Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft
File: J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft (raw, json)
Hash identifier: YPkqehPn//v9aqG5XtJ8lzjU9pc5p4Tb1xCPBrMYqT4=
Subject key identifier: 4E:DA:D9:C8:EA:47:34:5F:CF:BF:A4:0E:63:76:56:9F:09:04:23:9C
Authority key identifier: 27:D0:28:47:06:04:33:6F:DB:93:08:E5:1B:A5:3E:95:1A:E2:E0:98
Certificate issuer: /CN=27d028470604336fdb9308e51ba53e951ae2e098
Certificate serial: 019A4F98DA8D45AA0E5998242A1045262A88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9AoRwYEM2_bkwjlG6U-lRri4Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft
Manifest number: 0AA3
Signing time: Tue 04 Nov 2025 16:00:08 +0000
Manifest this update: Tue 04 Nov 2025 16:00:08 +0000
Manifest next update: Wed 05 Nov 2025 16:00:08 +0000
Files and hashes: 1: 8lytrNRAlkzl2XNEuoqT9hqGeHI.roa (hash: bsiOs3LeZM/7MgOmaqSi5ylqvDA5KYlcRdJP7/Y5e7k=)
2: J9AoRwYEM2_bkwjlG6U-lRri4Jg.crl (hash: 75yCUnGjXaJUsEpCqi/VWetOI/PhLWYuDTTW1bRUXQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9AoRwYEM2_bkwjlG6U-lRri4Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:da:8d:45:aa:0e:59:98:24:2a:10:45:26:2a:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d028470604336fdb9308e51ba53e951ae2e098
Validity
Not Before: Nov 4 16:00:08 2025 GMT
Not After : Nov 5 16:00:08 2025 GMT
Subject: CN=4edad9c8ea47345fcfbfa40e6376569f0904239c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b7:80:7b:05:71:04:95:71:03:f3:0e:78:2f:
7c:c0:0a:72:85:38:4c:6d:e7:1a:cb:85:a5:b8:e2:
93:c0:98:60:a7:7b:4f:ca:b4:56:37:51:bf:5c:15:
b1:07:41:5f:16:64:ad:ee:43:46:98:39:11:01:55:
09:2b:d7:65:1e:ce:03:32:cd:d8:63:13:ed:6c:bf:
db:2c:c0:93:b5:73:2c:89:a5:86:12:9e:39:bc:4a:
23:d9:43:25:4a:49:5e:6a:b5:3d:6f:c0:64:be:dd:
5a:86:0f:5c:08:b6:69:7f:29:70:aa:f7:b6:2e:8e:
9d:66:97:50:f1:39:b3:15:c5:97:a3:7f:3b:c9:b8:
fe:03:5b:99:97:76:07:64:4f:a0:4d:9c:83:02:f9:
02:f4:aa:bd:40:e8:07:5b:a3:ad:c8:ee:99:59:ec:
47:cf:ed:56:09:03:29:33:31:43:66:45:06:af:77:
6d:13:a8:10:bc:65:5f:e4:c6:aa:ae:eb:e7:48:23:
32:20:a0:f7:52:00:3b:53:22:31:4f:53:05:84:c8:
96:bc:8c:64:78:a3:99:cd:4d:4e:73:56:a0:2c:93:
69:1d:e3:88:a7:3b:72:80:b9:51:06:72:13:8e:90:
3b:f8:1b:0c:56:a1:78:e0:fa:28:ce:e7:7c:ee:59:
17:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:DA:D9:C8:EA:47:34:5F:CF:BF:A4:0E:63:76:56:9F:09:04:23:9C
X509v3 Authority Key Identifier:
keyid:27:D0:28:47:06:04:33:6F:DB:93:08:E5:1B:A5:3E:95:1A:E2:E0:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9AoRwYEM2_bkwjlG6U-lRri4Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:5f:b7:1e:03:b5:66:02:b4:71:2f:71:b2:4c:79:f0:b6:ae:
d7:c1:fe:d3:ce:bc:0e:14:1c:d9:b2:23:02:23:28:d8:ad:29:
3f:8a:1c:bf:8b:f4:e7:e4:d7:80:27:76:9f:f1:59:9e:c9:1e:
04:af:39:ad:34:9c:7e:fb:b8:91:2b:16:7f:31:71:97:e4:29:
69:7f:d5:b9:3f:a9:9f:53:58:5f:2d:2c:9d:df:b5:df:aa:f3:
72:69:2d:e0:14:be:26:a0:5b:4e:2a:03:fb:9a:cb:ca:8d:05:
0b:9f:c6:7b:5f:3f:9e:0a:fa:e0:7e:69:f5:a1:6b:f8:33:67:
fd:a9:50:97:3c:a4:62:83:67:cc:1c:95:a3:36:0d:6f:67:d5:
0f:04:8b:01:ea:3c:3e:18:14:3a:80:c1:e1:80:3f:d7:86:6c:
10:e4:b4:9b:ee:e9:f4:d7:35:7d:9e:db:a1:3b:29:80:49:9a:
64:cc:69:e7:65:9b:b3:56:e7:88:ab:c0:a0:41:a1:ca:04:52:
a0:b8:4d:d6:17:c7:ff:20:fa:29:70:db:26:80:0d:a4:fc:50:
ec:8e:60:33:66:ef:4d:f1:45:c7:f3:cc:95:d3:08:6f:d3:b0:
32:e1:a3:fa:7d:ed:4a:0e:5b:0e:15:3d:51:74:26:7a:d2:42:
f2:90:3b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:45:20 2025 by rpki-client