Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
File: J9VOSniNaWei7vOmaSYiYm9U760.mft (raw, json)
Hash identifier: IupXixOBQm/bfSeSl8UP1l82g+Ew5rTLELZVBY5axX8=
Subject key identifier: 25:10:01:27:91:66:CB:FD:6D:F5:F9:1D:9F:53:81:24:BD:FB:34:71
Authority key identifier: 27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD
Certificate issuer: /CN=27d54e4a788d6967a2eef3a6692622626f54efad
Certificate serial: 019892C8416D48E564D14CD7F8399D7A2FA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
Manifest number: 0B4F
Signing time: Sun 10 Aug 2025 07:00:54 +0000
Manifest this update: Sun 10 Aug 2025 07:00:54 +0000
Manifest next update: Mon 11 Aug 2025 07:00:54 +0000
Files and hashes: 1: BhvqAjp2FFsTdoGE_6UzPBUzgUU.roa (hash: Kaoj9hdcD1FNas61kk3Ce73rVwZ3HgxiSCiLpA2QHSE=)
2: J9VOSniNaWei7vOmaSYiYm9U760.crl (hash: JEVKOU1ak/ZGEpgNr+9AjpnXk9C3+qu9BmrC6IQUA2M=)
3: e-ijOhbtTVFVKNwA3A0KZtd9G28.roa (hash: 4dN/JLGpYdlMav39iELvw9iA3Kyyi/awTvBLXNA8PfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c8:41:6d:48:e5:64:d1:4c:d7:f8:39:9d:7a:2f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d54e4a788d6967a2eef3a6692622626f54efad
Validity
Not Before: Aug 10 07:00:54 2025 GMT
Not After : Aug 11 07:00:54 2025 GMT
Subject: CN=251001279166cbfd6df5f91d9f538124bdfb3471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fc:12:5f:15:c3:9b:a6:8c:c2:06:0c:e4:d2:
8d:d0:ca:43:79:97:92:1f:72:9d:a0:56:8a:c8:83:
d9:5a:c2:28:dd:3e:82:fc:d3:f9:80:38:7a:26:5d:
20:11:31:31:8a:c6:ec:7c:41:cf:59:39:9d:b6:98:
f4:54:f2:01:5f:f6:7d:a2:b7:44:0e:5f:f9:b0:18:
c8:3d:c2:e9:58:17:25:4a:cd:68:26:5b:c6:e6:f7:
e5:1f:d8:32:45:d1:c4:c5:58:b6:a0:c0:2b:36:9a:
2e:76:f6:19:f9:cd:da:58:5b:29:e0:85:a7:e3:f6:
03:4f:43:0d:37:6c:1b:30:20:87:4d:60:56:86:cb:
47:e3:49:d6:a0:7f:2c:f1:4c:fc:b9:f2:74:77:42:
11:93:24:60:db:6f:56:dc:b6:03:cf:73:18:77:5e:
79:8d:5d:a9:b8:81:9b:52:bf:4d:21:07:96:04:9d:
1b:5b:31:ee:63:fc:34:4c:cf:f7:88:c1:df:80:39:
cd:a7:a2:ac:44:55:66:16:46:c9:5c:56:e0:61:3a:
94:7b:31:39:1b:05:2e:ef:ee:86:af:3d:b5:85:32:
8d:30:e2:2e:d9:13:4e:23:59:4f:83:9f:0d:70:a8:
e7:bd:df:39:5c:36:51:e9:80:16:5e:7f:b8:21:13:
00:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:10:01:27:91:66:CB:FD:6D:F5:F9:1D:9F:53:81:24:BD:FB:34:71
X509v3 Authority Key Identifier:
keyid:27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:be:38:95:7c:31:42:98:aa:13:51:dd:b2:2b:df:3b:c4:2d:
