Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
File: jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft (raw, json)
Hash identifier: y48SxqnulzO+vHzWrbWfSGClfljvwLbM7/lWE4zzHKs=
Subject key identifier: EA:49:B3:83:32:6F:C6:7D:B1:7C:74:17:3D:80:CD:F2:F6:05:90:F4
Authority key identifier: 8F:20:F7:0F:17:D8:B7:2C:3E:42:AE:E0:32:91:29:8B:54:A4:FF:2F
Certificate issuer: /CN=8f20f70f17d8b72c3e42aee03291298b54a4ff2f
Certificate serial: 019896DC528D105AA7C406820B69681E1461
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
Manifest number: 09BF
Signing time: Mon 11 Aug 2025 02:01:18 +0000
Manifest this update: Mon 11 Aug 2025 02:01:18 +0000
Manifest next update: Tue 12 Aug 2025 02:01:18 +0000
Files and hashes: 1: hFUKeYVJZQidWIC3boS5B2MmNkQ.roa (hash: orWyk1nD9ke9cd+4s/S82r9At33d+yTlOwM1l+sczkc=)
2: jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl (hash: PhkLNIgY8awPsTLG0SluBDBF96jov7dBwzWSB8SJ5hA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:dc:52:8d:10:5a:a7:c4:06:82:0b:69:68:1e:14:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f20f70f17d8b72c3e42aee03291298b54a4ff2f
Validity
Not Before: Aug 11 02:01:18 2025 GMT
Not After : Aug 12 02:01:18 2025 GMT
Subject: CN=ea49b383326fc67db17c74173d80cdf2f60590f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d2:7d:0a:2d:da:e1:7b:d8:33:63:77:06:fb:
7c:a7:9c:a5:8d:48:ea:df:e0:78:54:57:f2:62:1b:
08:e7:66:d1:7f:a2:7e:06:35:fa:6e:ee:d2:a6:d6:
fa:2b:34:57:3e:27:5e:3f:2a:1c:3d:20:76:6f:16:
af:5d:20:75:3b:0b:5b:20:6a:02:6c:94:cf:87:fd:
98:4b:a1:7d:4b:7f:2e:8a:d9:eb:7c:73:99:54:4a:
95:df:ec:31:02:31:b8:66:0b:85:ae:79:02:55:31:
62:06:6f:a1:ab:ca:94:ce:cd:44:59:b5:b6:79:c8:
40:0c:a1:6b:49:25:a0:82:63:50:8f:e6:4b:ab:69:
74:5f:9c:74:d5:dd:cb:52:8a:4e:00:48:b6:b4:55:
e6:1a:d2:c0:66:4c:2a:50:ef:e9:9e:50:ff:5f:b0:
14:f2:37:d7:3c:d8:05:59:85:6e:6a:3d:c7:6c:a1:
1e:b2:50:53:e4:ac:7c:54:9f:0d:7a:c4:cf:8d:89:
01:a3:83:f3:4f:b1:bb:af:6d:e7:78:f2:5c:ff:16:
b8:12:5f:8e:01:d5:62:82:fd:95:3f:6d:7f:71:51:
ba:95:a5:6a:8e:a0:4c:05:61:de:07:8b:10:ea:b1:
4e:89:2d:f0:0e:a8:dc:f9:1c:5b:cd:de:62:1d:73:
c3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:49:B3:83:32:6F:C6:7D:B1:7C:74:17:3D:80:CD:F2:F6:05:90:F4
X509v3 Authority Key Identifier:
keyid:8F:20:F7:0F:17:D8:B7:2C:3E:42:AE:E0:32:91:29:8B:54:A4:FF:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:4e:da:7f:83:ec:29:96:41:19:bd:e2:fc:7b:32:52:9d:d3:
18:32:4f:d7:91:32:ed:db:5f:da:e3:68:d4:a3:74:f6:f7:12:
2c:74:7b:0b:21:f1:72:6d:3f:de:9a:69:18:d7:4c:8f:50:04:
cc:05:33:ce:4a:49:76:a5:7b:d1:21:04:1f:1f:8d:16:6c:1c:
2e:74:d8:29:cc:77:6d:f9:cd:bf:2e:df:18:91:d5:a3:6b:76:
72:4a:96:58:aa:ca:56:2a:84:7e:f6:7d:8f:c0:91:8a:07:50:
39:b5:93:f7:b0:05:2b:d6:1e:de:67:d9:c8:b8:82:86:02:63:
26:e3:e1:29:92:fa:11:8a:98:a9:30:73:3d:48:ef:4a:93:c3:
e6:7d:b0:0f:2b:1d:3e:a7:df:6f:0d:10:8e:48:87:34:86:2f:
63:76:f0:83:5c:3e:99:f9:fc:50:c0:96:b3:56:1b:5d:0f:f0:
3b:42:fc:58:96:17:f9:70:cf:e7:b6:b5:09:6a:08:88:15:7b:
26:2b:68:be:73:9e:87:dc:34:fa:0a:0e:f1:cd:8e:00:0f:88:
95:c3:a8:14:a9:f6:a9:8b:b7:7a:4d:a4:06:65:2c:c6:0d:e8:
a1:dd:9e:eb:2e:59:91:2a:59:ce:a0:aa:e0:d3:5b:99:f5:06:
18:8d:1a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:30:41 2025 by rpki-client