Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
File: j9-HylMGV5hEdkUlX4KbU7wdohU.mft (raw, json)
Hash identifier: T7RlNJj3FjsRKu7up3U8pn7+a1JajcGG1F/qyY39B8w=
Subject key identifier: EC:0C:A5:F1:C8:1D:11:27:C0:CD:D8:ED:2D:4E:B2:A4:D1:9A:CF:06
Authority key identifier: 8F:DF:87:CA:53:06:57:98:44:76:45:25:5F:82:9B:53:BC:1D:A2:15
Certificate issuer: /CN=8fdf87ca53065798447645255f829b53bc1da215
Certificate serial: 019A54BFCCDC0BDCD44C462BCB8304EA1632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
Manifest number: 065A
Signing time: Wed 05 Nov 2025 16:00:47 +0000
Manifest this update: Wed 05 Nov 2025 16:00:47 +0000
Manifest next update: Thu 06 Nov 2025 16:00:47 +0000
Files and hashes: 1: 13OA8Kowa9u-F_7ZWwXTDMJLU0A.roa (hash: TLY9MKIWsbVqHZrgOnopJQQ8yZUjxig3a2ZRbtkH/Xw=)
2: j9-HylMGV5hEdkUlX4KbU7wdohU.crl (hash: I1EEYGDwvmKPdtzuU73ROIASDXUp/oQ8w9brglpyqWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 16:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:cc:dc:0b:dc:d4:4c:46:2b:cb:83:04:ea:16:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fdf87ca53065798447645255f829b53bc1da215
Validity
Not Before: Nov 5 16:00:47 2025 GMT
Not After : Nov 6 16:00:47 2025 GMT
Subject: CN=ec0ca5f1c81d1127c0cdd8ed2d4eb2a4d19acf06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3f:7e:9b:09:bc:8d:c4:75:83:0d:76:5b:2f:
c4:c3:e4:17:97:48:cf:01:5a:9f:93:c1:ce:3e:9c:
2e:c8:72:8f:d0:b7:48:34:de:c2:14:50:d4:eb:b4:
54:e3:8c:88:3b:0e:37:b0:2e:ea:bc:f1:4c:48:fa:
d1:a0:88:74:2c:75:3b:47:29:43:c1:d4:15:8f:ef:
a0:d3:13:93:42:fe:72:59:12:d1:dc:a3:28:98:98:
c3:75:7f:23:24:ca:09:12:ac:46:77:c3:7f:b2:e2:
61:e9:ac:92:5c:39:59:4a:cf:ec:79:42:2e:87:a1:
d3:3f:a3:3b:e2:60:a0:5b:41:3b:1f:f0:09:fc:8e:
72:ae:46:43:3b:be:28:dc:b7:fe:2a:71:5b:a2:f1:
67:2a:60:ec:e8:c0:b0:11:63:c2:73:fc:ed:6f:9d:
0f:ca:f4:a5:14:47:72:f6:0c:7e:d0:99:a1:13:d5:
72:ba:5d:60:09:87:33:3f:06:fd:83:aa:60:60:c8:
35:d4:e7:c3:a7:66:fd:b8:84:8c:7a:e5:48:bb:df:
db:29:96:26:9b:33:7a:1a:4d:a3:cf:88:28:a6:d1:
a2:8f:d7:05:ee:82:db:68:95:ec:5e:09:24:e8:72:
70:3c:c3:04:14:48:56:fc:ce:da:24:fb:e0:fd:8d:
f8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0C:A5:F1:C8:1D:11:27:C0:CD:D8:ED:2D:4E:B2:A4:D1:9A:CF:06
X509v3 Authority Key Identifier:
keyid:8F:DF:87:CA:53:06:57:98:44:76:45:25:5F:82:9B:53:BC:1D:A2:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:d9:42:cb:8f:a2:a8:77:bb:f2:4d:b6:cb:fe:51:80:67:c0:
8d:e0:70:33:24:75:0a:f3:60:6e:54:87:a2:38:f5:ee:e1:24:
57:d7:cf:f0:88:f4:4f:76:c6:e0:0a:f1:da:bf:c9:be:21:c6:
d3:e3:2d:ae:c3:fc:7c:7e:b5:c1:3c:44:ba:78:74:e6:5e:6e:
70:41:c1:54:b7:be:d4:5a:96:33:f6:34:da:d6:8f:c5:4f:ea:
29:eb:39:3e:37:92:da:7c:32:d2:53:5e:0b:f5:c8:c6:39:df:
37:b2:e4:f1:b0:4b:4a:19:6a:6a:d6:93:38:3b:1e:4e:52:ae:
02:08:94:cc:85:65:98:50:f7:67:4b:4d:40:d5:84:59:fb:38:
d6:6f:51:af:4f:f4:41:90:f0:ff:09:ee:eb:00:68:1b:64:e2:
bc:9b:91:f1:c3:a6:06:6d:e5:f8:ea:ba:6e:cb:0c:e2:c7:6e:
45:2d:42:c9:e3:bc:8b:4f:8b:63:8e:7e:4f:8d:e3:6c:70:44:
53:42:ae:7c:a4:0a:39:4f:de:7f:1f:cb:19:9f:35:80:90:5d:
b0:44:c8:f0:06:83:79:79:d3:8f:8a:a7:2a:51:12:a9:fc:16:
eb:94:6f:27:1d:ad:80:cc:70:df:64:a7:7c:ac:03:45:92:fa:
28:1a:d8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:06:03 2025 by rpki-client