Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
File: jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft (raw, json)
Hash identifier: NIBnJ056wAMnpZ4DFWQOl94BETpPRhtwhxPtl9/wDuY=
Subject key identifier: CF:06:FF:FC:FA:09:1B:13:E7:C3:D3:73:95:0C:97:7D:FF:7E:50:36
Authority key identifier: 8F:28:24:C6:13:57:DC:34:4B:BD:F3:5B:83:57:74:59:B9:D3:FC:44
Certificate issuer: /CN=8f2824c61357dc344bbdf35b83577459b9d3fc44
Certificate serial: 019A5299D112140EA705E643D1A2B041E9F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
Manifest number: 1310
Signing time: Wed 05 Nov 2025 06:00:03 +0000
Manifest this update: Wed 05 Nov 2025 06:00:03 +0000
Manifest next update: Thu 06 Nov 2025 06:00:03 +0000
Files and hashes: 1: c3WDl8SfFCkca3Wid6jBSPNKAGE.roa (hash: lxKRn2VdYBDHJ0paIp1wPq/rCuS2/hh20C+G3q+EDZo=)
2: jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl (hash: 16YkN5VztZd1sNiflnVwjsTizVVblq1+xrdJNSiYsIQ=)
3: ly2mgBHHZLNGBUFfqCjRrV2SvFo.roa (hash: shkitV/EoiiYPYmD6wkEJAUrA2P9DugMTMa+mPtgOi8=)
4: praewBGKObVyHJrk-EW3SR6etDM.roa (hash: SH0U3WS8ZCn7PM3WLsz5WjDkQUu5ZhLAkIQAfKgw1ew=)
5: yfYVimwILKV-qGFqMNBusDCcVjQ.roa (hash: nk++/uFa+Aub+3IrRDF5TU2OMotYcxaO9cJ/XQbZB+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 06:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:99:d1:12:14:0e:a7:05:e6:43:d1:a2:b0:41:e9:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f2824c61357dc344bbdf35b83577459b9d3fc44
Validity
Not Before: Nov 5 06:00:03 2025 GMT
Not After : Nov 6 06:00:03 2025 GMT
Subject: CN=cf06fffcfa091b13e7c3d373950c977dff7e5036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8f:9d:b0:26:b5:e5:d8:60:a8:14:78:53:f0:
03:5a:0d:53:30:27:bb:3b:e1:53:5b:08:cf:f0:a1:
96:59:65:52:6b:7f:45:87:5f:01:15:51:f3:a2:e5:
0a:1d:60:07:48:aa:4b:29:7b:91:ac:a2:a6:5e:2b:
c2:01:29:03:fb:92:d0:6f:f0:46:d8:ae:06:cf:f9:
bd:c3:5f:e0:3d:30:31:d4:29:7c:d0:b7:4c:46:ca:
da:7d:81:1b:08:ee:5e:19:ed:14:67:ff:02:b9:29:
b6:10:9f:b9:bf:6c:59:c3:60:f9:fd:f5:68:fa:72:
b6:ae:5a:0a:ab:0c:fe:d4:ea:58:af:64:e4:75:d4:
e1:77:dc:41:30:c2:03:a4:d1:e0:ac:37:ea:50:b3:
59:a7:58:37:c5:dc:8d:f7:93:30:a0:3c:9d:39:c1:
cf:0f:e9:0b:46:b3:bf:60:a8:10:f2:58:0d:36:78:
2d:5c:a2:0c:67:b9:14:54:fd:ae:e3:4c:c1:d5:03:
34:4e:f5:3d:e4:9d:50:cb:93:91:f6:26:e5:aa:99:
6e:97:ea:c7:37:3a:fa:35:57:bf:12:cc:ac:7e:7f:
b7:ce:07:71:08:98:43:34:a4:ca:95:09:38:2f:e0:
bb:b1:69:b3:f4:da:d4:2c:d7:f4:c8:cc:6b:72:4c:
c0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:06:FF:FC:FA:09:1B:13:E7:C3:D3:73:95:0C:97:7D:FF:7E:50:36
X509v3 Authority Key Identifier:
keyid:8F:28:24:C6:13:57:DC:34:4B:BD:F3:5B:83:57:74:59:B9:D3:FC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:6f:67:a9:f3:87:a7:c3:f7:42:ec:f6:a7:94:46:c6:0c:aa:
d8:40:8d:3a:8f:5b:4a:2a:0c:61:cd:49:c7:c1:73:42:92:31:
03:11:5f:3b:d1:94:74:0f:ad:30:86:d6:41:ef:0b:4f:a3:45:
6b:a9:82:1b:d5:17:cb:7f:06:7b:29:91:f4:7a:7f:20:eb:12:
17:5e:5f:37:37:36:e7:08:b7:b1:c8:77:51:db:f7:60:1c:e9:
11:f7:d6:62:2a:15:51:fd:0b:6b:59:34:2e:37:9e:88:1b:2c:
4f:ca:77:35:e3:54:a1:4c:0f:5a:6a:df:0e:3f:d8:ac:51:3a:
75:07:19:76:d2:68:39:e6:9c:7e:36:fd:d1:25:ba:6b:c2:ca:
6b:3f:ba:0c:62:9f:75:1d:08:69:3f:5b:a0:fb:c2:46:55:09:
94:a4:81:58:71:32:4a:b2:84:45:61:93:d9:e2:1d:34:53:61:
03:bd:78:55:ef:68:62:ba:87:23:53:06:09:c9:28:2b:7b:54:
fe:dd:2d:b2:06:c6:b7:fd:30:ec:29:12:d4:7e:37:7d:1b:7b:
3e:d5:c5:70:5a:b7:42:fb:d8:5d:14:95:50:56:38:ae:52:42:
07:ee:87:b4:59:72:47:18:38:44:cf:37:96:fa:e1:8d:02:9e:
b3:58:81:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:36:58 2025 by rpki-client