Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
File: J9VOSniNaWei7vOmaSYiYm9U760.mft (raw, json)
Hash identifier: yfyc1LM2KnjmmiraPeVQYHciy7Wi5KU/eq8ilmNPpcg=
Subject key identifier: 44:E8:8D:B9:CF:16:AB:E1:5E:DF:DF:85:1C:12:E4:22:F9:68:01:6E
Authority key identifier: 27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD
Certificate issuer: /CN=27d54e4a788d6967a2eef3a6692622626f54efad
Certificate serial: 0199FFC750478157AEA282131EC38100B59A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
Manifest number: 0C0C
Signing time: Mon 20 Oct 2025 04:01:16 +0000
Manifest this update: Mon 20 Oct 2025 04:01:16 +0000
Manifest next update: Tue 21 Oct 2025 04:01:16 +0000
Files and hashes: 1: BhvqAjp2FFsTdoGE_6UzPBUzgUU.roa (hash: Kaoj9hdcD1FNas61kk3Ce73rVwZ3HgxiSCiLpA2QHSE=)
2: J9VOSniNaWei7vOmaSYiYm9U760.crl (hash: fYIlCO4znRmePjOAWxyNRR8xojKrXjzkMNvGh9I7WmY=)
3: e-ijOhbtTVFVKNwA3A0KZtd9G28.roa (hash: 4dN/JLGpYdlMav39iELvw9iA3Kyyi/awTvBLXNA8PfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:50:47:81:57:ae:a2:82:13:1e:c3:81:00:b5:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d54e4a788d6967a2eef3a6692622626f54efad
Validity
Not Before: Oct 20 04:01:16 2025 GMT
Not After : Oct 21 04:01:16 2025 GMT
Subject: CN=44e88db9cf16abe15edfdf851c12e422f968016e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:2f:e1:15:6f:28:f2:4f:d5:99:7d:9b:5b:9a:
07:ed:e9:e9:48:fe:15:42:22:46:f9:b2:9d:a8:42:
b4:3b:39:bf:d7:00:0b:0d:6a:66:a1:ac:92:db:6f:
07:3a:94:a6:9c:da:29:17:ed:70:1c:c6:50:d6:35:
01:b7:51:4c:c9:36:a8:f2:c6:8d:75:d3:5e:f6:cd:
0d:a8:ed:c2:52:b1:ac:f8:15:96:d0:e1:ed:e3:ca:
28:fa:d0:92:93:f4:89:02:fe:a0:de:f6:3f:f7:d5:
c0:c9:a4:b3:8a:8c:9b:36:a5:33:c9:aa:8e:da:85:
0c:17:c6:85:81:2e:fa:a9:b9:34:68:fb:ec:e5:ca:
0f:6d:9f:28:7d:02:c7:40:f1:44:24:c5:8b:cb:2a:
a1:4c:ad:d2:58:d2:26:f4:54:6c:cc:ec:45:86:d5:
7b:d7:29:3a:b5:1d:07:b6:e9:a8:dc:77:84:b5:c5:
2f:f7:60:cd:4d:15:f8:9b:16:3c:a4:33:27:72:56:
54:c5:ed:5e:b4:6b:c6:69:df:e9:6f:8b:d5:e1:54:
ed:70:1b:b7:e7:cf:c5:7e:fa:2c:4e:05:a5:80:ab:
56:49:8f:a9:12:6b:c9:e5:65:d9:49:e2:2e:9c:29:
e5:30:81:9d:5e:76:29:3d:84:59:1a:6e:ce:d3:28:
ec:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E8:8D:B9:CF:16:AB:E1:5E:DF:DF:85:1C:12:E4:22:F9:68:01:6E
X509v3 Authority Key Identifier:
keyid:27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:31:cf:87:31:e8:17:0e:19:73:43:2b:be:db:7c:7a:4d:4f:
a1:97:d4:30:be:20:9f:d4:98:e8:2a:e8:a2:bb:d9:1e:bd:2e:
d9:e3:92:dd:8b:da:22:ce:a7:f2:fc:90:d4:44:fa:b0:24:b7:
2a:86:ac:97:84:9e:b0:81:29:50:b9:50:62:c6:2e:85:8a:0b:
3f:ff:3c:63:10:bd:07:df:57:e6:1f:67:7a:20:0b:3f:32:9f:
5e:bc:4e:2e:c9:e8:00:80:97:cf:13:aa:5d:8a:2e:74:03:e2:
9f:86:61:91:cf:a1:8c:14:18:04:fc:db:92:77:fc:5c:bb:98:
c1:17:bf:2f:59:c0:45:d4:d8:69:6c:a7:51:cb:68:8b:78:0b:
f6:ad:12:6a:d2:c3:4f:ec:a4:a1:0a:09:6e:a0:24:58:8e:1d:
5d:f6:47:8d:19:7f:69:76:e5:21:10:7b:ab:b7:d9:ef:ee:c6:
72:44:9e:f3:ca:f5:d5:98:11:c8:89:56:17:46:c0:80:8f:08:
0b:29:d6:ed:6f:af:e8:82:da:9d:b4:c4:4e:c3:70:42:63:69:
c2:52:13:aa:b8:d5:de:90:fc:5a:1d:83:26:02:9b:fe:9e:01:
81:3c:72:e9:61:d9:62:19:bb:e5:51:0e:34:35:18:46:83:d4:
b6:97:10:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:44:30 2025 by rpki-client