Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
File: jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft (raw, json)
Hash identifier: dFpGjFr0S3cMjYU7ED/OGxLEsI2L6afDqYfdRiIPWDI=
Subject key identifier: EE:83:55:26:B3:0C:CE:5E:88:4D:E5:05:7C:8A:1A:87:8F:58:5C:45
Authority key identifier: 8F:20:F7:0F:17:D8:B7:2C:3E:42:AE:E0:32:91:29:8B:54:A4:FF:2F
Certificate issuer: /CN=8f20f70f17d8b72c3e42aee03291298b54a4ff2f
Certificate serial: 019921E7A341B48E2E1FF888CBCAEF6445C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
Manifest number: 0A07
Signing time: Sun 07 Sep 2025 02:00:52 +0000
Manifest this update: Sun 07 Sep 2025 02:00:52 +0000
Manifest next update: Mon 08 Sep 2025 02:00:52 +0000
Files and hashes: 1: hFUKeYVJZQidWIC3boS5B2MmNkQ.roa (hash: orWyk1nD9ke9cd+4s/S82r9At33d+yTlOwM1l+sczkc=)
2: jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl (hash: txRJFZkuFYePCpSirFMHkHlM2ocB9WiYx6LKYMp6rWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:a3:41:b4:8e:2e:1f:f8:88:cb:ca:ef:64:45:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f20f70f17d8b72c3e42aee03291298b54a4ff2f
Validity
Not Before: Sep 7 02:00:52 2025 GMT
Not After : Sep 8 02:00:52 2025 GMT
Subject: CN=ee835526b30cce5e884de5057c8a1a878f585c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9c:58:cd:da:82:75:7e:5c:54:dc:23:f7:e6:
42:73:57:d2:b9:73:80:c4:45:73:a9:a6:bc:22:1d:
d1:1a:fa:45:e3:48:2e:13:89:51:e1:cd:96:e7:85:
29:fb:7c:ed:83:54:e2:49:9c:d8:80:d3:55:c8:71:
2d:ff:42:d0:7b:40:b2:78:50:5b:62:cd:41:e2:f3:
10:67:e8:3e:28:e5:a2:2d:33:c3:5b:c7:20:31:6c:
3b:25:40:73:c6:b4:ed:75:e3:c2:a0:d6:ae:9b:82:
4d:14:ea:71:9e:84:84:b6:88:d0:f8:b7:c2:b6:ea:
be:1d:6b:4b:34:75:d1:3b:3f:90:6a:e1:11:3b:77:
50:55:98:ef:18:93:d0:13:1e:5e:a2:f4:c7:bb:35:
6f:85:a5:da:31:66:e6:9d:aa:1d:8c:2e:ae:b4:99:
0b:8c:b4:ad:6a:e3:32:0d:8c:a0:a3:60:a8:48:63:
f7:46:1b:d7:da:a4:4c:9b:3c:e3:83:57:ab:ad:c1:
b3:85:f8:86:18:18:1c:9c:fa:de:a4:01:36:08:5a:
8e:c2:a3:c5:01:e2:70:f5:ef:1b:e0:0e:97:25:db:
05:a7:eb:7c:fe:24:7d:3e:72:5d:60:4d:9e:46:92:
e0:5a:7a:cb:d7:9b:e5:db:95:08:fe:85:df:bb:af:
cf:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:83:55:26:B3:0C:CE:5E:88:4D:E5:05:7C:8A:1A:87:8F:58:5C:45
X509v3 Authority Key Identifier:
keyid:8F:20:F7:0F:17:D8:B7:2C:3E:42:AE:E0:32:91:29:8B:54:A4:FF:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:2b:b9:5b:91:52:c8:33:81:12:bf:51:b7:8c:40:f5:f1:53:
c8:15:ed:45:9d:7f:c8:ae:29:f5:dd:94:a9:ff:eb:46:a1:21:
25:13:42:5c:27:45:1e:d3:0a:b1:c4:6f:a8:7a:15:7c:0a:fe:
53:11:4b:7f:f2:78:9b:8c:57:c2:78:4e:ed:fe:a4:36:b2:1e:
f8:73:c5:1f:4f:93:bf:64:68:04:16:1c:e8:18:1b:03:7e:83:
38:99:d0:9a:be:b6:50:39:31:68:29:87:71:72:f7:b1:eb:76:
71:1f:70:92:14:f4:2d:17:23:03:35:de:ad:07:da:39:f4:a9:
19:ca:5e:0e:6d:28:85:90:b4:ab:23:02:85:e4:a6:50:55:ad:
80:ad:22:e3:30:48:fc:49:0f:73:55:10:0c:bd:de:0f:45:34:
d8:dc:67:bf:ae:5a:d0:49:ba:8c:9c:81:51:db:75:7e:0a:2e:
f6:12:03:a3:8a:21:79:03:b7:72:cf:1a:43:c9:fc:08:aa:be:
a6:30:43:51:ac:2a:00:92:f9:1e:03:fb:07:40:40:61:33:50:
93:4d:27:1f:23:09:73:7d:9d:4f:74:34:a2:c0:83:af:aa:e6:
a3:53:d1:83:12:32:55:3f:c0:78:eb:5c:55:41:93:32:06:b9:
e8:46:00:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:13:30 2025 by rpki-client