Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
File: jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft (raw, json)
Hash identifier: qw3M+mJPKhxmm4lLr6ZtMgcWIPOacYay30ywuk4djf0=
Subject key identifier: 2B:B1:13:07:06:2D:48:12:5A:65:7A:2E:53:87:C6:75:A7:92:E8:EF
Authority key identifier: 8F:20:F7:0F:17:D8:B7:2C:3E:42:AE:E0:32:91:29:8B:54:A4:FF:2F
Certificate issuer: /CN=8f20f70f17d8b72c3e42aee03291298b54a4ff2f
Certificate serial: 0198D6981BC5E71685F02CBA8B26394B5935
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
Manifest number: 09E0
Signing time: Sat 23 Aug 2025 11:02:29 +0000
Manifest this update: Sat 23 Aug 2025 11:02:29 +0000
Manifest next update: Sun 24 Aug 2025 11:02:29 +0000
Files and hashes: 1: hFUKeYVJZQidWIC3boS5B2MmNkQ.roa (hash: orWyk1nD9ke9cd+4s/S82r9At33d+yTlOwM1l+sczkc=)
2: jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl (hash: B9v7KsqoFcjeGnGHCe+mWCHbShPy8/8cIplRFvJ438k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:1b:c5:e7:16:85:f0:2c:ba:8b:26:39:4b:59:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f20f70f17d8b72c3e42aee03291298b54a4ff2f
Validity
Not Before: Aug 23 11:02:29 2025 GMT
Not After : Aug 24 11:02:29 2025 GMT
Subject: CN=2bb11307062d48125a657a2e5387c675a792e8ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:26:a0:50:b1:c9:fe:4e:6b:f9:87:83:de:a8:
e3:65:99:dd:82:22:94:05:82:a8:6c:12:76:7c:cf:
e4:68:65:a1:40:b4:23:87:5f:2b:47:a4:d9:d6:ab:
19:4b:33:2c:d5:c3:18:b7:4a:4f:bb:38:72:73:fe:
d0:ce:ff:18:d1:c7:92:50:71:28:6d:da:02:78:38:
de:16:d6:cd:b8:3b:f1:51:1b:27:f3:97:dc:ee:1e:
56:ec:4d:6b:0d:73:49:2d:77:2c:f3:2a:2d:2c:6c:
f8:55:12:ac:7c:55:54:7c:48:b1:da:34:63:09:c9:
3e:f8:cc:1f:70:e6:19:b6:85:90:a2:01:3a:b8:c6:
14:a7:83:b7:40:39:8d:13:ea:d0:ff:e1:89:c7:af:
e0:da:f0:99:9f:df:0d:66:7f:25:c4:b6:43:74:8d:
f4:f9:70:14:4e:7d:62:ef:f4:d1:aa:6b:6e:51:fc:
66:3a:2f:d5:66:e8:79:f9:a7:fe:24:bf:00:45:f2:
e4:d8:c8:f2:45:9a:fc:14:94:e8:a0:42:e4:4a:20:
e2:0e:7e:a4:0c:9e:c0:aa:54:84:15:b7:ab:d9:ce:
0c:0c:6a:02:cd:0d:30:ac:28:67:b2:14:74:11:54:
70:7f:4a:b7:ab:b2:7b:9a:6c:17:62:99:69:98:18:
f8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B1:13:07:06:2D:48:12:5A:65:7A:2E:53:87:C6:75:A7:92:E8:EF
X509v3 Authority Key Identifier:
keyid:8F:20:F7:0F:17:D8:B7:2C:3E:42:AE:E0:32:91:29:8B:54:A4:FF:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:bf:fe:fc:ec:ee:ee:4b:b3:cb:5f:6c:5f:53:e1:b7:6e:e5:
