Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
File: jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft (raw, json)
Hash identifier: jetLN85JWS9Oi4zMb/XJFj0T+gLXPIb9HqvZOsE4P+4=
Subject key identifier: 82:2A:CC:8B:68:C3:19:1E:34:D9:0B:0F:32:32:3B:BC:5A:C2:8C:14
Authority key identifier: 8D:80:B4:54:55:D8:97:31:F8:7B:B5:3F:4D:BE:64:11:89:83:7D:4E
Certificate issuer: /CN=8d80b45455d89731f87bb53f4dbe641189837d4e
Certificate serial: 0198462D01E1FD99B9BC4C49469512201CC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
Manifest number: 029D
Signing time: Sat 26 Jul 2025 10:00:11 +0000
Manifest this update: Sat 26 Jul 2025 10:00:11 +0000
Manifest next update: Sun 27 Jul 2025 10:00:11 +0000
Files and hashes: 1: EdJTz8Dy_KYllN7oDQj7wcm2rcA.roa (hash: fBqhHICDr0X6YXFTTdlTIs7rIkllOmDVf3b+eCpH7zk=)
2: jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl (hash: 4pxZQjwf0UWmKzadB3pOx24vku2GQE98Up8v8+NTzn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:2d:01:e1:fd:99:b9:bc:4c:49:46:95:12:20:1c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d80b45455d89731f87bb53f4dbe641189837d4e
Validity
Not Before: Jul 26 10:00:11 2025 GMT
Not After : Jul 27 10:00:11 2025 GMT
Subject: CN=822acc8b68c3191e34d90b0f32323bbc5ac28c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:53:4c:28:98:53:11:3f:cd:c0:83:6d:6b:d2:
17:df:7e:b6:f6:1c:6f:bd:32:4d:0e:48:d0:4b:c7:
38:ce:a2:c7:00:78:d9:6e:9a:48:51:43:3f:17:db:
cb:1d:61:ab:33:d3:a3:ce:f4:ac:82:b6:40:bc:3d:
82:3b:df:f7:8d:86:63:ad:15:28:6f:58:ee:40:b5:
f9:18:af:78:71:96:bb:22:6e:f7:ec:e4:59:85:28:
1d:f5:ae:21:a9:e3:96:78:0a:59:65:cd:de:70:ac:
e4:a2:f1:8e:9c:ad:30:38:90:69:a2:56:31:9c:ab:
14:cc:39:26:b8:6d:22:6f:70:80:de:c7:79:4f:c9:
25:23:7e:e5:76:15:77:52:ff:6b:77:67:ec:79:b6:
b2:a3:57:5a:3e:a7:a4:51:d9:4c:78:4b:64:20:78:
b6:64:0c:31:b6:59:8f:f8:29:ae:9e:4f:3f:c5:8a:
d0:34:d6:d7:bb:9c:10:ab:e2:e5:f1:eb:06:e3:35:
d7:53:cf:8c:75:3b:3c:1b:78:2c:ed:11:35:ea:2f:
f1:69:3c:4c:25:a7:73:a5:88:79:2f:e1:e0:6e:4a:
82:48:f1:da:60:e1:8c:c3:88:cc:d0:ff:61:ef:d7:
36:8e:6f:db:cb:8f:6e:64:93:05:59:e8:5a:e9:33:
d8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:2A:CC:8B:68:C3:19:1E:34:D9:0B:0F:32:32:3B:BC:5A:C2:8C:14
X509v3 Authority Key Identifier:
keyid:8D:80:B4:54:55:D8:97:31:F8:7B:B5:3F:4D:BE:64:11:89:83:7D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:bc:ca:a9:57:bf:5f:de:e2:ce:cf:f1:b1:5f:e3:4e:27:e7:
