Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft
File: jygQkMQApWFm_Ii083pcuu0hhfA.mft (raw, json)
Hash identifier: JlICmBGXK0ne7kyorzlVaaySlOcHxj+sMXBYfTAxltM=
Subject key identifier: 6C:02:B0:F0:7A:23:7D:51:E8:D0:8A:B6:23:4F:51:69:88:43:87:24
Authority key identifier: 8F:28:10:90:C4:00:A5:61:66:FC:88:B4:F3:7A:5C:BA:ED:21:85:F0
Certificate issuer: /CN=8f281090c400a56166fc88b4f37a5cbaed2185f0
Certificate serial: 019847768E7DD05D1B7D0099001E01BE204C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jygQkMQApWFm_Ii083pcuu0hhfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 16:00:08 +0000
Manifest this update: Sat 26 Jul 2025 16:00:08 +0000
Manifest next update: Sun 27 Jul 2025 16:00:08 +0000
Files and hashes: 1: 7XUdeR7Uiqy2nX_SzaBAY10QtF0.roa (hash: NZuDg+MfyuXfdZEwhDepOr5DFbg1lkCScWpvXsHFUtQ=)
2: jygQkMQApWFm_Ii083pcuu0hhfA.crl (hash: Drr/u9bof0UUe/pw2fC0tAhqstzMgY0XNflvmgFkzK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jygQkMQApWFm_Ii083pcuu0hhfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:8e:7d:d0:5d:1b:7d:00:99:00:1e:01:be:20:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f281090c400a56166fc88b4f37a5cbaed2185f0
Validity
Not Before: Jul 26 16:00:08 2025 GMT
Not After : Jul 27 16:00:08 2025 GMT
Subject: CN=6c02b0f07a237d51e8d08ab6234f516988438724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f7:dc:2a:4d:3f:d0:33:6b:3b:ca:e4:42:ab:
ea:ae:da:63:ed:3b:59:9c:65:96:b0:4c:4b:4e:5f:
6a:3b:10:f9:28:7a:da:e8:7a:30:17:c5:da:cc:1e:
ee:ef:e1:74:75:3d:de:8b:f1:9a:f3:d9:49:12:be:
03:fd:99:5f:cd:27:c5:d8:a2:14:2e:64:5b:e6:32:
cd:98:6c:e6:8f:17:d1:ad:38:86:69:17:20:06:63:
de:9f:40:5b:31:48:58:e7:0d:30:a8:a6:35:a5:5b:
17:fe:00:6d:cb:d7:df:64:27:ba:cf:81:64:52:b9:
8a:22:2f:b8:6f:f2:f2:35:3d:4c:48:37:65:9b:cf:
7a:24:6e:88:ba:80:63:93:69:52:5e:5e:cf:f5:13:
c1:28:e9:50:ac:1b:d7:88:3b:ea:29:a5:e1:c9:95:
88:d9:5c:e7:fe:1b:e7:d0:17:38:36:7a:62:41:64:
f1:ae:75:6b:98:61:d2:a2:31:04:cf:65:c6:53:a4:
f2:3d:50:f2:29:4b:d1:59:6e:8d:a5:f3:07:9a:ce:
f5:42:08:b1:8b:f3:d4:ee:84:1a:a9:4d:71:bc:cf:
64:77:0a:00:b2:37:af:8f:e6:12:f6:7b:20:00:c8:
f5:66:84:01:6c:1e:30:c2:29:17:b0:01:a1:e7:89:
1a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:02:B0:F0:7A:23:7D:51:E8:D0:8A:B6:23:4F:51:69:88:43:87:24
X509v3 Authority Key Identifier:
keyid:8F:28:10:90:C4:00:A5:61:66:FC:88:B4:F3:7A:5C:BA:ED:21:85:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jygQkMQApWFm_Ii083pcuu0hhfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:eb:e0:65:0a:83:7c:03:b4:f7:41:09:d0:e8:d0:53:53:61:
