Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft
File: _JYd_F9wvxt28F5Ep07QKTEl5L4.mft (raw, json)
Hash identifier: ovanLTDOdHibv8g2TQ5HpecvR0FS7tLQm8cG8hCvhDg=
Subject key identifier: DA:6F:9C:9B:E6:76:A4:B0:6C:85:E6:DA:B2:82:B1:9B:59:64:97:67
Authority key identifier: FC:96:1D:FC:5F:70:BF:1B:76:F0:5E:44:A7:4E:D0:29:31:25:E4:BE
Certificate issuer: /CN=fc961dfc5f70bf1b76f05e44a74ed0293125e4be
Certificate serial: 019A72257DA9F03D98CA8473A777603D7435
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JYd_F9wvxt28F5Ep07QKTEl5L4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft
Manifest number: 111A
Signing time: Tue 11 Nov 2025 09:00:50 +0000
Manifest this update: Tue 11 Nov 2025 09:00:50 +0000
Manifest next update: Wed 12 Nov 2025 09:00:50 +0000
Files and hashes: 1: _JYd_F9wvxt28F5Ep07QKTEl5L4.crl (hash: 0zLlFZnLDb+FMDP3NjpYGgSzZygURjrS4VJxp3PDuM4=)
2: hyHlTiMwzWbl8Nf4H5xHNXAVBxY.roa (hash: HU5uH/M7qdwsXDoyu+UBXkrcHBCx6l/8Z2W4bZISR9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JYd_F9wvxt28F5Ep07QKTEl5L4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:7d:a9:f0:3d:98:ca:84:73:a7:77:60:3d:74:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc961dfc5f70bf1b76f05e44a74ed0293125e4be
Validity
Not Before: Nov 11 09:00:50 2025 GMT
Not After : Nov 12 09:00:50 2025 GMT
Subject: CN=da6f9c9be676a4b06c85e6dab282b19b59649767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e8:33:13:4d:8b:56:4e:ea:aa:44:c9:2b:3f:
6b:8c:4f:cf:ac:f0:b5:41:a8:66:b4:5b:ad:63:0b:
7f:c3:fe:00:83:65:e2:08:d7:cd:a9:1f:70:78:79:
d8:3a:44:31:50:04:75:48:49:6e:89:4a:db:4c:23:
83:0c:50:ff:35:5a:fb:5d:9f:ef:ed:28:64:c0:19:
a9:71:a2:7d:52:ea:46:b0:b6:f7:fc:16:ae:97:43:
e9:1e:46:04:91:30:c2:31:c2:8d:cb:13:36:98:04:
b8:0e:50:e6:6f:54:55:16:a4:5a:13:5e:95:b0:07:
b4:a4:31:e8:49:94:34:0d:ff:0e:c2:25:99:af:bc:
1e:27:9e:f5:cd:6f:ed:c4:36:f0:34:22:9b:ec:1f:
e4:eb:fa:f8:84:56:1e:4c:e1:91:66:11:13:1e:02:
b6:0f:a0:47:ca:ed:c9:49:84:dc:a7:f7:7e:3c:48:
91:56:88:36:fb:46:3c:1f:24:21:53:00:d9:f0:4e:
0b:5b:36:ff:33:5d:8e:ce:04:71:ab:8a:4e:6e:d4:
99:ab:63:68:0b:45:2b:e0:e2:48:5e:51:7b:80:d8:
d6:4b:4d:8d:13:e4:a3:a5:fb:7a:e7:40:5b:a4:91:
02:04:d6:ff:b5:61:f0:f7:d1:79:d6:f1:e6:3a:99:
f8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6F:9C:9B:E6:76:A4:B0:6C:85:E6:DA:B2:82:B1:9B:59:64:97:67
X509v3 Authority Key Identifier:
keyid:FC:96:1D:FC:5F:70:BF:1B:76:F0:5E:44:A7:4E:D0:29:31:25:E4:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JYd_F9wvxt28F5Ep07QKTEl5L4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:1e:90:83:21:e6:82:47:29:93:60:6e:c8:c9:29:c8:64:e4:
17:bd:57:1f:6c:c6:03:db:8e:6a:09:65:bb:8c:b1:2c:a0:91:
d7:e0:27:e9:b3:d6:2d:50:77:4b:bb:c6:f6:d3:29:78:8d:54:
53:c5:a5:ed:29:7e:74:fa:29:3f:3c:c2:10:d7:df:23:09:e9:
93:c4:cb:cb:85:fc:f8:df:d2:86:d0:27:2c:e4:01:eb:59:92:
b9:6c:d8:7f:2d:82:4d:4f:c0:33:f7:65:dd:48:7a:b4:04:59:
48:78:05:ce:9a:92:cf:17:f5:a5:8c:b8:93:7c:64:e7:75:28:
13:33:2b:24:8c:57:f4:24:e6:bb:ee:cb:2d:ea:b4:3e:28:4d:
9a:15:7d:20:08:e1:dd:a3:ed:68:7a:48:d3:c8:d0:58:d3:e1:
d3:da:fc:cd:1b:2f:1e:16:78:38:84:b9:b5:34:89:d7:13:03:
fb:d1:4f:37:54:8e:47:de:94:d6:db:4f:cc:db:d1:30:1d:fe:
c6:df:b7:b3:b9:18:cf:a1:f4:6a:8b:d3:f2:e7:8c:dd:20:4e:
62:f5:b3:ec:9e:2d:58:81:76:aa:c4:10:25:db:f5:12:bd:56:
67:5e:1f:eb:06:43:12:99:90:87:09:09:18:d6:8f:ad:7c:fb:
45:88:41:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:34 2025 by rpki-client