a8:39:fc:64:95:c8:f8:76:a7:35:91:51:2c:cf:81:13:c0:d1:
f3:86:38:65:e0:2c:b4:02:70:8e:c8:1c:9e:97:c8:6b:12:c0:
aa:d8:0e:06:4d:d2:12:d7:9a:72:79:e4:58:cc:ca:5b:63:98:
f5:fa:42:f7:2d:23:7e:f5:3b:82:71:15:d0:d7:29:94:3e:b4:
cc:3c:bb:8c:f9:b1:2a:ec:6d:83:83:ce:0d:8c:09:9e:be:64:
80:53:b6:e7:41:c2:49:12:37:4d:82:01:b8:c9:b2:6f:4f:f4:
4c:6e:30:3d:a2:b9:f9:c5:fd:1e:90:fd:42:bb:6a:c2:26:cf:
ba:7a:c3:75:7a:85:e0:12:8d:bb:f8:28:dc:be:ad:73:42:76:
47:e3:70:78:e4:2e:5d:62:a4:bb:65:57:ec:9d:e6:78:e5:94:
b4:f2:ff:52:cb:71:4d:de:a3:aa:80:4a:c2:58:1e:bc:df:fe:
75:4d:c0:a1:3a:8d:bb:ee:b7:75:11:80:56:46:68:f0:82:f1:
11:82:c2:2c:86:fa:de:b5:60:f3:e5:38:f9:e3:24:2d:64:2a:
b9:13:2b:63:1f:64:45:5c:0d:58:11:08:e7:95:22:72:a4:cb:
9e:a8:53:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhGLQHh/Zm5vExJRpUSIBzFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkODBiNDU0NTVkODk3MzFmODdiYjUzZjRkYmU2NDExODk4
MzdkNGUwHhcNMjUwNzI2MTAwMDExWhcNMjUwNzI3MTAwMDExWjAzMTEwLwYDVQQD
Eyg4MjJhY2M4YjY4YzMxOTFlMzRkOTBiMGYzMjMyM2JiYzVhYzI4YzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FNMKJhTET/NwINta9IX33629hxv
vTJNDkjQS8c4zqLHAHjZbppIUUM/F9vLHWGrM9OjzvSsgrZAvD2CO9/3jYZjrRUo
b1juQLX5GK94cZa7Im737ORZhSgd9a4hqeOWeApZZc3ecKzkovGOnK0wOJBpolYx
nKsUzDkmuG0ib3CA3sd5T8klI37ldhV3Uv9rd2fsebayo1daPqekUdlMeEtkIHi2
ZAwxtlmP+Cmunk8/xYrQNNbXu5wQq+Ll8esG4zXXU8+MdTs8G3gs7RE16i/xaTxM
JadzpYh5L+HgbkqCSPHaYOGMw4jM0P9h79c2jm/by49uZJMFWeha6TPYvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIIqzItowxkeNNkLDzIyO7xawowUMB8GA1UdIwQY
MBaAFI2AtFRV2Jcx+Hu1P02+ZBGJg31OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvallDMFZGWFlsekg0ZTdVX1RiNWtFWW1EZlU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hZTBlNjgtYTNiNi00NjczLTgxZTct
MzgwZTViZGZhNWUwLzEvallDMFZGWFlsekg0ZTdVX1RiNWtFWW1EZlU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9hZTBlNjgtYTNiNi00NjczLTgxZTctMzgwZTViZGZhNWUw
LzEvallDMFZGWFlsekg0ZTdVX1RiNWtFWW1EZlU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARrzKqVe/
X97izs/xsV/jTifnqDn8ZJXI+HanNZFRLM+BE8DR84Y4ZeAstAJwjsgcnpfIaxLA
qtgOBk3SEteacnnkWMzKW2OY9fpC9y0jfvU7gnEV0NcplD60zDy7jPmxKuxtg4PO
DYwJnr5kgFO250HCSRI3TYIBuMmyb0/0TG4wPaK5+cX9HpD9QrtqwibPunrDdXqF
4BKNu/go3L6tc0J2R+NweOQuXWKku2VX7J3meOWUtPL/UstxTd6jqoBKwlgevN/+
dU3AoTqNu+63dRGAVkZo8ILxEYLCLIb63rVg8+U4+eMkLWQquRMrYx9kRVwNWBEI
55UicqTLnqhTQg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 19:58:17 2025 by rpki-client