Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft
File: JY9ajila0de0ih4RlYeQBStXolM.mft (raw, json)
Hash identifier: ytb4Zaj0JZXwIfJhc4G+MVaLP6e8gLssh8PzhaqAwS4=
Subject key identifier: F9:A8:08:ED:32:B5:A0:29:AD:4E:8A:55:A3:9E:3B:06:C6:69:82:4F
Authority key identifier: 25:8F:5A:8E:29:5A:D1:D7:B4:8A:1E:11:95:87:90:05:2B:57:A2:53
Certificate issuer: /CN=258f5a8e295ad1d7b48a1e11958790052b57a253
Certificate serial: 019A7338320CA2BB619E21BF1ED83A2C364E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft
Manifest number: 1677
Signing time: Tue 11 Nov 2025 14:00:53 +0000
Manifest this update: Tue 11 Nov 2025 14:00:53 +0000
Manifest next update: Wed 12 Nov 2025 14:00:53 +0000
Files and hashes: 1: HL0tpswU2gQezd0-x9ZWDdfR-RY.roa (hash: NAIPlF1KgdG7sggbmAwv2GRB6aTgtE/arOeqKYJF690=)
2: JY9ajila0de0ih4RlYeQBStXolM.crl (hash: zQ4AUyim/NwA9JCULW03lmu7/GYfeQLO+Aukhre+zUs=)
3: X5-jl_Od0mEO_dSg7rALYkevjoQ.roa (hash: xqc4fnPLjvYYKZxEv5pbNLPSZEhrMf7SnWN3fQ6sCO8=)
4: ljF5u-YRkQFhR1-JzkqgY4rX8fg.roa (hash: yARJg/r5KzAJTCBC6Aa8YbBreZ5SqvZOXFrSvclMQ38=)
5: s_QDIrLshBQNlu6RPwCemGYvy74.roa (hash: 6Y18bq+vtApdDZHTDEQgo5JwDFt4pJR0lVY1yqjzjsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:32:0c:a2:bb:61:9e:21:bf:1e:d8:3a:2c:36:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=258f5a8e295ad1d7b48a1e11958790052b57a253
Validity
Not Before: Nov 11 14:00:53 2025 GMT
Not After : Nov 12 14:00:53 2025 GMT
Subject: CN=f9a808ed32b5a029ad4e8a55a39e3b06c669824f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9b:f7:22:12:e1:cc:ca:af:c5:c0:7c:89:a4:
3f:0b:2f:8b:89:07:bc:36:d5:35:fb:35:70:ff:08:
18:2a:b0:de:07:6f:58:91:fc:bf:6a:e3:90:e0:51:
5f:2d:20:bc:69:70:a5:bc:68:93:9f:f8:90:f0:cd:
5a:33:03:7d:c7:e0:57:1b:4c:45:32:d8:1d:e4:43:
da:a8:3c:4a:3e:35:60:17:53:f7:81:37:7a:88:97:
72:68:ae:06:9e:d6:8f:cc:ff:ec:0e:1f:e7:61:b8:
37:c2:41:6e:25:00:2d:72:61:12:9b:fe:f5:77:c5:
62:91:1f:54:96:b2:7d:14:c3:ec:43:75:a1:9a:05:
47:8f:19:b5:22:06:89:0c:2a:ec:3c:92:3c:ef:20:
6b:8c:8e:71:e6:70:24:e2:64:23:80:15:c1:5e:2b:
76:30:a4:81:0e:f1:42:f5:71:2d:d0:d1:12:17:ef:
ad:ae:b6:5a:b0:34:32:b6:a7:ba:50:de:2b:9d:aa:
5e:eb:1c:59:d1:cf:11:77:8c:12:10:5f:33:fd:56:
21:70:97:f5:b8:8d:09:71:25:9e:27:51:9a:a5:6b:
a2:4b:56:96:93:85:23:b6:10:e8:c9:74:e7:d7:f1:
ce:11:5a:98:d2:89:fe:0f:d6:0f:d2:47:80:2e:4a:
7b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A8:08:ED:32:B5:A0:29:AD:4E:8A:55:A3:9E:3B:06:C6:69:82:4F
X509v3 Authority Key Identifier:
keyid:25:8F:5A:8E:29:5A:D1:D7:B4:8A:1E:11:95:87:90:05:2B:57:A2:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:b8:af:53:87:ee:32:4f:d0:e4:77:e5:71:b5:41:9b:db:8a:
2e:25:d3:39:e0:56:31:77:15:8a:51:d8:df:fe:7b:98:ac:af:
05:94:18:f2:99:a7:e6:80:d5:fc:8d:62:b4:1c:22:fe:ca:2f:
26:db:6a:63:82:6c:30:c9:31:94:ec:03:75:4f:31:66:dc:d5:
ff:2f:66:e6:6b:c3:da:f9:f5:bf:4a:2d:ec:e4:01:50:09:94:
21:78:93:3f:d3:af:7f:7b:99:d8:e8:ce:d7:57:4a:82:c5:be:
08:07:40:06:ef:dd:98:5d:17:bc:cb:cc:41:01:12:38:f2:c6:
91:1c:0d:c4:95:d6:75:c8:b8:77:ae:d8:4a:73:80:60:48:c8:
60:ca:26:5a:e5:81:82:6f:dc:af:bc:af:ac:f3:ec:cf:b8:4f:
5a:7e:c1:63:49:3d:84:ab:83:2c:c9:d5:c2:32:fc:bf:33:95:
ef:cb:99:53:64:d7:a4:ea:b5:8d:f7:1d:e0:65:a3:2d:ff:48:
dd:5e:92:e8:53:11:69:35:07:d2:de:d2:dd:14:d0:8a:c0:35:
8a:01:7d:55:c9:32:e3:46:17:f0:59:11:45:c0:b3:a9:55:27:
82:4e:2d:f7:55:fc:9e:69:e9:70:67:cb:86:e1:42:b6:23:9f:
08:41:1a:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzODIMorthniG/Htg6LDZOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1OGY1YThlMjk1YWQxZDdiNDhhMWUxMTk1ODc5MDA1MmI1
N2EyNTMwHhcNMjUxMTExMTQwMDUzWhcNMjUxMTEyMTQwMDUzWjAzMTEwLwYDVQQD
EyhmOWE4MDhlZDMyYjVhMDI5YWQ0ZThhNTVhMzllM2IwNmM2Njk4MjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5v3IhLhzMqvxcB8iaQ/Cy+LiQe8
NtU1+zVw/wgYKrDeB29Ykfy/auOQ4FFfLSC8aXClvGiTn/iQ8M1aMwN9x+BXG0xF
Mtgd5EPaqDxKPjVgF1P3gTd6iJdyaK4GntaPzP/sDh/nYbg3wkFuJQAtcmESm/71
d8VikR9UlrJ9FMPsQ3WhmgVHjxm1IgaJDCrsPJI87yBrjI5x5nAk4mQjgBXBXit2
MKSBDvFC9XEt0NESF++trrZasDQytqe6UN4rnape6xxZ0c8Rd4wSEF8z/VYhcJf1
uI0JcSWeJ1GapWuiS1aWk4UjthDoyXTn1/HOEVqY0on+D9YP0keALkp7JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPmoCO0ytaAprU6KVaOeOwbGaYJPMB8GA1UdIwQY
MBaAFCWPWo4pWtHXtIoeEZWHkAUrV6JTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlk5YWppbGEwZGUwaWg0UmxZZVFCU3RYb2xNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8zNzE5ZjMtMjJlMS00MzQ0LTlhMzkt
NDU4YTI3MzYxNTdhLzEvSlk5YWppbGEwZGUwaWg0UmxZZVFCU3RYb2xNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8zNzE5ZjMtMjJlMS00MzQ0LTlhMzktNDU4YTI3MzYxNTdh
LzEvSlk5YWppbGEwZGUwaWg0UmxZZVFCU3RYb2xNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAorivU4fu
Mk/Q5HflcbVBm9uKLiXTOeBWMXcVilHY3/57mKyvBZQY8pmn5oDV/I1itBwi/sov
JttqY4JsMMkxlOwDdU8xZtzV/y9m5mvD2vn1v0ot7OQBUAmUIXiTP9Ovf3uZ2OjO
11dKgsW+CAdABu/dmF0XvMvMQQESOPLGkRwNxJXWdci4d67YSnOAYEjIYMomWuWB
gm/cr7yvrPPsz7hPWn7BY0k9hKuDLMnVwjL8vzOV78uZU2TXpOq1jfcd4GWjLf9I
3V6S6FMRaTUH0t7S3RTQisA1igF9Vcky40YX8FkRRcCzqVUngk4t91X8nmnpcGfL
huFCtiOfCEEa1w==
-----END CERTIFICATE-----
Generated at Tue Nov 11 15:40:26 2025 by rpki-client