Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft
File: jYhinjx4EKzCKOF6GNtnlOvtgZM.mft (raw, json)
Hash identifier: T4g1YW+10rR34PmGRXCPVTqaMxRkdV6RNptPxnA1Xeo=
Subject key identifier: A3:D8:05:4D:32:95:A1:7A:90:94:12:18:BD:9B:70:57:79:34:B3:F0
Authority key identifier: 8D:88:62:9E:3C:78:10:AC:C2:28:E1:7A:18:DB:67:94:EB:ED:81:93
Certificate issuer: /CN=8d88629e3c7810acc228e17a18db6794ebed8193
Certificate serial: 019A54516CC94DEE302B2A7FAF38C2C261CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYhinjx4EKzCKOF6GNtnlOvtgZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft
Manifest number: 13D3
Signing time: Wed 05 Nov 2025 14:00:13 +0000
Manifest this update: Wed 05 Nov 2025 14:00:13 +0000
Manifest next update: Thu 06 Nov 2025 14:00:13 +0000
Files and hashes: 1: ZBTvhiqTow3aNMb2aKed7aOmeLE.roa (hash: Hs63HPHm64omZRW3Iw+4oLNTtYpDyEs3J5diEPbkms4=)
2: jYhinjx4EKzCKOF6GNtnlOvtgZM.crl (hash: KPS48bsDgrZ919xR7FK62kAu+zpPKy7HZrP1LE7818Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYhinjx4EKzCKOF6GNtnlOvtgZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:6c:c9:4d:ee:30:2b:2a:7f:af:38:c2:c2:61:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d88629e3c7810acc228e17a18db6794ebed8193
Validity
Not Before: Nov 5 14:00:13 2025 GMT
Not After : Nov 6 14:00:13 2025 GMT
Subject: CN=a3d8054d3295a17a90941218bd9b70577934b3f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d2:c3:e6:68:94:00:df:f3:dd:ac:7e:de:5a:
65:f8:87:2e:e6:d2:da:b0:c5:c7:de:25:9b:e5:f6:
a9:c5:87:a5:c5:1f:0c:39:21:52:8c:fb:d5:4e:51:
fc:df:07:c3:5a:73:b0:08:58:4b:cd:7d:62:d9:ef:
46:85:54:7f:7d:03:1d:ae:a9:7f:4d:7e:c7:9e:fa:
63:03:ef:e9:3f:67:c3:c6:0c:02:37:c5:f5:b3:6e:
4b:08:86:63:39:e0:87:84:4c:14:69:32:23:76:36:
01:2e:39:cf:ad:1a:f4:1a:db:f6:64:e9:6d:99:9f:
4e:09:ac:4d:c3:5a:4f:37:a9:55:12:4a:fc:d9:28:
d0:c2:38:75:e9:45:e3:d9:b2:03:51:85:03:2f:18:
08:af:95:64:98:11:60:d8:ab:40:c6:11:5b:04:7a:
24:00:2e:d2:fe:7e:28:4b:b4:05:33:cc:a9:f7:aa:
a6:03:8a:04:1c:88:35:9c:4f:06:b4:ea:25:2c:42:
03:d6:f4:c4:d4:1f:78:35:93:43:b2:78:4d:0d:b6:
0a:d2:5f:75:60:24:e3:4b:ed:11:9c:cc:d2:ea:9b:
3e:62:51:52:ec:a2:49:ff:10:59:e2:fe:9c:fd:0b:
97:e6:6d:99:09:27:65:96:8b:a6:29:54:0e:9d:5e:
cb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D8:05:4D:32:95:A1:7A:90:94:12:18:BD:9B:70:57:79:34:B3:F0
X509v3 Authority Key Identifier:
keyid:8D:88:62:9E:3C:78:10:AC:C2:28:E1:7A:18:DB:67:94:EB:ED:81:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYhinjx4EKzCKOF6GNtnlOvtgZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b3:e1:c0:6c:32:7b:2d:07:69:07:42:33:8a:27:3d:0d:8e:
25:a8:24:f3:4d:22:28:1a:7a:14:3e:52:64:91:0c:0d:ab:55:
70:d7:ea:de:81:c9:e9:d2:bb:1e:35:d5:0a:6e:8d:5b:03:11:
aa:7e:57:2a:a1:40:a2:4e:d6:4e:5e:4a:69:20:b1:42:a1:60:
57:5b:8f:e8:3e:ba:8e:dc:1c:f4:d6:07:4a:2d:c6:91:86:4c:
a3:ac:79:f7:6b:9c:ee:62:90:ab:4a:51:60:ac:5b:16:5b:2a:
f3:ca:e2:c5:22:5f:e9:e3:5d:52:37:36:3e:a0:2b:d4:89:da:
a2:b1:69:28:78:eb:94:86:10:e2:db:ac:c9:6a:9a:f6:fe:a7:
0f:78:20:c3:df:9a:5a:e9:f1:4c:95:f9:43:dd:da:c1:f0:d8:
65:97:e5:00:b5:88:74:13:c9:d4:2e:2a:26:18:66:42:9c:53:
5f:ff:5e:5e:60:07:1c:41:9c:19:1a:46:bb:6a:32:35:70:b1:
c8:1e:4a:1f:4c:a6:75:3c:89:bf:47:08:8d:8d:30:1b:e5:73:
a4:5f:08:0a:b7:27:46:24:9f:5b:31:df:4e:d8:48:50:d8:60:
61:87:63:ef:c4:1f:3a:5e:91:06:97:f5:11:a2:e9:69:35:9c:
7a:49:cb:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:40:36 2025 by rpki-client