Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
File: jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft (raw, json)
Hash identifier: YRQ4igSuDV2AA9055wDNo+fP/AfWAi/IsE4gTZGQRIM=
Subject key identifier: 6A:A0:FA:DC:BA:7E:03:92:66:81:0A:56:28:AA:AD:BA:B6:3E:56:10
Authority key identifier: 8F:20:F7:0F:17:D8:B7:2C:3E:42:AE:E0:32:91:29:8B:54:A4:FF:2F
Certificate issuer: /CN=8f20f70f17d8b72c3e42aee03291298b54a4ff2f
Certificate serial: 019A4D3CE6D0DEF07AC434E1ABA46FD67450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
Manifest number: 0AA2
Signing time: Tue 04 Nov 2025 05:00:28 +0000
Manifest this update: Tue 04 Nov 2025 05:00:28 +0000
Manifest next update: Wed 05 Nov 2025 05:00:28 +0000
Files and hashes: 1: hFUKeYVJZQidWIC3boS5B2MmNkQ.roa (hash: orWyk1nD9ke9cd+4s/S82r9At33d+yTlOwM1l+sczkc=)
2: jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl (hash: GQMQEXsnqCfH39RPC/2H0VqCd4neyay/fcFkvKMweKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:e6:d0:de:f0:7a:c4:34:e1:ab:a4:6f:d6:74:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f20f70f17d8b72c3e42aee03291298b54a4ff2f
Validity
Not Before: Nov 4 05:00:28 2025 GMT
Not After : Nov 5 05:00:28 2025 GMT
Subject: CN=6aa0fadcba7e039266810a5628aaadbab63e5610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d3:3e:d5:a7:5d:6b:b8:03:bc:58:3b:ef:d5:
42:da:f2:e3:83:7a:9b:b2:ec:18:d7:3e:13:25:3e:
68:8b:9f:21:ed:41:16:39:b6:59:34:8d:92:8f:1d:
22:d2:0e:2e:3a:6b:a7:79:f0:74:61:f3:12:16:a0:
1b:a9:73:a3:6c:f9:8a:c8:24:34:51:3b:8b:76:bf:
2e:cb:ad:8a:ae:d9:db:12:e0:93:af:cd:84:45:9b:
a6:2c:6d:b9:c3:5a:17:be:b1:18:23:96:d8:9f:0e:
9b:3f:86:44:e0:f1:75:f6:1a:89:f3:58:da:1f:2a:
b0:e3:49:97:7f:09:dd:d3:df:1b:68:45:54:34:73:
15:ff:fb:32:d0:b6:d9:c4:ac:fb:46:ec:da:ab:e6:
1e:a8:85:a2:92:db:18:db:15:86:c2:2d:eb:74:fb:
4d:0e:b5:04:0f:94:7a:c0:80:62:54:34:40:11:f2:
52:bc:ef:30:cd:7a:2b:7c:dd:ae:7b:13:bf:20:04:
f8:1b:21:17:33:67:1c:5d:84:e5:38:ea:a9:20:ce:
48:30:a7:04:31:07:9c:d9:99:95:ad:03:a4:74:b3:
0a:ab:33:89:ce:07:83:23:ae:55:ec:91:30:12:af:
72:da:5b:a0:4c:4e:ac:3d:c6:70:4c:ff:ce:d0:8f:
7b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A0:FA:DC:BA:7E:03:92:66:81:0A:56:28:AA:AD:BA:B6:3E:56:10
X509v3 Authority Key Identifier:
keyid:8F:20:F7:0F:17:D8:B7:2C:3E:42:AE:E0:32:91:29:8B:54:A4:FF:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/42c0c0-de6d-49b6-b450-c96a8da2c589/1/jyD3DxfYtyw-Qq7gMpEpi1Sk_y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:78:aa:f1:eb:76:d3:d7:cf:99:42:56:8f:75:04:85:d8:cf:
94:8a:01:68:51:75:f1:c8:ef:f7:57:d6:37:47:9a:3b:b4:b8:
f1:ad:38:0f:89:35:a4:1f:0f:03:3c:1c:e8:86:31:0e:cc:25:
e8:17:af:b0:9c:ae:96:34:bb:ed:a3:bd:6c:cf:46:1e:30:0a:
2f:12:59:55:74:4b:db:d8:8e:5c:fe:c4:08:dc:98:5f:a2:ff:
34:4c:b3:92:fb:d8:29:b4:fb:ea:23:6f:da:f9:0d:19:57:4b:
d3:b2:ff:05:00:74:39:95:45:ef:2e:59:db:8f:3f:e1:18:3d:
7f:d4:18:4e:95:ea:3d:c8:66:36:23:7a:fa:3b:24:12:59:64:
d8:4c:a7:54:9b:0a:10:51:98:03:4b:5e:88:79:aa:55:90:1d:
26:88:32:ee:e4:76:40:63:97:83:bd:7c:ff:7f:eb:94:89:a2:
e5:74:fc:e1:94:7d:19:7d:0f:96:18:b5:2a:43:0f:fb:c0:04:
3e:b0:87:25:8a:cf:a1:74:53:07:d0:9b:a4:bb:c9:c2:5b:70:
6d:aa:cf:86:b2:60:6f:1c:bf:92:3f:8b:80:3f:b3:03:2f:6d:
64:0c:22:cf:07:cc:82:c0:d4:4e:cb:a6:7a:76:b6:fa:cd:53:
0e:a2:05:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:25 2025 by rpki-client