Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.mft
File: J84emmUiYWqzCw8SPgnTBagjBK8.mft (raw, json)
Hash identifier: GhYzejWJ6U51BFtRDHt19kvjRIEQVKGW4Zrb+cLM3N0=
Subject key identifier: 1B:9B:F4:15:E6:B3:BF:F7:4D:51:F8:A8:9C:87:9D:89:45:C3:39:FD
Authority key identifier: 27:CE:1E:9A:65:22:61:6A:B3:0B:0F:12:3E:09:D3:05:A8:23:04:AF
Certificate issuer: /CN=27ce1e9a6522616ab30b0f123e09d305a82304af
Certificate serial: 019A7149D7446518C36135DDA8ABEF32339E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J84emmUiYWqzCw8SPgnTBagjBK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.mft
Manifest number: 1725
Signing time: Tue 11 Nov 2025 05:00:55 +0000
Manifest this update: Tue 11 Nov 2025 05:00:55 +0000
Manifest next update: Wed 12 Nov 2025 05:00:55 +0000
Files and hashes: 1: J84emmUiYWqzCw8SPgnTBagjBK8.crl (hash: LQ43oUHA0mnwRYk/jFcSRsE7w53A3DCxA6zJVH+mKyo=)
2: WgYDhL0i6U8cqNQpr57kES37q38.roa (hash: RKIGt1CKlAHIm7PDdsvYymoW20pcRCPFEmrAdn3vZno=)
3: xfeGCbXD-YF0qFrPXVL_VBgsViY.roa (hash: +QvSz3wl8pHqddA2o6rF3CbvD6JrTHLlFmQPhouhbbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/J84emmUiYWqzCw8SPgnTBagjBK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:d7:44:65:18:c3:61:35:dd:a8:ab:ef:32:33:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27ce1e9a6522616ab30b0f123e09d305a82304af
Validity
Not Before: Nov 11 05:00:55 2025 GMT
Not After : Nov 12 05:00:55 2025 GMT
Subject: CN=1b9bf415e6b3bff74d51f8a89c879d8945c339fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d2:76:21:27:7b:ce:77:15:d2:05:fd:a0:25:
89:7d:c3:36:19:af:c4:64:84:06:4e:55:08:5e:a6:
bb:1b:ef:a1:69:6a:14:c6:b5:fc:a2:2a:a4:0f:65:
9f:5b:c9:cf:19:8f:ae:f5:62:3d:ba:f3:f5:20:09:
e7:47:7b:77:1e:ca:99:45:f9:4d:33:5e:4a:b1:a8:
4f:00:3d:48:82:7f:03:de:d1:6a:a7:ca:b3:37:a5:
00:c5:20:43:06:2c:71:47:62:6c:8f:b4:b6:0b:d8:
53:60:52:02:34:44:1f:32:4b:bf:13:0a:c3:33:cc:
1e:6c:48:c1:ee:a1:3c:cd:8c:ac:91:59:ed:e2:9e:
f2:5f:45:f8:d5:bc:dc:01:87:30:87:f0:8a:be:ab:
8f:35:91:86:9f:f2:1a:96:70:7c:ed:16:75:c1:b4:
0c:26:a5:f3:0a:60:0f:0b:d6:85:4f:44:26:f1:38:
62:64:bf:a8:de:97:08:0d:a5:f2:4b:66:e2:58:fd:
d1:8b:12:8f:09:06:23:40:8f:9d:c7:50:14:61:50:
ad:c0:82:cd:f3:ad:d6:bd:de:95:57:7b:87:29:3d:
b6:42:0e:54:76:7a:7d:7f:97:8d:73:f0:69:de:6a:
0d:ba:86:40:55:88:49:af:96:f6:12:8d:fd:02:d4:
3f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9B:F4:15:E6:B3:BF:F7:4D:51:F8:A8:9C:87:9D:89:45:C3:39:FD
X509v3 Authority Key Identifier:
keyid:27:CE:1E:9A:65:22:61:6A:B3:0B:0F:12:3E:09:D3:05:A8:23:04:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J84emmUiYWqzCw8SPgnTBagjBK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:9c:07:c5:98:82:3e:24:f0:9f:81:42:d9:bf:4a:fe:65:aa:
e8:b3:55:d0:4e:2c:4b:5f:68:4c:a3:0e:50:8c:e2:45:93:50:
21:c9:81:4e:d8:af:66:91:ca:12:8c:6d:4a:d6:1c:f1:ab:b0:
d1:b6:c7:39:c5:d3:7f:74:ce:b9:19:45:bc:7a:50:9d:0c:02:
61:db:9a:b6:17:43:b3:f0:73:8c:bb:79:d5:5c:bc:17:88:0b:
1b:18:14:1a:08:d1:76:99:27:6d:fa:19:48:f0:f0:f1:42:2c:
8b:2d:75:54:93:1e:57:3f:2f:2b:e8:ed:5b:23:53:37:77:ee:
b4:73:32:86:12:18:c3:f3:84:d0:2c:54:76:25:0e:d0:76:83:
ff:8a:00:09:92:c0:17:d5:a4:76:6a:04:1f:23:e9:88:69:6b:
8a:a7:c7:3e:70:17:d3:68:c7:a6:11:b3:94:1a:ad:cc:f4:be:
7f:61:33:f9:d8:1c:e5:78:4c:e2:c6:bc:ee:53:88:75:dd:c5:
59:93:1b:94:69:fc:14:5a:be:eb:0b:eb:ca:57:f0:16:34:7a:
b0:ef:a1:bf:c5:f3:b1:fa:2b:4c:b6:aa:b7:9c:20:e4:7c:0b:
ee:73:6b:fa:a6:33:ba:99:06:6f:66:44:70:f4:70:cc:0a:f7:
27:67:28:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:27 2025 by rpki-client