Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
File: J-D3u75AMaJO8bnbGWqrBkLoSgY.mft (raw, json)
Hash identifier: utEtvq+pn2DwEOBcN/J3QvXtNXaNR4iaxTMBEgj0Gks=
Subject key identifier: 2B:6B:A0:AB:32:CA:22:CA:27:F4:CC:5F:8C:1C:F1:11:37:8D:91:3F
Authority key identifier: 27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06
Certificate issuer: /CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06
Certificate serial: 019A26D4B40A1AE6C23F613057CD1B9BE277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
Manifest number: 16F9
Signing time: Mon 27 Oct 2025 18:01:05 +0000
Manifest this update: Mon 27 Oct 2025 18:01:05 +0000
Manifest next update: Tue 28 Oct 2025 18:01:05 +0000
Files and hashes: 1: IjluqbVdM5zm7wvPSgQZOmXQjag.roa (hash: QKwqMUOeWOJatNvuP/XT/XSpsSd9RiOppxhqX3P9KPo=)
2: J-D3u75AMaJO8bnbGWqrBkLoSgY.crl (hash: QEG+7lCc4gz/OpkmuGWd03LjMfyJKh2j862z+KU2M2c=)
3: YY-hoyGXDDo8SiePezL_ZO2nNOw.roa (hash: A3j7uoljgavovkzwgqN6nFVhnXRD4UmTm39D3QvLFO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:d4:b4:0a:1a:e6:c2:3f:61:30:57:cd:1b:9b:e2:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06
Validity
Not Before: Oct 27 18:01:05 2025 GMT
Not After : Oct 28 18:01:05 2025 GMT
Subject: CN=2b6ba0ab32ca22ca27f4cc5f8c1cf111378d913f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:36:7e:77:16:ca:fb:b8:85:52:ea:86:4a:e1:
c0:8e:fb:cd:3c:ab:82:b7:95:b5:f0:fc:b6:26:ad:
34:e5:18:a2:90:e8:7c:2d:19:62:31:ff:c7:77:f4:
48:6e:82:f3:85:42:b9:d7:4b:41:9b:34:9e:df:d4:
42:66:f4:02:3a:a8:d4:7a:f2:82:79:c1:6a:1b:c2:
60:ee:8a:50:22:08:43:da:4e:06:b8:3c:63:d3:7c:
eb:55:a5:18:50:6c:25:25:0e:f7:1c:6b:e0:74:88:
4b:32:96:8d:e2:61:1e:be:a0:c5:c5:bd:9c:06:08:
5c:2c:e2:97:cd:21:82:f3:9e:89:86:5e:b7:9b:bd:
5f:51:d9:10:a8:14:24:34:b9:94:f7:cd:cb:8b:16:
b8:22:85:20:0a:0f:49:f9:af:9e:b7:47:ee:5f:ed:
35:9c:43:9f:10:f3:de:12:5d:3a:c3:35:f8:c2:18:
73:fb:68:41:ec:9c:76:33:1b:c7:73:d3:e9:90:22:
33:93:07:af:1f:f6:4f:a2:2a:30:04:c4:5d:2a:4d:
b3:17:24:d6:ad:1b:67:f4:17:7e:4e:9b:d3:c5:ff:
d0:41:18:5f:5c:dd:39:6a:c7:f0:79:e6:9f:59:87:
ad:38:03:90:df:08:45:7f:f8:41:9d:11:26:e5:bf:
66:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6B:A0:AB:32:CA:22:CA:27:F4:CC:5F:8C:1C:F1:11:37:8D:91:3F
X509v3 Authority Key Identifier:
keyid:27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:4b:26:06:dd:53:be:ba:19:cf:87:73:a1:bc:93:56:3c:f2:
