Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft
File: J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft (raw, json)
Hash identifier: xNZI3Qb2Fptq+u5U2YrR+ADNiWY00ZwnDsRaXFc1DKc=
Subject key identifier: 74:28:2A:7E:06:3B:9C:82:6F:63:3D:47:9B:35:8E:73:6A:1A:43:94
Authority key identifier: 27:D0:28:47:06:04:33:6F:DB:93:08:E5:1B:A5:3E:95:1A:E2:E0:98
Certificate issuer: /CN=27d028470604336fdb9308e51ba53e951ae2e098
Certificate serial: 019A725CA7FDD799F3DF5236D7B966F50F7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9AoRwYEM2_bkwjlG6U-lRri4Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft
Manifest number: 0AB5
Signing time: Tue 11 Nov 2025 10:01:06 +0000
Manifest this update: Tue 11 Nov 2025 10:01:06 +0000
Manifest next update: Wed 12 Nov 2025 10:01:06 +0000
Files and hashes: 1: 8lytrNRAlkzl2XNEuoqT9hqGeHI.roa (hash: bsiOs3LeZM/7MgOmaqSi5ylqvDA5KYlcRdJP7/Y5e7k=)
2: J9AoRwYEM2_bkwjlG6U-lRri4Jg.crl (hash: ZcWsraxOGfQB/TTHa5RcsvPaqUwJGW5KMMwFDKe6Khc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9AoRwYEM2_bkwjlG6U-lRri4Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:a7:fd:d7:99:f3:df:52:36:d7:b9:66:f5:0f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d028470604336fdb9308e51ba53e951ae2e098
Validity
Not Before: Nov 11 10:01:06 2025 GMT
Not After : Nov 12 10:01:06 2025 GMT
Subject: CN=74282a7e063b9c826f633d479b358e736a1a4394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9a:22:d2:7e:25:53:5b:a7:e8:b3:75:2c:2c:
f3:8d:7f:a9:11:02:a8:be:e1:9d:2d:8e:65:a3:5c:
5b:c3:35:29:dd:af:26:3d:9e:d1:46:e6:18:a9:54:
34:e2:55:e1:b7:10:22:07:3f:53:67:68:0f:e9:5d:
e8:1b:b7:33:07:bc:a7:26:1b:63:fb:b3:6e:c0:f0:
77:e8:b8:0c:8e:f3:50:0a:82:7c:4b:be:4e:70:97:
95:12:a1:b5:28:18:61:8c:17:71:8f:74:1b:5a:9f:
77:26:59:cc:15:b3:ed:c8:9d:c6:ab:10:dc:6d:c0:
d0:5b:d2:c4:81:d1:fb:6b:1f:90:ba:00:5f:fe:da:
c8:3b:69:df:c3:c5:27:12:7e:82:2b:58:d7:ed:88:
83:f2:68:c7:0c:3d:09:0c:33:68:7f:75:7c:70:c0:
6b:63:bd:80:ca:8c:77:7c:ee:57:8e:1c:5d:e6:7f:
f4:8a:99:1e:cd:59:c0:6b:90:28:07:67:a7:35:86:
ac:c6:52:5d:13:2b:b8:ec:0e:4b:5a:d5:6b:e8:bd:
ce:05:0f:de:fd:98:23:7b:97:ae:8b:59:6b:f1:48:
d0:85:51:50:0e:d6:ba:5c:4c:aa:f4:35:1f:40:d9:
60:b4:6f:d6:d3:48:f8:b4:d3:67:4e:73:a2:cc:72:
7f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:28:2A:7E:06:3B:9C:82:6F:63:3D:47:9B:35:8E:73:6A:1A:43:94
X509v3 Authority Key Identifier:
keyid:27:D0:28:47:06:04:33:6F:DB:93:08:E5:1B:A5:3E:95:1A:E2:E0:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9AoRwYEM2_bkwjlG6U-lRri4Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/b3805f-be6f-4133-b5ec-a4ebbfe710c3/1/J9AoRwYEM2_bkwjlG6U-lRri4Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:1f:05:f5:22:a6:26:c1:0f:8e:78:bf:11:f5:d0:1f:03:89:
31:44:36:43:95:f3:c0:a9:16:62:9a:9c:12:40:64:e8:fc:c6:
92:5c:0e:21:80:d8:8d:6f:3f:b6:e8:06:38:e8:87:d8:a5:88:
aa:85:91:c6:ac:cb:83:65:ed:95:61:a2:bd:38:60:f8:c8:ba:
af:8b:bb:15:ba:40:2f:d7:8b:0f:b9:64:63:ea:6a:98:ac:e1:
ff:57:06:b8:4a:23:37:53:d7:e2:f8:e1:d5:e7:3c:81:0c:03:
60:7f:74:a6:1d:21:b9:e9:30:e1:3d:37:cd:3b:3f:a0:59:31:
31:64:d1:cd:6c:c2:68:63:2e:8c:4e:fe:05:0f:6c:c4:37:66:
0b:71:d5:5e:be:0c:57:b1:75:92:35:40:5f:dc:46:02:33:84:
3c:c3:b5:7d:e9:90:2b:a2:e7:fa:91:de:33:43:73:5d:71:de:
6c:28:a2:62:02:24:48:2f:2b:bf:c2:51:a4:93:a5:59:4a:4b:
35:08:35:6c:df:c8:d1:75:7f:dc:28:b4:0d:a8:17:f6:8c:ae:
16:73:23:e0:18:79:01:71:a8:58:66:41:af:78:24:4d:eb:1c:
59:5c:09:81:8c:5d:64:18:57:f0:0c:21:f6:21:63:ab:11:3b:
48:e8:22:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:37:01 2025 by rpki-client