Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft
File: JY9ajila0de0ih4RlYeQBStXolM.mft (raw, json)
Hash identifier: /WAEQ7bnf0QeKWb/VHXXA3fKs1Zpz79Yzk43FgtnxGg=
Subject key identifier: 32:BE:1A:AE:02:00:AD:21:D8:60:DD:14:D0:D0:3C:31:FD:31:21:A6
Authority key identifier: 25:8F:5A:8E:29:5A:D1:D7:B4:8A:1E:11:95:87:90:05:2B:57:A2:53
Certificate issuer: /CN=258f5a8e295ad1d7b48a1e11958790052b57a253
Certificate serial: 0199270E07BC65A3C1C10A83BEDD90A89321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft
Manifest number: 15CB
Signing time: Mon 08 Sep 2025 02:00:54 +0000
Manifest this update: Mon 08 Sep 2025 02:00:54 +0000
Manifest next update: Tue 09 Sep 2025 02:00:54 +0000
Files and hashes: 1: HL0tpswU2gQezd0-x9ZWDdfR-RY.roa (hash: NAIPlF1KgdG7sggbmAwv2GRB6aTgtE/arOeqKYJF690=)
2: JY9ajila0de0ih4RlYeQBStXolM.crl (hash: bKgdpev5RCkJNwyk4gldT9XNljw2FzY9n+ZP09xiWDg=)
3: X5-jl_Od0mEO_dSg7rALYkevjoQ.roa (hash: xqc4fnPLjvYYKZxEv5pbNLPSZEhrMf7SnWN3fQ6sCO8=)
4: ljF5u-YRkQFhR1-JzkqgY4rX8fg.roa (hash: yARJg/r5KzAJTCBC6Aa8YbBreZ5SqvZOXFrSvclMQ38=)
5: s_QDIrLshBQNlu6RPwCemGYvy74.roa (hash: 6Y18bq+vtApdDZHTDEQgo5JwDFt4pJR0lVY1yqjzjsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:0e:07:bc:65:a3:c1:c1:0a:83:be:dd:90:a8:93:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=258f5a8e295ad1d7b48a1e11958790052b57a253
Validity
Not Before: Sep 8 02:00:54 2025 GMT
Not After : Sep 9 02:00:54 2025 GMT
Subject: CN=32be1aae0200ad21d860dd14d0d03c31fd3121a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ef:b4:6b:41:56:36:e1:7d:36:ed:8e:63:f9:
87:6c:7c:e4:dd:61:17:56:11:1d:3c:fe:8d:3a:8e:
45:39:5b:c9:95:c8:5d:54:34:01:89:c0:aa:42:de:
8a:97:2e:4a:96:6c:96:eb:9c:5e:99:f0:9c:70:a5:
06:00:22:a8:9c:c8:95:62:9a:a0:ae:67:f8:6e:d3:
82:92:ed:21:7b:34:36:1a:45:8f:a6:77:b5:de:0f:
94:bb:ba:22:3b:8f:8c:32:52:a1:17:bf:6e:76:38:
34:01:d1:ad:b3:7e:8f:d3:41:90:30:2f:e1:a4:46:
c1:a4:57:83:7c:c0:cc:3e:90:39:80:33:6c:ee:f4:
1a:82:59:55:84:b7:3b:c9:e7:ca:98:e7:e2:99:df:
33:0f:cd:7a:49:f3:2c:08:d3:12:82:23:62:5d:15:
55:c9:23:1e:54:10:e5:15:6b:c1:98:67:39:d0:98:
a6:50:d6:72:f9:6f:2b:8e:bb:30:be:c6:e2:43:1e:
a4:5f:ef:94:24:49:d6:7b:50:11:04:00:5f:47:73:
21:32:74:ea:1a:78:aa:1c:e3:6d:2b:f1:c2:4f:28:
c6:de:e0:25:44:d9:da:1e:b9:ca:0d:75:84:17:1f:
c2:90:10:1c:45:be:00:b4:39:2e:cf:f2:bb:36:0e:
4e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BE:1A:AE:02:00:AD:21:D8:60:DD:14:D0:D0:3C:31:FD:31:21:A6
X509v3 Authority Key Identifier:
keyid:25:8F:5A:8E:29:5A:D1:D7:B4:8A:1E:11:95:87:90:05:2B:57:A2:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:be:79:01:16:59:6c:9c:f3:bb:d7:46:8f:1d:b3:d6:24:c4:
0d:ce:ec:e7:03:c6:4c:28:c0:6c:0d:d3:69:1c:6f:9e:76:cd:
96:72:8f:c1:1b:ad:2e:7a:c8:97:82:c6:80:c9:6f:41:66:79:
2f:0f:04:5b:8a:ae:9e:48:80:88:ba:74:5d:b6:04:ed:96:32:
0d:12:7b:af:37:c5:a1:c0:b6:d2:50:d2:8c:1c:62:70:ed:05:
95:d2:00:00:1c:c7:75:c7:27:26:de:01:ce:6a:3c:f4:a9:bf:
a6:89:4e:5c:f7:a5:2d:84:95:53:9a:54:d9:69:68:b3:4a:56:
24:bb:59:0e:16:ee:59:2a:6c:1c:1e:3a:98:90:61:4b:70:26:
a5:09:54:45:7a:29:cc:7d:81:a6:f8:2b:b7:4a:3e:f0:18:7d:
88:53:b9:2b:f9:d5:05:1e:5f:41:d7:e1:d8:9b:96:37:d6:58:
ea:ec:24:51:2d:7c:43:a9:6d:c7:45:1e:25:8e:b4:ff:16:4c:
2b:d6:b1:05:7f:c5:74:45:bd:63:59:72:40:c2:f2:93:32:38:
c9:86:d7:fa:78:f1:72:09:71:a9:d4:c8:8b:db:f8:71:28:b3:
44:5d:9d:5d:f8:a8:d6:68:c5:70:4e:66:7b:ef:71:e4:3a:87:
d1:28:b4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:41:36 2025 by rpki-client