Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
File: jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft (raw, json)
Hash identifier: 4lVn1aMiWGWBj71pD+PsD4KNsj4Rr1johYKP4Cav4oI=
Subject key identifier: D0:F7:AA:E2:71:33:CA:62:EA:FA:39:C2:CE:08:19:9F:7C:B4:81:2D
Authority key identifier: 8F:20:F7:0F:17:D8:B7:2C:3E:42:AE:E0:32:91:29:8B:54:A4:FF:2F
Certificate issuer: /CN=8f20f70f17d8b72c3e42aee03291298b54a4ff2f
Certificate serial: 0197CA27388C580B635ECFACAD499A07C460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
Manifest number: 0955
Signing time: Wed 02 Jul 2025 08:00:57 +0000
Manifest this update: Wed 02 Jul 2025 08:00:57 +0000
Manifest next update: Thu 03 Jul 2025 08:00:57 +0000
Files and hashes: 1: hFUKeYVJZQidWIC3boS5B2MmNkQ.roa (hash: orWyk1nD9ke9cd+4s/S82r9At33d+yTlOwM1l+sczkc=)
2: jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl (hash: iJWm49XNMqFmLcOIPsVwQxidnfm4WMF+3fNjtMYRDz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:27:38:8c:58:0b:63:5e:cf:ac:ad:49:9a:07:c4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f20f70f17d8b72c3e42aee03291298b54a4ff2f
Validity
Not Before: Jul 2 08:00:57 2025 GMT
Not After : Jul 3 08:00:57 2025 GMT
Subject: CN=d0f7aae27133ca62eafa39c2ce08199f7cb4812d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:be:f4:ca:32:51:ab:9b:71:ff:29:91:ef:49:
b1:de:bf:98:93:05:32:7a:25:ad:d5:44:78:36:08:
ac:92:c4:0f:f6:8a:44:77:26:61:e9:ab:e3:4d:69:
c9:bc:6c:d3:9d:be:01:f3:79:32:fe:57:e6:a9:e7:
bd:5d:6d:2f:45:d4:b6:5f:f8:b6:23:ac:20:00:0c:
6e:30:c9:b5:a0:0f:d6:d5:b5:ff:78:9e:5b:c5:a3:
38:40:ce:b2:65:7c:4c:01:ac:4c:28:87:e0:0f:a0:
5d:37:87:74:f4:6d:40:15:b8:a1:6a:e5:95:db:9a:
18:b7:80:7a:c1:a3:76:91:7c:fb:61:0a:05:2a:d2:
1e:7e:44:a1:a4:56:49:10:7b:c3:12:43:63:70:53:
2a:e3:a1:a1:65:82:a5:87:af:dd:d0:90:0e:76:79:
09:fd:af:87:3e:8e:4a:84:bd:ba:05:aa:54:1c:93:
e2:8f:55:7a:f2:1f:7b:05:96:af:be:b4:3b:7e:5d:
b1:fe:a9:ea:df:dc:fe:55:dd:e7:da:93:f3:93:e8:
e5:72:25:68:f9:6b:a7:39:06:3c:7d:ba:73:97:76:
28:af:ad:43:94:95:c8:49:bc:df:6f:1a:0a:97:0e:
e5:34:7b:3f:b5:9a:52:70:2e:15:86:70:5b:77:f4:
d3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F7:AA:E2:71:33:CA:62:EA:FA:39:C2:CE:08:19:9F:7C:B4:81:2D
X509v3 Authority Key Identifier:
keyid:8F:20:F7:0F:17:D8:B7:2C:3E:42:AE:E0:32:91:29:8B:54:A4:FF:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:34:7b:26:5a:fc:98:7e:50:ae:1d:cf:23:0f:17:4d:2b:9c:
8b:1d:c5:9a:55:9b:90:6e:a3:4c:fe:3a:38:f9:67:f2:d6:68:
24:1e:26:90:1a:3a:d3:45:5c:09:ac:84:ac:1e:30:7b:6b:40:
0c:07:ac:d7:28:0d:9e:bb:00:65:3e:ae:39:64:00:6d:72:50:
64:44:dc:d6:d9:93:e1:4b:df:b3:7c:f5:7e:ee:fa:8f:53:13:
c2:08:25:26:ce:dd:15:72:3e:96:95:91:be:59:1d:d7:3f:e0:
36:18:03:66:31:01:62:1d:58:c2:2e:d3:9d:48:49:02:69:ec:
15:cc:d2:28:57:29:9d:c9:1b:ee:e4:a2:c1:0e:bb:24:21:de:
14:6a:06:b3:a6:00:2e:5d:c4:cc:3d:48:95:75:4b:02:c4:9a:
b8:a9:14:87:e2:22:ac:ae:c1:53:8f:6e:02:5f:7b:fa:b9:7b:
17:80:94:ba:8f:fb:f4:73:2e:aa:ae:3a:59:f2:32:58:c9:0a:
cf:60:7b:0c:aa:c9:53:18:cb:d2:9f:c0:2a:43:ed:e6:37:26:
73:ad:0d:e9:e0:cd:3a:56:ef:96:d4:cb:c3:9f:87:b3:de:14:
ff:de:b5:04:9e:f4:7c:96:4a:89:0d:52:aa:80:ba:d9:31:ae:
ab:4f:a4:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfKJziMWAtjXs+srUmaB8RgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMjBmNzBmMTdkOGI3MmMzZTQyYWVlMDMyOTEyOThiNTRh
NGZmMmYwHhcNMjUwNzAyMDgwMDU3WhcNMjUwNzAzMDgwMDU3WjAzMTEwLwYDVQQD
EyhkMGY3YWFlMjcxMzNjYTYyZWFmYTM5YzJjZTA4MTk5ZjdjYjQ4MTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy770yjJRq5tx/ymR70mx3r+YkwUy
eiWt1UR4NgisksQP9opEdyZh6avjTWnJvGzTnb4B83ky/lfmqee9XW0vRdS2X/i2
I6wgAAxuMMm1oA/W1bX/eJ5bxaM4QM6yZXxMAaxMKIfgD6BdN4d09G1AFbihauWV
25oYt4B6waN2kXz7YQoFKtIefkShpFZJEHvDEkNjcFMq46GhZYKlh6/d0JAOdnkJ
/a+HPo5KhL26BapUHJPij1V68h97BZavvrQ7fl2x/qnq39z+Vd3n2pPzk+jlciVo
+WunOQY8fbpzl3Yor61DlJXISbzfbxoKlw7lNHs/tZpScC4VhnBbd/TTfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFND3quJxM8pi6vo5ws4IGZ98tIEtMB8GA1UdIwQY
MBaAFI8g9w8X2LcsPkKu4DKRKYtUpP8vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanlEM0R4Zll0eXctUXE3Z01wRXBpMVNrX3k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy80MmMwYzAtZGU2ZC00OWI2LWI0NTAt
Yzk2YThkYTJjNTg5LzEvanlEM0R4Zll0eXctUXE3Z01wRXBpMVNrX3k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy80MmMwYzAtZGU2ZC00OWI2LWI0NTAtYzk2YThkYTJjNTg5
LzEvanlEM0R4Zll0eXctUXE3Z01wRXBpMVNrX3k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcDR7Jlr8
mH5Qrh3PIw8XTSucix3FmlWbkG6jTP46OPln8tZoJB4mkBo600VcCayErB4we2tA
DAes1ygNnrsAZT6uOWQAbXJQZETc1tmT4Uvfs3z1fu76j1MTwgglJs7dFXI+lpWR
vlkd1z/gNhgDZjEBYh1Ywi7TnUhJAmnsFczSKFcpnckb7uSiwQ67JCHeFGoGs6YA
Ll3EzD1IlXVLAsSauKkUh+IirK7BU49uAl97+rl7F4CUuo/79HMuqq46WfIyWMkK
z2B7DKrJUxjL0p/AKkPt5jcmc60N6eDNOlbvltTLw5+Hs94U/961BJ70fJZKiQ1S
qoC62TGuq0+k2w==
-----END CERTIFICATE-----
Generated at Wed Jul 2 13:11:27 2025 by rpki-client