Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
File: jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft (raw, json)
Hash identifier: fiyxcFvaC0RAUKMCbYK5AbqqZLPl4IiRhlo+JuL/hmI=
Subject key identifier: 78:3A:8F:7C:84:64:F9:51:08:03:3C:BB:5A:FD:9B:11:1F:BB:70:4B
Authority key identifier: 8F:20:F7:0F:17:D8:B7:2C:3E:42:AE:E0:32:91:29:8B:54:A4:FF:2F
Certificate issuer: /CN=8f20f70f17d8b72c3e42aee03291298b54a4ff2f
Certificate serial: 019A71EEF9588AEE3A9A39A2D5A7AE560A4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
Manifest number: 0AB5
Signing time: Tue 11 Nov 2025 08:01:18 +0000
Manifest this update: Tue 11 Nov 2025 08:01:18 +0000
Manifest next update: Wed 12 Nov 2025 08:01:18 +0000
Files and hashes: 1: hFUKeYVJZQidWIC3boS5B2MmNkQ.roa (hash: orWyk1nD9ke9cd+4s/S82r9At33d+yTlOwM1l+sczkc=)
2: jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl (hash: hNFPYYdn3fOZkd3H1vMjFapKDVgWU8zbRMp4RXCZU9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:f9:58:8a:ee:3a:9a:39:a2:d5:a7:ae:56:0a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f20f70f17d8b72c3e42aee03291298b54a4ff2f
Validity
Not Before: Nov 11 08:01:18 2025 GMT
Not After : Nov 12 08:01:18 2025 GMT
Subject: CN=783a8f7c8464f95108033cbb5afd9b111fbb704b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:27:01:4a:88:19:26:d8:3d:4b:d9:a6:6b:48:
3a:34:62:33:80:7f:ea:dd:e0:c5:1f:e6:ec:81:48:
dc:87:4e:82:0c:64:7d:9f:76:f8:9f:b6:60:5e:61:
1e:68:8b:a7:90:9d:1d:17:60:2a:82:9d:44:cc:21:
0b:d9:0f:4d:31:8f:39:3a:1b:13:4d:ae:0c:04:03:
c0:ee:c7:e9:52:ca:86:da:6b:af:fb:5f:5d:35:f4:
a1:47:64:97:b4:5c:97:a4:de:1e:78:52:f8:9b:8a:
37:86:cb:a1:ba:a7:f1:ce:c8:7c:35:23:36:1e:df:
f1:90:3b:05:c7:0d:cb:80:46:26:a2:bf:6d:36:e9:
37:77:d6:35:ec:b1:c4:c0:71:96:ea:41:f1:e8:85:
be:ac:ad:f5:44:e8:41:3c:c2:1e:cb:9d:49:ea:d3:
d4:09:f5:78:44:0f:96:50:1b:1a:5f:dc:1e:0e:27:
57:3b:b9:b3:39:2b:df:cd:a2:a0:12:16:24:1a:0c:
c9:d6:25:8d:26:de:40:c8:3a:99:1a:97:03:d9:16:
6f:1f:1f:da:39:4b:67:40:a9:39:76:45:43:80:c8:
ee:17:7e:ee:5e:b3:b9:5e:c6:3b:b2:9a:0d:96:8f:
07:4b:8b:16:e5:c7:d1:b6:e9:5c:50:72:b3:80:44:
d5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:3A:8F:7C:84:64:F9:51:08:03:3C:BB:5A:FD:9B:11:1F:BB:70:4B
X509v3 Authority Key Identifier:
keyid:8F:20:F7:0F:17:D8:B7:2C:3E:42:AE:E0:32:91:29:8B:54:A4:FF:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:50:b4:77:6d:2b:f1:37:11:fa:06:0d:8a:81:e5:47:42:fc:
7c:6e:e5:04:f6:41:53:ed:50:f7:33:43:3d:7b:c1:ff:bf:27:
70:9c:4c:63:89:6c:ab:75:23:75:42:e1:9d:75:a4:a4:48:ee:
34:47:65:47:77:7b:7c:35:fe:5f:9e:7a:ec:30:1e:5d:64:01:
3c:2b:80:51:39:86:2a:0d:3d:9a:6c:d9:e1:02:66:f8:32:0a:
f0:9c:41:2e:28:67:be:cd:25:e2:f3:d2:c9:a5:d6:ca:05:bd:
ea:a3:e7:b8:c4:ae:23:83:ad:f1:3e:f0:3f:2b:18:84:71:db:
3e:c8:3f:83:c7:01:70:38:ac:bc:6b:65:78:f9:8c:2d:78:31:
cb:88:0b:20:4b:aa:7a:48:d8:3b:83:4c:c3:4b:06:c2:35:d0:
f5:1b:50:61:a6:27:01:87:3f:79:a9:b0:42:de:f8:67:d0:08:
8d:7b:94:30:89:1e:f3:6c:0f:90:00:6e:ef:11:58:cd:67:37:
9d:d1:63:d3:0d:7b:7f:af:b3:72:45:6b:10:e1:94:4a:32:b3:
8f:01:de:60:29:02:8c:a2:40:36:bc:5c:40:18:98:c5:bf:40:
d6:16:30:22:9d:7a:95:40:fa:0a:a1:51:c2:e8:14:e2:34:e3:
8d:6b:62:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:33 2025 by rpki-client