Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
File: jYdAeZyRwmMKgJIXjbgk86iJp18.mft (raw, json)
Hash identifier: BQRMxva2fLqHaxtDgnVBj6YceWWPzue8xuiwL+XWDCc=
Subject key identifier: 8B:79:AA:43:81:B4:3D:9E:60:72:02:C5:52:6D:21:22:97:53:82:27
Authority key identifier: 8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F
Certificate issuer: /CN=8d8740799c91c2630a8092178db824f3a889a75f
Certificate serial: 0199FC8F58148F22EBC2023160DE9677DCD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 13:01:16 +0000
Manifest this update: Sun 19 Oct 2025 13:01:16 +0000
Manifest next update: Mon 20 Oct 2025 13:01:16 +0000
Files and hashes: 1: K-6vxGr3EkVKtgWk3f7FXppAHWU.roa (hash: OqJwTUOjnt783umU3SvwJ0pGKHDe69wtlF63xIDInso=)
2: K7Su5tLQd2NMZMj9NBaGujGCyFc.roa (hash: mUfUc0m1Q5fvSqMO5jRLGU7xEPj6/17vBXx5MZ0j9fY=)
3: eE7CtoiQAT2pLGSZ83z4bGyxlms.roa (hash: 0jzCXVU/84NgsdnKR1p45oVJW0ZBdnomnSJlnmwgNt0=)
4: jYdAeZyRwmMKgJIXjbgk86iJp18.crl (hash: 47h/oslmQ5RV7FnKcSm4bo2wOVSKcF5OgtzxOASaQCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:58:14:8f:22:eb:c2:02:31:60:de:96:77:dc:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d8740799c91c2630a8092178db824f3a889a75f
Validity
Not Before: Oct 19 13:01:16 2025 GMT
Not After : Oct 20 13:01:16 2025 GMT
Subject: CN=8b79aa4381b43d9e607202c5526d212297538227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1f:e0:5d:41:2f:18:00:d4:ac:ac:e1:36:b1:
09:a5:a8:0f:d6:3b:14:bc:e6:03:2b:d6:c1:ca:cb:
b2:62:b6:2d:db:fe:8e:f5:d4:f0:f8:0a:5b:ec:bd:
c8:2a:54:b4:ff:e5:1c:ff:81:05:d9:f5:c1:c4:5e:
69:e5:38:70:e6:3b:fa:2e:cd:03:fc:0d:03:86:17:
0b:2e:1a:6e:47:f4:aa:e8:ea:aa:dc:b0:3f:ac:ee:
0c:14:67:4c:77:a1:0a:b1:91:00:b9:8c:92:1f:04:
c8:78:71:3f:54:54:b1:68:1c:37:62:f8:c9:93:21:
33:27:b3:72:24:b5:6c:56:88:f9:93:79:08:1b:a7:
e5:4b:2e:f6:ec:ea:b1:ce:64:c3:6f:d4:2c:d4:c2:
c0:15:8c:9b:c9:f5:ec:15:13:63:03:e2:79:4a:0d:
d5:b4:26:38:0a:03:ed:f7:6a:a7:4c:08:87:38:e6:
4f:13:99:1e:b6:2f:b0:d8:5c:3f:0c:6d:9d:ad:42:
89:fd:c5:d9:17:1d:c7:34:1f:05:cc:6d:ec:d8:54:
53:66:a3:e7:2a:2b:b5:2b:d6:dd:ef:70:49:57:ca:
19:3f:d0:ed:bf:82:74:8c:88:9d:e0:69:7a:f0:62:
f6:1c:2e:83:17:33:3d:34:26:93:42:6d:04:65:e5:
5b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:79:AA:43:81:B4:3D:9E:60:72:02:C5:52:6D:21:22:97:53:82:27
X509v3 Authority Key Identifier:
keyid:8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:86:dc:a9:d6:ff:6e:ae:fd:8f:b1:cd:12:67:a9:13:ae:5c:
00:1e:7f:1e:9b:65:f4:d1:19:d1:fa:05:ae:f4:0e:90:f8:54:
e4:39:17:2b:5a:f8:a1:2c:f5:f6:5c:6e:37:6f:24:6b:0d:b5:
cd:7f:cf:1c:d5:4c:0b:92:5a:15:28:7d:1e:1d:4d:c4:db:c3:
df:4d:87:db:b0:89:c7:64:35:86:de:20:31:ca:ab:46:43:5c:
97:1f:00:d5:38:8c:4e:66:3d:37:03:3d:e9:b0:9f:7c:fa:3e:
2c:a8:4b:c3:88:bb:36:84:af:4e:8a:e8:e2:21:42:1c:37:77:
fd:a1:7b:5a:f3:ce:41:f9:e5:a0:56:22:c2:2d:c3:15:b7:af:
7f:b2:22:5c:98:59:a1:57:5c:93:47:93:a0:71:d3:9a:7f:bf:
b6:ac:92:43:99:e9:9c:9a:1c:04:b5:e2:bf:c4:0a:51:c3:c8:
c3:7e:52:c4:d5:ad:41:04:c7:88:31:7c:1e:22:57:ed:d7:52:
a7:c4:cd:fb:60:85:ae:be:8b:b2:d8:5f:50:64:a4:35:96:e4:
36:d7:28:53:b0:ff:f0:f3:21:91:89:4a:6b:1c:ef:41:15:d6:
55:e6:dd:e6:d0:ee:a1:f2:13:7c:75:78:a0:c5:98:49:7a:3a:
6f:e9:68:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:53 2025 by rpki-client