Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
File: jYkiPB8zXAzFaTWfot2jSaIjbMs.mft (raw, json)
Hash identifier: QWwgoFO6vwEnlRlO6bdEtwga1tqTqwh5Dg49DkYWjsY=
Subject key identifier: 2A:35:BD:D1:0B:FD:D2:84:12:49:8A:EA:84:4E:D1:41:B9:06:8E:62
Authority key identifier: 8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
Certificate issuer: /CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Certificate serial: 019A4E18F15741983756A721AB29F3506C15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
Manifest number: 10D8
Signing time: Tue 04 Nov 2025 09:00:48 +0000
Manifest this update: Tue 04 Nov 2025 09:00:48 +0000
Manifest next update: Wed 05 Nov 2025 09:00:48 +0000
Files and hashes: 1: Xb2vaf1WumE3rEaoURHut1_s3Jg.roa (hash: nAy8xAAS6bySEPJLqhsAFhoLRm4dRlqUVQKPoHtpfZc=)
2: jYkiPB8zXAzFaTWfot2jSaIjbMs.crl (hash: XjPRMK0F6vjsx/D4BL7JKIT2X0SIWA3ESuQaVcLYIek=)
3: pdhN-MZpD_hNi80yknZO7jZPsqI.roa (hash: Vq61y4v3/rCjHkyR2L7fl+qX1NPi84b5r+WF68rRDB4=)
4: x-ypFNam44Ex8bmMEi_YpNw0fuw.roa (hash: tV3tXNlddvZJeiOgiT78kd/ynwSRXH2x5HrUpgSwbwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:f1:57:41:98:37:56:a7:21:ab:29:f3:50:6c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Validity
Not Before: Nov 4 09:00:48 2025 GMT
Not After : Nov 5 09:00:48 2025 GMT
Subject: CN=2a35bdd10bfdd28412498aea844ed141b9068e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ab:65:cc:45:52:42:16:bf:fe:94:98:f0:c9:
e7:9c:0a:14:ee:e7:f1:d5:7b:ab:6d:60:5b:83:ad:
15:1a:64:53:84:13:bf:e3:b6:2b:dc:82:64:f5:c2:
f2:4d:4a:8d:75:cf:e7:32:e2:d6:63:d5:1a:55:96:
15:25:7f:da:07:2b:ab:12:79:21:61:2f:25:45:fc:
7e:ea:c2:17:99:c2:ea:4b:ed:54:16:79:1f:fd:3a:
ca:53:21:dc:88:80:ad:3e:53:3c:0a:7d:12:87:88:
7b:19:9d:d4:bd:5e:9e:58:85:f8:fb:4e:5d:43:e5:
33:b2:4d:58:bd:68:78:c9:81:45:f8:87:62:02:1f:
99:49:4b:56:8b:06:c2:90:fc:12:bb:64:d6:75:ff:
79:05:01:8d:59:98:0b:49:5e:4f:1f:81:fa:f9:38:
0a:73:29:8f:5d:3e:cc:2a:25:3b:b8:18:44:f4:43:
df:5d:6a:fc:ae:65:65:bd:4b:f4:79:c0:39:ec:a9:
f6:09:9b:8c:45:93:7d:d9:ea:8c:49:d7:b7:2e:52:
8f:19:19:39:ea:78:a0:92:6d:59:5e:fd:07:e4:44:
e0:f8:7d:4a:42:e9:28:1a:b0:58:4b:37:72:42:d1:
48:77:c1:80:40:00:72:0d:d4:d0:ce:97:1e:5e:f3:
83:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:35:BD:D1:0B:FD:D2:84:12:49:8A:EA:84:4E:D1:41:B9:06:8E:62
X509v3 Authority Key Identifier:
keyid:8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:30:e4:c9:c7:0b:d0:61:47:19:94:2c:52:83:70:dd:e9:c6:
35:43:5c:2a:6d:ee:e4:55:2d:07:52:2e:cc:69:0b:65:97:b0:
d0:8c:d6:25:ab:b9:43:80:ac:5a:cd:8a:54:e2:1b:29:19:da:
78:83:83:33:8b:17:f6:c9:1f:85:e5:7b:b8:9b:09:17:b3:cc:
23:80:0e:64:2e:d7:13:a0:24:ef:6b:63:b3:8a:b2:81:20:a7:
9b:d6:91:e6:21:f1:2b:36:a8:86:3f:9a:08:36:32:50:28:ce:
d2:6c:9d:30:47:48:91:11:1b:fc:0c:89:41:ab:b8:9c:10:da:
f6:05:72:21:a0:21:00:12:1e:16:49:f1:1b:35:7a:2a:01:82:
27:59:2d:c7:f5:7c:e2:49:3f:79:c1:89:fe:2e:fb:e3:40:34:
1a:eb:ca:c3:e3:b4:2a:c7:3a:a6:78:2b:27:27:a8:a3:9e:ff:
21:bf:06:df:84:3e:bc:73:58:f6:48:9c:89:13:9b:88:98:96:
3c:a5:2b:22:1b:94:8a:09:bd:cb:e5:4d:9e:24:46:04:ff:be:
f1:7b:00:0f:47:eb:8b:69:ad:8b:c6:44:4d:cd:49:70:35:58:
ab:6e:8d:b5:68:e7:8a:94:48:71:53:99:96:61:6c:d3:51:ba:
0c:7d:c5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:00 2025 by rpki-client