Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9b57ab-6ca2-4aa8-8387-afdd53827e93/1/JYkGVU2Mi0KO3oyzUCaGDT13cd8.mft
File: JYkGVU2Mi0KO3oyzUCaGDT13cd8.mft (raw, json)
Hash identifier: R2Omoc7q+3lAtAwKsY94VKAqdDQ15BTFmOEPHKHbD6M=
Subject key identifier: FF:95:F3:8E:A9:C4:6E:DD:0D:57:8B:48:07:20:6A:FB:85:61:48:55
Authority key identifier: 25:89:06:55:4D:8C:8B:42:8E:DE:8C:B3:50:26:86:0D:3D:77:71:DF
Certificate issuer: /CN=258906554d8c8b428ede8cb35026860d3d7771df
Certificate serial: 0198D6CD9C59E44D93DC93E01F5C4194EA4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYkGVU2Mi0KO3oyzUCaGDT13cd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/9b57ab-6ca2-4aa8-8387-afdd53827e93/1/JYkGVU2Mi0KO3oyzUCaGDT13cd8.mft
Manifest number: 0D2A
Signing time: Sat 23 Aug 2025 12:00:55 +0000
Manifest this update: Sat 23 Aug 2025 12:00:55 +0000
Manifest next update: Sun 24 Aug 2025 12:00:55 +0000
Files and hashes: 1: JYkGVU2Mi0KO3oyzUCaGDT13cd8.crl (hash: spGqxzR8hK43FxJIG17GqOB1HVcplmoRIX/Sr50pdms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/9b57ab-6ca2-4aa8-8387-afdd53827e93/1/JYkGVU2Mi0KO3oyzUCaGDT13cd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/9b57ab-6ca2-4aa8-8387-afdd53827e93/1/JYkGVU2Mi0KO3oyzUCaGDT13cd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JYkGVU2Mi0KO3oyzUCaGDT13cd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:9c:59:e4:4d:93:dc:93:e0:1f:5c:41:94:ea:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=258906554d8c8b428ede8cb35026860d3d7771df
Validity
Not Before: Aug 23 12:00:55 2025 GMT
Not After : Aug 24 12:00:55 2025 GMT
Subject: CN=ff95f38ea9c46edd0d578b4807206afb85614855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b7:5a:1d:a0:57:d4:b8:71:97:62:34:e2:63:
db:bc:80:e2:1c:c8:dc:e6:e1:70:89:92:e5:25:ed:
18:84:30:44:bf:b6:ae:a6:4e:32:33:57:54:55:d8:
fc:1d:e6:f7:28:a9:0b:cd:57:96:2b:a9:0e:19:d8:
3e:d7:55:ae:e2:b0:7a:63:ee:7b:b0:77:b9:0a:de:
1b:33:64:f0:e0:15:42:bb:da:91:5f:bb:7b:eb:f3:
bd:13:4c:c3:2d:e5:dc:5f:7a:63:3c:89:6e:ff:11:
ab:34:fa:36:49:0f:33:95:35:48:81:b9:6c:a4:4b:
bf:ec:61:2a:b7:fa:57:c4:57:28:9f:2c:eb:a2:71:
41:90:4e:70:29:d3:e9:c2:a1:78:59:42:5f:d3:9d:
99:2b:5c:ee:d1:bf:35:91:5a:1a:f6:72:ef:6d:a3:
e0:e2:75:44:01:73:1b:59:75:33:2e:fc:2d:b9:1f:
d6:d7:c3:08:94:79:1a:af:db:d3:16:4d:c8:9b:55:
34:b8:2c:d1:d7:75:d5:5c:47:b9:27:27:45:ea:08:
36:03:d5:88:54:ec:98:ef:94:07:58:62:d0:a0:7c:
f3:4b:ce:92:a8:d5:5a:06:a6:69:e8:77:d4:fa:70:
8c:69:b0:db:bf:c5:c9:fc:02:f6:a8:e8:9c:37:f0:
c9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:95:F3:8E:A9:C4:6E:DD:0D:57:8B:48:07:20:6A:FB:85:61:48:55
X509v3 Authority Key Identifier:
keyid:25:89:06:55:4D:8C:8B:42:8E:DE:8C:B3:50:26:86:0D:3D:77:71:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYkGVU2Mi0KO3oyzUCaGDT13cd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9b57ab-6ca2-4aa8-8387-afdd53827e93/1/JYkGVU2Mi0KO3oyzUCaGDT13cd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9b57ab-6ca2-4aa8-8387-afdd53827e93/1/JYkGVU2Mi0KO3oyzUCaGDT13cd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:b7:e6:02:aa:a9:0e:ac:87:d3:7a:9b:e4:d6:73:41:cb:20:
70:88:89:4a:83:97:91:03:72:9e:7b:55:88:71:af:b2:93:de:
bf:40:f6:fd:e7:9d:2f:25:d4:46:33:1f:0c:82:fe:02:a5:58:
1b:1c:64:2a:27:7d:14:da:f8:c1:69:73:7f:e0:2c:ac:f0:83:
ff:d3:b7:60:99:81:61:0e:85:7f:85:43:93:62:1c:80:d9:33:
5a:e6:2d:06:42:e8:0e:b5:9f:e3:47:5d:a5:97:0e:15:46:2e:
98:3d:01:c6:1b:d3:84:3e:a6:b8:79:78:3d:c1:5a:6b:9f:7b:
78:6a:a3:4e:dc:c2:47:b2:1f:53:ef:bd:8a:4d:3d:dd:db:e3:
78:de:01:9d:5b:a4:60:a7:d9:ff:f8:6b:f4:16:05:cd:b7:68:
40:6c:24:10:2d:dd:b5:2f:78:ef:f8:24:02:57:29:62:ef:4e:
73:a9:51:fd:ee:6c:b2:1e:aa:ea:4c:88:49:4e:31:0b:6a:80:
01:6e:1e:82:48:c3:d9:a0:c8:40:f3:65:ca:aa:c5:f3:dd:2c:
b4:44:36:86:fb:7d:c3:8f:11:5b:a6:fc:96:c5:e8:0e:c0:d3:
c3:de:a3:34:b0:85:47:a7:4f:cf:16:07:05:3a:e2:72:42:df:
d2:3a:9e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:33:08 2025 by rpki-client