Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
File: j9-HylMGV5hEdkUlX4KbU7wdohU.mft (raw, json)
Hash identifier: B6sQ8NFul36+1k4ZJYqpvpf7xbIvckRdf8QJtQw9xc0=
Subject key identifier: F4:31:03:0A:40:49:5A:BE:FA:BA:63:4B:3C:48:D1:31:8E:8A:82:AF
Authority key identifier: 8F:DF:87:CA:53:06:57:98:44:76:45:25:5F:82:9B:53:BC:1D:A2:15
Certificate issuer: /CN=8fdf87ca53065798447645255f829b53bc1da215
Certificate serial: 019A71B89ECC5288A3F3F411C80674BA9777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
Manifest number: 0669
Signing time: Tue 11 Nov 2025 07:01:55 +0000
Manifest this update: Tue 11 Nov 2025 07:01:55 +0000
Manifest next update: Wed 12 Nov 2025 07:01:55 +0000
Files and hashes: 1: 13OA8Kowa9u-F_7ZWwXTDMJLU0A.roa (hash: TLY9MKIWsbVqHZrgOnopJQQ8yZUjxig3a2ZRbtkH/Xw=)
2: j9-HylMGV5hEdkUlX4KbU7wdohU.crl (hash: 9ISSHDRqEfzPMzrPJBwGXo+qsGmPdZrxIs4cVC5P0oM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:9e:cc:52:88:a3:f3:f4:11:c8:06:74:ba:97:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fdf87ca53065798447645255f829b53bc1da215
Validity
Not Before: Nov 11 07:01:55 2025 GMT
Not After : Nov 12 07:01:55 2025 GMT
Subject: CN=f431030a40495abefaba634b3c48d1318e8a82af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f0:dd:6e:4f:13:ac:45:5f:31:30:74:d1:34:
f3:14:2f:67:0b:fc:55:24:ce:c0:69:e3:34:f4:e0:
d7:dd:a0:17:b6:6a:24:d3:34:52:54:31:1e:aa:06:
fb:57:7e:28:5b:21:a1:c7:d0:30:2b:cc:c8:11:43:
57:99:40:26:bb:ce:94:d7:25:0c:5c:97:cb:b4:87:
7e:58:db:a9:8a:0c:0f:c2:48:df:ef:0a:92:7e:04:
fb:c1:05:ac:73:9d:1b:92:61:c0:ad:09:08:5c:a9:
ae:50:4c:c4:3d:d5:1d:00:b9:0c:08:55:09:e8:80:
bb:ba:d7:75:4f:23:b9:5e:29:29:ca:c9:5f:50:a7:
bc:ce:8e:a3:c3:5c:a9:77:a1:48:aa:9e:3f:aa:39:
fd:01:b2:b4:03:e4:72:23:d7:58:46:50:c0:6d:50:
eb:df:e2:26:26:f6:07:93:7c:3e:71:90:55:92:63:
a5:e3:82:e5:a6:39:b3:0b:2a:6f:21:4f:8e:06:a9:
5e:05:bd:45:94:20:ce:53:5e:6f:10:0d:4e:08:07:
db:43:94:bb:c2:11:d9:d6:c1:94:b4:d8:95:6a:5d:
25:d0:98:91:f9:61:08:b1:8b:35:7e:cc:c9:02:b6:
20:e9:6a:1e:94:8e:79:af:c6:bd:0b:db:0e:54:af:
83:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:31:03:0A:40:49:5A:BE:FA:BA:63:4B:3C:48:D1:31:8E:8A:82:AF
X509v3 Authority Key Identifier:
keyid:8F:DF:87:CA:53:06:57:98:44:76:45:25:5F:82:9B:53:BC:1D:A2:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:cd:4e:ac:e8:71:9e:cb:30:ff:a6:c7:0c:a8:94:8f:a5:c5:
60:f1:e8:b9:d9:ae:77:47:89:bd:1d:94:6b:79:ca:e1:55:0a:
65:c5:98:56:47:b9:b7:e4:db:f5:74:83:57:c3:e5:69:0d:60:
fc:f2:c6:af:e2:b6:51:cb:4e:ab:9c:3a:3f:dd:9e:21:59:f8:
c8:77:b2:82:f7:71:04:a6:a4:af:62:dd:b6:33:76:91:13:52:
dc:2e:d8:de:66:7a:37:91:9b:da:b5:5a:6a:22:c2:cb:ff:54:
41:81:7c:13:88:f7:05:77:ef:2b:3f:32:10:39:d2:60:9e:de:
57:f1:bf:fc:78:b0:81:04:e9:2b:ad:55:f7:38:89:ac:5f:71:
53:76:35:87:cf:84:2b:76:fe:64:cb:3f:4a:2f:73:40:4b:b7:
0a:d7:4e:ba:17:5d:97:20:aa:45:f2:25:fc:c6:5a:7a:5d:42:
07:ba:15:e3:05:de:8b:f0:f3:fe:8c:29:99:a8:47:ae:12:dc:
b3:35:eb:88:58:85:de:bd:21:7b:c7:3d:ff:5e:31:c9:35:df:
64:e7:47:32:85:3d:cb:96:d6:25:8d:99:43:d4:9a:cc:ca:25:
98:94:f4:4d:08:ec:1f:1b:01:ef:1b:c8:f7:14:71:3a:5f:43:
77:e0:1d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:32 2025 by rpki-client