Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft
File: jYhinjx4EKzCKOF6GNtnlOvtgZM.mft (raw, json)
Hash identifier: /ur1tBSZJzao1QbXrgnX/NQZHeihqdBQ0jSVUW9z36E=
Subject key identifier: 52:5D:9C:79:6D:E2:00:25:06:57:0F:31:13:B8:B7:AC:A3:4B:62:FE
Authority key identifier: 8D:88:62:9E:3C:78:10:AC:C2:28:E1:7A:18:DB:67:94:EB:ED:81:93
Certificate issuer: /CN=8d88629e3c7810acc228e17a18db6794ebed8193
Certificate serial: 0197BA0F571F46F385F2A8B4AFFE06348FA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYhinjx4EKzCKOF6GNtnlOvtgZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft
Manifest number: 127A
Signing time: Sun 29 Jun 2025 05:00:56 +0000
Manifest this update: Sun 29 Jun 2025 05:00:56 +0000
Manifest next update: Mon 30 Jun 2025 05:00:56 +0000
Files and hashes: 1: ZBTvhiqTow3aNMb2aKed7aOmeLE.roa (hash: Hs63HPHm64omZRW3Iw+4oLNTtYpDyEs3J5diEPbkms4=)
2: jYhinjx4EKzCKOF6GNtnlOvtgZM.crl (hash: amKdsjQs03ejE17koFwQvsyez3J0k4WMeZHYuMLs7yU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYhinjx4EKzCKOF6GNtnlOvtgZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:57:1f:46:f3:85:f2:a8:b4:af:fe:06:34:8f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d88629e3c7810acc228e17a18db6794ebed8193
Validity
Not Before: Jun 29 05:00:56 2025 GMT
Not After : Jun 30 05:00:56 2025 GMT
Subject: CN=525d9c796de2002506570f3113b8b7aca34b62fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:08:ec:48:82:93:f9:0d:7a:71:fe:a5:8e:9f:
83:22:68:ca:a3:e0:89:c8:d7:97:1b:96:45:fd:fd:
76:38:76:0a:b7:05:20:78:62:93:7f:18:5d:53:fa:
f1:f1:5c:d5:10:92:81:ec:dd:cb:a1:dc:8a:01:6e:
7c:40:52:35:93:cc:68:3c:99:9f:15:b5:74:08:3c:
fe:52:18:e1:e0:23:bd:4c:cc:50:a0:9a:94:99:d0:
42:73:2f:85:1f:95:fd:74:f2:c7:5a:e9:ff:2f:36:
da:27:db:78:c4:a1:96:61:14:54:b5:43:e3:f1:09:
01:a9:a4:24:4e:e3:7a:6d:a2:e7:30:c3:fc:ba:c5:
0b:8c:89:66:0c:07:bd:57:9f:9b:98:14:d3:4e:e2:
3e:d7:60:98:a6:82:10:19:3c:77:a2:33:9e:c2:29:
ef:3c:5b:e1:84:47:34:e5:92:e7:61:ae:03:31:4b:
6d:f9:56:f0:08:3c:2b:37:60:cf:5d:b7:1b:db:09:
7f:d4:ab:68:30:88:17:97:b9:b5:95:d6:f0:6d:7e:
2f:23:bb:e3:de:bd:e7:fc:76:39:ff:ba:b9:c6:ac:
99:60:81:1f:99:4b:9d:c3:0e:9a:20:64:e5:b8:c1:
3c:e8:99:09:d2:33:7a:6d:71:fa:3b:c1:d7:4b:8d:
8e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5D:9C:79:6D:E2:00:25:06:57:0F:31:13:B8:B7:AC:A3:4B:62:FE
X509v3 Authority Key Identifier:
keyid:8D:88:62:9E:3C:78:10:AC:C2:28:E1:7A:18:DB:67:94:EB:ED:81:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYhinjx4EKzCKOF6GNtnlOvtgZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:fa:92:6d:2b:b7:88:3f:3b:7d:f1:86:32:84:3c:6a:fc:7b:
49:1a:b1:c4:c6:1b:dd:3e:e7:ac:13:2e:d9:2d:6b:97:37:16:
95:94:df:f1:bf:f2:dd:3c:81:24:51:3a:4e:d2:50:d1:c2:e6:
d9:b6:19:12:9b:14:c5:f1:f7:bf:c6:f7:a2:17:05:36:8a:98:
08:60:1b:c2:6f:d9:8d:16:24:d9:93:7b:4a:83:a3:8e:4c:3b:
9d:c8:99:4e:ac:6f:0c:b7:d4:70:5b:10:b3:3c:31:ba:fa:e7:
37:1a:26:2f:67:89:51:a6:a7:dd:13:40:45:c2:96:8b:4c:aa:
2c:71:d0:a6:8c:5f:41:7c:ef:58:54:bf:2a:95:c2:70:e8:42:
4d:53:4b:19:b7:88:59:67:80:f5:cd:45:d9:38:12:9b:a6:65:
07:52:15:3b:75:0d:22:a3:5a:f6:17:6b:d3:16:c7:a2:43:62:
a7:69:c7:18:90:58:cd:4b:62:b1:39:90:26:5e:04:45:31:f4:
87:8f:a9:15:f6:2d:4a:79:7a:3b:5e:3c:21:3a:26:8c:8c:a7:
71:f8:a8:2a:90:7e:52:14:56:93:da:13:04:14:df:73:9e:b1:
02:65:84:f2:98:de:e9:c6:46:73:69:0b:5f:e3:a3:75:38:09:
5a:ea:74:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:07:38 2025 by rpki-client