Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
File: jYdAeZyRwmMKgJIXjbgk86iJp18.mft (raw, json)
Hash identifier: w8Sdqc+niA9fMgD6Bq5yMSrPHTdaBCE4si/mj46Fupg=
Subject key identifier: 09:C2:78:B5:CE:B4:1E:C1:F6:59:A7:51:3C:80:DA:F2:17:36:F1:60
Authority key identifier: 8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F
Certificate issuer: /CN=8d8740799c91c2630a8092178db824f3a889a75f
Certificate serial: 019A5187731388DDD7F13C495588079A8077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
Manifest number: 170D
Signing time: Wed 05 Nov 2025 01:00:22 +0000
Manifest this update: Wed 05 Nov 2025 01:00:22 +0000
Manifest next update: Thu 06 Nov 2025 01:00:22 +0000
Files and hashes: 1: K-6vxGr3EkVKtgWk3f7FXppAHWU.roa (hash: OqJwTUOjnt783umU3SvwJ0pGKHDe69wtlF63xIDInso=)
2: K7Su5tLQd2NMZMj9NBaGujGCyFc.roa (hash: mUfUc0m1Q5fvSqMO5jRLGU7xEPj6/17vBXx5MZ0j9fY=)
3: eE7CtoiQAT2pLGSZ83z4bGyxlms.roa (hash: 0jzCXVU/84NgsdnKR1p45oVJW0ZBdnomnSJlnmwgNt0=)
4: jYdAeZyRwmMKgJIXjbgk86iJp18.crl (hash: jQk3XQrcYeWMv9+mG+V7jYItDf3FgRXtOFHBh/tOAC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:73:13:88:dd:d7:f1:3c:49:55:88:07:9a:80:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d8740799c91c2630a8092178db824f3a889a75f
Validity
Not Before: Nov 5 01:00:22 2025 GMT
Not After : Nov 6 01:00:22 2025 GMT
Subject: CN=09c278b5ceb41ec1f659a7513c80daf21736f160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:22:95:2f:98:39:ee:ae:c6:f3:76:18:f4:25:
d1:9c:1d:3e:72:13:cf:f0:d2:66:68:65:38:30:7a:
13:55:55:49:7d:53:56:35:4a:7b:fa:b4:e7:57:76:
f2:17:7a:92:d8:a5:c7:c9:7c:bd:17:41:2f:22:2e:
42:05:e0:a7:1c:19:ab:bf:da:aa:f3:23:af:28:ef:
37:0b:32:47:ed:eb:7c:6c:70:d8:41:54:a5:ca:12:
26:29:6c:f1:2f:3f:10:ca:dd:17:e4:4b:6c:d1:5e:
11:f8:b5:b9:3f:14:9a:3d:35:7e:9e:76:2a:e0:e6:
cc:b5:c9:4e:fe:1f:62:b7:ea:d6:c1:93:b8:22:92:
55:c1:ae:b5:97:5b:3f:90:3e:9f:10:bc:65:2e:b3:
85:0b:7b:89:3c:9c:96:bd:15:31:e8:34:09:fa:bf:
48:33:45:44:e8:db:d6:ac:63:70:e3:95:06:ee:96:
8c:3e:ab:d8:95:f4:34:3a:56:16:d3:28:b5:86:2e:
11:7d:12:13:a9:00:53:16:f3:61:30:26:99:78:76:
33:6d:97:4a:3b:28:ad:fa:95:32:58:00:27:fb:33:
c3:ef:66:6d:e2:0e:18:4c:82:b6:99:90:36:50:d2:
5c:e6:40:e6:13:b2:da:23:31:33:4d:0e:c8:7b:9a:
e9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C2:78:B5:CE:B4:1E:C1:F6:59:A7:51:3C:80:DA:F2:17:36:F1:60
X509v3 Authority Key Identifier:
keyid:8D:87:40:79:9C:91:C2:63:0A:80:92:17:8D:B8:24:F3:A8:89:A7:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYdAeZyRwmMKgJIXjbgk86iJp18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b7c94-a60d-4399-9829-52b8166829d7/1/jYdAeZyRwmMKgJIXjbgk86iJp18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:15:80:9a:84:0c:43:37:1e:29:a5:84:11:46:80:39:32:be:
05:ff:0f:f3:62:ce:a3:9d:a6:e1:7c:f6:8a:23:32:e7:d6:23:
48:91:b4:da:9d:dc:f5:43:ee:12:3e:ef:fe:04:b7:b6:1c:bc:
17:0e:ac:72:ca:74:3c:e3:a0:75:d3:f0:7a:4c:4d:fc:bc:94:
8f:6c:fe:e6:49:de:42:4f:85:b9:38:d6:0a:75:80:95:43:ee:
9e:6c:0b:40:93:21:58:c5:10:f8:f6:12:32:18:1e:46:76:35:
6f:75:90:e6:f5:a1:5a:7b:97:98:ea:7b:39:03:0c:49:0e:2e:
47:5e:fd:cd:ed:6b:3f:c3:9b:65:ec:35:20:79:e3:54:f4:3b:
b3:5d:38:60:2c:a3:7e:45:0f:54:49:1f:4b:c9:15:c8:01:a6:
39:ae:c6:e2:b8:45:99:2a:15:ef:1c:bc:38:78:31:d8:c7:19:
90:37:20:b1:eb:ae:ff:af:1b:e3:be:ed:b1:5b:63:fc:52:2e:
06:97:37:5c:2a:42:b9:50:1e:aa:50:2b:c6:ec:ce:10:6f:5f:
c9:51:1c:03:77:5f:dd:4e:dc:e7:1b:84:70:ad:b9:22:da:50:
be:ed:6e:d9:82:b4:aa:12:a8:05:72:ca:d2:ad:f8:ec:58:68:
65:a6:f4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:26:52 2025 by rpki-client