Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
File: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft (raw, json)
Hash identifier: AVOxX+MAdl7Y2360murNq5C/4Z7RTZKcEjcygdbCKU4=
Subject key identifier: 4E:5D:09:FD:AB:FE:73:1D:33:76:9B:05:6D:23:01:0F:B9:6E:DF:C7
Authority key identifier: 27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
Certificate issuer: /CN=27d8640c305107766a646fbf8ec81db45ce1f249
Certificate serial: 019A2E20BF5D3F9043F4721A0AA4DD13A38D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
Manifest number: 1556
Signing time: Wed 29 Oct 2025 04:01:29 +0000
Manifest this update: Wed 29 Oct 2025 04:01:29 +0000
Manifest next update: Thu 30 Oct 2025 04:01:29 +0000
Files and hashes: 1: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl (hash: eTZ98R6GZVWTp7N3vdetVm434uMxYiDYsiGmtrFf7fM=)
2: omv1iA0sTwZqywTVYlUXXegJP1Q.roa (hash: lDFIRi5hNHf1aQj7xWQEmMDGw0C4yu9jECeYI1136N4=)
3: yYTpoAfaYghmHruP3VvWvB4Z38E.roa (hash: 9b9Mq3MlvIX2qX8DdTkiCTxQPYb+kWY/IW9meZtFMy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:20:bf:5d:3f:90:43:f4:72:1a:0a:a4:dd:13:a3:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d8640c305107766a646fbf8ec81db45ce1f249
Validity
Not Before: Oct 29 04:01:29 2025 GMT
Not After : Oct 30 04:01:29 2025 GMT
Subject: CN=4e5d09fdabfe731d33769b056d23010fb96edfc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:64:2e:86:9c:94:54:b6:80:3f:ca:88:da:c5:
0a:04:ab:5e:3e:2a:44:5e:2f:25:9f:51:e8:d4:4a:
de:75:79:bb:56:8a:f8:f9:1f:13:8f:e3:45:90:f2:
bb:a1:89:64:de:72:fe:bb:fb:69:68:e0:59:b7:1f:
08:18:9b:91:9d:69:df:2f:98:97:31:b4:23:aa:ad:
ff:21:02:ce:f3:c7:48:da:2a:2d:ed:e9:51:0a:ba:
3a:f4:08:be:17:31:0d:5a:3e:45:62:4e:b2:0d:6b:
d5:85:54:ef:30:5c:80:66:6f:14:e8:94:bf:00:bb:
66:82:a3:dc:99:9e:5b:cc:76:5e:71:17:29:d4:3a:
db:8f:5c:ff:a5:3d:cf:68:ff:d1:ed:2a:c7:9e:78:
de:23:67:8a:ae:21:6c:63:8a:e1:4f:60:94:76:e7:
6b:48:78:16:67:c0:3b:54:5a:97:66:78:a1:f7:b5:
16:e7:36:58:f9:3b:09:a2:7f:d6:04:eb:5d:e6:49:
d7:63:ee:a5:e1:17:fd:43:19:af:33:61:99:99:54:
21:32:f6:4d:06:6b:2c:01:4c:8e:79:b1:78:77:da:
4c:95:70:ac:21:ac:5e:01:46:d6:06:a4:22:e5:c3:
d1:b5:82:cc:d4:67:4e:ee:0d:16:3e:e4:b0:6e:87:
d6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:5D:09:FD:AB:FE:73:1D:33:76:9B:05:6D:23:01:0F:B9:6E:DF:C7
X509v3 Authority Key Identifier:
keyid:27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:df:02:60:6e:af:00:d2:d1:bf:cd:9e:ca:a2:67:1c:60:e3:
