Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
File: jYRATl-KSxF65E5z1TxE7N1Xg0I.mft (raw, json)
Hash identifier: YrxO8Ax4Did7u4lPZ3y/JQjUOxmz6DCZDGrk8JQcGRg=
Subject key identifier: 34:73:DF:48:57:3F:A8:1A:5E:03:25:56:0E:56:45:E9:4D:C4:6C:2D
Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
Certificate issuer: /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Certificate serial: 0199C7213661AF6081E44A0C51170CEA295C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
Manifest number: 16EB
Signing time: Thu 09 Oct 2025 04:01:06 +0000
Manifest this update: Thu 09 Oct 2025 04:01:06 +0000
Manifest next update: Fri 10 Oct 2025 04:01:06 +0000
Files and hashes: 1: 4F7q-ESPAcOoBaJ8HV_6ahTt-Uc.roa (hash: v234flYnQRm4nRbtw0jT7kDIHH0ZbwZkb6fqcE+qEL8=)
2: 7zJeCOLkCzcAkE6elAmsAfnqBrA.roa (hash: ZBwwSegU4XKbwNTWFofTTBLanZb/lF8bV9B75di1H3E=)
3: EPDe35N1azJEK8uok7-o_97sYh0.roa (hash: C38/gMZYXjRTrHa0PMtal6z5xQbsJ1VW9n35B2iBbfs=)
4: Mxsf5y7FP3EDBxgdyJxHG-OqVe0.roa (hash: ClWAIpLDh5pnWSp7TABzI9Qk+b3RsHPaiwstfKht6So=)
5: dDluN-ZW3m4A2qeeV1wHH5bu8tM.roa (hash: HIE3+ZZu9CT1HGuYfh7TMNitUjpb7aMhEYQpjqcPSJo=)
6: jYRATl-KSxF65E5z1TxE7N1Xg0I.crl (hash: 7WD22Pi57vTS8QpdD+aaa5VJTrpE/2l/ku/tYxsd/mY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c7:21:36:61:af:60:81:e4:4a:0c:51:17:0c:ea:29:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Validity
Not Before: Oct 9 04:01:06 2025 GMT
Not After : Oct 10 04:01:06 2025 GMT
Subject: CN=3473df48573fa81a5e0325560e5645e94dc46c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:38:b2:04:a0:46:8d:f4:69:ae:72:46:93:4f:
ba:3e:c2:0f:1e:43:39:d4:87:b1:80:4e:72:3f:85:
fe:a3:2e:35:21:6e:b8:8a:07:05:11:06:38:bf:ea:
b4:f0:61:b5:cf:52:c8:52:c3:49:92:fe:f6:de:a1:
15:1a:26:55:45:d5:cc:92:2a:54:e7:49:7a:fb:8d:
6e:9b:96:a0:e5:79:bd:a1:04:64:42:aa:31:ed:7a:
b2:75:ff:ab:68:dc:00:a0:fd:5e:15:0a:70:bd:37:
b2:93:07:32:bc:f7:6c:31:a6:6d:65:95:a1:be:ff:
b6:be:72:1b:e5:3e:ef:fd:72:6a:a1:f1:fe:ce:32:
dc:c5:be:e2:4a:b4:50:3c:94:fc:40:5f:73:8e:ea:
97:37:db:00:c6:df:38:ac:5c:68:cc:86:d8:91:ec:
1d:e3:1c:fc:47:39:0a:ed:09:de:55:a6:e8:59:22:
d7:36:ed:4e:09:cb:bf:df:1f:78:c8:87:85:9c:8d:
81:5f:b5:dc:75:fd:7b:e1:3f:f7:02:48:99:50:6c:
5d:0b:89:39:83:23:76:61:bd:66:c1:d6:a2:fe:31:
ba:ad:a6:33:e5:f1:12:23:60:22:77:78:b2:db:c7:
39:dd:52:4c:9c:55:20:39:5e:35:c9:66:d7:51:ba:
9b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:73:DF:48:57:3F:A8:1A:5E:03:25:56:0E:56:45:E9:4D:C4:6C:2D
X509v3 Authority Key Identifier:
keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:c0:ee:67:8e:63:a2:15:14:d0:59:40:a8:16:31:4e:8a:a1:
3a:91:3e:0e:a5:63:07:3a:8d:41:49:23:c4:bc:f9:f0:19:8d:
11:08:63:37:11:2a:16:3a:dd:29:b3:ba:7b:0b:ae:73:10:09:
70:5b:eb:bf:0f:7d:eb:a2:cc:2a:b0:eb:7c:60:13:3c:6c:0d:
f5:87:a3:fb:7c:fe:90:9b:0d:26:56:9a:1e:42:4a:46:0e:75:
15:99:83:39:8c:f0:8e:4b:00:92:e9:57:b0:9f:c5:f6:df:bb:
24:62:bc:66:f5:9b:af:5c:a4:60:32:5f:9d:da:a8:6a:1a:ce:
9e:b4:8c:eb:ef:04:15:1b:f6:52:df:d4:d8:cf:5a:62:20:47:
4f:b4:c7:ee:67:fe:99:56:97:e0:14:cb:21:84:f8:7c:e0:37:
28:9d:b4:52:7a:71:7f:2b:86:13:18:5c:47:b8:6b:b5:cc:44:
e8:cc:25:7b:21:94:60:82:e0:6f:b8:41:5c:a4:8b:7c:f3:12:
d1:e9:03:cb:fb:0a:39:fc:4b:06:e7:ac:60:00:cc:16:66:17:
09:86:c6:40:19:0e:3e:b3:50:f3:37:2b:12:21:ee:27:91:68:
aa:f1:71:28:13:59:c2:37:e1:f3:cf:50:81:e9:fc:9b:f0:ff:
df:41:8e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:43:29 2025 by rpki-client