Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft
File: jY9-tNJUj5zL88s45wKhkMEXQvU.mft (raw, json)
Hash identifier: 6fOVMyJhEv3Begfr4pT6IbwHyiPV/Mfmz9yyp1kkiiQ=
Subject key identifier: DF:02:F9:F3:CA:C2:7C:BD:7C:C6:66:BC:82:42:CA:70:0B:74:E9:87
Authority key identifier: 8D:8F:7E:B4:D2:54:8F:9C:CB:F3:CB:38:E7:02:A1:90:C1:17:42:F5
Certificate issuer: /CN=8d8f7eb4d2548f9ccbf3cb38e702a190c11742f5
Certificate serial: 0199FDD9E460954D73C81746B2FA25F5AB1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 19:02:19 +0000
Manifest this update: Sun 19 Oct 2025 19:02:19 +0000
Manifest next update: Mon 20 Oct 2025 19:02:19 +0000
Files and hashes: 1: JoTSZ8E8fkiS501xBbOY7pc3jM8.roa (hash: JoNzI4ZspphrrJoARed2dcoamemKZ5kg0l+d/5sdlcM=)
2: SqfaLa-P64VMRzLu45OzZ7O-myU.roa (hash: 8RixXJbGYWZA//tOAjP6K4ex9vVhr1Y3178psfUi1TM=)
3: jY9-tNJUj5zL88s45wKhkMEXQvU.crl (hash: efQqrIaTx0d3jTqLb0aQh82ZwFVZLB9TZCa3Jik3d1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:e4:60:95:4d:73:c8:17:46:b2:fa:25:f5:ab:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d8f7eb4d2548f9ccbf3cb38e702a190c11742f5
Validity
Not Before: Oct 19 19:02:19 2025 GMT
Not After : Oct 20 19:02:19 2025 GMT
Subject: CN=df02f9f3cac27cbd7cc666bc8242ca700b74e987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0b:78:4e:0b:1b:54:11:3b:d8:2b:2b:d2:e3:
ec:43:a1:3b:1f:bc:8b:b7:f5:d6:11:8e:a5:4d:1b:
ed:88:2f:de:ad:65:c9:5d:0b:cd:7c:50:8a:e8:0d:
26:e2:fa:2b:e4:49:91:a9:6f:bf:95:87:25:6e:ed:
dc:5a:3b:9d:d5:c3:e5:dd:c7:ab:a8:a3:74:a4:71:
06:4d:7b:c8:01:1c:d7:74:d3:73:f4:13:bc:5c:a7:
e8:6d:cf:25:4e:62:97:83:db:80:6d:f1:42:c7:a8:
20:ec:6d:ae:39:1c:ba:28:fd:4e:a8:cc:31:8e:c8:
00:f8:f1:b6:5f:26:7b:b2:6e:5d:9e:09:62:83:28:
62:95:de:c3:4d:cb:b7:fa:8b:bf:72:b5:98:0c:d6:
28:c3:94:44:2d:ae:da:19:f4:b9:e3:5b:a0:9e:8a:
a2:6c:9a:35:7d:2b:2f:56:4e:9a:13:62:ca:44:2b:
13:21:9f:aa:64:12:6d:4b:58:ce:95:dc:a5:ff:b7:
19:78:87:d4:f5:02:68:f1:b3:62:f2:4a:ce:4a:ed:
c7:4b:25:1f:19:ee:4c:9e:1c:fc:ec:29:f4:57:d1:
04:37:76:e6:f7:db:a8:f6:fc:72:98:81:28:1b:ff:
55:09:96:cf:ea:95:a6:ff:be:ac:93:1d:11:b4:42:
de:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:02:F9:F3:CA:C2:7C:BD:7C:C6:66:BC:82:42:CA:70:0B:74:E9:87
X509v3 Authority Key Identifier:
keyid:8D:8F:7E:B4:D2:54:8F:9C:CB:F3:CB:38:E7:02:A1:90:C1:17:42:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b6:e0:f3:20:cf:67:e5:26:2a:55:6c:db:a0:1a:21:e3:34:
16:c6:c3:3f:76:36:af:e2:9d:92:db:45:49:5b:e0:55:ec:d8:
a9:93:a1:07:22:47:d8:87:7d:fc:58:76:d7:2c:ed:7d:9f:d9:
14:a0:b5:df:0c:bf:f2:72:cb:6f:a2:bb:85:74:1a:9b:a4:36:
43:b9:96:67:ba:9b:84:d3:c8:d4:2b:30:7b:90:70:15:ec:7b:
11:6f:94:d0:db:40:99:b7:e4:06:4f:c1:7c:e0:f3:d2:06:63:
80:de:8a:9f:4a:15:8f:c6:5e:17:97:92:ed:58:06:dd:45:b8:
61:90:58:8e:2d:78:9c:6a:81:31:1a:13:0f:a1:5e:09:ab:f7:
dd:65:cc:8b:54:07:c0:7a:c1:65:a4:fd:64:e5:af:eb:fc:04:
35:67:e2:72:ab:fd:a5:3f:4a:17:4c:36:8a:81:22:33:ef:55:
8e:4c:41:6f:4d:3c:31:ac:53:ee:de:19:eb:85:14:6a:3a:e9:
01:04:f3:46:ab:85:4c:ad:31:80:77:ea:96:a6:94:67:b0:50:
9c:6f:54:91:67:fd:1a:75:5f:4a:4e:f2:1e:93:51:5d:cc:0f:
2d:57:b3:4f:c4:72:63:b9:55:69:0c:30:2d:0b:4c:49:84:4b:
f0:17:04:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:11:59 2025 by rpki-client