21:61:78:ad:d8:8f:f3:b1:a4:5f:15:ef:dc:bf:cf:e2:74:13:
9b:b2:38:80:56:db:e2:54:c2:59:cb:c9:8b:78:e6:a4:de:ee:
62:63:cb:80:83:0f:9a:df:a9:50:06:46:59:ae:bc:58:fc:f4:
6a:2b:dc:13:17:5e:f1:94:54:9a:e5:69:63:64:dd:11:68:5d:
b8:0e:da:a2:c4:7e:9d:ea:0c:10:ee:ed:aa:d6:83:7d:73:a5:
4d:2f:15:30:f3:94:0a:6f:e1:8b:82:64:66:a1:28:f8:e2:c8:
94:42:ed:03:08:5d:3e:e4:a1:c4:68:3f:2e:af:0a:21:ee:b2:
49:f3:a8:a9:c7:b7:bb:f4:a3:f6:6d:3e:fb:e2:e7:b9:aa:04:
e9:73:1a:07:5d:2b:eb:95:08:f7:b2:83:15:a8:9a:68:87:93:
0b:18:61:a8:53:b0:96:31:10:1e:8b:c5:18:0f:f5:cc:60:dd:
a5:f8:b1:ef:4e:d4:6d:7f:ed:cb:39:c5:59:e1:13:88:22:0c:
16:7a:b3:14:97:c2:ed:bf:9b:59:fa:a3:db:63:49:4c:6a:cd:
84:c8:79:30:65:b5:04:36:a4:f0:8c:94:16:e4:c3:4d:c3:4f:
a2:f1:47:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmBvF5xaF8Cy6iyY5S1k1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMjBmNzBmMTdkOGI3MmMzZTQyYWVlMDMyOTEyOThiNTRh
NGZmMmYwHhcNMjUwODIzMTEwMjI5WhcNMjUwODI0MTEwMjI5WjAzMTEwLwYDVQQD
EygyYmIxMTMwNzA2MmQ0ODEyNWE2NTdhMmU1Mzg3YzY3NWE3OTJlOGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiagULHJ/k5r+YeD3qjjZZndgiKU
BYKobBJ2fM/kaGWhQLQjh18rR6TZ1qsZSzMs1cMYt0pPuzhyc/7Qzv8Y0ceSUHEo
bdoCeDjeFtbNuDvxURsn85fc7h5W7E1rDXNJLXcs8yotLGz4VRKsfFVUfEix2jRj
Cck++MwfcOYZtoWQogE6uMYUp4O3QDmNE+rQ/+GJx6/g2vCZn98NZn8lxLZDdI30
+XAUTn1i7/TRqmtuUfxmOi/VZuh5+af+JL8ARfLk2MjyRZr8FJTooELkSiDiDn6k
DJ7AqlSEFber2c4MDGoCzQ0wrChnshR0EVRwf0q3q7J7mmwXYplpmBj4rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCuxEwcGLUgSWmV6LlOHxnWnkujvMB8GA1UdIwQY
MBaAFI8g9w8X2LcsPkKu4DKRKYtUpP8vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanlEM0R4Zll0eXctUXE3Z01wRXBpMVNrX3k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy80MmMwYzAtZGU2ZC00OWI2LWI0NTAt
Yzk2YThkYTJjNTg5LzEvanlEM0R4Zll0eXctUXE3Z01wRXBpMVNrX3k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy80MmMwYzAtZGU2ZC00OWI2LWI0NTAtYzk2YThkYTJjNTg5
LzEvanlEM0R4Zll0eXctUXE3Z01wRXBpMVNrX3k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOL/+/Ozu
7kuzy19sX1Pht27lIWF4rdiP87GkXxXv3L/P4nQTm7I4gFbb4lTCWcvJi3jmpN7u
YmPLgIMPmt+pUAZGWa68WPz0aivcExde8ZRUmuVpY2TdEWhduA7aosR+neoMEO7t
qtaDfXOlTS8VMPOUCm/hi4JkZqEo+OLIlELtAwhdPuShxGg/Lq8KIe6ySfOoqce3
u/Sj9m0+++LnuaoE6XMaB10r65UI97KDFaiaaIeTCxhhqFOwljEQHovFGA/1zGDd
pfix707UbX/tyznFWeETiCIMFnqzFJfC7b+bWfqj22NJTGrNhMh5MGW1BDak8IyU
FuTDTcNPovFH2g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:09:39 2025 by rpki-client