64:1b:9d:f2:c5:bd:ee:96:fd:df:d3:f2:1b:80:0e:c3:77:c1:
96:8c:56:9b:a0:7e:eb:d3:e8:95:38:7b:bb:3f:a1:28:0a:0d:
ba:96:cc:f4:ec:cf:d0:43:50:c8:ae:5c:8e:06:75:d5:fc:57:
1c:e7:a8:59:b2:73:dc:35:23:41:76:dd:2e:4e:4f:46:4e:f1:
27:ec:f6:ee:d4:ab:ca:e5:fa:43:9f:fc:fd:4f:ad:7f:93:cb:
48:c4:a0:25:57:ed:0f:14:45:de:20:18:80:25:fc:a1:51:6c:
59:e1:78:e1:dd:6c:f2:d6:14:be:4d:69:8d:9a:ea:52:3c:be:
6a:5a:0e:a8:b6:77:d3:88:95:5a:5d:b6:a7:16:e0:8a:c7:e7:
43:48:cb:80:52:86:f5:f6:43:ae:9f:3f:ad:35:5e:2f:aa:f7:
79:54:2d:f9:a4:01:ff:00:47:22:62:26:af:de:f5:b7:80:8e:
ed:f6:55:7a:c3:c4:74:3a:af:60:70:5e:42:ff:65:3f:79:e7:
ec:cc:51:e3:85:54:ed:56:18:1a:dd:f7:9e:96:6c:fa:50:a5:
24:e0:46:8f:af:67:42:b0:43:23:75:a7:16:d3:f9:fa:60:22:
ea:d2:ae:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHdo590F0bfQCZAB4BviBMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMjgxMDkwYzQwMGE1NjE2NmZjODhiNGYzN2E1Y2JhZWQy
MTg1ZjAwHhcNMjUwNzI2MTYwMDA4WhcNMjUwNzI3MTYwMDA4WjAzMTEwLwYDVQQD
Eyg2YzAyYjBmMDdhMjM3ZDUxZThkMDhhYjYyMzRmNTE2OTg4NDM4NzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxffcKk0/0DNrO8rkQqvqrtpj7TtZ
nGWWsExLTl9qOxD5KHra6HowF8XazB7u7+F0dT3ei/Ga89lJEr4D/ZlfzSfF2KIU
LmRb5jLNmGzmjxfRrTiGaRcgBmPen0BbMUhY5w0wqKY1pVsX/gBty9ffZCe6z4Fk
UrmKIi+4b/LyNT1MSDdlm896JG6IuoBjk2lSXl7P9RPBKOlQrBvXiDvqKaXhyZWI
2Vzn/hvn0Bc4NnpiQWTxrnVrmGHSojEEz2XGU6TyPVDyKUvRWW6NpfMHms71Qgix
i/PU7oQaqU1xvM9kdwoAsjevj+YS9nsgAMj1ZoQBbB4wwikXsAGh54ka2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGwCsPB6I31R6NCKtiNPUWmIQ4ckMB8GA1UdIwQY
MBaAFI8oEJDEAKVhZvyItPN6XLrtIYXwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanlnUWtNUUFwV0ZtX0lpMDgzcGN1dTBoaGZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8zMjIyZTItNjQ1Ni00YzZhLWIxOTct
MjA1ODk1OTYxNDkzLzEvanlnUWtNUUFwV0ZtX0lpMDgzcGN1dTBoaGZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8zMjIyZTItNjQ1Ni00YzZhLWIxOTctMjA1ODk1OTYxNDkz
LzEvanlnUWtNUUFwV0ZtX0lpMDgzcGN1dTBoaGZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc+vgZQqD
fAO090EJ0OjQU1NhZBud8sW97pb939PyG4AOw3fBloxWm6B+69PolTh7uz+hKAoN
upbM9OzP0ENQyK5cjgZ11fxXHOeoWbJz3DUjQXbdLk5PRk7xJ+z27tSryuX6Q5/8
/U+tf5PLSMSgJVftDxRF3iAYgCX8oVFsWeF44d1s8tYUvk1pjZrqUjy+aloOqLZ3
04iVWl22pxbgisfnQ0jLgFKG9fZDrp8/rTVeL6r3eVQt+aQB/wBHImImr971t4CO
7fZVesPEdDqvYHBeQv9lP3nn7MxR44VU7VYYGt33npZs+lClJOBGj69nQrBDI3Wn
FtP5+mAi6tKuQg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 21:11:13 2025 by rpki-client