Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
File: jYkiPB8zXAzFaTWfot2jSaIjbMs.mft (raw, json)
Hash identifier: /ikV/knMR026VYwk29L1YpzdGwlr2o3V5p9tpYqNVm8=
Subject key identifier: B1:AB:B1:CC:B0:80:2D:E6:EE:29:C8:42:61:96:70:42:94:A2:DF:FE
Authority key identifier: 8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
Certificate issuer: /CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Certificate serial: 0199FEEBD8C4D8F214197FC8A14C2D6531B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
Manifest number: 10AF
Signing time: Mon 20 Oct 2025 00:01:32 +0000
Manifest this update: Mon 20 Oct 2025 00:01:32 +0000
Manifest next update: Tue 21 Oct 2025 00:01:32 +0000
Files and hashes: 1: Xb2vaf1WumE3rEaoURHut1_s3Jg.roa (hash: nAy8xAAS6bySEPJLqhsAFhoLRm4dRlqUVQKPoHtpfZc=)
2: jYkiPB8zXAzFaTWfot2jSaIjbMs.crl (hash: vDjqkk1wZ7iEt0DaIN7fcUGVpXZCphfAGkBI3IeDpXk=)
3: pdhN-MZpD_hNi80yknZO7jZPsqI.roa (hash: Vq61y4v3/rCjHkyR2L7fl+qX1NPi84b5r+WF68rRDB4=)
4: x-ypFNam44Ex8bmMEi_YpNw0fuw.roa (hash: tV3tXNlddvZJeiOgiT78kd/ynwSRXH2x5HrUpgSwbwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:d8:c4:d8:f2:14:19:7f:c8:a1:4c:2d:65:31:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Validity
Not Before: Oct 20 00:01:32 2025 GMT
Not After : Oct 21 00:01:32 2025 GMT
Subject: CN=b1abb1ccb0802de6ee29c8426196704294a2dffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:60:f8:61:77:8a:69:4a:a5:58:a8:61:0e:1c:
91:00:93:db:3f:72:b5:95:4a:6c:10:b4:03:56:34:
9c:6b:66:15:49:28:89:40:f5:09:d7:5b:71:ec:c1:
2c:b7:cf:aa:4e:1b:c7:6f:50:2d:35:d5:bd:81:35:
22:d8:1c:40:32:85:22:84:0b:1b:ac:2e:5f:98:37:
99:5f:55:37:4f:85:24:d1:2d:2d:da:7d:13:5e:42:
18:b2:5a:c9:af:8a:92:1e:33:fe:22:0c:92:59:18:
cc:74:e1:7e:2b:62:fb:c2:29:6a:3b:47:16:bc:a7:
37:f9:2b:6e:9f:86:1d:3c:fe:df:57:57:cc:8a:dd:
f0:78:f8:26:1b:47:ca:cb:ee:12:76:c7:8f:80:f0:
ec:70:e8:5b:ee:d8:e7:06:cf:aa:ac:b7:40:a9:5e:
60:b7:29:2f:d1:65:8e:c2:bc:4a:be:37:41:7b:e1:
7b:c6:f5:16:bf:17:f5:b3:5d:f3:e9:7d:fa:e5:4e:
52:ae:e9:da:a8:fd:5c:99:d4:86:31:6c:73:89:76:
7c:80:b7:e6:fc:3f:ec:5a:d3:32:bd:23:36:45:75:
b0:63:2c:d2:77:69:f1:1b:2f:e4:a5:8b:71:28:a9:
cf:1a:8f:fd:b5:90:c5:6c:20:33:04:37:c8:76:c0:
1c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AB:B1:CC:B0:80:2D:E6:EE:29:C8:42:61:96:70:42:94:A2:DF:FE
X509v3 Authority Key Identifier:
keyid:8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:05:f2:9b:24:27:fd:fc:91:4f:8c:87:68:e1:da:86:3f:45:
50:43:9b:1e:55:d2:82:1d:23:ab:b1:73:8a:27:4d:72:90:72:
85:82:24:e7:d0:da:ad:ee:6b:d9:0f:f7:8d:f9:f0:42:ec:51:
29:2a:a6:7c:7f:bf:e0:27:ae:7f:76:38:61:24:b3:19:88:44:
d2:06:29:63:52:e2:7e:22:8b:75:60:c5:06:06:59:91:4b:02:
9a:25:4e:f7:b2:cd:18:48:49:85:6b:f8:8f:94:b1:cc:92:b3:
42:13:67:ff:aa:b6:1a:a7:ef:97:5d:33:91:51:7a:82:9a:51:
99:54:66:e4:ff:8f:f4:ad:f8:03:c2:e0:8a:d4:66:06:89:ba:
cd:de:f3:7c:83:95:9e:49:d2:d1:67:2d:60:a5:63:2a:36:d5:
b5:e9:54:9d:2b:29:84:99:be:85:bd:9a:74:b8:3f:35:20:57:
b7:e0:d8:53:77:33:ff:6c:ef:38:24:e0:e1:95:5a:0a:fb:4c:
6e:38:35:f1:1a:64:51:38:1f:be:64:c8:72:9d:5e:50:a0:5f:
18:c3:6a:3f:fd:28:63:4d:14:83:df:a6:fd:a0:1a:ab:11:63:
be:04:7e:3e:be:1d:f3:14:51:bb:f2:97:69:50:b0:bc:30:7d:
b1:5e:37:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:30:39 2025 by rpki-client