Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft
File: jY9-tNJUj5zL88s45wKhkMEXQvU.mft (raw, json)
Hash identifier: BYIf+cWVgYGqcxLgwXMn5w3UJxixYgXOAt8gosbWzNg=
Subject key identifier: D1:FF:51:10:68:7E:D8:3E:E9:38:EE:A1:F1:E8:C5:A2:FD:42:BD:60
Authority key identifier: 8D:8F:7E:B4:D2:54:8F:9C:CB:F3:CB:38:E7:02:A1:90:C1:17:42:F5
Certificate issuer: /CN=8d8f7eb4d2548f9ccbf3cb38e702a190c11742f5
Certificate serial: 019A71B7998E27BDBE8CCB22279FF9BE01E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:00:49 +0000
Manifest this update: Tue 11 Nov 2025 07:00:49 +0000
Manifest next update: Wed 12 Nov 2025 07:00:49 +0000
Files and hashes: 1: JoTSZ8E8fkiS501xBbOY7pc3jM8.roa (hash: JoNzI4ZspphrrJoARed2dcoamemKZ5kg0l+d/5sdlcM=)
2: SqfaLa-P64VMRzLu45OzZ7O-myU.roa (hash: 8RixXJbGYWZA//tOAjP6K4ex9vVhr1Y3178psfUi1TM=)
3: jY9-tNJUj5zL88s45wKhkMEXQvU.crl (hash: uLW0xWWyrICSfZ/wCLuxLnFEN7RmaULouqz/TZHHL0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:99:8e:27:bd:be:8c:cb:22:27:9f:f9:be:01:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d8f7eb4d2548f9ccbf3cb38e702a190c11742f5
Validity
Not Before: Nov 11 07:00:49 2025 GMT
Not After : Nov 12 07:00:49 2025 GMT
Subject: CN=d1ff5110687ed83ee938eea1f1e8c5a2fd42bd60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:83:53:54:84:25:71:1e:96:a4:a0:60:03:17:
39:aa:c7:03:4b:d4:cf:dd:83:20:e3:57:26:10:11:
d4:ce:c7:9f:bf:00:12:a6:df:59:1b:9e:b6:0b:80:
f8:33:3b:a3:8e:73:ee:25:03:7f:77:1f:06:09:32:
f0:72:17:6b:83:63:fa:78:55:99:44:09:ec:f3:78:
ee:0c:92:60:65:bc:04:e1:32:48:8b:8c:70:82:60:
b2:6e:be:6e:e0:9e:9c:17:7f:d9:1b:c3:4d:30:8a:
89:fc:70:d5:63:38:5f:e8:b1:92:63:09:ea:d2:f3:
34:4e:59:56:39:49:26:3e:dc:9d:a9:7c:09:cc:9c:
55:7d:79:17:4f:28:66:da:93:d2:cf:2b:c9:03:3e:
a0:39:56:f1:3c:d1:e8:bf:e1:b8:79:f3:4c:2d:43:
35:72:10:44:da:c0:25:ac:cb:26:b9:cf:87:9f:6e:
5f:7b:fb:6c:bb:9e:6b:a3:5a:f3:36:65:d5:f0:82:
e1:60:e6:1d:8c:37:8e:ab:4a:2a:2c:ec:64:0c:b2:
a8:c4:10:12:9c:9a:b9:7d:bd:c3:72:9f:dd:9f:ef:
76:f7:47:86:41:33:18:bf:11:c6:32:2d:c1:c7:f1:
f6:35:74:b3:da:26:eb:0d:7f:87:9a:4a:55:3c:71:
b3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FF:51:10:68:7E:D8:3E:E9:38:EE:A1:F1:E8:C5:A2:FD:42:BD:60
X509v3 Authority Key Identifier:
keyid:8D:8F:7E:B4:D2:54:8F:9C:CB:F3:CB:38:E7:02:A1:90:C1:17:42:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:50:f9:ce:89:f3:73:5e:d5:43:28:04:a7:32:3d:31:2c:1a:
b7:24:97:31:29:e3:18:ca:6b:b8:99:06:5a:b1:68:39:4a:d0:
cc:da:f7:dd:70:da:3c:a6:d4:2d:13:4c:9e:72:05:1d:47:71:
8b:84:42:81:6f:8f:55:cd:c1:f7:c3:d9:fd:da:57:17:ca:58:
63:04:09:4b:ec:11:9b:8e:e1:27:74:8e:e8:8f:5c:2d:b0:ee:
84:8c:e6:9d:5b:fd:0f:01:bd:92:34:d7:01:ef:62:ae:e1:05:
0c:8d:be:87:88:0b:f4:8c:c7:68:dd:28:0f:af:74:73:15:c6:
09:fe:2c:26:fa:eb:f1:19:f2:7a:c1:e1:38:27:e8:41:01:f3:
ac:7f:cf:d7:24:a4:62:15:8d:df:f8:dc:50:72:22:3d:b3:56:
89:cc:ca:66:e3:7b:ba:5b:6f:6f:d1:fd:07:c6:de:39:e6:64:
7c:d4:d0:25:8e:1c:79:36:e2:72:05:93:24:3d:8a:5e:d7:f4:
3c:d0:57:ca:c1:1c:da:c4:d4:fb:34:4f:2c:0b:d1:6a:7e:53:
62:c5:cc:cf:d8:8c:7c:49:c0:f6:4e:1d:25:f8:b8:73:e1:94:
ce:09:91:57:e4:94:b1:ba:a9:ed:89:96:00:e1:76:86:85:1d:
2f:54:a4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:02 2025 by rpki-client