Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
File: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft (raw, json)
Hash identifier: 3wO4ixCXQfjadFVg5AqCuyYCARCywphNvcbDZfVOey4=
Subject key identifier: 3C:18:4E:8D:20:8A:43:32:B4:5C:B4:7C:7B:8E:F2:59:CE:9A:AC:12
Authority key identifier: 27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
Certificate issuer: /CN=27d8640c305107766a646fbf8ec81db45ce1f249
Certificate serial: 019A4D05EFFD6012502F55414FB27FFA3462
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
Manifest number: 1566
Signing time: Tue 04 Nov 2025 04:00:25 +0000
Manifest this update: Tue 04 Nov 2025 04:00:25 +0000
Manifest next update: Wed 05 Nov 2025 04:00:25 +0000
Files and hashes: 1: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl (hash: Sevda3rR8zH/qLJxEmshiUo39SbmVyegd6Rf4eO622Y=)
2: omv1iA0sTwZqywTVYlUXXegJP1Q.roa (hash: lDFIRi5hNHf1aQj7xWQEmMDGw0C4yu9jECeYI1136N4=)
3: yYTpoAfaYghmHruP3VvWvB4Z38E.roa (hash: 9b9Mq3MlvIX2qX8DdTkiCTxQPYb+kWY/IW9meZtFMy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:05:ef:fd:60:12:50:2f:55:41:4f:b2:7f:fa:34:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d8640c305107766a646fbf8ec81db45ce1f249
Validity
Not Before: Nov 4 04:00:25 2025 GMT
Not After : Nov 5 04:00:25 2025 GMT
Subject: CN=3c184e8d208a4332b45cb47c7b8ef259ce9aac12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:18:09:57:5f:f1:7b:21:f7:37:29:8f:2c:8f:
c9:72:62:59:10:97:39:79:0e:97:ee:46:d3:9a:b1:
22:ac:27:29:fb:2e:c5:ea:6e:f2:0a:f4:a3:07:e9:
64:f3:3f:bd:c0:3b:13:5e:f1:d9:74:a6:f0:7d:e9:
77:5f:76:8c:22:25:1c:80:fa:ef:aa:13:1e:57:a3:
2f:00:b6:a5:4b:c5:8e:7a:e7:0c:b3:11:b4:ae:b0:
32:d9:ea:3e:1a:c2:ef:31:69:c1:1c:e7:80:2a:7c:
a1:9f:2f:57:df:d7:c1:3c:25:e2:e0:98:95:8e:53:
cf:36:35:c7:85:7e:e6:0f:c6:8f:ef:07:35:37:0b:
25:0b:b3:fc:90:cd:19:50:e6:aa:99:dd:7f:6e:d6:
41:27:53:93:b1:e4:ba:fa:a1:46:b5:0f:33:c0:0c:
b4:e5:c4:47:53:ca:a6:bd:02:97:f6:4a:a2:4c:c5:
46:fd:17:5a:06:c9:73:7e:97:88:14:f5:7b:83:8b:
a0:b7:6e:25:ce:b9:8c:43:ef:2e:a9:58:64:ec:f3:
6b:2e:db:61:9d:d1:fc:24:7d:b4:e3:7b:fe:d1:e7:
60:c4:1e:b9:30:a8:d9:1b:59:f5:e4:14:53:0a:86:
78:82:8d:81:d5:d7:1f:d8:bf:1c:5f:08:dd:0e:f6:
81:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:18:4E:8D:20:8A:43:32:B4:5C:B4:7C:7B:8E:F2:59:CE:9A:AC:12
X509v3 Authority Key Identifier:
keyid:27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:94:82:60:46:cf:12:3d:f0:c7:4d:e3:b2:e9:30:ed:b1:c4:
6f:47:50:8b:b2:64:d9:f0:6d:73:09:f7:d4:4f:aa:6d:54:0c:
43:2a:15:74:c7:5c:29:af:bd:94:01:03:20:ce:26:c5:09:89:
6f:f4:8c:51:57:4c:88:55:fa:04:ce:7e:58:e7:ea:09:d0:62:
4b:ca:ef:8a:74:0c:dd:74:4a:c6:de:65:6a:bb:d3:e4:30:8f:
b1:46:45:27:12:ce:55:cb:2c:8d:e0:94:1b:ab:dc:2f:1f:67:
69:8b:26:da:9f:89:2b:18:fa:d3:68:b0:3f:9f:70:2d:ef:1b:
33:00:99:2f:05:4f:4d:af:78:e1:df:8b:fd:da:65:86:20:9d:
b5:13:01:73:11:32:61:09:5f:6b:3e:9b:21:1f:3a:e7:27:41:
13:01:c3:5b:47:30:cb:32:60:32:1f:96:4f:df:bb:64:c4:90:
e8:15:4a:38:74:3e:fd:ce:66:d4:8f:db:a2:33:29:63:46:9f:
77:ec:66:52:46:53:1c:07:2e:47:f4:a0:c7:fe:03:ca:6f:64:
a0:54:39:3d:c6:45:d7:64:b0:53:7c:fa:6b:7e:46:89:c8:07:
9d:17:2c:78:b3:cd:6f:09:33:fb:e7:9d:ad:d1:a8:dc:cb:28:
26:8c:42:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNBe/9YBJQL1VBT7J/+jRiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZDg2NDBjMzA1MTA3NzY2YTY0NmZiZjhlYzgxZGI0NWNl
MWYyNDkwHhcNMjUxMTA0MDQwMDI1WhcNMjUxMTA1MDQwMDI1WjAzMTEwLwYDVQQD
EygzYzE4NGU4ZDIwOGE0MzMyYjQ1Y2I0N2M3YjhlZjI1OWNlOWFhYzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRgJV1/xeyH3NymPLI/JcmJZEJc5
eQ6X7kbTmrEirCcp+y7F6m7yCvSjB+lk8z+9wDsTXvHZdKbwfel3X3aMIiUcgPrv
qhMeV6MvALalS8WOeucMsxG0rrAy2eo+GsLvMWnBHOeAKnyhny9X39fBPCXi4JiV
jlPPNjXHhX7mD8aP7wc1NwslC7P8kM0ZUOaqmd1/btZBJ1OTseS6+qFGtQ8zwAy0
5cRHU8qmvQKX9kqiTMVG/RdaBslzfpeIFPV7g4ugt24lzrmMQ+8uqVhk7PNrLtth
ndH8JH2043v+0edgxB65MKjZG1n15BRTCoZ4go2B1dcf2L8cXwjdDvaBLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwYTo0gikMytFy0fHuO8lnOmqwSMB8GA1UdIwQY
MBaAFCfYZAwwUQd2amRvv47IHbRc4fJJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjloa0REQlJCM1pxWkctX2pzZ2R0RnpoOGtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ODE3NWEtMTJjOC00NTkwLTgyZTAt
M2M2Zjg4YzkxNGIxLzEvSjloa0REQlJCM1pxWkctX2pzZ2R0RnpoOGtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi84ODE3NWEtMTJjOC00NTkwLTgyZTAtM2M2Zjg4YzkxNGIx
LzEvSjloa0REQlJCM1pxWkctX2pzZ2R0RnpoOGtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUpSCYEbP
Ej3wx03jsukw7bHEb0dQi7Jk2fBtcwn31E+qbVQMQyoVdMdcKa+9lAEDIM4mxQmJ
b/SMUVdMiFX6BM5+WOfqCdBiS8rvinQM3XRKxt5larvT5DCPsUZFJxLOVcssjeCU
G6vcLx9naYsm2p+JKxj602iwP59wLe8bMwCZLwVPTa944d+L/dplhiCdtRMBcxEy
YQlfaz6bIR865ydBEwHDW0cwyzJgMh+WT9+7ZMSQ6BVKOHQ+/c5m1I/bojMpY0af
d+xmUkZTHAcuR/Sgx/4Dym9koFQ5PcZF12SwU3z6a35GicgHnRcseLPNbwkz++ed
rdGo3MsoJoxCRA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:21 2025 by rpki-client