Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.mft
File: J9fQ03vwSUWJRyGJ4DwZMFfjc6s.mft (raw, json)
Hash identifier: fDuqpnklK1WvHFZE5mkfHsoSSanfL85rL/ksUWeA2Zs=
Subject key identifier: 55:37:16:4E:6E:47:C6:9D:73:2E:DE:F8:41:AF:98:E1:5F:B8:BD:98
Authority key identifier: 27:D7:D0:D3:7B:F0:49:45:89:47:21:89:E0:3C:19:30:57:E3:73:AB
Certificate issuer: /CN=27d7d0d37bf0494589472189e03c193057e373ab
Certificate serial: 019A4E4FFDF1DE94C8DEAD885B193DCDC274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.mft
Manifest number: 09C2
Signing time: Tue 04 Nov 2025 10:00:56 +0000
Manifest this update: Tue 04 Nov 2025 10:00:56 +0000
Manifest next update: Wed 05 Nov 2025 10:00:56 +0000
Files and hashes: 1: APV-yd4iM5ft2_CZQSdpqn3Znl0.roa (hash: zO2jXcNxwkx67uSbTL8ewK9Q+yKE4kHcIhGP4291jJw=)
2: J9fQ03vwSUWJRyGJ4DwZMFfjc6s.crl (hash: HtMoLW5U+M2dAmsYwtQLoK1/31ZFZRZBjfneGydqk8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:fd:f1:de:94:c8:de:ad:88:5b:19:3d:cd:c2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d7d0d37bf0494589472189e03c193057e373ab
Validity
Not Before: Nov 4 10:00:56 2025 GMT
Not After : Nov 5 10:00:56 2025 GMT
Subject: CN=5537164e6e47c69d732edef841af98e15fb8bd98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:db:c3:36:bb:2c:60:a2:c1:f0:57:b2:2a:9b:
37:51:1a:4f:e3:3d:5d:20:33:1d:41:fc:d5:9f:0c:
06:81:4a:43:2b:b2:5d:d2:51:c1:08:d9:ab:5f:bf:
f0:16:77:f8:28:ec:f7:5f:61:65:b7:b1:3f:64:67:
60:04:42:7b:25:0b:a5:19:fe:a6:2d:29:70:d8:df:
49:e8:d8:74:63:6d:ba:90:a7:5c:81:4e:de:82:df:
f8:00:f9:c8:5a:0d:4c:58:e9:8f:9a:d2:75:80:e9:
27:5b:3c:b2:3f:aa:87:c4:ea:97:58:db:cc:c6:7a:
82:d3:5b:10:5a:b7:cc:35:ab:d5:ac:3a:14:68:34:
43:ab:10:10:45:d6:c7:8e:3b:15:f0:dc:75:05:b5:
7c:62:b7:78:6e:95:08:91:55:7a:67:94:d5:13:6c:
c1:68:e5:86:ef:4f:38:1b:6f:26:3a:44:14:f3:01:
7d:55:11:50:26:4f:03:77:47:b0:7c:f0:9d:78:25:
2c:60:f8:f7:d4:b6:39:62:bf:ab:61:a2:ca:3a:ed:
39:ea:6e:7d:3a:1e:60:41:f6:dc:52:4a:08:b7:6b:
d9:b5:b9:b6:da:6d:ec:cc:47:36:78:25:04:ea:f1:
27:04:df:5f:7d:06:d7:bb:f9:85:c2:4e:a1:74:de:
04:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:37:16:4E:6E:47:C6:9D:73:2E:DE:F8:41:AF:98:E1:5F:B8:BD:98
X509v3 Authority Key Identifier:
keyid:27:D7:D0:D3:7B:F0:49:45:89:47:21:89:E0:3C:19:30:57:E3:73:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:31:02:ea:db:b9:f0:3a:81:44:aa:ff:49:04:9f:4b:63:5b:
8b:e7:6e:27:f1:ed:b8:7f:c4:7d:b5:12:1e:ee:48:46:e5:4e:
2f:8e:79:df:6f:35:28:9c:87:e9:52:09:5b:d7:7e:1e:1d:a3:
68:48:3e:34:75:f7:9f:d8:69:b2:fa:d5:58:62:b4:4c:f6:10:
f0:51:d6:d3:d1:93:06:c9:d4:43:14:2f:58:85:c8:76:2b:6d:
14:8b:86:c9:e2:2c:52:0a:5e:24:6c:0c:0c:26:7c:8d:d8:f3:
65:c0:4a:09:14:b6:43:36:c6:61:31:fe:0f:9e:35:cf:15:6e:
0d:18:f2:19:5e:29:b7:8b:00:e3:e5:f0:57:08:5f:4c:1c:7b:
1d:f6:5f:8d:ca:ca:0d:f0:e3:e2:31:c2:6c:f2:92:ea:63:c6:
6d:ab:eb:b5:33:63:a2:e6:57:ed:47:7e:0d:f5:48:65:eb:29:
3a:a2:53:cb:bf:4f:70:eb:1c:9b:28:bc:c0:03:7e:2b:61:81:
c8:da:31:f5:c3:85:84:fe:26:dc:cd:0d:4b:7e:68:d5:c9:b4:
bc:35:fc:56:a4:a2:2a:7b:f6:26:fc:80:66:9a:e8:87:e5:92:
2b:c4:a4:cf:f0:54:c8:ed:2d:52:38:06:d3:ee:94:7c:98:77:
a6:06:9f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:09:18 2025 by rpki-client