Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
File: J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft (raw, json)
Hash identifier: 4KGfY7Ffo/Lu1l4MDqGT0qpP3tM38yY7RYJNjLfcAPw=
Subject key identifier: CB:AD:CF:21:A4:BE:4E:B3:27:38:A1:B0:B8:F2:20:43:CB:C9:02:EB
Authority key identifier: 27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C
Certificate issuer: /CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c
Certificate serial: 019927B2B0C35C84457E283DE4E77375EDEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
Manifest number: 1689
Signing time: Mon 08 Sep 2025 05:00:45 +0000
Manifest this update: Mon 08 Sep 2025 05:00:45 +0000
Manifest next update: Tue 09 Sep 2025 05:00:45 +0000
Files and hashes: 1: 64rEanXhDA2OJWgNqMgPZ5FM7ec.roa (hash: 8qJk7sdPmgd5qyBKhZltol3z/GSxNSlFaZ8AUoHL904=)
2: J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl (hash: VgV4Du0PXD4oe82IGt2OOP6gzVehU1IuAlOvNrQJMnE=)
3: J_FW6C53GNA1eZgfBxqmfj1GnHk.roa (hash: 2FVTaWaI6Pa7rkvw9aYDp7sxlvCorspj3xme17atTXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:b2:b0:c3:5c:84:45:7e:28:3d:e4:e7:73:75:ed:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c
Validity
Not Before: Sep 8 05:00:45 2025 GMT
Not After : Sep 9 05:00:45 2025 GMT
Subject: CN=cbadcf21a4be4eb32738a1b0b8f22043cbc902eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ea:ce:25:a7:11:ca:03:6f:1e:0e:bf:97:9d:
2e:32:c4:21:e1:9e:71:b0:b1:ae:55:43:30:c6:86:
91:74:2a:90:d5:f0:7e:09:e6:1c:25:23:74:3a:2a:
e9:e2:3d:6e:0f:c6:19:4c:1c:6d:8b:4c:e6:e9:11:
fe:4e:dd:78:45:72:ae:41:25:58:f5:76:7d:4b:ca:
f1:df:8c:1e:1c:76:88:ba:59:11:58:b5:bb:19:d7:
17:f2:79:b5:2e:3d:86:7b:0f:7e:a3:7a:dc:a7:49:
f1:53:87:5e:34:e9:4e:b0:7c:55:b8:05:ab:17:bd:
bd:30:fb:a1:8d:aa:58:75:20:37:14:f5:52:dc:73:
5c:1c:c4:e5:4b:62:77:fb:06:c5:f3:62:ef:18:e6:
e3:43:c1:ce:8e:4e:f7:fe:c7:a3:12:94:d4:88:9e:
8a:a3:95:d0:0c:fd:cf:c5:8e:72:48:94:22:dc:1f:
72:68:bc:8e:82:ca:58:37:4b:b4:23:90:f0:57:2d:
82:5c:bb:e3:66:e2:6d:fe:dd:f8:6f:06:82:23:dd:
25:6d:5a:54:05:8f:dd:5d:fc:7c:0c:a2:8e:cf:38:
7d:13:23:b0:74:47:2a:b3:a2:87:ff:af:f0:76:57:
e7:f4:38:a3:24:93:ed:fc:87:de:83:cb:70:a3:5b:
75:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AD:CF:21:A4:BE:4E:B3:27:38:A1:B0:B8:F2:20:43:CB:C9:02:EB
X509v3 Authority Key Identifier:
keyid:27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:88:cb:2f:39:33:39:bd:2a:66:0f:d3:51:ec:15:72:44:ad:
