Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft
File: jQtYT2A1_loofFZ_HjhUuPvCoMI.mft (raw, json)
Hash identifier: qrzRCp/1YxdyHg2+qqNlKtVQaxM3FeEpxlCZH1rB7r4=
Subject key identifier: 98:07:00:62:14:E2:7F:08:72:3F:EA:A3:81:19:7D:FF:7C:FE:68:50
Authority key identifier: 8D:0B:58:4F:60:35:FE:5A:28:7C:56:7F:1E:38:54:B8:FB:C2:A0:C2
Certificate issuer: /CN=8d0b584f6035fe5a287c567f1e3854b8fbc2a0c2
Certificate serial: 019A4D740339F04854E875BD1C06F445C1A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jQtYT2A1_loofFZ_HjhUuPvCoMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 06:00:39 +0000
Manifest this update: Tue 04 Nov 2025 06:00:39 +0000
Manifest next update: Wed 05 Nov 2025 06:00:39 +0000
Files and hashes: 1: 4QNIL4c6Gz_sxHoIV5bmO3J-yRY.roa (hash: hUEgN9PKhux4KaNWV6X/MwNUuCaPOczFnXagh0lAR1c=)
2: jQtYT2A1_loofFZ_HjhUuPvCoMI.crl (hash: SosinX0oOCMR1DjBnHYx4xZDS3baE9stvCZ49w1iFcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jQtYT2A1_loofFZ_HjhUuPvCoMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:03:39:f0:48:54:e8:75:bd:1c:06:f4:45:c1:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d0b584f6035fe5a287c567f1e3854b8fbc2a0c2
Validity
Not Before: Nov 4 06:00:39 2025 GMT
Not After : Nov 5 06:00:39 2025 GMT
Subject: CN=9807006214e27f08723feaa381197dff7cfe6850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ce:0d:5f:69:66:8e:72:3b:a5:db:0e:50:ef:
ee:f3:f8:2f:6f:eb:62:ac:11:d2:2c:e0:e7:81:5f:
42:de:62:4e:f4:d3:0e:7c:a7:b2:8d:76:6b:77:55:
39:57:76:be:38:bf:a3:93:79:93:12:cd:ce:58:db:
0b:1f:6c:05:e6:7c:4f:58:c4:97:e9:49:ed:3b:76:
c4:88:93:72:17:67:7f:5a:17:a7:61:d0:49:6d:37:
44:59:2f:54:79:ce:02:cc:83:97:fe:6f:14:3c:fb:
02:33:6b:e2:4d:aa:93:fb:57:02:7f:32:15:75:33:
05:a3:bb:d3:01:99:2c:db:d0:7d:df:3a:b6:52:29:
49:a4:04:b8:ce:64:f1:07:b8:fd:b8:cb:3e:ee:af:
89:45:97:f0:28:c1:77:b2:d7:68:c9:48:ea:ab:d1:
07:78:09:02:3a:95:68:b7:c6:ec:65:dc:c6:e4:c0:
ac:d0:62:d7:86:de:b7:c8:5a:ae:5c:c0:6c:79:6c:
c7:e6:35:f1:be:ca:d9:01:b2:6d:61:01:7d:5f:1d:
6c:b6:f9:a3:3b:6c:e2:8f:06:64:f3:f3:c9:a5:c8:
00:6a:e5:