5a:78:45:f8:28:f0:8a:a4:5e:ef:fa:50:77:91:6f:86:0d:9d:
76:11:ef:fc:55:36:89:91:6c:9f:5f:6e:d3:04:db:f0:36:73:
53:4e:a4:be:b7:5e:94:13:1d:b2:5a:e9:54:3e:d9:c6:2d:43:
97:cd:c2:4d:53:11:35:47:ed:16:51:fc:0a:65:c1:fd:43:5a:
4b:cc:4f:f6:f6:96:38:75:8f:ef:4d:8f:4c:4e:99:52:d1:a5:
77:6c:28:e1:60:67:aa:b2:20:22:30:b2:ba:04:98:55:26:f6:
bd:71:b1:09:c9:50:67:f3:e0:97:8e:b7:5a:f4:21:a6:c7:55:
ed:68:fa:27:98:6e:64:31:83:d1:20:bb:18:ea:74:2e:b3:8c:
83:00:c4:9f:be:8a:41:89:f9:04:c4:03:d0:22:0c:8d:12:98:
63:51:32:6c:a4:ef:e1:42:78:54:db:b4:ef:19:59:cd:fc:fb:
36:fd:05:e5:ea:03:94:a9:d0:71:df:9a:e5:eb:c0:c4:56:a4:
b4:98:23:a8:34:cd:6f:b4:f1:fd:f9:7a:87:d8:a7:03:bd:a7:
7b:b4:b3:4e:ce:a7:0d:18:d3:31:00:ac:9e:26:99:b7:8d:b1:
b4:ab:25:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZom1LQKGubCP2EwV80bm+J3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZTBmN2JiYmU0MDMxYTI0ZWYxYjlkYjE5NmFhYjA2NDJl
ODRhMDYwHhcNMjUxMDI3MTgwMTA1WhcNMjUxMDI4MTgwMTA1WjAzMTEwLwYDVQQD
EygyYjZiYTBhYjMyY2EyMmNhMjdmNGNjNWY4YzFjZjExMTM3OGQ5MTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzZ+dxbK+7iFUuqGSuHAjvvNPKuC
t5W18Py2Jq005RiikOh8LRliMf/Hd/RIboLzhUK510tBmzSe39RCZvQCOqjUevKC
ecFqG8Jg7opQIghD2k4GuDxj03zrVaUYUGwlJQ73HGvgdIhLMpaN4mEevqDFxb2c
BghcLOKXzSGC856Jhl63m71fUdkQqBQkNLmU983Lixa4IoUgCg9J+a+et0fuX+01
nEOfEPPeEl06wzX4whhz+2hB7Jx2MxvHc9PpkCIzkwevH/ZPoiowBMRdKk2zFyTW
rRtn9Bd+TpvTxf/QQRhfXN05asfweeafWYetOAOQ3whFf/hBnREm5b9myQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtroKsyyiLKJ/TMX4wc8RE3jZE/MB8GA1UdIwQY
MBaAFCfg97u+QDGiTvG52xlqqwZC6EoGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSi1EM3U3NUFNYUpPOGJuYkdXcXJCa0xvU2dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC84YWJhNzEtM2JhOC00YjhkLThlYjYt
MzQ2YTNlYzE4NjhjLzEvSi1EM3U3NUFNYUpPOGJuYkdXcXJCa0xvU2dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC84YWJhNzEtM2JhOC00YjhkLThlYjYtMzQ2YTNlYzE4Njhj
LzEvSi1EM3U3NUFNYUpPOGJuYkdXcXJCa0xvU2dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUksmBt1T
vroZz4dzobyTVjzyWnhF+CjwiqRe7/pQd5Fvhg2ddhHv/FU2iZFsn19u0wTb8DZz
U06kvrdelBMdslrpVD7Zxi1Dl83CTVMRNUftFlH8CmXB/UNaS8xP9vaWOHWP702P
TE6ZUtGld2wo4WBnqrIgIjCyugSYVSb2vXGxCclQZ/Pgl463WvQhpsdV7Wj6J5hu
ZDGD0SC7GOp0LrOMgwDEn76KQYn5BMQD0CIMjRKYY1EybKTv4UJ4VNu07xlZzfz7
Nv0F5eoDlKnQcd+a5evAxFaktJgjqDTNb7Tx/fl6h9inA72ne7SzTs6nDRjTMQCs
niaZt42xtKslsg==
-----END CERTIFICATE-----
Generated at Mon Oct 27 19:50:32 2025 by rpki-client