Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft
File: jYkvTe2SJX5nunTxdiyLyRTr1hw.mft (raw, json)
Hash identifier: YYL6dq6pmtkNBn5jPHhsmIdJxdYn56zi2GHLTKVACzs=
Subject key identifier: 11:43:1F:5F:46:B0:39:92:04:D2:49:65:9F:2F:9E:B8:C9:22:B1:AC
Authority key identifier: 8D:89:2F:4D:ED:92:25:7E:67:BA:74:F1:76:2C:8B:C9:14:EB:D6:1C
Certificate issuer: /CN=8d892f4ded92257e67ba74f1762c8bc914ebd61c
Certificate serial: 019A4E4F38C9C988538590C2686AA0FCA989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 10:00:05 +0000
Manifest this update: Tue 04 Nov 2025 10:00:05 +0000
Manifest next update: Wed 05 Nov 2025 10:00:05 +0000
Files and hashes: 1: 8DFREsz67roq72EhqNj788hY8vo.roa (hash: 0z/SHGgj6DLr9WZ0vWVXRQYl+WMBwxnXd13RzpBpoyE=)
2: gYXXaClMotLbmJoUOleGHhnd0Lw.roa (hash: FBHlvCazQHDRqfw7wpw/U/KCEUCJ9oh5ACEVfJCqvj4=)
3: jYkvTe2SJX5nunTxdiyLyRTr1hw.crl (hash: /uR8ouOJ5WCe7SiMucOYz/uJoTg2s0T/YR+L3LY6lwI=)
4: qbA_9GdwQHPtmS9g6PrCyj74AbM.roa (hash: bivTcz5xx7Jgw1fjpQZeDQON5L3d9aNyp2TKXc5yy2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:38:c9:c9:88:53:85:90:c2:68:6a:a0:fc:a9:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d892f4ded92257e67ba74f1762c8bc914ebd61c
Validity
Not Before: Nov 4 10:00:05 2025 GMT
Not After : Nov 5 10:00:05 2025 GMT
Subject: CN=11431f5f46b0399204d249659f2f9eb8c922b1ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2f:78:15:0b:34:9d:5b:48:a6:7a:d3:85:b5:
f3:35:ee:49:f5:cc:20:af:bc:28:23:ff:96:51:fb:
a2:fa:8a:06:0d:dd:c8:b4:f9:eb:43:c4:ba:d1:03:
2a:72:fb:05:89:76:bc:33:2c:bb:23:5c:a1:c6:62:
68:13:00:3e:fc:d1:c1:19:ed:28:16:cd:1b:8f:f3:
5c:a1:55:7c:30:b2:1e:d1:cb:c1:2e:5f:4f:60:c3:
f3:c6:fa:7d:67:88:04:9a:8f:a3:de:08:2b:a7:21:
59:fe:7c:31:de:32:82:99:3d:1e:79:98:1e:61:12:
00:c2:90:9b:81:de:84:78:6f:99:a2:ea:c7:6d:6b:
8c:cf:25:a4:c7:7a:3c:4e:35:c3:54:da:d4:aa:95:
94:97:7f:3e:b0:b7:5e:c6:d8:d2:96:f9:5c:2a:c2:
f5:2a:50:6e:08:94:7d:1b:e5:48:23:bf:3b:7d:eb:
9e:6f:24:f5:6a:19:ac:cb:22:a2:1a:ca:e5:43:ea:
f5:db:12:e1:01:49:b7:4f:e3:6c:83:38:75:2e:a1:
92:6c:9c:e3:c8:f0:20:56:6a:ea:a6:da:8d:58:95:
f5:a6:7d:63:32:c1:02:d7:08:60:7a:7d:b5:3e:46:
87:5e:16:f6:14:8a:d9:53:18:7c:0d:8c:24:0d:ad:
67:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:43:1F:5F:46:B0:39:92:04:D2:49:65:9F:2F:9E:B8:C9:22:B1:AC
X509v3 Authority Key Identifier:
keyid:8D:89:2F:4D:ED:92:25:7E:67:BA:74:F1:76:2C:8B:C9:14:EB:D6:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYkvTe2SJX5nunTxdiyLyRTr1hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/d1a717-4cf3-4ae5-b0fc-0bd9ddf3970e/1/jYkvTe2SJX5nunTxdiyLyRTr1hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:19:a3:fb:30:f0:11:50:cc:c1:90:50:71:17:86:54:73:dd:
58:9f:3f:ed:e7:14:47:3c:8f:09:62:dc:00:d6:89:e0:ea:ac:
69:7c:e7:58:ad:72:01:05:fb:d3:3c:d0:63:c7:83:7e:55:2d:
5a:1e:55:fa:ac:f5:66:46:f6:69:e6:88:58:b0:9e:f3:c4:47:
39:a3:b0:79:7c:cc:81:e9:00:a7:e1:fe:e0:0a:e6:b3:bf:fe:
69:37:4b:28:6d:30:4f:92:72:11:d6:14:1f:1f:be:02:6f:ed:
8c:49:2f:d9:c4:f3:f9:37:1e:03:66:7e:b8:6c:1a:f8:1d:86:
69:15:36:6a:9d:8e:92:d8:2d:2b:c4:61:a8:c4:23:4b:be:01:
18:bd:0b:b0:a3:26:db:80:0c:58:be:38:3c:ad:54:7c:20:69:
7f:01:ae:10:27:4f:2f:73:30:99:2a:a0:40:b0:9d:9d:41:61:
88:78:78:85:92:24:16:6d:b4:06:7c:20:87:d2:f8:d9:0c:82:
39:96:37:90:9a:e7:33:4d:a0:e1:9b:c9:9e:aa:97:82:04:ef:
2b:c3:67:4b:8e:5b:93:04:1a:a3:fc:ad:59:d2:c4:2b:bf:6d:
17:16:0c:3a:4e:00:c7:35:a0:20:71:cd:9d:d1:00:ad:d4:0b:
64:d8:fb:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpOTzjJyYhThZDCaGqg/KmJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkODkyZjRkZWQ5MjI1N2U2N2JhNzRmMTc2MmM4YmM5MTRl
YmQ2MWMwHhcNMjUxMTA0MTAwMDA1WhcNMjUxMTA1MTAwMDA1WjAzMTEwLwYDVQQD
EygxMTQzMWY1ZjQ2YjAzOTkyMDRkMjQ5NjU5ZjJmOWViOGM5MjJiMWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3i94FQs0nVtIpnrThbXzNe5J9cwg
r7woI/+WUfui+ooGDd3ItPnrQ8S60QMqcvsFiXa8Myy7I1yhxmJoEwA+/NHBGe0o
Fs0bj/NcoVV8MLIe0cvBLl9PYMPzxvp9Z4gEmo+j3ggrpyFZ/nwx3jKCmT0eeZge
YRIAwpCbgd6EeG+ZourHbWuMzyWkx3o8TjXDVNrUqpWUl38+sLdextjSlvlcKsL1
KlBuCJR9G+VII787feuebyT1ahmsyyKiGsrlQ+r12xLhAUm3T+Nsgzh1LqGSbJzj
yPAgVmrqptqNWJX1pn1jMsEC1whgen21PkaHXhb2FIrZUxh8DYwkDa1niQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBFDH19GsDmSBNJJZZ8vnrjJIrGsMB8GA1UdIwQY
MBaAFI2JL03tkiV+Z7p08XYsi8kU69YcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvallrdlRlMlNKWDVudW5UeGRpeUx5UlRyMWh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9kMWE3MTctNGNmMy00YWU1LWIwZmMt
MGJkOWRkZjM5NzBlLzEvallrdlRlMlNKWDVudW5UeGRpeUx5UlRyMWh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9kMWE3MTctNGNmMy00YWU1LWIwZmMtMGJkOWRkZjM5NzBl
LzEvallrdlRlMlNKWDVudW5UeGRpeUx5UlRyMWh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADxmj+zDw
EVDMwZBQcReGVHPdWJ8/7ecURzyPCWLcANaJ4OqsaXznWK1yAQX70zzQY8eDflUt
Wh5V+qz1Zkb2aeaIWLCe88RHOaOweXzMgekAp+H+4Arms7/+aTdLKG0wT5JyEdYU
Hx++Am/tjEkv2cTz+TceA2Z+uGwa+B2GaRU2ap2OktgtK8RhqMQjS74BGL0LsKMm
24AMWL44PK1UfCBpfwGuECdPL3MwmSqgQLCdnUFhiHh4hZIkFm20Bnwgh9L42QyC
OZY3kJrnM02g4ZvJnqqXggTvK8NnS45bkwQao/ytWdLEK79tFxYMOk4AxzWgIHHN
ndEArdQLZNj7Cg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:23 2025 by rpki-client