Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
File: jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft (raw, json)
Hash identifier: M/2z7gUAjBoQB4fY2VgEj2NrMKFuv3tGCugbmzbYlhk=
Subject key identifier: 43:7A:88:5F:44:99:2E:1F:4B:51:5B:C4:73:40:79:81:7A:6F:0E:8E
Authority key identifier: 8D:80:B4:54:55:D8:97:31:F8:7B:B5:3F:4D:BE:64:11:89:83:7D:4E
Certificate issuer: /CN=8d80b45455d89731f87bb53f4dbe641189837d4e
Certificate serial: 019A4F98EB70B39AF10FB9BA165E566AF19F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
Manifest number: 03AB
Signing time: Tue 04 Nov 2025 16:00:13 +0000
Manifest this update: Tue 04 Nov 2025 16:00:13 +0000
Manifest next update: Wed 05 Nov 2025 16:00:13 +0000
Files and hashes: 1: EdJTz8Dy_KYllN7oDQj7wcm2rcA.roa (hash: fBqhHICDr0X6YXFTTdlTIs7rIkllOmDVf3b+eCpH7zk=)
2: jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl (hash: dsWc+I3xmxAqwVr9Hv9A6wlIsmGmdmbdza5yAjP73So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:eb:70:b3:9a:f1:0f:b9:ba:16:5e:56:6a:f1:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d80b45455d89731f87bb53f4dbe641189837d4e
Validity
Not Before: Nov 4 16:00:13 2025 GMT
Not After : Nov 5 16:00:13 2025 GMT
Subject: CN=437a885f44992e1f4b515bc4734079817a6f0e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b7:77:ee:5e:1c:fc:c3:db:c9:95:89:1f:17:
dd:17:96:63:55:2b:6a:b6:e0:96:76:30:9a:c8:4c:
64:fe:3d:75:4a:6d:79:9e:c9:2a:37:3d:42:61:a6:
c4:0c:34:9b:61:2c:4b:87:3a:31:b0:83:76:23:cf:
f1:a2:ec:33:78:5f:4d:2c:1c:80:74:72:07:38:8f:
b8:e4:b6:7d:03:5d:77:40:c3:2b:8d:7b:f9:d6:74:
a3:a3:05:db:d7:88:7e:a5:0d:54:c5:97:4c:69:9d:
fa:6f:c2:b5:ad:72:37:6d:7b:38:e0:3b:3f:cc:03:
45:b3:1f:52:10:08:be:84:8c:07:1c:cf:4f:9f:e8:
46:26:dc:cf:79:b6:f3:b5:d8:7e:e1:7f:de:0d:e8:
c8:d8:df:ab:e7:60:d6:43:a1:b2:e5:72:fa:d1:a7:
34:4c:c5:d9:10:85:5d:81:18:11:a3:3d:a0:d7:1f:
d8:ff:d3:60:8a:f9:8b:f0:1c:06:c5:90:ab:0e:5f:
d1:c1:04:6e:10:e3:ba:70:21:0f:2e:83:50:5a:d3:
7e:05:3b:df:3e:31:43:8d:56:54:c0:1c:06:c2:71:
3e:13:c8:c9:dd:70:d6:31:df:5f:21:34:9e:cb:cc:
c3:b7:59:66:12:13:d6:a8:d9:1f:e1:1f:dd:bb:62:
01:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7A:88:5F:44:99:2E:1F:4B:51:5B:C4:73:40:79:81:7A:6F:0E:8E
X509v3 Authority Key Identifier:
keyid:8D:80:B4:54:55:D8:97:31:F8:7B:B5:3F:4D:BE:64:11:89:83:7D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:03:9d:48:4d:48:9f:66:74:9f:4a:b0:bc:70:90:3e:2f:76:
4e:76:2a:e5:a8:49:1f:5a:37:05:e2:92:5a:ba:d2:8e:67:55:
29:e7:b6:ad:5d:bc:a3:64:11:5c:85:a8:f9:e8:fa:9d:9c:75:
e2:77:9b:84:26:69:01:cd:97:a2:22:6b:eb:c1:3e:b1:90:f4:
1f:32:c6:ef:40:d5:b0:f9:5b:48:5e:97:07:f7:5b:55:fc:c4:
33:3b:04:d5:d1:5e:d6:7f:c1:2f:df:c0:c4:82:0b:fe:26:cc:
9b:51:89:1d:7f:83:d2:af:0c:9e:a6:79:6a:ef:f3:07:95:a8:
aa:34:54:6e:5c:d1:19:e1:ac:65:b0:df:ba:90:5e:51:a8:d8:
6a:33:09:c9:42:04:5c:db:c7:6c:17:79:61:02:3f:d7:fa:74:
1e:2d:0c:b6:99:0f:c6:e9:4c:70:ed:13:69:7b:c8:bf:56:bb:
2d:62:9e:4e:b3:dc:c6:97:20:c9:44:a8:db:42:a2:01:38:2e:
9d:cf:be:6f:50:51:6a:d1:fa:7f:5c:02:3f:e6:1e:70:9d:ea:
50:84:a9:5d:4f:88:d1:d3:23:60:a1:27:38:b5:40:54:2f:c5:
5e:2c:c6:e4:4c:b0:a5:10:ec:a8:3d:7a:17:a5:46:86:00:e0:
0f:5a:c6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:49:01 2025 by rpki-client