Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
File: J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft (raw, json)
Hash identifier: ieAql3BR5hxVpoXEo613zaWQSYcrCwVsSjq9jezmJIQ=
Subject key identifier: A2:36:90:E5:A3:2D:A3:57:90:B8:13:E3:55:D8:33:92:21:D8:85:59
Authority key identifier: 27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C
Certificate issuer: /CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c
Certificate serial: 019A72CA816A3549824FF51390C82BDC3E3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
Manifest number: 1735
Signing time: Tue 11 Nov 2025 12:01:05 +0000
Manifest this update: Tue 11 Nov 2025 12:01:05 +0000
Manifest next update: Wed 12 Nov 2025 12:01:05 +0000
Files and hashes: 1: 23bca3VQeIrruEqgH6VNWFAiuWs.roa (hash: AgG1ZxIJ9G4cx9MANuRKQ+cw/0IS8xxAcB1MqAzxpGw=)
2: 64rEanXhDA2OJWgNqMgPZ5FM7ec.roa (hash: 8qJk7sdPmgd5qyBKhZltol3z/GSxNSlFaZ8AUoHL904=)
3: J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl (hash: TVCVbTeYSSOro42QaIY161j+TL/j5SgoJ8+dPURjzxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:81:6a:35:49:82:4f:f5:13:90:c8:2b:dc:3e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c
Validity
Not Before: Nov 11 12:01:05 2025 GMT
Not After : Nov 12 12:01:05 2025 GMT
Subject: CN=a23690e5a32da35790b813e355d8339221d88559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:59:3d:aa:78:77:16:03:bd:96:7e:81:96:0e:
92:e6:78:34:60:62:ea:7c:53:2e:88:73:15:e4:bd:
9a:9c:86:5f:92:df:32:59:f8:3d:02:8c:e6:be:ae:
f6:5b:e1:6e:df:09:df:7c:62:fd:46:b4:62:34:71:
50:b5:6b:b8:42:74:aa:98:36:6c:c9:20:a5:32:90:
b9:c1:f1:49:63:44:a3:6a:b7:05:26:1d:f5:fc:07:
16:47:df:bb:25:f4:27:9c:23:91:a5:47:f9:c6:fc:
58:81:7a:8b:25:22:24:85:20:c0:e4:31:94:c8:8b:
d2:76:73:b6:9f:3b:13:6b:a0:ec:73:90:db:12:61:
b1:26:fa:67:fc:44:83:21:71:30:3b:1e:2c:09:7c:
2a:5e:66:1a:80:12:d4:c9:82:39:af:f3:10:b7:04:
66:7e:34:bd:29:b3:d4:e7:65:96:d6:49:f6:8d:95:
e4:3e:3e:63:3a:01:46:33:2c:c1:92:56:1e:2e:49:
60:a1:7a:b6:77:9b:9b:b7:7c:18:77:61:e4:59:b3:
f0:94:a9:fd:ee:ec:fa:05:1c:0d:e8:72:17:a2:92:
10:26:25:dd:78:79:1b:34:27:05:92:62:87:d5:7b:
ab:b6:18:32:53:e6:58:0a:ae:cb:b0:de:34:f6:20:
7c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:36:90:E5:A3:2D:A3:57:90:B8:13:E3:55:D8:33:92:21:D8:85:59
X509v3 Authority Key Identifier:
keyid:27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:4a:50:5c:05:68:71:d6:a8:39:1b:58:55:88:63:4d:cf:f4:
7c:05:de:9f:82:92:ad:a5:f5:2a:39:21:41:7c:f1:d0:a6:dd:
8a:20:b1:1e:af:b5:c5:a1:8e:f4:26:01:a9:c9:6d:6f:e4:fc:
0b:d3:96:00:ad:f0:65:98:b7:8c:a4:2d:4d:84:3e:9d:b2:08:
11:52:fb:03:aa:8a:78:93:60:36:b2:62:96:ea:79:42:80:02:
3b:cf:73:a1:a5:81:d6:f9:4d:9d:98:9b:71:a9:eb:4b:f0:13:
ca:83:a4:f5:c6:67:c2:64:1d:e9:95:74:e8:91:32:b9:e7:47:
0a:27:81:2f:90:43:e9:a8:aa:6a:5f:88:0a:b9:39:4f:82:48:
e6:9f:b7:c6:ff:1d:b6:f8:29:c3:40:c2:c5:29:2f:75:34:6c:
25:37:5b:eb:18:66:d1:73:0c:7e:82:03:70:74:0e:c9:70:44:
df:d0:96:ba:02:6b:30:29:dc:67:98:2b:50:6c:f2:25:64:1e:
16:ef:22:14:1e:24:5c:6c:59:3e:e1:cd:46:36:ed:7a:72:80:
df:0c:10:a3:0a:d2:f0:2d:a6:cb:51:c6:51:5d:40:16:63:73:
69:b0:10:05:e3:c2:0d:b2:fb:dd:12:b7:a9:f1:b5:27:75:60:
b1:6a:61:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:12 2025 by rpki-client