Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
File: jYdAeZyRwmMKgJIXjbgk86iJp18.mft (raw, json)
Hash identifier: wQRwns1l7Ldp47xcWDqM7kd3ACH1srMstxizzldhE2M=
Subject key identifier: 1C:FB:19:5E:96:6F:9B:EB:A8:EE:F8:62:A6:33:2C:E2:B8:A3:48:FF
Authority key identifier: 8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F
Certificate issuer: /CN=8d8740799c91c2630a8092178db824f3a889a75f
Certificate serial: 019933B726FFD42727BD3373FA40C92CE4E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
Manifest number: 1679
Signing time: Wed 10 Sep 2025 13:01:05 +0000
Manifest this update: Wed 10 Sep 2025 13:01:05 +0000
Manifest next update: Thu 11 Sep 2025 13:01:05 +0000
Files and hashes: 1: K-6vxGr3EkVKtgWk3f7FXppAHWU.roa (hash: OqJwTUOjnt783umU3SvwJ0pGKHDe69wtlF63xIDInso=)
2: K7Su5tLQd2NMZMj9NBaGujGCyFc.roa (hash: mUfUc0m1Q5fvSqMO5jRLGU7xEPj6/17vBXx5MZ0j9fY=)
3: eE7CtoiQAT2pLGSZ83z4bGyxlms.roa (hash: 0jzCXVU/84NgsdnKR1p45oVJW0ZBdnomnSJlnmwgNt0=)
4: jYdAeZyRwmMKgJIXjbgk86iJp18.crl (hash: UYaUTywODbUtieNKTYRxgLy6w2A27HIqf1F9AxBsDLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:b7:26:ff:d4:27:27:bd:33:73:fa:40:c9:2c:e4:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d8740799c91c2630a8092178db824f3a889a75f
Validity
Not Before: Sep 10 13:01:05 2025 GMT
Not After : Sep 11 13:01:05 2025 GMT
Subject: CN=1cfb195e966f9beba8eef862a6332ce2b8a348ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3e:1e:10:18:2b:e9:14:36:b4:e8:b7:11:a4:
b6:4f:d0:72:f9:6f:4b:d4:0e:be:ca:05:08:0b:3c:
7c:56:ca:a0:75:20:7c:35:27:4a:3d:34:13:f6:05:
ec:b2:73:14:d0:34:75:44:b5:fe:23:03:50:60:b4:
23:cc:00:61:6e:30:9a:f4:1e:d4:cd:ec:c2:a3:3e:
49:ed:3c:2d:d9:e8:52:1a:21:d3:0c:1b:76:f9:bd:
2d:ce:29:e2:99:d2:5f:50:3b:7a:c6:b8:8e:f7:ea:
14:f0:ce:7d:96:ea:98:8f:ec:7d:8e:25:d7:07:0b:
26:84:c0:36:1b:d3:31:ef:1e:68:ea:94:9b:03:31:
55:af:4a:a3:05:88:b6:2d:65:01:aa:c0:56:7a:20:
da:ed:02:96:a2:d7:e8:3b:12:a0:00:14:65:0d:57:
59:e1:25:da:b6:54:83:88:2a:77:c5:21:5e:8d:2a:
43:03:d1:ac:99:ad:b4:83:f8:f6:59:cb:0c:c9:9d:
95:63:f1:2d:91:b7:cc:c4:d2:83:33:4c:0c:d5:30:
6d:17:2e:80:6a:6b:98:7c:d5:d0:fd:9d:45:f6:25:
ff:13:c4:48:a2:be:e6:06:37:29:ff:f2:95:fc:41:
5b:30:b1:ac:6f:f4:5a:36:96:c0:30:bc:73:a3:58:
7a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FB:19:5E:96:6F:9B:EB:A8:EE:F8:62:A6:33:2C:E2:B8:A3:48:FF
X509v3 Authority Key Identifier:
keyid:8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:cc:cf:46:70:a2:ec:ad:85:da:10:74:cb:7c:50:78:09:f3:
25:0c:ff:45:5f:ee:15:b7:a4:38:8f:5e:38:a4:15:e4:c1:6f:
18:e2:ee:d7:93:7e:db:2a:df:06:e7:45:7d:d4:35:4f:3a:a6:
c9:a6:d4:a7:23:02:3e:ea:2e:eb:f6:59:86:f3:77:4a:35:2f:
de:66:2d:eb:4f:fe:68:80:42:ca:8d:ec:93:b9:41:4d:cb:13:
a0:f7:d4:73:a4:09:64:7a:bc:58:41:21:9b:d1:f7:34:e9:d8:
37:1f:4f:51:74:20:ff:4b:58:45:54:3a:0e:c4:c5:cc:e3:1e:
12:3f:20:12:24:5d:74:63:14:66:d8:00:55:02:c3:2f:42:ab:
d8:02:91:a4:ae:7b:f3:15:5c:bf:b0:a4:75:ed:5c:b2:d3:2e:
dd:a3:e9:ab:6c:54:c6:07:81:c7:07:90:d3:66:98:23:62:28:
21:eb:72:70:21:5a:9f:98:12:56:38:11:3a:a8:74:12:67:11:
b9:c7:a0:44:38:66:70:f7:c9:c6:93:7c:eb:f1:ca:3c:e6:bf:
0d:f0:43:56:dc:47:f8:54:e2:45:69:e1:51:e2:e9:65:f6:80:
96:11:ee:19:35:66:8a:98:47:b0:6b:b5:fe:cd:9e:2a:2e:11:
6e:74:79:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 19:29:08 2025 by rpki-client