Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft
File: _JYd_F9wvxt28F5Ep07QKTEl5L4.mft (raw, json)
Hash identifier: 1PF/6lVecIu8OB4Z6/TIuNjwf2oNChdJaXtBzokg7q8=
Subject key identifier: AE:5F:92:1C:11:EB:20:09:BE:54:2E:A5:93:AD:BB:45:53:CE:F0:09
Authority key identifier: FC:96:1D:FC:5F:70:BF:1B:76:F0:5E:44:A7:4E:D0:29:31:25:E4:BE
Certificate issuer: /CN=fc961dfc5f70bf1b76f05e44a74ed0293125e4be
Certificate serial: 0199FC58672B15F8D0AFAE209244B64DC9F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JYd_F9wvxt28F5Ep07QKTEl5L4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft
Manifest number: 10DD
Signing time: Sun 19 Oct 2025 12:01:15 +0000
Manifest this update: Sun 19 Oct 2025 12:01:15 +0000
Manifest next update: Mon 20 Oct 2025 12:01:15 +0000
Files and hashes: 1: _JYd_F9wvxt28F5Ep07QKTEl5L4.crl (hash: 0xqOtNyZedzSfKXjRBourSOVPho9rh1hXiSe9ZepYZQ=)
2: hyHlTiMwzWbl8Nf4H5xHNXAVBxY.roa (hash: HU5uH/M7qdwsXDoyu+UBXkrcHBCx6l/8Z2W4bZISR9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JYd_F9wvxt28F5Ep07QKTEl5L4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:67:2b:15:f8:d0:af:ae:20:92:44:b6:4d:c9:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc961dfc5f70bf1b76f05e44a74ed0293125e4be
Validity
Not Before: Oct 19 12:01:15 2025 GMT
Not After : Oct 20 12:01:15 2025 GMT
Subject: CN=ae5f921c11eb2009be542ea593adbb4553cef009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7c:9e:ad:22:58:aa:ce:e8:81:e2:55:0f:e9:
f7:5c:c9:c1:15:82:fd:7d:d4:2d:f2:06:b6:46:ee:
fa:e3:8e:43:72:38:74:0b:55:63:55:6a:ce:6a:d0:
e3:e5:d4:69:52:8f:a3:46:59:8d:97:5d:65:a4:36:
74:fc:ba:8a:2b:e6:c2:22:ec:25:b3:d1:fd:ab:54:
67:df:79:82:30:fc:f4:9b:17:75:35:0c:59:91:b1:
e2:53:2b:ca:25:e8:4b:4e:bd:c7:7b:47:79:57:20:
77:66:37:f7:a2:85:8d:dc:90:73:17:57:32:38:76:
1f:bc:33:c3:ad:b1:2d:a9:dd:28:44:71:61:34:08:
c4:7e:34:d0:61:43:05:42:35:4c:0b:b8:c5:cb:b0:
27:d2:ea:f4:1a:ae:82:50:24:df:b4:7e:f7:20:d0:
d0:fb:28:23:44:44:11:aa:ad:cd:6b:61:7a:17:9a:
67:09:e3:39:12:90:2b:35:f4:f0:94:b4:6d:42:cb:
16:97:b3:e2:71:5b:c2:09:7b:be:eb:8d:24:ff:4c:
e7:74:07:28:5b:c5:4e:4e:5b:00:ac:da:7d:69:f8:
66:a5:d0:23:fb:43:bf:76:63:cc:d8:c1:23:da:74:
17:42:9e:fb:15:0c:3a:42:57:71:d2:16:f7:28:03:
c1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:5F:92:1C:11:EB:20:09:BE:54:2E:A5:93:AD:BB:45:53:CE:F0:09
X509v3 Authority Key Identifier:
keyid:FC:96:1D:FC:5F:70:BF:1B:76:F0:5E:44:A7:4E:D0:29:31:25:E4:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JYd_F9wvxt28F5Ep07QKTEl5L4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffe8cc-7851-432d-8c02-5029d0c999b6/1/_JYd_F9wvxt28F5Ep07QKTEl5L4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:de:be:ee:72:ea:f2:2c:2e:7d:e2:76:c8:2b:1f:2a:9d:11:
99:66:d2:f2:40:0a:db:1d:88:70:12:07:dc:c2:8c:cd:6c:8d:
72:c2:e0:52:52:78:2b:26:8f:2f:c8:22:f5:34:49:ab:49:b7:
04:0b:c1:9c:37:c9:bc:b0:07:0e:0b:c5:2e:53:ab:71:19:5c:
8e:9c:d9:ba:59:32:d8:d2:79:73:ee:f2:7d:22:65:81:3f:ed:
05:01:74:db:5b:07:df:f3:df:f0:65:0c:0a:e6:f8:05:5b:6b:
67:22:b9:c7:69:b7:1a:1a:aa:08:d3:6c:92:31:95:18:10:0b:
86:ff:68:6f:f5:af:3d:cd:fc:a5:ce:f2:72:d3:72:85:51:85:
4e:39:9c:3e:48:d5:1a:34:53:ca:91:2d:83:ab:06:e9:d7:29:
f3:16:9b:24:3f:e3:0c:12:cf:dd:d0:0c:66:31:cf:e8:78:4f:
aa:cd:ca:86:70:23:f6:fe:b7:08:48:29:01:71:65:d7:e4:79:
77:9b:58:46:a5:36:84:dd:d4:a4:92:62:59:06:ee:f4:2c:97:
4a:f1:0b:63:44:5d:e9:e7:32:3c:b5:b2:26:6c:c2:8c:2f:2c:
06:16:1e:37:fe:88:18:92:92:b6:1b:95:94:22:ee:59:ee:89:
7c:22:58:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:35 2025 by rpki-client