Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
File: yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft (raw, json)
Hash identifier: EDf6SZc/1Dx+9XK5U/lrDFDWOD6rCq9MyzyC5AcM6Tc=
Subject key identifier: A0:5E:1C:A2:02:32:9B:11:98:DA:64:6D:37:C7:92:E8:80:2B:6F:ED
Authority key identifier: CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D
Certificate issuer: /CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d
Certificate serial: 0199C457856F68640141948A12DDE9C8873F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
Manifest number: 0332
Signing time: Wed 08 Oct 2025 15:01:34 +0000
Manifest this update: Wed 08 Oct 2025 15:01:34 +0000
Manifest next update: Thu 09 Oct 2025 15:01:34 +0000
Files and hashes: 1: Jsf76Or5KR0tYVQe-qvm1Pz7D2M.roa (hash: ZyYh0ODppDUprYuNAsV1hqE/g7ygxL4G0rExXkHsi7w=)
2: LqnNExPECBrLWHZxipr7utM__10.roa (hash: QeICuemiifdBQ/Uxih/96nvmASg2fqvcs1N4t08aYZ0=)
3: fManrGWJ4cziBJd2N53MaaXcO5U.roa (hash: 1HbBr3n5RhMX5ebKQ4Wl4Fo2wqO2/4k1Zllc2/89+JE=)
4: yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl (hash: 5m0FB1AJEK0M7ZnLveHllg/R5Kzarmge3h5/CrCWjNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:57:85:6f:68:64:01:41:94:8a:12:dd:e9:c8:87:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca35f54a3b0e2e48dd5efb3624c1fe0e85fe261d
Validity
Not Before: Oct 8 15:01:34 2025 GMT
Not After : Oct 9 15:01:34 2025 GMT
Subject: CN=a05e1ca202329b1198da646d37c792e8802b6fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:39:ed:ba:4c:ef:73:1e:22:ed:a2:72:36:e3:
98:36:c6:77:4f:32:2e:3d:5c:be:e7:36:cd:d9:f2:
62:ad:43:55:16:69:b2:38:d7:1f:e3:0e:97:2b:cd:
45:64:e8:0a:8d:96:9a:4a:4e:e9:90:c5:8b:87:5c:
bb:d8:93:f6:01:58:3b:30:0c:33:3a:3b:83:06:63:
21:b1:7a:8d:99:ff:4a:e9:d6:a6:74:d5:7e:bb:bb:
96:fa:c7:47:09:10:7d:56:63:fd:d6:54:96:f5:94:
be:d1:cf:85:05:bb:3d:ed:7a:e4:03:3f:6d:b5:6d:
47:1c:ab:fd:ef:41:fe:ad:4d:4c:41:a2:9d:f4:40:
c4:ee:25:54:e3:f7:5c:66:98:48:ec:38:10:47:ec:
57:20:fd:25:c4:f5:30:b3:a5:d7:a7:40:63:dd:f2:
c9:63:3e:df:87:d8:dc:0a:33:54:8a:07:98:1d:fb:
59:7d:af:34:28:be:cd:a7:98:55:cf:7e:27:90:af:
cd:3a:76:1c:43:b0:5e:3d:7f:53:70:a5:ad:19:36:
54:22:ba:4b:2c:87:02:10:0a:c9:0a:eb:53:05:e4:
9a:d9:b0:d8:c1:ec:82:82:ce:28:cf:ea:19:22:55:
40:6d:e4:a9:c5:5d:27:e4:04:f6:4a:ed:06:76:4d:
6e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:5E:1C:A2:02:32:9B:11:98:DA:64:6D:37:C7:92:E8:80:2B:6F:ED
X509v3 Authority Key Identifier:
keyid:CA:35:F5:4A:3B:0E:2E:48:DD:5E:FB:36:24:C1:FE:0E:85:FE:26:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/yjX1SjsOLkjdXvs2JMH-DoX-Jh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d7:91:b3:41:a1:36:ca:85:77:32:e8:05:7f:15:fe:f5:6a:
7f:8f:3d:62:4f:b8:03:68:29:0d:2d:88:58:22:99:c0:09:66:
42:3d:b0:b4:b9:0a:c9:2f:b5:ae:d2:85:eb:2b:76:5f:64:54:
0d:db:7d:79:06:8d:bc:6a:f0:ac:18:c3:c3:ce:e0:b4:72:f8:
db:3a:2d:3f:ef:42:c8:62:7c:60:cc:53:43:9e:71:ce:93:62:
34:f7:45:1e:b8:41:7e:8c:11:a5:86:2f:99:8d:c2:0f:a3:71:
07:7e:e1:6a:4c:99:c3:2f:a1:49:5c:bb:1f:76:07:96:c2:ef:
ad:a1:86:d7:27:5b:6b:91:fc:ce:dd:bd:82:6e:c5:a7:f8:9b:
31:67:6c:75:42:b7:3a:9a:c0:7e:61:ee:ac:71:ba:58:89:fe:
c8:ba:92:f2:1c:3e:dd:fc:a1:fa:65:fb:aa:33:ae:f5:f8:9d:
cd:1e:4f:3f:65:2b:cd:20:d3:50:63:6a:ef:6c:70:13:bc:41:
aa:7c:76:2d:c9:53:ad:aa:43:1b:68:fa:84:9f:bd:95:7c:30:
13:a5:ba:c7:c2:7b:a0:ef:5f:e9:a4:1a:a9:f6:d2:6c:0f:ed:
2a:be:f6:25:1d:f1:7a:57:4b:00:73:2b:50:26:32:d6:8f:58:
c8:bd:da:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:21:56 2025 by rpki-client