Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
File: jYdAeZyRwmMKgJIXjbgk86iJp18.mft (raw, json)
Hash identifier: QGzrMGqevwm6sVJJf++Q6mQJzIQRErSnF66bcUR1Fis=
Subject key identifier: C5:61:A4:F6:5A:6D:C3:67:FA:2F:4A:4E:CE:32:99:65:48:45:00:49
Authority key identifier: 8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F
Certificate issuer: /CN=8d8740799c91c2630a8092178db824f3a889a75f
Certificate serial: 019A2AE7B3DC2DE511F18D6E29BC7C6A9CB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
Manifest number: 16F9
Signing time: Tue 28 Oct 2025 13:00:19 +0000
Manifest this update: Tue 28 Oct 2025 13:00:19 +0000
Manifest next update: Wed 29 Oct 2025 13:00:19 +0000
Files and hashes: 1: K-6vxGr3EkVKtgWk3f7FXppAHWU.roa (hash: OqJwTUOjnt783umU3SvwJ0pGKHDe69wtlF63xIDInso=)
2: K7Su5tLQd2NMZMj9NBaGujGCyFc.roa (hash: mUfUc0m1Q5fvSqMO5jRLGU7xEPj6/17vBXx5MZ0j9fY=)
3: eE7CtoiQAT2pLGSZ83z4bGyxlms.roa (hash: 0jzCXVU/84NgsdnKR1p45oVJW0ZBdnomnSJlnmwgNt0=)
4: jYdAeZyRwmMKgJIXjbgk86iJp18.crl (hash: MgcuGPtpVKh7A0xDXW8mfZzKNHi0rWFQEORYZnqwv8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:e7:b3:dc:2d:e5:11:f1:8d:6e:29:bc:7c:6a:9c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d8740799c91c2630a8092178db824f3a889a75f
Validity
Not Before: Oct 28 13:00:19 2025 GMT
Not After : Oct 29 13:00:19 2025 GMT
Subject: CN=c561a4f65a6dc367fa2f4a4ece32996548450049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1f:fd:25:e5:d8:7f:0f:7a:bc:bc:f0:e5:ed:
c7:63:32:48:51:77:43:7d:dd:68:a8:6a:be:3d:f0:
c3:10:f2:1f:01:d9:71:82:46:af:1d:0f:e8:70:e1:
d4:fe:25:38:ae:a5:c8:e9:cf:0a:93:11:07:67:f2:
ef:8a:27:63:61:12:bd:a5:e1:c2:a3:c3:fb:4b:b1:
50:5b:9e:42:7a:74:f8:82:25:32:64:85:04:00:36:
d3:65:e5:92:bc:a2:10:6e:b3:f9:f7:a9:62:30:24:
38:97:6b:d6:d1:1b:b8:d7:b4:7e:87:31:7d:1f:17:
d2:04:cf:11:17:c7:df:17:6a:3b:69:88:a8:80:84:
c2:1f:be:99:dd:9d:b4:ad:0d:3d:3b:14:19:df:16:
dc:41:40:f6:f4:d9:4c:de:75:b9:1d:a2:74:ee:3e:
fe:bd:2e:5f:fb:72:29:ed:c9:9a:38:98:59:f7:33:
b8:f8:cf:45:71:66:38:d6:95:7b:5e:73:8a:63:62:
70:2b:a4:37:23:4a:2c:95:b5:66:4d:3b:dc:f9:58:
ed:f8:20:af:3c:ba:16:57:48:c6:84:f3:7c:1a:7f:
10:fc:ea:6b:5c:dc:c9:bf:b3:0d:ad:66:b6:86:b6:
e6:c6:bb:ac:5a:f2:89:b9:de:50:fd:83:a7:2e:68:
ca:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:61:A4:F6:5A:6D:C3:67:FA:2F:4A:4E:CE:32:99:65:48:45:00:49
X509v3 Authority Key Identifier:
keyid:8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:e0:5d:3f:03:a9:60:f3:42:81:13:9b:e1:28:43:ca:4b:47:
a8:b1:a5:65:47:5d:12:96:e8:5b:0d:17:38:98:ec:6b:21:e1:
0c:b8:52:46:14:33:8c:89:9c:84:c6:2e:bc:97:6b:fb:e8:b8:
38:0a:7a:8f:76:47:25:bc:65:00:e1:4d:af:17:5a:1e:65:ca:
ea:ee:b1:0c:90:32:cb:0d:4d:ed:0c:4e:e6:be:b5:69:0f:c0:
ea:0c:05:0f:4b:94:ea:4b:71:32:b3:77:b9:4a:d0:60:ae:92:
da:01:45:45:77:77:b8:21:a6:30:9e:d0:60:04:52:0c:b0:7d:
8d:7a:12:ad:ed:ea:67:6e:70:ed:69:57:60:3d:07:cf:78:b0:
24:25:a2:b7:ca:f2:f2:f2:ca:f0:ad:0a:c9:b9:15:42:07:64:
3b:15:a2:67:cf:28:aa:0b:29:4f:22:0a:62:68:2e:4c:67:fa:
1a:fa:3c:4e:f7:22:d9:27:a9:e4:58:16:ac:6a:53:41:8c:9f:
35:f4:e2:3a:3d:bb:c1:ca:16:e4:63:9e:27:4f:18:b9:de:c1:
0d:98:bf:17:25:6d:20:00:55:5a:21:d4:96:0b:75:7c:be:ba:
3d:7d:15:57:15:76:75:67:71:79:63:a1:6f:d2:b3:0f:f9:29:
59:e1:7e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 22:19:20 2025 by rpki-client