Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
File: jYkiPB8zXAzFaTWfot2jSaIjbMs.mft (raw, json)
Hash identifier: sfMAe9Ealr/hRvB3Pq51v0Ax9TuYW3gzlXFfP/2RQ+A=
Subject key identifier: AB:9E:84:37:BD:11:63:76:D8:48:CF:25:21:4F:FB:58:3D:B9:D8:59
Authority key identifier: 8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
Certificate issuer: /CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Certificate serial: 0198D4A80FD30EF8C0D65B719A28C8D9792E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
Manifest number: 1011
Signing time: Sat 23 Aug 2025 02:00:40 +0000
Manifest this update: Sat 23 Aug 2025 02:00:40 +0000
Manifest next update: Sun 24 Aug 2025 02:00:40 +0000
Files and hashes: 1: 1-VympxjBDWi5MNPd5PqkAiFK8cw.roa (hash: g9oAglIOu05tbBj4MBirO8ol3RXV21sLtMa1CGtPD7w=)
2: Xb2vaf1WumE3rEaoURHut1_s3Jg.roa (hash: nAy8xAAS6bySEPJLqhsAFhoLRm4dRlqUVQKPoHtpfZc=)
3: jYkiPB8zXAzFaTWfot2jSaIjbMs.crl (hash: l3EN/tZ6yYSlvZha/ZPYFBmd3Pdz8LaG0pILQ+gV2xA=)
4: x-ypFNam44Ex8bmMEi_YpNw0fuw.roa (hash: tV3tXNlddvZJeiOgiT78kd/ynwSRXH2x5HrUpgSwbwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:0f:d3:0e:f8:c0:d6:5b:71:9a:28:c8:d9:79:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Validity
Not Before: Aug 23 02:00:40 2025 GMT
Not After : Aug 24 02:00:40 2025 GMT
Subject: CN=ab9e8437bd116376d848cf25214ffb583db9d859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e6:40:c7:6f:9e:fc:99:47:65:18:ac:a7:3d:
c1:12:d2:ff:c0:b6:ec:be:99:94:0d:a3:49:e6:bd:
8f:a6:68:65:0b:35:95:40:ee:cd:bf:e9:6c:d7:0f:
ed:ef:0e:40:fd:af:e0:cb:df:ce:dd:5d:52:d9:41:
52:9f:75:27:55:fd:0e:e2:00:da:6b:24:84:49:3b:
02:36:6d:4f:fc:7f:6c:f8:3a:ae:6b:ac:40:6a:e2:
a5:72:bf:d4:61:cb:51:00:01:13:0d:79:fa:99:fa:
4f:0b:b8:1b:21:58:bd:49:6d:8f:d1:f8:07:92:fe:
cf:bc:3f:f3:c3:c0:75:c6:b8:78:93:fe:16:d3:10:
68:05:32:52:76:59:b2:3e:32:64:2b:8c:25:47:18:
4a:b0:33:e2:63:1d:c1:95:5b:20:d2:66:ae:5e:99:
54:00:f6:6f:e1:85:63:0e:dd:2e:a1:b8:e1:2b:35:
b7:0c:a4:0e:c8:7b:2c:77:3c:b6:69:7e:b4:9e:d6:
24:fe:9c:b2:dc:91:53:20:f7:89:97:1c:61:c5:ef:
4e:2e:c4:6e:a1:fa:41:a9:4b:91:8a:7b:43:96:7c:
44:af:8a:d0:dc:01:ef:53:2e:16:b8:80:e5:66:d0:
e8:78:17:f8:ab:3c:ed:d6:84:b6:91:2a:84:59:92:
ed:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:9E:84:37:BD:11:63:76:D8:48:CF:25:21:4F:FB:58:3D:B9:D8:59
X509v3 Authority Key Identifier:
keyid:8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:33:06:91:8d:40:4b:80:00:eb:5b:a0:8d:78:23:a6:79:89:
6f:33:08:d7:50:a0:e3:a1:6c:bb:e4:e5:7c:5b:ff:04:be:5a:
e7:4c:a2:e0:9e:11:0b:20:fa:92:a6:22:c2:88:dd:76:ea:dc:
cc:62:66:bd:21:5d:21:c7:e3:ae:49:d6:a1:42:1d:ab:32:d2:
f1:99:a8:c4:c6:d0:a8:84:27:00:f2:1f:ef:f1:d8:1c:18:6b:
65:3f:cf:e8:15:d0:08:01:4c:05:b6:36:54:39:49:a1:e8:c6:
db:d8:e5:af:c6:ef:bc:25:05:65:47:cb:24:59:46:82:27:e1:
87:30:4f:39:b3:63:0c:0d:a0:47:b7:34:b4:46:a2:81:12:45:
81:95:7f:2a:ec:dd:d6:2e:14:21:31:d0:97:bd:3b:c6:01:dc:
7a:53:f2:e3:fc:e7:8b:1d:70:43:a3:09:24:97:1d:08:60:b0:
60:9c:df:d8:fa:c2:2b:05:d7:41:5b:d1:f1:59:ee:09:f0:1e:
40:bf:ee:6a:01:91:1d:d0:05:aa:44:1f:42:5d:3a:f6:41:e1:
3b:61:0a:66:99:b7:ea:8a:53:04:7a:f3:12:7d:ad:ce:d3:ae:
78:95:06:59:a1:26:ef:b9:c3:a4:35:d9:46:b7:5a:b6:f3:7c:
26:7f:05:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:45 2025 by rpki-client