Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft
File: jYBF-d8IxTBX6d-ft7eldRA__0o.mft (raw, json)
Hash identifier: 3TqX8j5/YpsUIstKqIav0vtpqQ1DUKE9WycfJw9vDSE=
Subject key identifier: 1A:87:D3:C3:40:CD:20:DB:19:42:ED:93:6D:2C:1A:D8:22:2B:6F:ED
Authority key identifier: 8D:80:45:F9:DF:08:C5:30:57:E9:DF:9F:B7:B7:A5:75:10:3F:FF:4A
Certificate issuer: /CN=8d8045f9df08c53057e9df9fb7b7a575103fff4a
Certificate serial: 019A5752CA3FD8437694F4DC591665FA3C4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYBF-d8IxTBX6d-ft7eldRA__0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft
Manifest number: 020F
Signing time: Thu 06 Nov 2025 04:00:34 +0000
Manifest this update: Thu 06 Nov 2025 04:00:34 +0000
Manifest next update: Fri 07 Nov 2025 04:00:34 +0000
Files and hashes: 1: M-gXFd7N6RQlOS3FU49vKYSovUs.roa (hash: 3OvRn3YgHg1m6lctKtBNgoRt6uS+lTyZBl7EBoP4/D0=)
2: jYBF-d8IxTBX6d-ft7eldRA__0o.crl (hash: qSUdEe+yjCt/JtnQHb8FUO6mini9ACPjamjNyT1Cmws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYBF-d8IxTBX6d-ft7eldRA__0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 03:53:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:57:52:ca:3f:d8:43:76:94:f4:dc:59:16:65:fa:3c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d8045f9df08c53057e9df9fb7b7a575103fff4a
Validity
Not Before: Nov 6 04:00:34 2025 GMT
Not After : Nov 7 04:00:34 2025 GMT
Subject: CN=1a87d3c340cd20db1942ed936d2c1ad8222b6fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:31:b5:cf:ba:69:7c:14:c3:c8:f0:d6:fd:89:
57:c6:8a:6b:a7:9a:26:25:7b:20:3f:e4:58:2f:a6:
52:b0:6e:55:57:7c:41:73:b5:14:dd:a4:67:8a:74:
35:c2:72:83:f3:f0:eb:34:06:44:5c:60:ee:0d:0c:
4d:96:df:e9:e4:11:2a:81:21:9e:22:20:64:80:b0:
fb:b5:f8:c4:5d:de:6a:96:e4:4d:bb:28:d4:01:9b:
ed:40:98:93:8f:45:fb:03:77:cf:2d:36:64:d9:56:
9f:f1:02:83:ba:48:15:e8:39:cc:94:c8:75:b2:ae:
e8:2f:25:3d:83:98:70:b5:1b:a6:02:ff:ba:23:e8:
5f:c5:f7:9e:3a:ed:b9:aa:08:24:16:20:8a:41:37:
84:ee:e3:08:c9:04:d6:8d:77:f6:55:e8:ae:e8:2f:
23:3b:bf:2f:0b:21:4c:91:a9:08:e0:82:01:eb:a8:
ca:94:38:71:0b:cc:df:56:71:f4:9c:66:65:7e:2b:
d4:df:6f:1a:1e:01:b5:8b:db:27:c8:e9:aa:02:f5:
76:ce:89:34:a3:57:63:14:83:75:f8:2a:70:8b:87:
87:cb:6f:d1:9c:b1:53:9d:f5:e7:ed:d6:53:02:69:
1d:be:6a:36:f7:ae:25:e0:f9:63:2b:61:b6:68:5c:
ec:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:87:D3:C3:40:CD:20:DB:19:42:ED:93:6D:2C:1A:D8:22:2B:6F:ED
X509v3 Authority Key Identifier:
keyid:8D:80:45:F9:DF:08:C5:30:57:E9:DF:9F:B7:B7:A5:75:10:3F:FF:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYBF-d8IxTBX6d-ft7eldRA__0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:00:47:ca:b3:82:60:49:14:62:15:cc:5f:de:6f:31:32:fd:
38:d3:05:9b:c7:f6:af:7d:36:0d:79:ae:c3:1b:59:e9:aa:5f:
cc:b3:1f:50:62:a7:f5:98:87:61:eb:88:03:37:c7:6e:34:51:
bc:e8:50:63:62:c9:5c:9d:05:18:15:b8:b6:d5:15:2d:76:d8:
d9:66:61:e7:6a:f9:23:ed:34:31:8d:0f:8e:71:c0:4e:93:db:
5b:22:20:6c:d8:7b:0b:20:95:32:39:65:39:16:20:c3:91:b3:
5c:c2:2d:0d:2c:59:e4:5e:b4:7e:e4:00:c5:92:40:d6:fe:8d:
d4:01:62:25:82:57:42:99:0b:c3:64:2f:1e:bf:79:69:c8:d9:
55:96:99:40:df:d9:44:40:ab:a9:78:3b:81:61:03:98:96:41:
3e:97:14:0a:fe:91:45:26:c4:cf:3d:ef:8e:8b:fe:d6:59:bc:
82:3b:c2:4b:46:ec:fc:52:2d:e9:a1:fe:24:1f:7e:5d:80:17:
78:1f:46:2f:db:57:af:0a:7a:0b:02:d5:9e:f9:05:55:c2:14:
b3:12:c3:02:71:2c:2c:8f:41:c9:65:f8:dd:14:a3:7c:97:d1:
3a:51:39:9b:9d:24:a4:b1:27:ad:84:a8:59:51:b6:41:32:60:
15:ea:81:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 08:15:45 2025 by rpki-client