Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft
File: jYhinjx4EKzCKOF6GNtnlOvtgZM.mft (raw, json)
Hash identifier: WLm+F0ZALpQRnOZxX+BmYpa3A1dpT3HLC7XWIAtvPqg=
Subject key identifier: 59:7C:36:4A:AD:4F:40:DA:BE:11:43:A6:C3:76:23:E8:21:8F:42:94
Authority key identifier: 8D:88:62:9E:3C:78:10:AC:C2:28:E1:7A:18:DB:67:94:EB:ED:81:93
Certificate issuer: /CN=8d88629e3c7810acc228e17a18db6794ebed8193
Certificate serial: 019A7149D028366D678C8CAB6B5CB6028372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYhinjx4EKzCKOF6GNtnlOvtgZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft
Manifest number: 13E2
Signing time: Tue 11 Nov 2025 05:00:54 +0000
Manifest this update: Tue 11 Nov 2025 05:00:54 +0000
Manifest next update: Wed 12 Nov 2025 05:00:54 +0000
Files and hashes: 1: ZBTvhiqTow3aNMb2aKed7aOmeLE.roa (hash: Hs63HPHm64omZRW3Iw+4oLNTtYpDyEs3J5diEPbkms4=)
2: jYhinjx4EKzCKOF6GNtnlOvtgZM.crl (hash: aPEYZLuL3sXnSF8pI4XivKZvb3+P/v4xGM+JtMNf0cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYhinjx4EKzCKOF6GNtnlOvtgZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:d0:28:36:6d:67:8c:8c:ab:6b:5c:b6:02:83:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d88629e3c7810acc228e17a18db6794ebed8193
Validity
Not Before: Nov 11 05:00:54 2025 GMT
Not After : Nov 12 05:00:54 2025 GMT
Subject: CN=597c364aad4f40dabe1143a6c37623e8218f4294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e1:40:fb:27:04:72:82:8f:1f:7d:6d:72:1b:
43:fd:ea:93:35:e3:63:90:11:7a:43:90:9c:f8:04:
cf:8f:fb:c1:49:78:d7:e6:d6:59:8a:cb:05:0b:50:
7f:e0:ac:86:16:f8:2b:1a:1f:cb:90:3d:14:a1:a9:
01:d3:51:c8:e1:48:09:c5:7c:88:cb:e7:4f:ed:5a:
17:38:c9:60:43:21:5d:78:fc:46:06:fb:dc:29:3d:
ab:7a:59:d0:8c:7b:f0:64:4a:14:41:f7:fc:97:82:
ee:4a:07:29:1e:7c:a6:5d:db:7e:10:42:d2:77:d9:
ea:c0:94:cd:dd:66:bf:b6:2d:c1:20:4d:e4:d5:5c:
d2:ea:6e:5c:06:2d:cc:be:a3:21:52:b0:7b:9b:a5:
d3:d8:2f:0e:33:e2:b7:ca:6d:ed:00:3d:0f:70:91:
d0:d5:6a:a8:f7:1c:6f:07:9d:c2:f4:81:2e:9e:ab:
50:67:a7:07:c1:2b:04:1e:d7:e2:e0:31:a2:0b:97:
a0:df:47:19:b3:ab:5f:66:2a:1a:43:81:47:06:51:
66:39:c2:f4:25:93:5b:63:9c:fc:43:88:04:98:43:
59:cc:5d:95:ed:a0:49:f1:32:75:fb:3b:c0:ec:70:
8c:0f:87:32:08:4f:eb:e8:3c:b0:d9:8c:11:33:a4:
41:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7C:36:4A:AD:4F:40:DA:BE:11:43:A6:C3:76:23:E8:21:8F:42:94
X509v3 Authority Key Identifier:
keyid:8D:88:62:9E:3C:78:10:AC:C2:28:E1:7A:18:DB:67:94:EB:ED:81:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYhinjx4EKzCKOF6GNtnlOvtgZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:68:8f:29:e9:42:e0:8d:af:cb:f3:56:4d:c3:96:a6:88:c1:
7a:6e:2f:62:cd:b6:ee:36:84:89:d0:9b:ad:f8:1c:87:3f:17:
39:a7:c5:45:e4:5e:10:8c:01:de:fd:2d:fa:60:a4:75:f2:cf:
bf:f4:ba:f1:5a:76:9f:d7:87:2d:ba:71:94:21:a8:7d:fd:4f:
ae:7e:0f:cc:5d:54:65:db:54:1b:03:b7:98:69:d1:26:58:62:
2b:67:bd:77:86:9e:b2:9e:18:18:6d:ff:db:8c:c5:59:bc:76:
a2:7d:54:d1:ba:fd:30:6e:52:8e:d4:a6:91:d7:26:f9:6b:d3:
01:a9:b3:a4:34:d9:33:40:32:72:b2:78:93:e9:dc:7a:a2:51:
19:07:3b:da:5e:b0:74:8b:12:d7:39:dd:cc:5c:ea:8b:89:10:
99:3d:0c:3b:21:a4:b0:78:44:21:a1:72:a3:7e:21:9c:22:43:
97:e0:2c:ad:ab:37:50:f6:de:84:81:92:dd:11:27:41:30:a5:
71:67:e1:d2:cb:9b:da:be:f6:95:da:3c:82:85:e5:5f:2d:7f:
cf:9f:8b:c5:09:72:9f:6d:60:8f:a5:8d:5f:2c:89:22:81:2f:
5a:ed:63:91:54:54:b7:cf:24:02:f1:c5:8a:18:62:5b:5f:9d:
31:49:7d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:34 2025 by rpki-client