Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
File: jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft (raw, json)
Hash identifier: r55dO5xUX9256nlSXKft78UxGkMm954MrdkomkjYEog=
Subject key identifier: 4C:6B:47:84:5E:9C:B7:D7:A1:C6:9D:51:D3:EB:64:9E:12:22:1B:37
Authority key identifier: 8F:28:24:C6:13:57:DC:34:4B:BD:F3:5B:83:57:74:59:B9:D3:FC:44
Certificate issuer: /CN=8f2824c61357dc344bbdf35b83577459b9d3fc44
Certificate serial: 0199FBB35EC2AEEA707CACF943BE70D423BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
Manifest number: 12E3
Signing time: Sun 19 Oct 2025 09:01:00 +0000
Manifest this update: Sun 19 Oct 2025 09:01:00 +0000
Manifest next update: Mon 20 Oct 2025 09:01:00 +0000
Files and hashes: 1: c3WDl8SfFCkca3Wid6jBSPNKAGE.roa (hash: lxKRn2VdYBDHJ0paIp1wPq/rCuS2/hh20C+G3q+EDZo=)
2: jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl (hash: TEPqjT8GbC4+nMBTlCvJYLHmA4KqKjufrZkQF89D/w8=)
3: ly2mgBHHZLNGBUFfqCjRrV2SvFo.roa (hash: shkitV/EoiiYPYmD6wkEJAUrA2P9DugMTMa+mPtgOi8=)
4: praewBGKObVyHJrk-EW3SR6etDM.roa (hash: SH0U3WS8ZCn7PM3WLsz5WjDkQUu5ZhLAkIQAfKgw1ew=)
5: yfYVimwILKV-qGFqMNBusDCcVjQ.roa (hash: nk++/uFa+Aub+3IrRDF5TU2OMotYcxaO9cJ/XQbZB+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:5e:c2:ae:ea:70:7c:ac:f9:43:be:70:d4:23:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f2824c61357dc344bbdf35b83577459b9d3fc44
Validity
Not Before: Oct 19 09:01:00 2025 GMT
Not After : Oct 20 09:01:00 2025 GMT
Subject: CN=4c6b47845e9cb7d7a1c69d51d3eb649e12221b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:59:0c:a0:95:33:6c:a9:fb:10:43:58:3c:cf:
45:14:70:e5:ab:01:41:bb:61:54:56:96:f3:4f:73:
b3:1d:a9:13:c6:58:b4:0f:fe:6d:42:21:f5:6e:c7:
7c:1e:ce:6a:7d:18:8b:1d:d5:b3:08:49:16:98:a0:
ce:19:fc:dc:b4:ac:47:66:a8:ff:69:5c:7f:9f:2d:
84:77:02:63:ac:72:2e:10:ce:76:c7:a8:53:1f:bc:
3f:5a:97:96:e4:24:01:4f:fc:90:fc:d1:17:2b:71:
46:0f:13:6b:9b:ad:ce:41:ff:1c:12:d5:3a:37:ba:
c7:e1:02:4d:9c:af:da:3a:61:42:03:c0:3c:8c:54:
31:dc:5d:2d:81:be:37:b8:5e:db:b7:9c:d8:cf:78:
3b:5e:0f:30:2f:17:f0:63:a8:8b:8f:8f:08:91:c5:
8e:32:98:be:12:1b:95:de:65:65:35:68:c9:11:00:
cb:4e:77:3c:ec:4f:4e:37:cf:9f:54:92:8c:3a:df:
68:ad:42:bd:72:ba:6b:11:67:60:57:c0:6a:0b:63:
01:fb:da:01:24:3e:af:1d:b7:f6:da:82:e3:00:7f:
32:14:00:86:4f:de:f9:73:98:1b:df:91:b7:72:20:
99:8f:4b:be:55:ec:e8:bf:10:6d:6b:e3:a0:91:df:
9d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6B:47:84:5E:9C:B7:D7:A1:C6:9D:51:D3:EB:64:9E:12:22:1B:37
X509v3 Authority Key Identifier:
keyid:8F:28:24:C6:13:57:DC:34:4B:BD:F3:5B:83:57:74:59:B9:D3:FC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:31:df:01:11:30:8e:0f:25:28:0f:39:cd:62:33:bd:72:33:
cb:41:b2:5f:a3:0f:6b:b3:74:b6:d0:28:74:e1:bd:ff:95:34:
16:6f:e8:2a:e6:33:9f:6e:b0:83:7b:a0:98:c7:6e:24:27:80:
84:b3:77:72:a2:e1:c1:01:ab:32:d5:8e:33:09:bd:4b:98:d1:
e7:9b:bb:ad:56:3f:fb:ed:14:7b:b9:b0:f8:19:00:8c:63:01:
17:db:5e:f5:81:62:df:b7:7a:d9:6c:0b:0e:2f:ad:b1:f3:53:
f6:d2:a7:86:96:22:df:2d:23:77:07:46:a3:5f:50:1a:29:5e:
23:78:47:59:bc:32:c3:7c:2a:a7:6f:33:02:1e:c8:9d:68:a7:
62:03:94:4e:13:c9:9b:e9:9e:fb:01:01:7f:4e:0c:7e:50:50:
4f:3f:06:54:45:4e:46:75:3b:7e:cf:a8:9a:f7:b5:cc:28:eb:
26:cc:7d:95:4c:59:f6:32:1b:10:bd:96:76:4e:6c:d2:e1:5e:
7c:2f:7b:12:2d:2b:9d:7a:65:31:97:7d:50:06:dc:19:b8:69:
29:e4:7d:4c:d2:82:b6:22:ba:b9:78:bf:9c:2d:e7:12:80:c6:
07:12:80:d7:06:3a:5d:fb:6b:62:e0:45:88:a7:49:11:4d:15:
be:65:04:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7s17CrupwfKz5Q75w1CO+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMjgyNGM2MTM1N2RjMzQ0YmJkZjM1YjgzNTc3NDU5Yjlk
M2ZjNDQwHhcNMjUxMDE5MDkwMTAwWhcNMjUxMDIwMDkwMTAwWjAzMTEwLwYDVQQD
Eyg0YzZiNDc4NDVlOWNiN2Q3YTFjNjlkNTFkM2ViNjQ5ZTEyMjIxYjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFkMoJUzbKn7EENYPM9FFHDlqwFB
u2FUVpbzT3OzHakTxli0D/5tQiH1bsd8Hs5qfRiLHdWzCEkWmKDOGfzctKxHZqj/
aVx/ny2EdwJjrHIuEM52x6hTH7w/WpeW5CQBT/yQ/NEXK3FGDxNrm63OQf8cEtU6
N7rH4QJNnK/aOmFCA8A8jFQx3F0tgb43uF7bt5zYz3g7Xg8wLxfwY6iLj48IkcWO
Mpi+EhuV3mVlNWjJEQDLTnc87E9ON8+fVJKMOt9orUK9crprEWdgV8BqC2MB+9oB
JD6vHbf22oLjAH8yFACGT975c5gb35G3ciCZj0u+VezovxBta+Ogkd+dkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFExrR4RenLfXocadUdPrZJ4SIhs3MB8GA1UdIwQY
MBaAFI8oJMYTV9w0S73zW4NXdFm50/xEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanlna3hoTlgzRFJMdmZOYmcxZDBXYm5UX0VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82NTJlYjQtMzIxYy00OGMwLTkyNzIt
M2FlNzExYWYwMzRiLzEvanlna3hoTlgzRFJMdmZOYmcxZDBXYm5UX0VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS82NTJlYjQtMzIxYy00OGMwLTkyNzItM2FlNzExYWYwMzRi
LzEvanlna3hoTlgzRFJMdmZOYmcxZDBXYm5UX0VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYTHfAREw
jg8lKA85zWIzvXIzy0GyX6MPa7N0ttAodOG9/5U0Fm/oKuYzn26wg3ugmMduJCeA
hLN3cqLhwQGrMtWOMwm9S5jR55u7rVY/++0Ue7mw+BkAjGMBF9te9YFi37d62WwL
Di+tsfNT9tKnhpYi3y0jdwdGo19QGileI3hHWbwyw3wqp28zAh7InWinYgOUThPJ
m+me+wEBf04MflBQTz8GVEVORnU7fs+omve1zCjrJsx9lUxZ9jIbEL2Wdk5s0uFe
fC97Ei0rnXplMZd9UAbcGbhpKeR9TNKCtiK6uXi/nC3nEoDGBxKA1wY6XftrYuBF
iKdJEU0VvmUEcA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:45 2025 by rpki-client