Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
File: J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft (raw, json)
Hash identifier: f6f5by0ThbGQIW4LS1pS2tivSzdtJZJNNOCzYxkZkXM=
Subject key identifier: 1F:C5:D5:52:3F:AB:D9:0A:CB:F5:BA:46:DE:BF:8B:78:66:62:63:87
Authority key identifier: 27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C
Certificate issuer: /CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c
Certificate serial: 019A4E18B7D5CC9240B5E2BDD505326762D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
Manifest number: 1722
Signing time: Tue 04 Nov 2025 09:00:34 +0000
Manifest this update: Tue 04 Nov 2025 09:00:34 +0000
Manifest next update: Wed 05 Nov 2025 09:00:34 +0000
Files and hashes: 1: 23bca3VQeIrruEqgH6VNWFAiuWs.roa (hash: AgG1ZxIJ9G4cx9MANuRKQ+cw/0IS8xxAcB1MqAzxpGw=)
2: 64rEanXhDA2OJWgNqMgPZ5FM7ec.roa (hash: 8qJk7sdPmgd5qyBKhZltol3z/GSxNSlFaZ8AUoHL904=)
3: J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl (hash: Di3pDR83QrdCtQb9rrhxt3t8ReRgBICLHDs6bJOQh9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:b7:d5:cc:92:40:b5:e2:bd:d5:05:32:67:62:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c
Validity
Not Before: Nov 4 09:00:34 2025 GMT
Not After : Nov 5 09:00:34 2025 GMT
Subject: CN=1fc5d5523fabd90acbf5ba46debf8b7866626387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:00:27:33:4e:db:e0:2f:b2:3f:b3:b2:10:d5:
73:e5:15:0a:6f:21:1f:c5:b1:bb:37:12:8b:f9:3e:
32:13:8b:f2:6b:fc:06:dc:d7:40:c7:d1:52:06:31:
0f:e9:92:12:76:9c:4a:d7:ab:04:fa:e6:e2:0c:66:
eb:7e:fd:a9:24:45:49:66:cd:85:73:8c:13:c7:b7:
0f:63:a6:18:08:80:ce:8e:74:a4:8b:53:84:eb:8d:
da:2f:62:5f:aa:7f:e0:7b:5e:a5:6e:76:28:c7:83:
fd:9a:29:a5:bd:ab:c7:f3:ca:98:c0:69:32:c8:55:
32:ec:56:42:90:ba:50:bf:55:36:b6:ad:bd:6b:41:
4d:aa:ea:6f:c1:ab:6f:83:dc:c1:6d:e1:54:9f:48:
e2:15:0a:da:1d:03:1d:06:50:48:03:e3:f8:54:0d:
4b:93:26:ec:76:df:10:d7:29:84:8a:37:a0:9f:2e:
3d:19:03:52:5f:ee:b3:3b:dc:e4:97:59:f8:02:b4:
7b:aa:b9:a3:46:53:62:0a:79:2f:9c:ff:5d:7a:c7:
e5:a2:82:60:37:f7:e3:18:47:07:7b:b9:bf:0c:6c:
45:aa:96:fe:0c:05:37:4f:31:e6:3e:1a:33:bf:b5:
99:74:03:4a:b0:49:64:08:ef:8e:06:4b:89:fe:63:
e9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C5:D5:52:3F:AB:D9:0A:CB:F5:BA:46:DE:BF:8B:78:66:62:63:87
X509v3 Authority Key Identifier:
keyid:27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:8c:85:7d:de:2e:ab:f0:d6:7e:a3:55:83:b2:e1:c0:0b:0f:
76:bf:57:be:a2:a9:3e:db:2e:7d:d6:c3:fd:eb:99:49:f2:0c:
21:ef:e8:66:ba:39:a9:d3:20:50:86:a0:b1:7e:15:92:f0:d9:
64:4a:36:6c:13:20:47:b1:92:df:60:05:01:b1:7f:7a:dc:32:
e3:1a:4e:0d:e2:f9:2b:4b:f6:04:32:b9:dd:53:77:45:37:12:
b8:74:58:55:55:2d:6a:ff:ce:ac:75:24:29:60:c9:5c:e3:c1:
26:0a:fc:b1:06:7c:6b:2d:e1:f2:cf:06:db:df:31:ad:09:c7:
c9:7c:b0:bf:0c:96:86:76:30:cb:1f:78:53:37:5f:ab:8e:3e:
06:b1:da:f9:79:48:64:87:b3:b8:51:94:3e:78:26:03:71:6a:
db:85:83:fc:c0:f5:fa:0a:d1:80:73:48:ec:66:08:8b:bf:12:
b2:48:34:2a:8c:8e:f4:43:a3:63:bd:67:0f:0b:45:2a:4e:d3:
99:de:3a:90:60:c5:ab:10:99:96:d2:c1:ec:8f:83:0b:5a:55:
0b:0b:45:4b:19:53:55:3e:80:f9:d4:82:50:b5:53:8e:b0:6d:
52:02:57:97:f8:fb:8f:58:16:50:c4:8b:e9:a3:77:18:7a:ed:
67:dc:c8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:36:41 2025 by rpki-client