Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft
File: jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft (raw, json)
Hash identifier: fpz+3KwQbCfOEsIgw/VekuQPbb2qPT47ZMwiuQAi22s=
Subject key identifier: 3F:88:60:0E:E9:8F:01:E4:81:31:01:71:6A:AE:E7:F0:AD:AA:95:E6
Authority key identifier: 8D:84:3B:57:D0:AF:CC:11:2F:E3:89:66:8B:F6:75:D8:0D:82:23:DA
Certificate issuer: /CN=8d843b57d0afcc112fe389668bf675d80d8223da
Certificate serial: 019A72937E686F1DD26243C073F329AB2B7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYQ7V9CvzBEv44lmi_Z12A2CI9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft
Manifest number: 0843
Signing time: Tue 11 Nov 2025 11:00:59 +0000
Manifest this update: Tue 11 Nov 2025 11:00:59 +0000
Manifest next update: Wed 12 Nov 2025 11:00:59 +0000
Files and hashes: 1: iKKb1X29tTU2k_RZJyC1P6S0W1I.roa (hash: JYbd5SDgMPm4EIN7ny/Mr7yif1cItUNdM4vZHpLmqsU=)
2: jYQ7V9CvzBEv44lmi_Z12A2CI9o.crl (hash: CWfC5s3JSrVUzYiRAuBsDSgc+miLS0HnPnpPHxOsSA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYQ7V9CvzBEv44lmi_Z12A2CI9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:7e:68:6f:1d:d2:62:43:c0:73:f3:29:ab:2b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d843b57d0afcc112fe389668bf675d80d8223da
Validity
Not Before: Nov 11 11:00:59 2025 GMT
Not After : Nov 12 11:00:59 2025 GMT
Subject: CN=3f88600ee98f01e4813101716aaee7f0adaa95e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a2:e5:e4:f6:2d:cb:21:56:c9:23:5c:2c:41:
1e:81:2e:e4:68:ae:8d:89:36:03:6a:44:13:d4:09:
c8:43:da:1b:6d:ec:eb:26:9e:27:af:9f:99:41:65:
79:d0:c9:c3:3d:20:92:f7:fc:23:86:72:f9:cc:fe:
47:e0:5a:3f:48:ed:8d:f0:1f:e2:9c:fc:6c:a6:7b:
90:c1:83:53:f8:c5:b5:09:cf:f1:99:17:82:ae:3c:
bc:28:90:b4:4e:11:e5:39:81:a6:44:e6:c9:28:4d:
e6:5d:93:a3:e6:cb:1a:c9:3d:8c:51:b3:52:10:f7:
b2:2d:6c:82:c5:eb:ae:4b:b1:83:dc:bc:4d:d8:23:
9e:b4:24:8c:7f:06:8e:b5:3e:df:40:9d:70:65:a4:
99:a6:9a:31:a3:b9:5c:0b:ee:ff:e6:9d:73:a2:53:
19:45:83:52:82:d9:41:0f:63:3d:8a:dc:a1:b0:be:
86:7c:87:a4:59:c1:ea:0b:e5:47:74:c0:99:93:00:
c6:af:3b:64:91:1b:a7:42:0b:79:6a:e8:92:08:4e:
5e:c9:99:96:af:fa:a9:f6:c9:22:46:bd:65:73:5b:
ce:d5:06:ea:84:5f:c5:8c:57:7f:c3:68:c9:0b:5a:
71:53:93:27:94:fb:3b:76:be:9f:e3:ea:d5:9b:9b:
ca:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:88:60:0E:E9:8F:01:E4:81:31:01:71:6A:AE:E7:F0:AD:AA:95:E6
X509v3 Authority Key Identifier:
keyid:8D:84:3B:57:D0:AF:CC:11:2F:E3:89:66:8B:F6:75:D8:0D:82:23:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYQ7V9CvzBEv44lmi_Z12A2CI9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:86:4b:3b:9f:76:bf:b0:73:02:b0:73:0e:8c:89:39:5a:bf:
81:6f:fd:87:7a:6b:fb:ea:0b:93:fe:2d:48:f8:43:6d:4c:4d:
98:2e:ee:1a:06:6e:ab:75:ce:c1:8c:35:e1:60:a2:ef:2e:d7:
52:57:3a:a3:b6:f7:df:1c:48:23:37:61:b4:e8:ad:43:93:75:
ee:e9:ae:31:ae:0c:33:c7:7b:70:ee:38:dc:4c:c3:a7:35:9d:
9c:b8:d4:3b:37:4f:3c:18:f2:ca:49:ad:da:50:13:8f:21:7e:
79:40:43:0e:53:11:3a:72:68:30:9c:53:af:0e:88:8b:8b:b7:
3a:7f:c7:ee:1b:a6:90:ad:af:89:61:c0:6d:5f:94:03:78:16:
1e:ca:90:1c:3c:39:13:c0:b8:f9:d7:f6:2e:f4:8a:1b:03:b2:
64:cf:59:21:a6:e3:80:10:81:42:40:21:36:b7:ac:8b:dc:8a:
0c:3b:0c:6b:fe:54:09:52:4f:ad:92:23:3a:43:8b:e8:c3:01:
c1:11:0c:23:58:3e:a4:0b:4f:c1:e1:d0:ec:6c:22:52:e0:8f:
d8:7f:2b:31:cd:1e:7e:0a:c1:96:02:0d:72:51:97:74:a2:18:
3a:72:41:b1:e7:d6:65:4d:b2:da:db:2e:2a:5c:c8:4d:a8:61:
12:81:31:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:11 2025 by rpki-client