Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft
File: jygQkMQApWFm_Ii083pcuu0hhfA.mft (raw, json)
Hash identifier: QyBPMRaCfxLjB5MfZ/es4C+zBsb4m8ApJwoa8WOjSFQ=
Subject key identifier: BC:A8:30:9D:A4:B1:03:F4:A6:CF:23:BD:0B:34:1B:85:B1:47:91:5A
Authority key identifier: 8F:28:10:90:C4:00:A5:61:66:FC:88:B4:F3:7A:5C:BA:ED:21:85:F0
Certificate issuer: /CN=8f281090c400a56166fc88b4f37a5cbaed2185f0
Certificate serial: 0199FBEB074853FAA6FF9417FF6B6A97CE17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jygQkMQApWFm_Ii083pcuu0hhfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:01:47 +0000
Manifest this update: Sun 19 Oct 2025 10:01:47 +0000
Manifest next update: Mon 20 Oct 2025 10:01:47 +0000
Files and hashes: 1: 7XUdeR7Uiqy2nX_SzaBAY10QtF0.roa (hash: NZuDg+MfyuXfdZEwhDepOr5DFbg1lkCScWpvXsHFUtQ=)
2: jygQkMQApWFm_Ii083pcuu0hhfA.crl (hash: /w93Qu2Q6Ul4WrAWJOelWJEWZwCCsr6ZovQDW9IKZzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jygQkMQApWFm_Ii083pcuu0hhfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:07:48:53:fa:a6:ff:94:17:ff:6b:6a:97:ce:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f281090c400a56166fc88b4f37a5cbaed2185f0
Validity
Not Before: Oct 19 10:01:47 2025 GMT
Not After : Oct 20 10:01:47 2025 GMT
Subject: CN=bca8309da4b103f4a6cf23bd0b341b85b147915a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f0:c0:2b:b5:b6:e9:b6:41:05:41:9d:e9:ca:
93:41:a9:5f:2b:1e:b8:ba:6a:0f:51:e2:74:47:ac:
27:10:a9:03:72:38:09:4e:7f:d0:c7:65:5e:2a:ee:
50:5e:c2:6d:d5:1e:1a:17:29:b5:38:79:18:48:81:
a7:44:94:6e:d2:c4:81:fa:fb:45:de:38:fc:65:c1:
27:ba:ff:b5:52:d4:1c:e0:a5:af:d7:85:b6:c5:0c:
c7:7f:cd:89:e0:38:4f:a1:f2:d2:1a:c9:6f:b0:a1:
8f:b3:08:a0:da:21:7a:6c:11:1a:65:0e:31:74:bf:
18:ac:60:8a:78:56:db:dd:9f:13:16:cf:98:46:1f:
c6:22:d8:47:03:c6:86:6c:88:5f:47:38:18:da:bc:
c4:55:ce:da:ce:07:87:6b:61:87:52:c0:88:04:a8:
08:e5:f0:1a:35:2f:f4:ed:01:04:16:d6:2c:41:f6:
51:90:c8:84:5a:40:b6:37:e9:85:a2:1a:75:9d:56:
44:f8:3c:81:80:ad:f5:2e:1c:fc:c0:f9:24:f8:53:
15:fe:7d:f2:19:a4:b6:61:84:e5:4a:7a:87:c4:2b:
d1:af:9e:bf:31:b8:2f:b6:46:d9:c5:df:5c:fa:0a:
95:c9:85:60:6b:88:0d:54:f0:43:cf:af:f2:9e:20:
82:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A8:30:9D:A4:B1:03:F4:A6:CF:23:BD:0B:34:1B:85:B1:47:91:5A
X509v3 Authority Key Identifier:
keyid:8F:28:10:90:C4:00:A5:61:66:FC:88:B4:F3:7A:5C:BA:ED:21:85:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jygQkMQApWFm_Ii083pcuu0hhfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/3222e2-6456-4c6a-b197-205895961493/1/jygQkMQApWFm_Ii083pcuu0hhfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:08:db:28:a9:de:89:d2:6d:d0:32:e9:f9:1c:ff:44:f8:94:
fa:1e:6f:4f:8b:f7:d9:4d:26:e4:b8:19:94:a4:4f:19:9d:b9:
e6:50:69:b2:18:c1:ee:41:4f:d2:e9:93:c6:11:de:f9:c1:4e:
15:a5:eb:80:53:11:d8:d8:02:59:23:9a:4a:ec:ae:6a:39:85:
7b:a1:2a:02:f4:21:b0:af:f8:bb:c9:bc:1d:3e:cb:08:d7:22:
dc:f6:28:83:d7:61:01:a5:b8:e5:39:6a:0c:ae:c1:3b:50:1c:
d5:5b:76:e0:a2:f8:8c:4b:2b:95:17:6f:1c:b0:75:9c:a9:fe:
f5:97:ee:c6:f3:24:e9:4f:c8:19:85:dd:71:6f:ea:78:7c:ea:
9a:d8:59:6d:ec:b5:58:26:62:23:2a:0a:f4:3a:de:93:75:c9:
fb:1f:a9:5e:85:35:45:50:2e:e3:cd:f4:e7:50:23:93:32:0e:
a5:c3:11:ac:d7:5a:59:14:d8:26:f9:33:eb:65:85:f9:99:5c:
58:76:fd:f4:9a:b0:98:ec:b7:c6:d7:25:95:37:74:30:a8:79:
ec:03:7f:18:8e:55:6b:0f:7e:57:49:96:18:2b:28:e9:e4:db:
d1:21:53:cb:b3:84:1f:24:a0:16:63:71:ee:a5:1d:67:07:74:
4a:4a:5d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:00:22 2025 by rpki-client