
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
File: jYRATl-KSxF65E5z1TxE7N1Xg0I.mft (raw, json)
Hash identifier: HdhxTcTwcyC1JhNmDMUkLbuYjZ26xa+aNcsA60OgxvM=
Subject key identifier: 3E:5B:0D:6C:DD:DC:36:A2:2E:DE:8C:03:7A:D0:DD:73:3A:E8:50:55
Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
Certificate issuer: /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Certificate serial: 0198D4A7DF516146149BB6E9B49B96228B8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
Manifest number: 1668
Signing time: Sat 23 Aug 2025 02:00:28 +0000
Manifest this update: Sat 23 Aug 2025 02:00:28 +0000
Manifest next update: Sun 24 Aug 2025 02:00:28 +0000
Files and hashes: 1: 4F7q-ESPAcOoBaJ8HV_6ahTt-Uc.roa (hash: v234flYnQRm4nRbtw0jT7kDIHH0ZbwZkb6fqcE+qEL8=)
2: 7zJeCOLkCzcAkE6elAmsAfnqBrA.roa (hash: ZBwwSegU4XKbwNTWFofTTBLanZb/lF8bV9B75di1H3E=)
3: Mxsf5y7FP3EDBxgdyJxHG-OqVe0.roa (hash: ClWAIpLDh5pnWSp7TABzI9Qk+b3RsHPaiwstfKht6So=)
4: ap-CQNVkX98mFn3ro8X-u0Z5ytQ.roa (hash: +GioIV7wmV/PxdEFnTECTYhJxvq+IEyFtRu6eqMs3Ac=)
5: dDluN-ZW3m4A2qeeV1wHH5bu8tM.roa (hash: HIE3+ZZu9CT1HGuYfh7TMNitUjpb7aMhEYQpjqcPSJo=)
6: jYRATl-KSxF65E5z1TxE7N1Xg0I.crl (hash: EcLRFmwCTPuZYtB/HpPFauc/UULRBDWxxzyLZUFxprY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:df:51:61:46:14:9b:b6:e9:b4:9b:96:22:8b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Validity
Not Before: Aug 23 02:00:28 2025 GMT
Not After : Aug 24 02:00:28 2025 GMT
Subject: CN=3e5b0d6cdddc36a22ede8c037ad0dd733ae85055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:66:23:f4:03:7a:9a:ee:81:c0:7d:d2:63:9b:
27:f5:26:14:6f:97:c0:3a:5b:ff:a4:dd:82:37:96:
cc:74:66:3f:0d:fe:67:ca:22:95:f0:01:93:d6:26:
1c:01:e6:0e:42:33:da:73:99:ec:ef:ac:c3:d8:39:
f0:12:4c:f5:2c:f1:82:9c:62:a1:ed:ac:04:79:a6:
58:85:fb:1a:35:0f:69:46:5f:df:c0:8e:55:94:f2:
1c:d7:13:ed:c9:97:2a:ae:71:e7:c6:c1:ea:57:4d:
7e:15:52:78:8a:1a:2b:91:2c:1c:7b:92:cf:c3:81:
ec:fa:eb:b4:13:d8:05:b0:36:ea:a8:65:11:a7:af:
ee:1a:fe:88:2d:fd:0a:f6:9b:7e:cc:07:c8:00:9e:
8a:16:21:61:b4:26:fc:d9:7d:39:98:a5:7e:13:43:
20:7f:d5:c7:0e:d1:4b:4e:59:d7:3a:d7:be:08:6c:
9b:e1:d3:93:eb:9d:79:de:d8:e6:6f:c9:5a:8a:f1:
95:d8:ea:ee:10:9f:32:06:ed:f0:5d:69:14:0b:3c:
ec:e9:0f:9c:f2:85:c4:9d:ff:7e:93:b3:5c:c6:bd:
67:eb:dd:75:c0:35:a9:0f:23:7d:5f:21:22:fb:44:
c6:73:48:d2:e0:8d:9b:ab:1c:53:5c:25:6a:f7:d8:
80:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:5B:0D:6C:DD:DC:36:A2:2E:DE:8C:03:7A:D0:DD:73:3A:E8:50:55
X509v3 Authority Key Identifier:
keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:53:ee:44:a5:71:41:4e:4d:67:72:4a:8c:a4:a2:bd:fb:5d:
f6:e1:21:b8:14:40:99:25:a8:55:a6:52:ca:e5:a2:23:54:74:
71:e3:18:a5:e8:23:84:9a:64:73:44:3b:6a:ad:19:ef:51:0b:
1e:fa:c0:a7:53:0c:f1:77:7e:25:a4:12:7b:bb:ff:22:0e:6e:
85:33:6d:87:ec:4f:c1:31:30:17:15:21:ef:54:ff:8b:1b:4c:
67:ef:28:18:37:6b:04:1b:51:96:8a:a4:f5:5b:00:08:f0:5e:
47:64:ea:27:a6:87:fb:d3:80:dc:4b:d3:c8:5d:04:32:8d:21:
3d:92:dc:3f:df:c9:d7:cd:78:c3:35:ea:4f:88:70:a7:2f:1d:
76:55:a6:06:8d:cd:51:bf:83:95:0f:20:26:55:86:ff:fd:5e:
b6:08:0c:35:56:c5:12:1a:63:1c:a4:26:70:4d:52:37:52:54:
8e:3f:03:35:4b:11:0d:0e:b0:f4:0a:7b:0d:1c:4f:23:c8:a2:
b8:70:be:aa:0a:ae:c7:70:c0:f0:72:9d:fc:d2:f8:3a:9b:af:
68:62:b2:c8:c6:22:43:bd:c1:7d:ee:96:f7:35:cd:78:53:c5:
4a:e5:95:3b:5c:e1:42:6f:84:11:1f:1e:61:d8:d2:82:98:49:
24:e3:c7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:16 2025 by rpki-client