Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft
File: jYBF-d8IxTBX6d-ft7eldRA__0o.mft (raw, json)
Hash identifier: lXx8NX+ie4SZ6DU2bWJpEkfroqjMr3KMVixnpQBI6vo=
Subject key identifier: D3:5E:BD:A7:12:72:55:C8:DE:46:59:F4:F2:79:34:A5:34:70:41:27
Authority key identifier: 8D:80:45:F9:DF:08:C5:30:57:E9:DF:9F:B7:B7:A5:75:10:3F:FF:4A
Certificate issuer: /CN=8d8045f9df08c53057e9df9fb7b7a575103fff4a
Certificate serial: 019A725C85E56EC5DA12D1AA30291A06323F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYBF-d8IxTBX6d-ft7eldRA__0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft
Manifest number: 021D
Signing time: Tue 11 Nov 2025 10:00:57 +0000
Manifest this update: Tue 11 Nov 2025 10:00:57 +0000
Manifest next update: Wed 12 Nov 2025 10:00:57 +0000
Files and hashes: 1: M-gXFd7N6RQlOS3FU49vKYSovUs.roa (hash: 3OvRn3YgHg1m6lctKtBNgoRt6uS+lTyZBl7EBoP4/D0=)
2: jYBF-d8IxTBX6d-ft7eldRA__0o.crl (hash: 47NuBeJe1HgBKLVhOsvEE90VxnXyzilQipcVoLA3B/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYBF-d8IxTBX6d-ft7eldRA__0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:85:e5:6e:c5:da:12:d1:aa:30:29:1a:06:32:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d8045f9df08c53057e9df9fb7b7a575103fff4a
Validity
Not Before: Nov 11 10:00:57 2025 GMT
Not After : Nov 12 10:00:57 2025 GMT
Subject: CN=d35ebda7127255c8de4659f4f27934a534704127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:76:a5:59:8f:ca:d9:ec:1a:8a:6a:c1:e7:f2:
36:a4:7f:dd:74:d3:5e:12:f2:7f:8c:c5:cc:0a:4d:
53:3f:75:ab:2e:84:da:f6:57:4d:86:81:8b:16:d7:
9d:77:8c:96:84:b0:6d:3f:01:39:8b:cf:66:0a:88:
f8:3b:46:4b:28:eb:ae:04:41:1d:b5:26:46:82:f4:
c2:fd:d6:88:1c:96:b7:06:5c:17:5a:96:75:84:66:
ed:ab:33:34:f8:24:dd:15:46:bd:ed:60:9d:3f:64:
f9:e7:61:74:e3:70:55:ae:29:e1:9f:59:95:86:a5:
29:de:df:95:f8:9c:e7:a7:9b:94:bc:90:95:b5:48:
18:49:0f:71:9f:17:1d:78:06:8d:56:6c:d3:1a:43:
12:ad:54:61:89:fc:0b:e4:2a:0f:fa:c9:22:7a:dd:
c2:b7:31:68:06:7f:a0:11:00:1e:33:2e:e1:dc:48:
59:c2:d1:64:7e:81:93:74:ab:2d:57:e5:73:26:3b:
84:7e:d8:7b:51:6b:e1:ed:38:a3:3a:e7:71:af:ec:
b5:87:07:49:9e:f4:ca:d2:c2:6a:ea:31:01:3d:36:
bb:e3:8e:e8:f9:73:19:93:ea:c8:01:a8:07:6a:67:
05:47:36:2c:07:17:14:27:4a:85:1d:aa:2b:ed:c4:
22:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:5E:BD:A7:12:72:55:C8:DE:46:59:F4:F2:79:34:A5:34:70:41:27
X509v3 Authority Key Identifier:
keyid:8D:80:45:F9:DF:08:C5:30:57:E9:DF:9F:B7:B7:A5:75:10:3F:FF:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYBF-d8IxTBX6d-ft7eldRA__0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:54:3e:d8:6a:00:0a:02:0b:05:7f:82:fd:03:e4:ac:12:80:
62:4e:84:be:72:1c:23:2f:64:02:dd:29:1d:ea:ed:c9:a6:66:
bd:22:c1:57:53:fe:a6:fb:c8:8e:5d:d6:10:76:6f:4c:2f:8e:
14:44:5e:84:05:4d:1a:ba:7f:ee:af:ca:ac:89:b9:e6:2c:8e:
c6:f6:ea:08:1c:94:18:d7:77:07:9c:57:e5:75:af:12:4f:04:
f7:11:d9:af:00:0f:41:41:0d:95:b0:1d:33:4a:16:a9:7d:75:
0e:41:29:79:4b:c5:f6:fb:c7:3b:ff:0a:55:06:1b:b5:65:b9:
f2:10:e5:dc:a1:a0:4b:af:c2:ea:1d:f0:d8:21:5d:d3:b9:a5:
b4:c9:4b:0d:b9:71:72:73:b9:9e:94:83:ad:69:5a:7e:4a:ab:
3f:eb:cf:6b:22:95:fc:ce:08:52:82:3f:fc:eb:4d:f2:8d:40:
c3:b6:1d:90:a2:49:65:e3:58:14:c6:73:85:97:22:eb:a3:42:
5d:76:33:fd:ef:83:7c:a1:78:ac:be:ee:6b:c8:46:5b:69:fa:
19:7a:a4:0d:72:25:02:e2:83:fa:96:97:ba:b9:4c:91:7a:2b:
e7:f7:47:28:ec:92:ee:b7:af:79:e2:1c:21:23:49:de:f4:71:
d5:11:95:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:41:15 2025 by rpki-client