Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
File: jAYAQO86CCOqlz8NBZKx3agI94I.mft (raw, json)
Hash identifier: crrA8YX3ALJ3Qrd/OMqCQ3N9UtkZMyDSURUc7RoZnKE=
Subject key identifier: 51:26:B9:9D:A8:49:6A:83:24:59:21:00:59:D2:F9:90:1F:06:6B:1A
Authority key identifier: 8C:06:00:40:EF:3A:08:23:AA:97:3F:0D:05:92:B1:DD:A8:08:F7:82
Certificate issuer: /CN=8c060040ef3a0823aa973f0d0592b1dda808f782
Certificate serial: 019A71B850AECDB360CB1627D26DBDA5E715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 07:01:35 +0000
Manifest this update: Tue 11 Nov 2025 07:01:35 +0000
Manifest next update: Wed 12 Nov 2025 07:01:35 +0000
Files and hashes: 1: 8ZbyflawwFLPqDg3BZZLbHwGOLc.roa (hash: VykbJevpFsrAKqlNdZuPgmxNQNlKZ+4+VF7D/J1CQCs=)
2: H_TLsPIgEGDD_RE_XHqJUvlqj8E.roa (hash: jVZCYNBVF7woByDpZwClsmu07rKLPUQko61SrEyrK1s=)
3: WyA56EA2oxi30uAjF6x_QQYyE00.roa (hash: 4ql8mO5EaYeFUKdK/VU8GBpEW0nvJwvaHkKL+MQY0zE=)
4: eJe54pJQD4j2JDWbWUTuFe4Zw4k.roa (hash: RfLVPz0RIAcdPGVp8RcU7sTd+HqCq3IoZWz5cYzagaI=)
5: jAYAQO86CCOqlz8NBZKx3agI94I.crl (hash: moYzWH/DsumjfZjTTLEEkN21BdnB+DL7DV8T8cyNGgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:50:ae:cd:b3:60:cb:16:27:d2:6d:bd:a5:e7:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c060040ef3a0823aa973f0d0592b1dda808f782
Validity
Not Before: Nov 11 07:01:35 2025 GMT
Not After : Nov 12 07:01:35 2025 GMT
Subject: CN=5126b99da8496a832459210059d2f9901f066b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:eb:05:9b:7d:cb:9a:a4:3b:0f:5f:4b:62:96:
35:3a:cc:01:7a:9a:a0:3c:06:cb:e0:c9:86:da:34:
bd:9b:b8:fd:23:73:fd:15:62:a8:b1:61:15:0e:ff:
c8:dc:75:ce:14:0b:42:18:13:86:2f:5d:e8:27:41:
2f:ad:c3:d2:c6:f9:82:1d:e2:47:86:5f:66:36:14:
8e:0c:39:50:b9:87:1c:df:3c:89:21:af:07:0a:29:
c6:e7:01:55:e3:7f:ff:61:88:55:ba:ab:88:f6:ca:
51:1b:cc:a5:e1:8b:c4:ed:c1:7b:2e:f5:78:1d:6f:
32:08:f1:cb:cf:84:1f:e8:f4:09:72:94:20:49:36:
a9:69:13:f3:69:46:e0:d9:73:b7:f3:ac:b6:8f:dd:
8d:55:34:81:5d:91:08:59:34:0c:14:18:47:7b:ba:
60:b3:ab:18:f3:76:a7:5b:69:ee:d0:57:0b:e8:a5:
1c:de:2d:d4:1e:8d:69:38:88:4d:f6:eb:de:e8:83:
3f:7b:93:05:46:77:82:ef:c8:5b:6b:45:2d:dc:c3:
06:90:16:0c:06:bc:c6:e9:56:db:99:3e:28:3b:25:
ca:4a:0b:25:00:10:39:81:e7:2e:1e:09:1f:35:8c:
ff:07:07:66:3a:08:aa:87:75:5b:c0:f9:72:8a:a0:
33:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:26:B9:9D:A8:49:6A:83:24:59:21:00:59:D2:F9:90:1F:06:6B:1A
X509v3 Authority Key Identifier:
keyid:8C:06:00:40:EF:3A:08:23:AA:97:3F:0D:05:92:B1:DD:A8:08:F7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:8c:e2:31:13:62:f1:16:32:40:d4:87:1e:83:42:23:bc:f0:
70:3b:ad:bc:54:62:75:9b:42:dc:35:4f:94:24:46:f8:f7:88:
8c:66:7a:99:35:fa:c7:d5:f1:b2:b0:80:6a:60:be:d9:6b:be:
6d:f6:10:34:55:3a:ba:95:89:ba:6c:73:6f:64:88:10:9a:2d:
90:5d:48:5c:b6:73:60:84:40:7c:0c:37:ef:f5:f2:4d:f6:98:
cc:af:76:52:e5:86:67:3c:55:e8:b3:b4:8e:b9:ce:ac:62:9a:
30:6a:21:e2:05:65:18:86:24:e5:15:41:8b:39:65:d9:eb:26:
84:e4:c3:60:13:e7:2b:6e:76:e3:b7:6a:23:09:96:c5:0e:57:
c8:84:6f:9f:9a:dd:bd:fc:0f:71:a2:83:5c:d0:f4:ba:a4:e0:
ab:4f:52:47:ae:2c:6c:35:e7:8f:ac:6b:88:6a:c6:95:1f:b2:
ec:26:35:e0:9f:e8:47:d1:90:47:f5:2d:51:f1:46:cd:b5:44:
23:13:f2:c9:75:2e:c3:ce:4d:b6:81:2a:18:7e:8f:d4:81:5c:
0c:07:e6:28:e9:2a:51:04:a0:75:ec:78:11:a6:6e:de:24:89:
d6:9c:53:16:fc:4c:93:1b:4d:a9:98:ed:13:18:b1:79:57:61:
11:1c:3b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:08 2025 by rpki-client