Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
File: J9VOSniNaWei7vOmaSYiYm9U760.mft (raw, json)
Hash identifier: CLc+zZWJ56qZzXr9MQkzWBmA949SfSzj6MJ9TbuEaCg=
Subject key identifier: 77:CC:8B:D3:CE:CE:44:C7:D0:79:E5:05:FA:8D:98:E3:E0:17:89:C9
Authority key identifier: 27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD
Certificate issuer: /CN=27d54e4a788d6967a2eef3a6692622626f54efad
Certificate serial: 019A71B86651C780B6E68829322C7D909814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
Manifest number: 0C47
Signing time: Tue 11 Nov 2025 07:01:41 +0000
Manifest this update: Tue 11 Nov 2025 07:01:41 +0000
Manifest next update: Wed 12 Nov 2025 07:01:41 +0000
Files and hashes: 1: BhvqAjp2FFsTdoGE_6UzPBUzgUU.roa (hash: Kaoj9hdcD1FNas61kk3Ce73rVwZ3HgxiSCiLpA2QHSE=)
2: J9VOSniNaWei7vOmaSYiYm9U760.crl (hash: yZviDMzZG69crc3Cd0L+WWzp9xGUnfAmtYi6BQnbPnQ=)
3: e-ijOhbtTVFVKNwA3A0KZtd9G28.roa (hash: 4dN/JLGpYdlMav39iELvw9iA3Kyyi/awTvBLXNA8PfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:66:51:c7:80:b6:e6:88:29:32:2c:7d:90:98:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d54e4a788d6967a2eef3a6692622626f54efad
Validity
Not Before: Nov 11 07:01:41 2025 GMT
Not After : Nov 12 07:01:41 2025 GMT
Subject: CN=77cc8bd3cece44c7d079e505fa8d98e3e01789c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0e:0d:d4:a9:9f:ad:eb:5d:19:da:2c:c9:44:
41:7a:2f:ab:25:b4:c3:6f:38:81:92:59:fd:c3:8f:
5b:b9:97:1e:2c:be:8d:e6:73:49:06:fe:30:69:e6:
9e:bd:f0:33:c5:b5:b2:69:20:e4:38:06:e6:a8:e4:
c4:b9:5c:ea:3e:8c:04:98:39:66:dd:f0:2a:5f:17:
40:fc:ea:a6:b9:9d:c7:13:c1:8a:04:03:fa:f9:c1:
c7:a5:26:43:4b:51:ff:3a:f8:0a:ae:52:41:d4:da:
37:cc:40:2a:5b:e3:9b:0b:c8:a3:f1:c8:7d:46:7e:
1c:8c:46:f5:96:af:03:01:e0:7a:32:e4:50:24:b3:
d5:d0:1f:4d:5c:f9:7d:49:82:8a:10:2b:13:95:8f:
e8:60:40:da:98:e3:c5:1d:3c:b7:37:84:5c:96:f3:
13:7a:37:2e:a4:af:cc:5b:e2:16:67:3e:2b:c6:55:
75:8e:c2:0f:8d:28:92:3a:d5:d7:b6:13:19:b2:37:
de:59:1e:f3:c2:6a:6c:a8:09:7b:fb:13:4c:9d:37:
d7:55:d8:3c:93:c6:62:68:88:05:ef:da:ce:83:63:
42:63:f2:a8:45:bc:1c:04:9c:bf:bd:19:11:35:d9:
e3:a2:65:80:5e:7e:5a:42:3b:55:08:64:bb:71:9c:
2c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CC:8B:D3:CE:CE:44:C7:D0:79:E5:05:FA:8D:98:E3:E0:17:89:C9
X509v3 Authority Key Identifier:
keyid:27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:36:01:e9:dd:fa:29:26:fa:8a:79:55:5d:de:9e:62:5b:28:
af:92:af:64:9d:c4:9d:6b:e0:bf:4e:50:f6:ad:9c:b4:e3:c4:
22:21:f2:0e:07:42:85:8d:a3:03:b9:73:cd:df:06:13:75:bd:
f7:8e:24:49:0c:4c:da:f4:ed:bf:26:b4:d5:0a:91:f5:d0:49:
4f:b0:5e:b9:7c:93:02:aa:0d:4a:e0:f9:f4:5f:be:b4:fb:da:
5b:22:17:09:b7:26:f3:f9:e3:9c:2a:ce:79:e7:d0:49:64:91:
8c:37:7e:a3:33:d6:1f:bb:88:24:6b:03:2c:a7:69:20:6e:5b:
c6:e3:04:da:50:fb:89:8a:39:09:58:50:04:c7:16:c5:3b:88:
7c:15:10:6c:ce:0b:19:c7:68:e6:cf:27:41:70:4d:bb:a6:2e:
4b:f5:d1:90:41:e7:ee:f3:34:d9:b5:45:fa:da:d1:17:ec:5f:
66:28:2e:77:d7:63:fb:ca:7f:08:9f:c8:2f:ae:ba:71:4b:61:
5a:16:e4:e7:38:1e:16:ed:63:84:5a:6c:b0:ad:48:fd:ea:46:
bf:2d:2c:78:a6:85:8e:da:32:c4:44:99:ed:3f:c4:c8:92:64:
e0:53:b5:06:22:ce:6a:67:15:ff:1b:bf:04:fe:6f:96:7d:70:
3d:d6:73:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:18 2025 by rpki-client