Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
File: jaYOkADHWnXWfjf-B7FOB7IsWIc.mft (raw, json)
Hash identifier: VYFcQMbKqIjr3nbLrwS2wQ4fcDNXMBy7Mjtf949v6XA=
Subject key identifier: C9:24:2F:E4:DB:5E:B0:87:0A:DB:2C:12:1A:DB:01:B6:A8:71:AF:C9
Authority key identifier: 8D:A6:0E:90:00:C7:5A:75:D6:7E:37:FE:07:B1:4E:07:B2:2C:58:87
Certificate issuer: /CN=8da60e9000c75a75d67e37fe07b14e07b22c5887
Certificate serial: 019A30B34B52397A22E2345CF9CBED9B3407
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
Manifest number: 1701
Signing time: Wed 29 Oct 2025 16:00:47 +0000
Manifest this update: Wed 29 Oct 2025 16:00:47 +0000
Manifest next update: Thu 30 Oct 2025 16:00:47 +0000
Files and hashes: 1: E9oFZpR0WuPEurk0UT599s3KKDk.roa (hash: Q0OtGh8qvr0qOtsRaXw0h+Pv9ovyY05P3QKCE0xqR6U=)
2: jaYOkADHWnXWfjf-B7FOB7IsWIc.crl (hash: 2xdc9p4DvaepupBwf8uB8gG/2aXCZgq6KoVMLZDpiQE=)
3: rhwM13yb7i-t6Ly0MQtbcj3bZd8.roa (hash: rGHoCJ+25kyVkfObLSePRMqiDDa8j9R9c6PT4fGFhmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 16:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:b3:4b:52:39:7a:22:e2:34:5c:f9:cb:ed:9b:34:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da60e9000c75a75d67e37fe07b14e07b22c5887
Validity
Not Before: Oct 29 16:00:47 2025 GMT
Not After : Oct 30 16:00:47 2025 GMT
Subject: CN=c9242fe4db5eb0870adb2c121adb01b6a871afc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:53:c9:cb:bd:d9:26:62:78:c1:41:37:b4:fa:
44:ff:42:99:63:7e:46:d1:ea:3c:46:d4:6d:f5:ab:
af:d2:da:88:31:a4:8b:6e:a1:17:0a:2d:5a:b3:fc:
2d:b2:11:41:ab:a5:80:ab:23:41:84:a3:69:3a:a5:
61:46:0f:e9:56:40:1c:e5:6d:b0:f4:c5:b6:76:b6:
41:91:96:2c:c5:3c:27:20:4e:81:a4:e8:0f:33:d9:
6f:86:2b:1b:f5:20:f3:09:d0:e5:e0:e4:61:54:01:
ea:89:f0:2c:4a:72:f1:44:05:74:99:0e:fa:9a:be:
54:b2:b8:50:9b:b3:20:28:9b:07:3f:a9:34:10:37:
e1:e5:3b:56:c4:24:31:20:dd:aa:a0:e3:52:a5:c9:
c1:e9:40:b2:ef:61:41:c3:e7:1b:af:35:f3:ea:80:
ab:77:71:9d:46:b5:62:e0:4f:ea:b0:91:83:fa:3c:
db:f7:d0:be:7e:bd:bc:ba:2f:4c:9f:b9:b4:7c:92:
1f:e4:6f:83:26:a0:9a:86:38:dc:42:97:38:ba:85:
76:46:9e:ac:50:31:4e:f0:ae:7d:95:9c:bc:6f:0a:
a1:61:e2:f9:c5:86:2f:e9:a2:8c:f3:f4:5d:26:dc:
21:d9:f0:88:38:5a:df:8b:7d:30:ad:90:9c:18:a1:
fd:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:24:2F:E4:DB:5E:B0:87:0A:DB:2C:12:1A:DB:01:B6:A8:71:AF:C9
X509v3 Authority Key Identifier:
keyid:8D:A6:0E:90:00:C7:5A:75:D6:7E:37:FE:07:B1:4E:07:B2:2C:58:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaYOkADHWnXWfjf-B7FOB7IsWIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/72806a-0394-4ad5-8e04-b5b8d02448b8/1/jaYOkADHWnXWfjf-B7FOB7IsWIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:71:a1:5e:a2:3e:8a:80:6f:84:fe:00:0e:74:3c:4b:50:45:
32:80:7c:12:27:55:19:4f:5a:9d:57:ab:6a:7b:34:26:3c:1e:
c0:df:8e:c5:8b:27:57:25:98:be:95:1c:63:68:0b:e5:fb:fa:
f3:c0:16:38:bb:bf:6b:31:86:8e:a3:7e:07:95:60:b7:5c:fb:
ab:4c:e9:61:24:ff:88:93:82:1f:f4:bc:7b:81:56:5a:24:e8:
70:f8:6b:8f:d6:65:6a:7a:cd:bf:c9:aa:96:a2:ac:e9:27:ed:
1a:66:c7:b3:99:2f:fd:39:dd:1c:3a:f4:fc:34:f3:bc:76:a9:
bb:9b:a1:34:ec:0e:9f:a5:85:68:aa:7b:a4:4c:36:f5:fd:3c:
11:41:8b:4c:bd:25:02:ad:f1:28:cb:eb:b4:0c:3f:c3:f8:34:
30:2f:d7:3f:dc:3f:fb:03:57:6e:78:cf:9c:d9:b7:57:08:ed:
fa:26:62:d4:a2:f5:74:9f:b0:03:f6:05:f3:5f:d8:d2:89:10:
d2:8b:91:a4:54:f3:72:e7:7b:ad:75:b9:79:5a:c7:03:98:f4:
f5:00:8f:2c:0e:08:d9:d2:91:3f:1a:25:2e:f9:0b:f5:25:b4:
7e:a1:23:35:7a:10:37:be:92:51:45:39:3a:e1:e3:5a:8e:a5:
27:41:a8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 20:23:54 2025 by rpki-client