fb:a9:b9:41:ea:4c:44:c9:c3:6c:99:fa:33:29:9e:84:f9:c7:
e2:6d:e4:b2:5e:69:9a:f3:7d:d8:c9:cb:8a:f9:fe:c5:57:71:
44:07:38:66:6b:4c:c7:1b:40:08:62:3c:b6:be:0d:af:fa:65:
52:3a:f6:64:69:8d:d6:78:bf:e4:37:fd:f4:10:5c:38:4b:38:
91:7d:7b:8e:34:92:08:f1:5d:2e:6f:91:89:28:d9:7d:33:be:
74:89:f3:84:3f:01:83:12:e1:dd:9f:5f:53:b5:1c:c0:6c:5e:
b6:21:0d:95:c0:70:af:a6:32:fb:60:e8:ba:24:29:67:0b:d8:
21:09:2d:0e:91:e2:f1:a9:54:7c:b9:03:6c:f6:bc:3f:2f:11:
57:72:44:86:13:0f:39:80:42:29:bb:82:bc:9c:56:17:16:db:
96:50:8c:1a:d7:5c:80:9c:dc:77:c4:98:b8:fd:fa:a0:a3:fe:
79:21:da:4c:59:50:d6:d1:10:49:72:d2:fa:8d:fa:e5:6b:d8:
9c:dc:f9:17:26:49:7e:ba:e4:06:61:5e:1c:2d:af:4a:30:9f:
73:55:eb:1a:1b:38:ae:19:a5:6a:e3:be:1d:84:5a:3a:5d:b7:
2b:f6:fb:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZknsrDDXIRFfig95Odzde3qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZDczMDRjMWI1OWRjMjI3MzFiYjUzZWZmNWE4NGVkOWEz
MDYxNGMwHhcNMjUwOTA4MDUwMDQ1WhcNMjUwOTA5MDUwMDQ1WjAzMTEwLwYDVQQD
EyhjYmFkY2YyMWE0YmU0ZWIzMjczOGExYjBiOGYyMjA0M2NiYzkwMmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+rOJacRygNvHg6/l50uMsQh4Z5x
sLGuVUMwxoaRdCqQ1fB+CeYcJSN0Oirp4j1uD8YZTBxti0zm6RH+Tt14RXKuQSVY
9XZ9S8rx34weHHaIulkRWLW7GdcX8nm1Lj2Gew9+o3rcp0nxU4deNOlOsHxVuAWr
F729MPuhjapYdSA3FPVS3HNcHMTlS2J3+wbF82LvGObjQ8HOjk73/sejEpTUiJ6K
o5XQDP3PxY5ySJQi3B9yaLyOgspYN0u0I5DwVy2CXLvjZuJt/t34bwaCI90lbVpU
BY/dXfx8DKKOzzh9EyOwdEcqs6KH/6/wdlfn9DijJJPt/Ifeg8two1t1EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMutzyGkvk6zJzihsLjyIEPLyQLrMB8GA1UdIwQY
MBaAFCfXMEwbWdwicxu1Pv9ahO2aMGFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjljd1RCdFozQ0p6RzdVLV8xcUU3Wm93WVV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9jMTNlMTItZTUwZC00MzM4LThhMmYt
ZmZmYjVhNGU3NjJhLzEvSjljd1RCdFozQ0p6RzdVLV8xcUU3Wm93WVV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9jMTNlMTItZTUwZC00MzM4LThhMmYtZmZmYjVhNGU3NjJh
LzEvSjljd1RCdFozQ0p6RzdVLV8xcUU3Wm93WVV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPYjLLzkz
Ob0qZg/TUewVckSt+6m5QepMRMnDbJn6MymehPnH4m3ksl5pmvN92MnLivn+xVdx
RAc4ZmtMxxtACGI8tr4Nr/plUjr2ZGmN1ni/5Df99BBcOEs4kX17jjSSCPFdLm+R
iSjZfTO+dInzhD8BgxLh3Z9fU7UcwGxetiENlcBwr6Yy+2DouiQpZwvYIQktDpHi
8alUfLkDbPa8Py8RV3JEhhMPOYBCKbuCvJxWFxbbllCMGtdcgJzcd8SYuP36oKP+
eSHaTFlQ1tEQSXLS+o365WvYnNz5FyZJfrrkBmFeHC2vSjCfc1XrGhs4rhmlauO+
HYRaOl23K/b7kQ==
-----END CERTIFICATE-----
Generated at Mon Sep 8 09:55:31 2025 by rpki-client