Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft
File: JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft (raw, json)
Hash identifier: 5Y9RpEGau046Q+Ndy+T2h8XTPYozvb/djLkOs85iekc=
Subject key identifier: B1:83:FA:D3:CD:7A:7A:19:FC:82:B3:87:B7:B8:BF:C6:84:03:46:2F
Authority key identifier: 25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8
Certificate issuer: /CN=2588b1b560f998eccd3a6eff40543b59204d67b8
Certificate serial: 019A4EF57E8008C143A2884B45BA925142AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 13:01:42 +0000
Manifest this update: Tue 04 Nov 2025 13:01:42 +0000
Manifest next update: Wed 05 Nov 2025 13:01:42 +0000
Files and hashes: 1: 7qLq7aTWNHbxDovy4cDmNUB81ok.roa (hash: 45Whc0u7xWoUwZs881UVCIUC5K/sXDTJpbpU9JZ3Gm0=)
2: JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl (hash: Er6lGtQ9zhnlLTZ9V8pHC10IUE8+Rcb9VL6XWNBeBtM=)
3: Jf85FwwWGAMm_y1gyBMRf8ZylY8.roa (hash: hqLNtg3bR55HcspgRfJxtmFSYZlPqsuiPGUD5+xKsFs=)
4: P8SdjgL8ZDRD9dCtV019i5iHb24.roa (hash: CoeDwI0txm8Gy2K05IA/CNWDcRLrTXgP9de+lbPwdzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:7e:80:08:c1:43:a2:88:4b:45:ba:92:51:42:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2588b1b560f998eccd3a6eff40543b59204d67b8
Validity
Not Before: Nov 4 13:01:42 2025 GMT
Not After : Nov 5 13:01:42 2025 GMT
Subject: CN=b183fad3cd7a7a19fc82b387b7b8bfc68403462f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9e:11:2a:35:c9:7e:69:e4:a3:47:c5:82:f4:
10:bb:84:6b:c3:8d:97:2a:16:b4:c0:9d:e0:7a:bb:
cd:fe:59:a2:c8:d9:db:c6:b5:56:40:b2:96:84:13:
69:c9:f6:3b:99:32:e1:67:3b:e3:1c:d1:0a:a6:7c:
d5:b0:83:84:6d:b3:90:bb:b7:2e:6a:3e:5a:92:3e:
b4:96:a0:3b:bd:d2:0f:ea:d9:55:95:c6:01:5d:cc:
42:be:c9:30:41:7c:55:ce:cf:82:f9:af:75:d5:b1:
69:7a:e7:f2:09:9f:bb:cd:a9:6a:8a:a2:6b:63:86:
42:ef:f6:0b:47:35:29:56:0d:d2:5d:03:bd:49:ef:
0f:7d:29:6b:22:43:ee:c6:fa:9b:ff:08:46:88:54:
1b:10:40:70:a8:68:c6:0f:0d:90:7d:e7:5c:07:61:
de:94:42:ee:70:c9:11:6f:00:f4:81:4a:ab:0c:f1:
38:11:cf:c2:c9:b5:c9:2c:a9:d2:e8:81:a3:ef:10:
15:f0:ae:1a:01:87:08:66:8f:eb:e1:e6:4b:23:0a:
59:f8:ce:ce:ef:e4:08:60:6a:f8:36:11:c3:48:d3:
89:11:e8:de:15:b4:d9:53:2b:38:dd:20:e1:5b:8a:
2c:8c:74:85:81:13:39:3c:b8:ba:02:93:1b:bb:23:
d3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:83:FA:D3:CD:7A:7A:19:FC:82:B3:87:B7:B8:BF:C6:84:03:46:2F
X509v3 Authority Key Identifier:
keyid:25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:80:e0:b4:fd:e7:40:90:19:3e:0f:73:61:56:97:fb:dd:0e:
44:9e:0b:47:d5:5d:78:78:65:dd:06:64:28:0d:1c:54:e5:5b:
a4:6d:21:0c:ab:fb:dc:eb:f0:08:4a:bc:34:b6:de:91:64:d0:
0d:74:43:98:b3:a6:1c:73:ba:f5:9f:90:c4:24:a3:62:29:cd:
ef:a9:4a:f2:dc:b4:12:60:63:01:2d:7b:4e:c4:71:d4:73:07:
8c:8f:c0:e5:6f:e1:62:58:17:17:df:de:3c:26:a1:6b:c8:ff:
ac:23:88:ef:8e:51:39:f2:4f:e6:fe:ed:32:21:58:2c:0e:03:
3c:44:40:f1:80:56:a6:83:cd:c5:14:6a:e7:3b:8e:53:ff:02:
25:71:de:f4:6e:01:90:75:2d:07:f0:f5:c8:84:49:ac:d2:cc:
a7:2d:d8:d1:4d:4d:3b:f9:0d:22:30:4f:01:7e:d4:ee:bc:09:
7b:c7:a8:81:b4:09:9b:5d:99:ca:fb:04:39:d8:81:7d:43:82:
87:59:98:a7:a8:11:8b:64:bc:06:b7:be:32:6a:ec:52:0e:46:
ba:7a:14:bd:ec:f6:d9:17:b8:59:18:b7:75:85:71:27:9a:30:
e6:a4:a7:2e:4c:18:09:22:d6:88:99:cd:44:83:81:77:23:46:
55:5c:2a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:13 2025 by rpki-client