Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
File: jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft (raw, json)
Hash identifier: cY1DxgBPNLN/t8IMkgZS6rRMiBxvEiYZETBSVwrN8Q8=
Subject key identifier: C4:33:08:95:83:AF:86:CA:8F:F4:3C:10:B7:DA:50:54:91:26:DC:C8
Authority key identifier: 8F:20:F7:0F:17:D8:B7:2C:3E:42:AE:E0:32:91:29:8B:54:A4:FF:2F
Certificate issuer: /CN=8f20f70f17d8b72c3e42aee03291298b54a4ff2f
Certificate serial: 0199FFFEA6EC509222088D42FDDDA203E390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
Manifest number: 0A7A
Signing time: Mon 20 Oct 2025 05:01:42 +0000
Manifest this update: Mon 20 Oct 2025 05:01:42 +0000
Manifest next update: Tue 21 Oct 2025 05:01:42 +0000
Files and hashes: 1: hFUKeYVJZQidWIC3boS5B2MmNkQ.roa (hash: orWyk1nD9ke9cd+4s/S82r9At33d+yTlOwM1l+sczkc=)
2: jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl (hash: 9FNPloZ3/Y/5AwC4L1bG4m5vf9WMYL7+FcHVikUAo8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:a6:ec:50:92:22:08:8d:42:fd:dd:a2:03:e3:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f20f70f17d8b72c3e42aee03291298b54a4ff2f
Validity
Not Before: Oct 20 05:01:42 2025 GMT
Not After : Oct 21 05:01:42 2025 GMT
Subject: CN=c433089583af86ca8ff43c10b7da50549126dcc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:64:bc:35:e0:12:e7:98:09:3c:0d:94:58:44:
58:7b:ae:7b:48:30:3a:ae:fa:1f:c1:99:8d:aa:2c:
6e:74:9a:fe:42:ea:20:a3:d6:76:bd:c2:62:2b:f6:
d4:dc:c1:96:92:4d:9b:f6:f8:e3:3b:39:1b:70:e9:
d5:f7:5e:d2:c0:04:97:cb:a9:cc:eb:4f:f4:74:24:
91:0b:73:44:c6:dc:f6:c5:be:74:56:00:ac:64:64:
21:2d:70:53:d3:cf:69:4d:ba:04:85:fd:d2:fb:7e:
1d:c3:da:d9:28:94:5e:ff:5c:e9:7b:88:2e:1b:2e:
2a:58:3a:3c:65:d4:11:f8:e6:0c:7f:0e:0f:06:7f:
ba:08:45:e8:ad:6a:78:33:52:aa:a2:39:fb:37:73:
59:98:dd:8c:b9:d8:0e:52:b5:cd:1e:46:d0:94:40:
61:61:0f:e0:45:1a:43:ab:54:6a:17:78:0d:3f:c8:
e2:16:1a:a2:8b:f7:52:1c:21:b1:e2:f4:e0:e0:e7:
4c:90:39:27:9f:bb:f2:11:c5:43:d9:b7:38:85:f9:
65:86:b1:85:82:d4:95:88:54:de:01:1a:74:1d:10:
dc:bc:c5:ab:d8:89:de:17:13:cd:6b:de:18:1d:d1:
71:11:10:b3:e3:d5:2e:06:aa:14:26:1b:59:bc:ec:
54:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:33:08:95:83:AF:86:CA:8F:F4:3C:10:B7:DA:50:54:91:26:DC:C8
X509v3 Authority Key Identifier:
keyid:8F:20:F7:0F:17:D8:B7:2C:3E:42:AE:E0:32:91:29:8B:54:A4:FF:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:0d:7f:ef:ca:ca:06:93:bc:d6:1b:bd:fa:2a:d7:67:17:58:
07:90:72:05:29:ab:59:bf:29:8e:54:f5:36:a5:d1:0e:f7:7d:
4d:f0:69:f1:cc:24:27:5e:fb:0a:49:9a:ef:0d:73:1e:e0:e6:
e5:97:b0:3d:cb:28:74:fe:48:3f:6a:08:95:b3:76:a5:b2:30:
d2:00:02:91:2e:66:54:71:8a:ee:b0:83:88:f2:df:e7:79:87:
ff:0c:4e:d8:a6:14:00:a5:b3:5a:42:ed:ae:6b:2b:f7:27:56:
0b:d5:f0:fa:d7:99:f0:f8:2a:09:b7:71:4c:ec:ac:38:3e:11:
a1:91:77:2b:f9:69:9a:3d:e3:e3:6c:98:f2:c6:f1:cc:0e:91:
9e:a9:bd:71:20:ce:c4:5e:60:af:2c:16:fd:0c:b3:c8:48:d6:
64:c4:d3:14:1c:bb:c0:e9:25:a4:d8:87:50:2f:3e:22:d1:ac:
29:00:15:27:c9:85:5d:e2:81:d3:44:76:5d:24:01:76:4b:7f:
9c:eb:4e:d7:8e:34:ff:18:ea:09:c6:2b:46:c8:19:9a:ea:ea:
94:8b:c1:c3:52:6b:e9:4b:61:fd:4f:f4:5b:b7:37:07:09:7f:
33:30:de:3a:67:07:68:8a:ce:e1:1a:1c:b8:07:ef:79:ea:ad:
4a:6c:b0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:55:30 2025 by rpki-client