70:3e:7f:3f:38:3b:c7:71:5f:16:8e:07:41:80:82:39:9c:2d:
4a:8d:35:13:fe:1c:af:10:bf:8c:c8:cc:02:3e:ed:56:bc:86:
02:cc:9c:22:b3:0e:9a:24:36:76:62:a2:7b:a8:a9:6e:74:e4:
00:bc:0e:6c:d1:18:17:8b:8c:dd:7b:d3:d4:2c:fe:d4:eb:dc:
63:96:13:e3:01:3f:03:dd:13:a3:47:67:65:52:1c:6f:2e:5a:
59:6d:8a:bb:8c:d1:39:e0:fd:a7:e0:1d:2c:a1:5d:5f:18:68:
da:80:1f:b5:09:7b:fa:63:16:b0:4c:db:c7:94:d5:53:e6:e8:
e5:19:92:35:6a:31:eb:d4:f2:ac:a5:ef:cf:d9:ba:0b:34:86:
09:9d:c6:ce:6c:39:f0:38:c9:5f:45:b7:d4:77:8d:d3:b0:fc:
8a:47:79:b1:0f:8d:f3:b1:e3:5e:d8:19:a4:ba:9d:1e:7b:23:
4b:76:cc:30:e6:eb:d7:6c:41:76:83:80:95:86:53:f8:5e:86:
a3:55:52:5a:4b:f1:98:5c:52:1f:2b:8e:7a:55:b1:f6:6d:f2:
3c:b1:e6:a6:90:eb:0d:03:c5:07:85:98:25:72:a1:9d:fd:e2:
bf:3f:17:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZouIL9dP5BD9HIaCqTdE6ONMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZDg2NDBjMzA1MTA3NzY2YTY0NmZiZjhlYzgxZGI0NWNl
MWYyNDkwHhcNMjUxMDI5MDQwMTI5WhcNMjUxMDMwMDQwMTI5WjAzMTEwLwYDVQQD
Eyg0ZTVkMDlmZGFiZmU3MzFkMzM3NjliMDU2ZDIzMDEwZmI5NmVkZmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6mQuhpyUVLaAP8qI2sUKBKtePipE
Xi8ln1Ho1EredXm7Vor4+R8Tj+NFkPK7oYlk3nL+u/tpaOBZtx8IGJuRnWnfL5iX
MbQjqq3/IQLO88dI2iot7elRCro69Ai+FzENWj5FYk6yDWvVhVTvMFyAZm8U6JS/
ALtmgqPcmZ5bzHZecRcp1Drbj1z/pT3PaP/R7SrHnnjeI2eKriFsY4rhT2CUdudr
SHgWZ8A7VFqXZnih97UW5zZY+TsJon/WBOtd5knXY+6l4Rf9QxmvM2GZmVQhMvZN
BmssAUyOebF4d9pMlXCsIaxeAUbWBqQi5cPRtYLM1GdO7g0WPuSwbofWQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5dCf2r/nMdM3abBW0jAQ+5bt/HMB8GA1UdIwQY
MBaAFCfYZAwwUQd2amRvv47IHbRc4fJJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjloa0REQlJCM1pxWkctX2pzZ2R0RnpoOGtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi84ODE3NWEtMTJjOC00NTkwLTgyZTAt
M2M2Zjg4YzkxNGIxLzEvSjloa0REQlJCM1pxWkctX2pzZ2R0RnpoOGtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi84ODE3NWEtMTJjOC00NTkwLTgyZTAtM2M2Zjg4YzkxNGIx
LzEvSjloa0REQlJCM1pxWkctX2pzZ2R0RnpoOGtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG98CYG6v
ANLRv82eyqJnHGDjcD5/Pzg7x3FfFo4HQYCCOZwtSo01E/4crxC/jMjMAj7tVryG
AsycIrMOmiQ2dmKie6ipbnTkALwObNEYF4uM3XvT1Cz+1OvcY5YT4wE/A90To0dn
ZVIcby5aWW2Ku4zROeD9p+AdLKFdXxho2oAftQl7+mMWsEzbx5TVU+bo5RmSNWox
69TyrKXvz9m6CzSGCZ3Gzmw58DjJX0W31HeN07D8ikd5sQ+N87HjXtgZpLqdHnsj
S3bMMObr12xBdoOAlYZT+F6Go1VSWkvxmFxSHyuOelWx9m3yPLHmppDrDQPFB4WY
JXKhnf3ivz8XEw==
-----END CERTIFICATE-----
Generated at Wed Oct 29 07:04:37 2025 by rpki-client