Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft
File: jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft (raw, json)
Hash identifier: zEiAAfUeW1WzJnS4hZf5Hr3NxwOzEvelqmLBxgG1b5g=
Subject key identifier: D9:16:9C:E7:FE:13:D7:D8:9A:6E:F2:59:AE:F6:05:76:F7:8D:E7:0B
Authority key identifier: 8D:84:3B:57:D0:AF:CC:11:2F:E3:89:66:8B:F6:75:D8:0D:82:23:DA
Certificate issuer: /CN=8d843b57d0afcc112fe389668bf675d80d8223da
Certificate serial: 0199FCC619B1C8E512177D293AFEDE98EBF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYQ7V9CvzBEv44lmi_Z12A2CI9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft
Manifest number: 0806
Signing time: Sun 19 Oct 2025 14:01:05 +0000
Manifest this update: Sun 19 Oct 2025 14:01:05 +0000
Manifest next update: Mon 20 Oct 2025 14:01:05 +0000
Files and hashes: 1: iKKb1X29tTU2k_RZJyC1P6S0W1I.roa (hash: JYbd5SDgMPm4EIN7ny/Mr7yif1cItUNdM4vZHpLmqsU=)
2: jYQ7V9CvzBEv44lmi_Z12A2CI9o.crl (hash: rIMqfUibSWWfqX0bhBsuKoQGlc/1aHJtm55AFJGWIbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYQ7V9CvzBEv44lmi_Z12A2CI9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:19:b1:c8:e5:12:17:7d:29:3a:fe:de:98:eb:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d843b57d0afcc112fe389668bf675d80d8223da
Validity
Not Before: Oct 19 14:01:05 2025 GMT
Not After : Oct 20 14:01:05 2025 GMT
Subject: CN=d9169ce7fe13d7d89a6ef259aef60576f78de70b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:96:2b:f9:a8:04:bf:ba:17:13:43:56:e1:f4:
6d:43:18:68:7c:af:0c:2c:70:ff:32:af:f5:b7:f8:
1d:90:58:46:8e:1f:52:e3:2c:90:61:0f:ce:2a:1c:
04:de:b3:10:a3:cb:13:e0:10:22:cb:24:35:ac:a5:
f2:15:92:41:1c:65:e2:52:2a:db:89:9f:a2:e3:4f:
0b:44:93:dc:d3:58:6f:02:43:71:4e:48:ad:b0:bb:
d9:49:c2:a5:ae:3a:b4:f7:b9:df:f5:3a:8e:94:c7:
cf:cd:a7:e9:11:70:37:fc:80:ea:5f:2b:96:3e:ac:
b1:af:d8:b2:99:f6:20:67:25:9d:28:6d:23:92:02:
5f:ff:15:16:ed:6e:ff:ad:b0:c5:4b:93:15:1b:75:
bc:25:bd:c7:ab:cc:9e:19:0c:1d:8b:f9:6e:41:c3:
7e:ad:3a:59:a3:b4:7b:6f:b5:d7:b7:49:33:a7:7e:
6e:42:a8:d6:79:a5:2e:d1:fa:64:61:85:1e:8b:f2:
02:0b:a0:19:1d:a5:33:d9:ff:e1:2f:05:65:33:e4:
d5:f3:f5:0a:dd:80:da:ca:4e:b7:20:9b:6c:3e:38:
10:a7:f6:b5:34:ad:b2:9a:91:d6:5e:c7:73:c4:22:
eb:9d:84:47:92:f9:7c:ba:5d:6d:1b:9c:7e:eb:ca:
ae:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:16:9C:E7:FE:13:D7:D8:9A:6E:F2:59:AE:F6:05:76:F7:8D:E7:0B
X509v3 Authority Key Identifier:
keyid:8D:84:3B:57:D0:AF:CC:11:2F:E3:89:66:8B:F6:75:D8:0D:82:23:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYQ7V9CvzBEv44lmi_Z12A2CI9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/1ac271-6be9-4a14-8616-465a333ab444/1/jYQ7V9CvzBEv44lmi_Z12A2CI9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:fc:79:d2:0e:65:f1:22:3b:eb:f0:c3:5f:f2:40:ca:ac:99:
76:fd:75:e4:b1:4c:90:8a:12:0b:06:b8:2d:18:8a:e7:72:06:
cb:b4:aa:b7:4c:1c:52:dd:1b:70:11:7e:37:9f:ae:50:aa:ab:
43:f9:a6:67:7b:ac:e3:1c:ea:11:a7:59:93:f1:68:9d:a6:b8:
74:5a:55:a8:c2:51:5d:4d:92:f8:07:0e:1e:33:e6:80:63:8b:
42:a5:14:3c:f1:57:fc:4f:b9:12:6d:e5:a6:2b:5c:26:f1:5a:
e5:00:79:7b:9c:69:5f:80:e2:ad:b4:c1:c5:e9:80:e1:e1:51:
a5:6e:48:e7:dc:4a:38:42:4a:56:b4:b2:1d:62:68:71:59:06:
84:67:c4:26:b4:44:85:4d:16:32:80:e2:90:df:60:32:84:b4:
4a:d3:34:de:ed:cc:6f:7e:8d:cd:ff:e5:d1:2c:b5:d3:60:2d:
9d:b5:9e:16:a6:b3:da:5a:92:77:e6:6a:e0:cb:d6:f8:f4:5b:
f1:96:75:c4:51:d5:b7:e4:7d:6b:29:1a:0a:68:8b:ed:17:29:
9b:bd:3b:e0:41:0c:48:ed:db:74:7f:f2:6c:eb:ad:80:7d:52:
3f:5e:5c:39:d0:29:07:cd:74:d3:e4:41:2e:2a:22:78:c0:b3:
be:07:65:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:53:28 2025 by rpki-client