Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft
File: jjh1qArSM-nChxWYg3H3fuw_Ygw.mft (raw, json)
Hash identifier: pO9+V4x5TofBw1cFNk+ld5Jz1iKbMyxxw35zPGjR/24=
Subject key identifier: B2:A2:A2:5B:26:78:66:DA:5D:B0:29:DD:92:D2:BD:FE:D7:F8:85:1C
Authority key identifier: 8E:38:75:A8:0A:D2:33:E9:C2:87:15:98:83:71:F7:7E:EC:3F:62:0C
Certificate issuer: /CN=8e3875a80ad233e9c28715988371f77eec3f620c
Certificate serial: 019A722584076B88D4A61C08966530DC7FCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjh1qArSM-nChxWYg3H3fuw_Ygw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft
Manifest number: 1725
Signing time: Tue 11 Nov 2025 09:00:52 +0000
Manifest this update: Tue 11 Nov 2025 09:00:52 +0000
Manifest next update: Wed 12 Nov 2025 09:00:52 +0000
Files and hashes: 1: 0YS8AQvr8ByNBG7KTwD6sIOGH8A.roa (hash: k8sO4Fn23jLZke1eiUIEXbtdN/A5BluF8j3tNYbaMCM=)
2: jjh1qArSM-nChxWYg3H3fuw_Ygw.crl (hash: nBs892y4po4XB8TEconvIB+2ygm/1t39RbubPOa60xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjh1qArSM-nChxWYg3H3fuw_Ygw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:84:07:6b:88:d4:a6:1c:08:96:65:30:dc:7f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3875a80ad233e9c28715988371f77eec3f620c
Validity
Not Before: Nov 11 09:00:52 2025 GMT
Not After : Nov 12 09:00:52 2025 GMT
Subject: CN=b2a2a25b267866da5db029dd92d2bdfed7f8851c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e1:8e:88:92:0a:40:af:89:f5:93:34:6c:49:
1a:be:d6:49:fd:2c:3e:01:4f:8e:58:aa:a0:06:04:
68:51:8b:02:34:a7:ab:01:ec:32:5e:75:a6:b2:77:
c1:42:7f:c9:3a:ae:ee:ab:75:6d:9e:81:cb:0e:51:
e2:5b:6e:e5:6e:0f:5e:ce:05:84:ea:51:60:03:f8:
a1:3e:6e:e6:ab:f8:b9:cd:5f:62:e4:25:bc:f6:bd:
d5:f7:a0:32:25:7a:d6:ca:c9:41:6f:da:e5:c0:73:
d0:af:21:50:74:17:93:7b:f8:54:d0:cb:89:aa:8b:
c7:c9:bc:fe:3a:a5:3d:85:7e:c8:fd:a2:07:5b:e4:
0f:fe:4a:15:9e:4f:7e:a3:07:98:c1:7d:61:8e:68:
d0:18:9c:64:bc:3c:84:a5:6c:69:5c:d5:28:f5:08:
ff:11:40:0c:ae:bd:74:ba:9f:79:8a:6e:e8:50:37:
d2:4b:17:71:87:44:f1:b4:6a:36:e3:82:fc:b3:89:
3d:78:b8:58:ae:67:5f:40:51:da:5e:c3:1c:46:9e:
9d:ed:e4:4a:7a:5b:33:7e:c5:94:c5:17:87:36:ba:
0d:8f:88:f3:04:b5:d9:7f:4f:04:37:8f:b8:c4:3e:
96:46:32:9f:3d:94:29:d7:26:34:74:5c:be:9c:a0:
20:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A2:A2:5B:26:78:66:DA:5D:B0:29:DD:92:D2:BD:FE:D7:F8:85:1C
X509v3 Authority Key Identifier:
keyid:8E:38:75:A8:0A:D2:33:E9:C2:87:15:98:83:71:F7:7E:EC:3F:62:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjh1qArSM-nChxWYg3H3fuw_Ygw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:be:23:36:f8:0c:e4:3a:81:b7:7c:62:64:1d:91:e1:eb:19:
72:b6:ad:6f:e7:9b:53:95:18:63:ac:d5:87:e8:d7:97:f6:e3:
af:4e:4c:46:83:a9:58:fd:f5:91:42:20:3d:d1:37:f1:01:9f:
3c:2e:3c:26:40:50:a8:0b:0e:61:84:d9:0c:eb:d5:b1:84:8b:
37:c1:c3:8b:af:87:10:a1:3f:28:ef:ab:d4:93:d9:20:0b:f8:
f4:39:0d:a6:15:11:03:80:d7:03:b4:b4:01:3c:18:28:d6:d8:
b8:4f:c2:5c:72:4c:2e:1b:c7:6d:d1:84:92:99:cf:85:29:ea:
66:3a:79:94:fd:c9:e1:a2:2e:60:1a:75:f3:9c:4a:f1:fc:0d:
a2:84:03:bf:03:83:e8:69:55:60:b6:0f:b4:d8:d3:1a:6f:2f:
4b:bc:6e:55:2a:74:06:7e:c5:2b:63:71:7b:3a:74:2d:82:56:
03:4b:fe:ff:c1:df:01:a5:02:6f:89:4d:3c:66:14:f6:b0:67:
a0:dd:33:f8:9f:8a:41:a7:df:e9:40:a0:bc:bc:b5:a7:83:64:
f5:5f:d8:ba:51:de:22:1a:23:31:8e:1c:ac:bc:ce:27:dc:a5:
26:2e:84:77:c3:dd:fd:d9:ae:2b:8e:7e:27:da:da:53:58:ff:
e0:bb:19:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:52 2025 by rpki-client