:a4:74:e5:46:4b:89:88:6a:aa:3b:41:
79:1e:8f:46:59:85:dc:ac:c7:0f:9e:af:12:32:ea:
50:ad:5f:c7:00:d1:ef:bb:f0:69:0c:e9:ec:7c:5e:
a0:f8:0c:7b:93:ec:f6:f5:e8:25:a2:54:2e:dd:eb:
13:dc:89:06:53:59:52:c6:6f:b5:75:95:d7:13:ec:
0c:72:64:0c:2f:df:8f:02:59:ea:97:c2:31:d6:1a:
cf:17:68:bd:17:0c:cf:40:d0:ab:14:7b:68:01:86:
c6:5b:e6:b9:a9:e0:61:2b:b5:6d:d5:dd:1c:92:6d:
66:10:57:cc:ac:73:6e:d7:c9:82:03:40:4c:8a:fd:
70:1d:44:5c:19:11:cd:21:10:ed:91:91:ec:d5:aa:
99:6d:5a:d7:af:33:89:21:29:5a:03:30:6e:25:3f:
c2:76:dc:bb:f5:d2:77:bd:ba:36:53:bc:4d:94:65:
f7:9a:f5:ad:14:fc:cd:35:43:27:d9:7d:9f:5c:0f:
b2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:0F:10:7F:38:4F:1F:EB:BA:1C:1D:C7:59:41:95:82:68:08:D9:13
X509v3 Authority Key Identifier:
keyid:27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:05:76:eb:02:08:65:9b:2c:98:f9:78:89:dd:bb:db:08:bc:
c2:ad:40:86:27:d9:a9:da:cc:5a:12:64:04:0a:26:e0:5c:d7:
5a:0a:ed:82:de:10:cf:26:b4:b7:23:bf:55:fe:4c:8a:05:ff:
67:c3:fd:72:a7:ca:00:97:f6:5a:56:f6:6d:07:a8:f9:eb:0e:
12:82:82:5d:98:80:12:86:6b:72:97:7c:05:c0:8c:f7:ba:46:
f8:6d:09:c3:dd:a1:6c:7d:d5:87:94:48:ea:c8:52:b5:da:9a:
12:90:40:60:6b:7b:dd:37:46:11:06:0e:4b:ce:06:89:c0:41:
5e:84:69:ab:14:a5:ae:d1:07:f4:af:7d:e1:4b:60:96:c7:89:
cb:0b:6f:43:a8:8f:86:3d:54:00:83:59:57:66:7a:57:46:90:
75:26:35:3c:ab:c9:e8:7d:38:0c:63:de:fd:e3:27:51:f5:06:
09:0d:ca:88:c7:55:49:32:22:58:90:95:85:21:26:b8:25:01:
32:73:fc:5f:bb:ee:2f:b3:fd:00:8d:d5:3c:84:b6:b7:0e:1a:
7c:38:35:16:6e:65:99:90:00:ba:4e:1a:70:b1:99:0e:3b:cd:
7e:38:66:69:92:0b:fe:44:48:41:2e:3b:58:2a:14:42:2a:af:
a9:b2:bd:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+EFF2KqrT+VK50PsQ4zqtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZDhhZjdlNTZjODBkMThkYzk2OGY0ZGJjZWM4MTNmODVl
YTMwYTQwHhcNMjUxMDE5MjAwMTQ2WhcNMjUxMDIwMjAwMTQ2WjAzMTEwLwYDVQQD
EygxZTBmMTA3ZjM4NGYxZmViYmExYzFkYzc1OTQxOTU4MjY4MDhkOTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqj89vzI1BnqcvCTt/rQQcwVctG2
7rFQuFtDv9O4+c5HTGW0i50VM3aYgY4UINdxg9hC980M7wPDUubYnCr1pHTlRkuJ
iGqqO0F5Ho9GWYXcrMcPnq8SMupQrV/HANHvu/BpDOnsfF6g+Ax7k+z29eglolQu
3esT3IkGU1lSxm+1dZXXE+wMcmQML9+PAlnql8Ix1hrPF2i9FwzPQNCrFHtoAYbG
W+a5qeBhK7Vt1d0ckm1mEFfMrHNu18mCA0BMiv1wHURcGRHNIRDtkZHs1aqZbVrX
rzOJISlaAzBuJT/Cdty79dJ3vbo2U7xNlGX3mvWtFPzNNUMn2X2fXA+y6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4PEH84Tx/ruhwdx1lBlYJoCNkTMB8GA1UdIwQY
MBaAFCfYr35WyA0Y3JaPTbzsgT+F6jCkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjlpdmZsYklEUmpjbG85TnZPeUJQNFhxTUtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9kOGI5ZjQtYWQwMS00NDdjLWE0ZGUt
MDIxNWFjYTFiOTA5LzEvSjlpdmZsYklEUmpjbG85TnZPeUJQNFhxTUtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9kOGI5ZjQtYWQwMS00NDdjLWE0ZGUtMDIxNWFjYTFiOTA5
LzEvSjlpdmZsYklEUmpjbG85TnZPeUJQNFhxTUtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYAV26wII
ZZssmPl4id272wi8wq1AhifZqdrMWhJkBAom4FzXWgrtgt4Qzya0tyO/Vf5MigX/
Z8P9cqfKAJf2Wlb2bQeo+esOEoKCXZiAEoZrcpd8BcCM97pG+G0Jw92hbH3Vh5RI
6shStdqaEpBAYGt73TdGEQYOS84GicBBXoRpqxSlrtEH9K994UtglseJywtvQ6iP
hj1UAINZV2Z6V0aQdSY1PKvJ6H04DGPe/eMnUfUGCQ3KiMdVSTIiWJCVhSEmuCUB
MnP8X7vuL7P9AI3VPIS2tw4afDg1Fm5lmZAAuk4acLGZDjvNfjhmaZIL/kRIQS47
WCoUQiqvqbK9HA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:55 2025 by rpki-client