Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
File: J9VOSniNaWei7vOmaSYiYm9U760.mft (raw, json)
Hash identifier: UPOkACdgDWvEDz1dkmcgfXBQ35t83ADHBm9ZUgBUnrU=
Subject key identifier: 07:F8:4C:6E:6B:0A:DC:0C:BA:5F:BC:9E:AC:84:A7:B4:27:AC:5A:4C
Authority key identifier: 27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD
Certificate issuer: /CN=27d54e4a788d6967a2eef3a6692622626f54efad
Certificate serial: 019A52D151EB247AE7BB4AFF4E51396972C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
Manifest number: 0C37
Signing time: Wed 05 Nov 2025 07:00:40 +0000
Manifest this update: Wed 05 Nov 2025 07:00:40 +0000
Manifest next update: Thu 06 Nov 2025 07:00:40 +0000
Files and hashes: 1: BhvqAjp2FFsTdoGE_6UzPBUzgUU.roa (hash: Kaoj9hdcD1FNas61kk3Ce73rVwZ3HgxiSCiLpA2QHSE=)
2: J9VOSniNaWei7vOmaSYiYm9U760.crl (hash: S8HXeKxJAviIWXa/lja7frrtjEhf5vbPLgQ3tmNL1PU=)
3: e-ijOhbtTVFVKNwA3A0KZtd9G28.roa (hash: 4dN/JLGpYdlMav39iELvw9iA3Kyyi/awTvBLXNA8PfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:51:eb:24:7a:e7:bb:4a:ff:4e:51:39:69:72:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d54e4a788d6967a2eef3a6692622626f54efad
Validity
Not Before: Nov 5 07:00:40 2025 GMT
Not After : Nov 6 07:00:40 2025 GMT
Subject: CN=07f84c6e6b0adc0cba5fbc9eac84a7b427ac5a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:28:5e:b2:29:f2:69:f7:c7:28:24:99:12:57:
b3:05:8b:26:13:d5:e0:90:2e:44:75:d1:d1:86:b2:
6c:4d:aa:4f:e2:84:00:af:10:b3:bb:eb:58:16:14:
eb:bf:ba:20:1a:ae:91:c8:06:13:1a:df:31:fe:fa:
68:1e:71:5d:28:fd:d2:e9:7e:e0:f5:d4:a7:65:fb:
f6:c1:0d:89:47:50:e6:02:63:81:6c:28:af:84:5f:
b1:70:be:f3:31:16:38:df:b2:29:f5:55:55:5b:90:
ef:eb:48:0e:4f:e8:59:79:3b:b5:d6:17:02:93:da:
cd:81:f8:a7:7a:79:73:cc:71:6c:88:e6:b2:1b:40:
7b:a7:35:07:5f:98:3f:30:85:09:24:09:43:58:0c:
c1:b5:2d:57:a2:fe:bf:da:67:84:a4:92:6e:08:34:
57:53:a1:42:12:ba:20:2c:4c:a0:3d:30:c2:3f:94:
90:2e:30:9f:62:ba:23:8d:b2:b7:7c:af:b4:3a:03:
a7:68:3f:26:c8:56:22:fb:cc:f0:c4:60:12:ef:84:
5d:c1:79:e3:3f:79:1d:5c:3a:8e:18:f3:bc:a3:9a:
20:08:b0:b7:a6:56:dd:ec:1f:a5:de:16:e6:66:32:
42:51:7f:73:c3:6d:6a:5d:63:df:fa:b8:ef:98:8a:
bd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F8:4C:6E:6B:0A:DC:0C:BA:5F:BC:9E:AC:84:A7:B4:27:AC:5A:4C
X509v3 Authority Key Identifier:
keyid:27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:d6:a2:37:ec:87:ce:53:3f:9f:fd:cb:b2:7b:47:8e:1f:7c:
f5:c1:00:98:7f:9a:bf:e7:1d:ad:71:26:28:0e:d3:f2:50:a5:
e2:58:fa:8a:cd:2c:b5:23:58:52:92:e2:f3:51:3b:b8:25:8e:
9d:a2:86:a5:7b:08:63:da:af:73:f5:c6:74:d6:7a:49:5e:cd:
53:2a:40:eb:8e:c2:c1:2a:a6:fa:b1:d5:6a:2c:7c:00:b2:10:
1a:2b:90:e4:4c:c2:73:10:c6:f6:0f:46:73:12:a3:ac:8a:99:
18:68:5e:67:da:f0:c9:fc:d0:7f:15:27:9a:eb:65:3f:f4:3b:
2b:6a:d9:46:3f:a2:7b:1a:3d:c8:0d:86:5b:94:09:cd:53:19:
35:d2:36:fe:f4:91:f2:74:da:9b:ba:0b:03:88:47:fe:60:74:
06:8e:48:8b:ab:82:38:90:11:e4:20:80:d6:42:6c:d6:35:72:
a4:f4:43:c4:3b:fe:bb:38:a9:14:7d:b5:14:54:d7:a5:db:ec:
af:ab:b3:27:e2:d9:6c:70:15:53:95:2a:c5:29:05:6e:12:47:
b6:2a:6b:6d:b7:ba:ae:54:a3:1e:70:91:19:be:36:ab:f9:aa:
e1:f8:86:b9:d8:7f:c2:ea:23:d6:71:d2:73:2e:c3:29:85:33:
7a:e1:65:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:33:39 2025 by rpki-client