Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft
File: jygQkMQApWFm_Ii083pcuu0hhfA.mft (raw, json)
Hash identifier: z9eX4qOzIwBWSr0qFuR9wHWWIr3vzRHU5lTxj/YK0y8=
Subject key identifier: 75:E2:71:A4:CB:0F:36:D8:2C:11:88:64:83:E2:46:6C:23:19:55:C4
Authority key identifier: 8F:28:10:90:C4:00:A5:61:66:FC:88:B4:F3:7A:5C:BA:ED:21:85:F0
Certificate issuer: /CN=8f281090c400a56166fc88b4f37a5cbaed2185f0
Certificate serial: 0199350054CBE183E94CF6CF708ED87F858E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jygQkMQApWFm_Ii083pcuu0hhfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft
Manifest number: 167A
Signing time: Wed 10 Sep 2025 19:00:37 +0000
Manifest this update: Wed 10 Sep 2025 19:00:37 +0000
Manifest next update: Thu 11 Sep 2025 19:00:37 +0000
Files and hashes: 1: 7XUdeR7Uiqy2nX_SzaBAY10QtF0.roa (hash: NZuDg+MfyuXfdZEwhDepOr5DFbg1lkCScWpvXsHFUtQ=)
2: jygQkMQApWFm_Ii083pcuu0hhfA.crl (hash: YIXt3UUbW7GXObcCQjJE5WTCjhMQwwst9y97ho6UBEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jygQkMQApWFm_Ii083pcuu0hhfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:00:54:cb:e1:83:e9:4c:f6:cf:70:8e:d8:7f:85:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f281090c400a56166fc88b4f37a5cbaed2185f0
Validity
Not Before: Sep 10 19:00:37 2025 GMT
Not After : Sep 11 19:00:37 2025 GMT
Subject: CN=75e271a4cb0f36d82c11886483e2466c231955c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c4:fc:94:44:36:d4:be:c3:ff:62:0d:e8:34:
c8:98:eb:3b:78:65:d6:e0:68:b6:47:fd:c9:9e:7e:
a0:26:90:41:69:36:2d:95:0f:b6:ac:48:60:aa:ff:
99:bd:01:53:b1:dc:8e:fb:a8:33:04:67:ef:1b:1f:
73:91:9b:a6:db:01:74:cd:1a:ac:2c:ed:43:8f:b1:
b0:6f:c3:07:82:d4:55:06:9d:77:6d:14:b4:c4:2d:
8c:00:3d:4e:e0:2a:1b:73:a6:cb:88:48:79:52:e9:
92:a3:9c:ef:eb:51:f9:d8:95:7e:47:3c:38:0a:04:
64:42:a5:32:fd:2a:4c:f5:1c:dd:29:ce:08:ad:c0:
61:4e:08:d6:6d:db:ca:f4:5f:6a:9d:21:76:89:e6:
69:a9:81:d0:3e:4f:8b:cd:2d:ba:86:fd:20:ae:8b:
ac:86:2f:df:ad:23:88:ee:e9:dd:d9:82:ff:41:c5:
c9:e6:d0:67:93:3c:68:15:f6:9f:dd:37:d2:d5:1f:
91:e2:be:76:3f:55:12:0e:3b:ad:17:13:c9:c5:35:
38:15:14:92:66:cd:aa:c9:d4:d9:ba:cc:93:ff:cb:
0c:7d:3b:35:c3:1c:5c:6d:f0:f0:46:be:99:f7:5b:
33:08:37:d4:49:4f:dd:94:4b:b7:d4:cf:6f:6c:99:
ee:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E2:71:A4:CB:0F:36:D8:2C:11:88:64:83:E2:46:6C:23:19:55:C4
X509v3 Authority Key Identifier:
keyid:8F:28:10:90:C4:00:A5:61:66:FC:88:B4:F3:7A:5C:BA:ED:21:85:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jygQkMQApWFm_Ii083pcuu0hhfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:b7:38:88:ee:7c:b9:e9:85:bc:12:56:ec:f6:cc:81:0a:ad:
00:44:cf:b4:34:e5:c7:96:a5:13:e4:7f:f7:c5:d3:d3:2f:60:
44:55:fc:96:5d:a6:d5:61:c2:26:17:f4:fe:30:86:41:5c:f7:
0d:ed:66:ae:6c:56:26:b9:88:f0:eb:a2:a3:dc:0c:97:f3:fe:
a1:00:e4:8c:b2:33:1c:67:80:00:f2:41:ef:08:99:af:bf:7f:
05:b7:e6:b5:a8:df:30:ab:00:dc:ef:05:6e:a5:ba:16:e9:64:
81:a0:0e:0f:a0:85:ae:3d:93:f9:af:23:d2:f4:26:90:0c:f0:
e5:e0:67:38:e4:cf:e8:b1:c6:28:96:f2:af:ac:01:14:d1:b3:
92:8c:91:a1:82:66:d9:6d:14:21:c7:42:86:40:e1:01:d6:b5:
ae:b7:46:53:41:6a:0a:a1:5a:cc:f2:87:0f:d9:7c:e1:07:1e:
f4:5b:8a:c8:2d:69:20:58:4b:03:19:a5:02:fb:6a:44:74:93:
91:09:36:e3:67:06:f5:18:6c:2b:d1:bd:b4:e4:68:63:b7:da:
e3:f4:4a:f0:3b:42:56:32:ca:78:30:18:20:62:e1:3b:b9:ed:
a2:a3:08:61:5a:95:2e:90:85:e6:64:6d:63:31:37:44:31:4a:
64:fd:5a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:48:17 2025 by rpki-client