Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.mft
File: J9fQ03vwSUWJRyGJ4DwZMFfjc6s.mft (raw, json)
Hash identifier: 6pF0jMJ96pcYRMZGibHN5+iEQHM5CS2tHL+1SDrA/xg=
Subject key identifier: 9C:6C:B5:0F:1C:EF:4F:BC:B3:C9:75:12:B1:D1:F8:29:79:DA:B8:A9
Authority key identifier: 27:D7:D0:D3:7B:F0:49:45:89:47:21:89:E0:3C:19:30:57:E3:73:AB
Certificate issuer: /CN=27d7d0d37bf0494589472189e03c193057e373ab
Certificate serial: 019A730197027AA927F469261826C54C7E19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.mft
Manifest number: 09D5
Signing time: Tue 11 Nov 2025 13:01:15 +0000
Manifest this update: Tue 11 Nov 2025 13:01:15 +0000
Manifest next update: Wed 12 Nov 2025 13:01:15 +0000
Files and hashes: 1: APV-yd4iM5ft2_CZQSdpqn3Znl0.roa (hash: zO2jXcNxwkx67uSbTL8ewK9Q+yKE4kHcIhGP4291jJw=)
2: J9fQ03vwSUWJRyGJ4DwZMFfjc6s.crl (hash: 2UiOdcqyhcbkOYBKKeFBUbbeA5PSu8nXTsD6oUQCZrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:97:02:7a:a9:27:f4:69:26:18:26:c5:4c:7e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d7d0d37bf0494589472189e03c193057e373ab
Validity
Not Before: Nov 11 13:01:15 2025 GMT
Not After : Nov 12 13:01:15 2025 GMT
Subject: CN=9c6cb50f1cef4fbcb3c97512b1d1f82979dab8a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:db:43:8e:71:94:22:00:6e:98:77:0d:e4:fd:
16:b8:c4:90:6e:11:b0:34:96:02:05:6e:c6:b8:ae:
fb:1b:ed:12:22:a3:8e:57:06:9c:8a:ef:4c:4e:5a:
44:9f:6a:67:50:3a:53:b5:45:78:a3:76:78:74:2e:
38:6f:22:93:52:1a:c4:76:a4:9c:10:8b:48:d9:2c:
15:31:96:17:fa:51:1a:b0:81:c6:70:3b:53:1c:fd:
a1:c6:5e:ce:bb:09:60:15:1c:3c:df:64:bc:70:7d:
2f:46:cb:fc:ac:3d:c1:21:10:10:44:c0:d6:2f:5e:
19:3b:48:fb:48:be:24:c6:12:24:21:78:58:ea:8f:
b5:4b:ef:b0:7c:55:ef:66:f7:b8:f6:73:13:6c:15:
24:23:2b:2a:1a:72:5f:d7:f3:8f:bb:e7:86:da:c1:
3b:9c:e0:6e:7a:f8:4e:41:5b:b0:15:61:71:50:03:
10:44:18:fa:ce:f4:54:89:c3:3d:4b:87:ef:ad:6f:
b0:0d:d2:1d:5d:30:6b:83:7f:cc:9b:9b:69:c3:51:
ad:ec:cc:66:b9:f6:26:a4:0e:52:4b:35:5a:a4:46:
44:86:90:5e:32:9f:2b:6b:c6:0b:c0:89:ca:44:ba:
00:b7:a0:6c:d1:02:35:64:91:85:dc:31:83:b9:ec:
11:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:6C:B5:0F:1C:EF:4F:BC:B3:C9:75:12:B1:D1:F8:29:79:DA:B8:A9
X509v3 Authority Key Identifier:
keyid:27:D7:D0:D3:7B:F0:49:45:89:47:21:89:E0:3C:19:30:57:E3:73:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:51:50:da:46:7e:f5:ef:86:94:a4:dd:35:56:d8:41:54:ed:
df:46:dc:74:fd:d4:98:76:53:b4:0d:b5:87:66:97:4e:32:65:
c5:bc:45:68:ed:79:8f:f7:4f:01:9a:2f:c8:33:7d:a0:4b:43:
25:e2:2b:64:82:2d:d6:e2:81:5a:84:df:f5:b8:e0:b1:ee:c4:
04:b2:1e:8a:cd:3b:84:75:e6:7b:9b:93:b8:05:03:1e:d0:81:
ac:4a:28:94:88:34:b4:2a:e7:dc:76:b1:02:fd:77:3f:36:fb:
83:47:9c:ca:bc:ac:06:76:d8:20:ce:47:05:56:23:89:08:db:
0a:42:09:77:6f:37:92:bc:af:ad:df:ef:9f:03:13:c4:54:3d:
44:20:62:6d:ea:33:d4:22:5a:a8:b8:2c:86:92:73:d8:38:31:
13:7a:07:9a:dc:56:79:6b:61:08:c4:a2:ec:3e:57:f2:c6:43:
da:4d:59:2f:31:d0:5e:13:d4:d3:66:f9:4b:bb:7f:f0:67:7a:
db:ca:3b:3b:89:42:3b:0d:99:ce:77:ac:d4:b7:d6:09:fd:69:
b6:aa:84:5c:c9:73:8d:09:27:20:e6:69:7f:1e:77:28:b3:4e:
4b:f0:cb:8b:70:74:18:46:4a:f0:cc:d8:2c:11:f2:e9:2e:a1:
ea:82:eb:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:32:28 2025 by rpki-client