f6:0e:6f:78:52:2c:ad:84:4b:b6:99:1b:26:0d:be:9d:5b:ab:
a1:08:57:99:b6:d5:2f:f5:83:f6:09:83:eb:0f:a2:37:73:5c:
08:a3:03:6e:d5:dd:72:15:e2:48:97:5a:d5:73:8f:87:0c:36:
93:65:f1:b1:4c:4c:01:1d:39:cd:97:34:da:43:3b:ef:1f:17:
d8:83:72:65:3a:7f:3c:75:0f:1f:81:37:18:ee:b8:3f:02:e8:
23:1d:cb:e5:84:6e:0f:71:7b:76:92:19:77:89:77:ea:89:a0:
eb:0e:03:1c:31:23:15:c0:31:6e:1b:e8:4f:fa:60:e6:15:2b:
d3:d4:d5:38:65:b2:60:70:9f:00:47:95:5c:c4:13:18:aa:56:
80:d4:5d:93:46:17:a6:45:11:e5:e6:06:b5:cc:ae:cd:a9:e0:
6f:f9:aa:bb:b4:07:f3:29:60:f7:cf:55:42:78:e5:47:cf:6a:
77:7f:4c:a8:78:2d:a6:09:71:ef:b2:29:fa:ab:0e:ef:44:55:
59:3d:2b:43:3f:ae:f6:b0:fa:87:7c:0d:0b:6c:bf:d6:5c:d6:
ec:5b:e6:35:44:74:ce:ab:cd:aa:22:ab:e1:57:d5:49:5c:e8:
e6:31:b5:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiSyEFtSOVk0UzX+Dmdei+jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZDU0ZTRhNzg4ZDY5NjdhMmVlZjNhNjY5MjYyMjYyNmY1
NGVmYWQwHhcNMjUwODEwMDcwMDU0WhcNMjUwODExMDcwMDU0WjAzMTEwLwYDVQQD
EygyNTEwMDEyNzkxNjZjYmZkNmRmNWY5MWQ5ZjUzODEyNGJkZmIzNDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPwSXxXDm6aMwgYM5NKN0MpDeZeS
H3KdoFaKyIPZWsIo3T6C/NP5gDh6Jl0gETExisbsfEHPWTmdtpj0VPIBX/Z9ordE
Dl/5sBjIPcLpWBclSs1oJlvG5vflH9gyRdHExVi2oMArNpoudvYZ+c3aWFsp4IWn
4/YDT0MNN2wbMCCHTWBWhstH40nWoH8s8Uz8ufJ0d0IRkyRg229W3LYDz3MYd155
jV2puIGbUr9NIQeWBJ0bWzHuY/w0TM/3iMHfgDnNp6KsRFVmFkbJXFbgYTqUezE5
GwUu7+6Grz21hTKNMOIu2RNOI1lPg58NcKjnvd85XDZR6YAWXn+4IRMAbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCUQASeRZsv9bfX5HZ9TgSS9+zRxMB8GA1UdIwQY
MBaAFCfVTkp4jWlnou7zpmkmImJvVO+tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjlWT1NuaU5hV2VpN3ZPbWFTWWlZbTlVNzYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84MzIxNDctMzEwZS00YmI1LTk5ZGEt
ZTk5YThkYzMwMjU1LzEvSjlWT1NuaU5hV2VpN3ZPbWFTWWlZbTlVNzYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC84MzIxNDctMzEwZS00YmI1LTk5ZGEtZTk5YThkYzMwMjU1
LzEvSjlWT1NuaU5hV2VpN3ZPbWFTWWlZbTlVNzYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaL44lXwx
QpiqE1HdsivfO8Qt9g5veFIsrYRLtpkbJg2+nVuroQhXmbbVL/WD9gmD6w+iN3Nc
CKMDbtXdchXiSJda1XOPhww2k2XxsUxMAR05zZc02kM77x8X2INyZTp/PHUPH4E3
GO64PwLoIx3L5YRuD3F7dpIZd4l36omg6w4DHDEjFcAxbhvoT/pg5hUr09TVOGWy
YHCfAEeVXMQTGKpWgNRdk0YXpkUR5eYGtcyuzangb/mqu7QH8ylg989VQnjlR89q
d39MqHgtpglx77Ip+qsO70RVWT0rQz+u9rD6h3wNC2y/1lzW7FvmNUR0zqvNqiKr
4VfVSVzo5jG1yg==
-----END CERTIFICATE-----
Generated at Sun Aug 10 16:10:48 2025 by rpki-client