Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
File: jYkiPB8zXAzFaTWfot2jSaIjbMs.mft (raw, json)
Hash identifier: vx0401EGaETdU5HyaoXSX7FY4BkNBKYbtptr4NK8EOA=
Subject key identifier: F4:A5:55:50:E6:54:19:C3:A9:61:FE:81:68:F9:D2:A0:A6:04:C3:FC
Authority key identifier: 8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
Certificate issuer: /CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Certificate serial: 0198383A74140FCD13E4B61E96EB86779249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
Manifest number: 0FC0
Signing time: Wed 23 Jul 2025 17:00:11 +0000
Manifest this update: Wed 23 Jul 2025 17:00:11 +0000
Manifest next update: Thu 24 Jul 2025 17:00:11 +0000
Files and hashes: 1: 1-VympxjBDWi5MNPd5PqkAiFK8cw.roa (hash: g9oAglIOu05tbBj4MBirO8ol3RXV21sLtMa1CGtPD7w=)
2: Xb2vaf1WumE3rEaoURHut1_s3Jg.roa (hash: nAy8xAAS6bySEPJLqhsAFhoLRm4dRlqUVQKPoHtpfZc=)
3: jYkiPB8zXAzFaTWfot2jSaIjbMs.crl (hash: xArlKR7/Dg7cd2kAxgpKxQoXbQhllGE/ziMmmzOkgQc=)
4: x-ypFNam44Ex8bmMEi_YpNw0fuw.roa (hash: tV3tXNlddvZJeiOgiT78kd/ynwSRXH2x5HrUpgSwbwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 14:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:38:3a:74:14:0f:cd:13:e4:b6:1e:96:eb:86:77:92:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Validity
Not Before: Jul 23 17:00:11 2025 GMT
Not After : Jul 24 17:00:11 2025 GMT
Subject: CN=f4a55550e65419c3a961fe8168f9d2a0a604c3fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5e:f8:16:0e:5e:e2:c3:1d:07:87:92:c8:4b:
58:f5:a5:89:d6:18:61:13:8b:50:87:83:5e:b5:a0:
dc:c9:a0:b3:83:68:a4:d3:6d:cc:ab:0b:ee:9b:e1:
29:da:69:c4:80:cf:af:ca:d0:61:7e:c5:0f:67:ee:
16:ab:40:5c:14:f8:54:07:8c:0e:e8:1f:3f:72:40:
cb:07:7b:8b:36:58:65:a7:ba:b2:27:fe:e4:40:a7:
38:6b:5b:fe:cc:1a:d7:20:4c:60:0d:da:d0:3d:1e:
93:a0:ec:cd:85:60:20:e3:e6:d0:f4:0d:8f:6c:d7:
fe:9b:c8:15:e5:26:c8:ed:70:4c:c1:cb:97:61:18:
eb:a5:f9:a5:35:55:84:35:b3:5b:6b:7c:c8:53:29:
3f:06:c7:5a:cc:7d:1b:2f:be:db:6b:5a:79:59:c2:
84:34:fa:e6:d1:0c:d1:c0:a9:d6:50:e2:f0:67:e8:
bf:7f:c2:05:da:8d:34:34:a2:53:25:4c:73:86:d7:
3f:3d:43:ec:a7:70:e4:a1:a0:83:bc:41:48:09:2b:
0e:dd:68:22:81:03:42:0f:91:3c:0c:b2:65:7b:c7:
43:eb:d4:23:fa:87:9b:7c:eb:90:a6:c2:6b:2f:b9:
a5:42:3e:f5:31:d5:2e:67:91:46:16:f8:bc:d2:2e:
50:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A5:55:50:E6:54:19:C3:A9:61:FE:81:68:F9:D2:A0:A6:04:C3:FC
X509v3 Authority Key Identifier:
keyid:8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:07:8e:60:d0:f5:3c:1c:b6:bd:d6:bb:23:e8:7b:8a:b0:35:
9a:ef:bb:6e:ec:8a:19:44:d8:3e:46:bc:40:c0:0a:13:c2:b2:
ee:4f:b1:d7:b8:04:d4:d9:9c:81:b8:8a:68:69:c3:72:33:89:
73:7a:d8:82:92:b2:e2:f9:87:9b:7d:0c:14:2a:79:0f:ca:fe:
f5:09:41:60:13:ec:85:92:53:51:15:d7:f9:cd:b1:c6:8c:65:
7f:bc:92:20:26:8d:5b:13:61:93:5c:da:64:0a:ac:10:60:70:
e3:52:56:ba:c8:8a:a2:62:cc:c6:5c:fc:43:e2:b3:a8:21:ac:
54:bf:05:28:51:18:65:aa:dd:74:64:9b:44:b7:94:70:0a:81:
42:43:0c:04:d1:ee:e9:39:46:c2:3d:5a:d1:fe:0b:6b:3a:89:
7c:1f:dc:41:5e:df:b3:75:fa:72:c2:70:ce:76:32:e9:37:62:
1f:8b:86:85:66:bb:2c:76:bf:c1:49:1e:b1:07:48:a9:2a:c7:
dd:77:c2:97:89:33:0e:df:9c:7d:c4:10:43:82:8a:81:64:00:
64:79:ad:f4:37:ed:f3:d0:15:54:46:86:9d:85:bb:a2:0f:da:
8b:a4:24:80:9a:49:ac:64:5b:88:dd:69:f1:24:c4:23:fb:98:
7e:37:83:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:41:12 2025 by rpki-client