Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
File: jYRATl-KSxF65E5z1TxE7N1Xg0I.mft (raw, json)
Hash identifier: v4p0iWjanLRvEgHNz3KdXCCDnFwx1UxX22JxSM/xS2w=
Subject key identifier: DE:5F:05:25:9C:6D:22:3C:24:8C:F7:22:CA:A2:F1:32:8B:DF:E3:4C
Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
Certificate issuer: /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Certificate serial: 019A4E4F42541C90EC4A8E701E56B9B31F56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
Manifest number: 1732
Signing time: Tue 04 Nov 2025 10:00:08 +0000
Manifest this update: Tue 04 Nov 2025 10:00:08 +0000
Manifest next update: Wed 05 Nov 2025 10:00:08 +0000
Files and hashes: 1: 4F7q-ESPAcOoBaJ8HV_6ahTt-Uc.roa (hash: v234flYnQRm4nRbtw0jT7kDIHH0ZbwZkb6fqcE+qEL8=)
2: 7zJeCOLkCzcAkE6elAmsAfnqBrA.roa (hash: ZBwwSegU4XKbwNTWFofTTBLanZb/lF8bV9B75di1H3E=)
3: Mxsf5y7FP3EDBxgdyJxHG-OqVe0.roa (hash: ClWAIpLDh5pnWSp7TABzI9Qk+b3RsHPaiwstfKht6So=)
4: Tge76w--mLK8h6ItDfaBoPjYqVo.roa (hash: 9V3RUbTnMu3g1emAx63hoe2FPk/d/B5APDPw6pVAO0o=)
5: dDluN-ZW3m4A2qeeV1wHH5bu8tM.roa (hash: HIE3+ZZu9CT1HGuYfh7TMNitUjpb7aMhEYQpjqcPSJo=)
6: jYRATl-KSxF65E5z1TxE7N1Xg0I.crl (hash: J3/FOKXsEKXGZ9+X3cifywq9NyvDwHA3pTiF6Esy7fE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:42:54:1c:90:ec:4a:8e:70:1e:56:b9:b3:1f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Validity
Not Before: Nov 4 10:00:08 2025 GMT
Not After : Nov 5 10:00:08 2025 GMT
Subject: CN=de5f05259c6d223c248cf722caa2f1328bdfe34c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9b:60:ae:b7:b0:93:94:e1:0d:44:f7:fc:58:
b3:03:0f:dd:f7:19:f6:74:73:8f:39:81:11:83:9b:
c4:e7:61:d9:d4:e9:20:a0:d6:ec:76:5d:5c:70:18:
03:93:48:ab:2c:49:41:2f:eb:b6:12:62:8e:20:20:
48:58:74:dc:36:55:4a:72:02:37:02:84:a9:2f:5c:
1d:e1:43:0b:2d:c1:16:ce:fd:c3:53:de:54:e0:85:
98:45:71:54:8d:e5:aa:ec:67:1f:a1:eb:f6:4b:dd:
6e:fd:60:f9:31:e5:06:ab:af:ef:37:08:2f:11:ca:
5c:66:cf:5c:69:79:7c:de:dd:9d:55:8e:32:7c:f1:
4a:08:7b:00:93:ac:f2:14:00:23:f3:56:eb:e4:35:
89:d7:66:e3:1f:ac:1b:ee:96:b5:29:e2:ca:8b:c3:
8d:b6:b5:ff:18:4a:3a:3f:69:de:5e:0b:11:c0:29:
76:1a:a2:f1:cb:3a:8d:a2:c2:54:7b:49:55:f2:0d:
fd:f2:cf:1f:2d:0a:59:3e:78:91:5e:02:62:a6:83:
5e:82:4a:54:42:03:a8:aa:1a:1a:0a:09:de:15:de:
a3:3b:45:95:57:b2:12:f8:b2:29:5d:c4:55:aa:69:
60:92:a0:4d:8c:3a:a2:12:99:b8:98:6d:35:48:cd:
78:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5F:05:25:9C:6D:22:3C:24:8C:F7:22:CA:A2:F1:32:8B:DF:E3:4C
X509v3 Authority Key Identifier:
keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:11:0f:3d:d7:54:7a:89:3f:12:9e:b6:7c:36:7a:28:4d:a1:
30:7a:a6:ca:d2:7f:5a:84:0e:17:9a:f7:38:35:82:7a:cc:a6:
ba:72:d0:db:26:fd:b2:65:aa:3c:a1:88:cf:21:8d:03:4c:bd:
e2:81:18:ae:b1:e0:63:ab:68:4f:7e:f2:a2:7b:99:65:e4:e8:
01:6d:5e:b3:63:af:cb:4e:4e:e2:98:a8:cd:aa:7e:68:74:33:
80:6b:f9:12:9e:7a:ee:3e:f1:83:ba:fc:16:36:c0:1e:8a:81:
c4:ac:93:4b:17:20:91:0a:53:98:25:b7:9c:15:ab:5f:e9:d5:
87:1c:44:a8:0d:de:ca:1a:85:44:d6:98:38:7c:08:22:0a:da:
f0:fc:fc:9c:b8:ee:77:18:13:03:bf:55:fc:5d:fc:9b:f3:f2:
c4:32:d9:1c:14:be:29:40:93:f4:c7:27:96:05:34:21:18:17:
50:02:a7:7d:20:07:ba:5d:3b:00:98:c2:aa:f6:e3:0d:3e:23:
03:5a:e9:ad:6c:2d:43:aa:53:b3:a3:6a:ab:f1:34:c0:77:d1:
81:a7:97:ff:b1:27:91:79:43:03:40:ed:f7:87:e3:0d:ad:a9:
dd:ea:4e:90:39:f6:44:92:f8:7d:f4:2d:67:e0:c9:37:73:54:
9f:d4:82:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOT0JUHJDsSo5wHla5sx9WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkODQ0MDRlNWY4YTRiMTE3YWU0NGU3M2Q1M2M0NGVjZGQ1
NzgzNDIwHhcNMjUxMTA0MTAwMDA4WhcNMjUxMTA1MTAwMDA4WjAzMTEwLwYDVQQD
EyhkZTVmMDUyNTljNmQyMjNjMjQ4Y2Y3MjJjYWEyZjEzMjhiZGZlMzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5tgrrewk5ThDUT3/FizAw/d9xn2
dHOPOYERg5vE52HZ1OkgoNbsdl1ccBgDk0irLElBL+u2EmKOICBIWHTcNlVKcgI3
AoSpL1wd4UMLLcEWzv3DU95U4IWYRXFUjeWq7Gcfoev2S91u/WD5MeUGq6/vNwgv
EcpcZs9caXl83t2dVY4yfPFKCHsAk6zyFAAj81br5DWJ12bjH6wb7pa1KeLKi8ON
trX/GEo6P2neXgsRwCl2GqLxyzqNosJUe0lV8g398s8fLQpZPniRXgJipoNegkpU
QgOoqhoaCgneFd6jO0WVV7IS+LIpXcRVqmlgkqBNjDqiEpm4mG01SM14eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5fBSWcbSI8JIz3Isqi8TKL3+NMMB8GA1UdIwQY
MBaAFI2EQE5fiksReuROc9U8ROzdV4NCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvallSQVRsLUtTeEY2NUU1ejFUeEU3TjFYZzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kNTFmNjQtNWQwNi00ZmMwLWFiNjkt
MmNkOThlZTUzNTY5LzEvallSQVRsLUtTeEY2NUU1ejFUeEU3TjFYZzBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9kNTFmNjQtNWQwNi00ZmMwLWFiNjktMmNkOThlZTUzNTY5
LzEvallSQVRsLUtTeEY2NUU1ejFUeEU3TjFYZzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmREPPddU
eok/Ep62fDZ6KE2hMHqmytJ/WoQOF5r3ODWCesymunLQ2yb9smWqPKGIzyGNA0y9
4oEYrrHgY6toT37yonuZZeToAW1es2Ovy05O4piozap+aHQzgGv5Ep567j7xg7r8
FjbAHoqBxKyTSxcgkQpTmCW3nBWrX+nVhxxEqA3eyhqFRNaYOHwIIgra8Pz8nLju
dxgTA79V/F38m/PyxDLZHBS+KUCT9McnlgU0IRgXUAKnfSAHul07AJjCqvbjDT4j
A1rprWwtQ6pTs6Nqq/E0wHfRgaeX/7EnkXlDA0Dt94fjDa2p3epOkDn2RJL4ffQt
Z+DJN3NUn9SCuw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:16:28 2025 by rpki-client