
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft
File: jygQkMQApWFm_Ii083pcuu0hhfA.mft (raw, json)
Hash identifier: lpEkcjHhSHiwbUu2W8edKEAOcw2GYy6yoqlU6M6yc+Q=
Subject key identifier: E9:EA:4E:6D:A4:81:A8:DF:8B:F2:0C:87:DC:41:65:5E:7B:B1:08:63
Authority key identifier: 8F:28:10:90:C4:00:A5:61:66:FC:88:B4:F3:7A:5C:BA:ED:21:85:F0
Certificate issuer: /CN=8f281090c400a56166fc88b4f37a5cbaed2185f0
Certificate serial: 0198D473934F5A149ECFBA6D5DC6D62703BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jygQkMQApWFm_Ii083pcuu0hhfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 01:03:20 +0000
Manifest this update: Sat 23 Aug 2025 01:03:20 +0000
Manifest next update: Sun 24 Aug 2025 01:03:20 +0000
Files and hashes: 1: 7XUdeR7Uiqy2nX_SzaBAY10QtF0.roa (hash: NZuDg+MfyuXfdZEwhDepOr5DFbg1lkCScWpvXsHFUtQ=)
2: jygQkMQApWFm_Ii083pcuu0hhfA.crl (hash: K8jTOt7pVa4MieuLE3B7EjuHx9lzWbx/jD6KzQuzqqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jygQkMQApWFm_Ii083pcuu0hhfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:93:4f:5a:14:9e:cf:ba:6d:5d:c6:d6:27:03:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f281090c400a56166fc88b4f37a5cbaed2185f0
Validity
Not Before: Aug 23 01:03:20 2025 GMT
Not After : Aug 24 01:03:20 2025 GMT
Subject: CN=e9ea4e6da481a8df8bf20c87dc41655e7bb10863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c4:70:f6:55:72:00:be:34:00:27:d0:56:44:
e9:79:1e:f3:7a:80:8b:cb:57:26:71:71:dc:f4:b8:
76:8e:fe:09:46:99:37:d2:49:19:ce:7d:6c:f5:35:
de:aa:0a:a2:99:b8:e7:61:2d:ce:14:f1:a5:6d:31:
c1:03:c0:70:91:ed:3d:7f:c3:eb:83:25:f3:1d:ba:
4e:47:d4:54:50:44:db:5f:6f:87:9c:ff:36:40:b4:
12:f8:00:37:64:0b:35:6a:92:ef:e1:19:c9:0b:8a:
34:b9:63:76:0c:1f:29:1c:b1:d0:44:65:8a:23:91:
11:52:24:ed:09:21:4f:73:d9:72:49:39:ff:40:36:
8e:97:b1:8d:82:df:f9:ec:37:d1:9d:2b:58:82:c8:
bd:d0:eb:bd:57:99:b4:17:b8:75:1c:93:0f:a7:15:
e1:ea:63:38:10:08:c0:8d:38:12:67:7f:f5:84:8d:
7c:e5:fe:7f:3c:6f:b3:46:e1:37:cb:03:12:32:e7:
ce:74:d8:cf:d2:1b:90:9e:8b:dd:a4:75:8b:86:29:
d8:c6:04:35:df:9e:60:61:9a:f1:a3:aa:73:5b:3b:
1c:c1:ab:40:7e:90:20:1d:e0:be:e6:1d:4d:36:c4:
a9:12:40:5d:97:29:a8:26:cb:80:0a:7f:b0:d3:d4:
c4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:EA:4E:6D:A4:81:A8:DF:8B:F2:0C:87:DC:41:65:5E:7B:B1:08:63
X509v3 Authority Key Identifier:
keyid:8F:28:10:90:C4:00:A5:61:66:FC:88:B4:F3:7A:5C:BA:ED:21:85:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jygQkMQApWFm_Ii083pcuu0hhfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:20:a7:3b:36:5c:f0:60:1e:3d:df:2c:89:7a:08:52:60:ab:
55:69:b3:c3:b7:47:86:5a:a9:c8:fe:cd:ee:45:dc:c2:12:e3:
1d:14:6b:88:e9:44:6b:67:63:03:3c:ef:4e:2f:82:89:74:a8:
5d:4b:a1:3e:55:48:81:0f:56:5e:c0:d0:5c:4a:5d:6d:ff:1f:
c9:2f:fd:bc:98:63:db:23:44:23:af:2d:12:17:87:d5:b2:5b:
62:63:59:22:cb:b0:1e:08:fc:41:25:3e:b5:cb:d0:ea:46:8b:
d3:80:b3:7c:8a:aa:98:a4:ab:30:ba:2f:25:4e:7b:4e:66:28:
02:e7:9d:99:e9:1c:a5:3c:18:89:5b:1d:06:1f:e7:99:4b:08:
99:ce:bc:15:f9:e9:d4:79:8a:c3:3f:0a:c1:0c:60:c2:0a:a3:
8c:1b:91:f8:7d:ca:47:13:20:1c:2f:11:51:63:53:00:16:16:
6d:7e:c0:99:76:d8:b3:f6:99:41:65:ce:55:c7:54:ae:6c:d8:
3c:d9:13:97:dd:9d:2f:86:da:bf:cf:2d:7f:e3:9f:41:b2:c6:
22:53:b1:aa:30:3b:c0:39:b2:89:8b:09:6a:55:45:c0:74:2d:
da:f7:e3:d0:15:b8:5b:04:20:c1:e9:bd:20:d0:56:c6:4d:2a:
d7:54:1b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:48:33 2025 by rpki-client