Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
File: jYkiPB8zXAzFaTWfot2jSaIjbMs.mft (raw, json)
Hash identifier: 9iiCDA1k3dBFZqRzIFx+9knrwPGg++him7TcG4FFTi0=
Subject key identifier: D9:22:86:2D:3D:7A:1A:EE:DE:BD:F1:A0:8E:A9:2D:9C:C6:1B:02:C9
Authority key identifier: 8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
Certificate issuer: /CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Certificate serial: 01987DC0B696109630352A3DA019A5E2ABAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
Manifest number: 0FE4
Signing time: Wed 06 Aug 2025 05:00:38 +0000
Manifest this update: Wed 06 Aug 2025 05:00:38 +0000
Manifest next update: Thu 07 Aug 2025 05:00:38 +0000
Files and hashes: 1: 1-VympxjBDWi5MNPd5PqkAiFK8cw.roa (hash: g9oAglIOu05tbBj4MBirO8ol3RXV21sLtMa1CGtPD7w=)
2: Xb2vaf1WumE3rEaoURHut1_s3Jg.roa (hash: nAy8xAAS6bySEPJLqhsAFhoLRm4dRlqUVQKPoHtpfZc=)
3: jYkiPB8zXAzFaTWfot2jSaIjbMs.crl (hash: mJkWWUBQBPp9slNaVDnqub+Tfa0BCijkeQKN1Zu6a4o=)
4: x-ypFNam44Ex8bmMEi_YpNw0fuw.roa (hash: tV3tXNlddvZJeiOgiT78kd/ynwSRXH2x5HrUpgSwbwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c0:b6:96:10:96:30:35:2a:3d:a0:19:a5:e2:ab:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d89223c1f335c0cc569359fa2dda349a2236ccb
Validity
Not Before: Aug 6 05:00:38 2025 GMT
Not After : Aug 7 05:00:38 2025 GMT
Subject: CN=d922862d3d7a1aeedebdf1a08ea92d9cc61b02c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ac:e9:0c:43:d5:3d:96:52:d9:65:28:a8:9c:
84:55:c1:6e:15:bf:64:3d:0f:e4:91:ac:48:47:ad:
17:36:9b:aa:96:91:e3:50:73:69:07:0a:d5:dd:c6:
34:26:8a:d3:9c:42:27:43:ab:4f:da:dc:bd:2c:43:
ab:a5:db:84:de:44:fa:a1:94:2a:9b:c5:28:55:2f:
85:4d:a4:43:0d:96:35:f2:2d:35:ba:16:a5:19:a2:
8b:8e:66:82:13:a8:e7:dc:49:b0:02:9f:2a:59:4f:
c3:9a:dc:23:eb:a5:22:45:11:4b:c0:17:7e:e5:d0:
f4:f2:fd:e7:15:c9:69:3b:85:dd:88:82:bd:79:fd:
69:08:15:38:48:f8:3c:2a:a0:65:ce:37:0e:fb:f3:
3b:2d:17:3c:31:1d:77:b1:fb:d4:aa:74:f3:8b:f0:
d6:23:da:1b:b6:68:b1:b2:3d:6e:81:a1:c3:70:31:
5a:4d:db:e7:7c:53:00:29:12:69:5e:03:c6:c7:dc:
77:59:c1:85:c1:4a:48:52:4e:f9:bc:58:1d:df:23:
cc:e6:8b:10:e4:6a:4c:36:f5:30:b1:cc:9f:3a:94:
d2:f6:df:99:b1:e7:2d:3e:d6:7c:ec:cb:97:d4:c0:
37:d2:c4:35:28:3e:ed:2e:91:58:5f:06:a9:72:f2:
50:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:22:86:2D:3D:7A:1A:EE:DE:BD:F1:A0:8E:A9:2D:9C:C6:1B:02:C9
X509v3 Authority Key Identifier:
keyid:8D:89:22:3C:1F:33:5C:0C:C5:69:35:9F:A2:DD:A3:49:A2:23:6C:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkiPB8zXAzFaTWfot2jSaIjbMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/52a10d-d851-40ae-a8b0-a1028eda6383/1/jYkiPB8zXAzFaTWfot2jSaIjbMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:5a:e2:f9:a9:3a:0f:5d:f8:25:0d:25:91:8a:11:6a:f3:43:
c0:81:ee:97:6a:29:2d:4b:84:19:05:61:a0:30:3e:67:73:6c:
03:db:52:4e:0f:d7:03:27:9a:11:4f:16:fb:99:b0:d3:b3:f3:
7a:b9:52:57:5d:03:7d:1b:9d:9e:47:59:36:f1:38:de:34:62:
bb:bf:75:e3:3d:5f:91:ab:73:56:c6:09:5b:a0:1c:92:95:50:
1b:52:7e:c1:72:9c:41:5d:34:c4:37:a6:04:18:17:b9:39:fb:
20:78:78:02:0e:27:34:ef:4d:4e:25:85:15:86:e9:c3:34:56:
e7:29:9a:ab:4a:11:b0:44:eb:f2:d7:61:76:91:7c:fc:0a:2b:
6f:69:61:eb:da:82:5c:d6:56:cc:ab:73:46:89:0b:dc:c5:d9:
5e:c3:1e:13:29:eb:93:cc:5a:2e:cc:d9:cc:04:30:48:22:32:
00:b3:5d:47:c3:8d:ea:1b:33:3f:3a:1c:34:31:2c:2b:ac:90:
79:97:e7:65:60:76:11:b7:2b:d7:d0:b4:92:e5:cb:5d:bc:d3:
ff:e7:65:bd:94:ff:ac:75:70:f3:1a:d6:a8:e6:50:d5:bd:a3:
c2:d6:9f:a0:6a:f8:9e:4d:aa:f6:af:a3:6b:e7:e6:91:ea:39:
ed:73:04:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:56:25 2025 by rpki-client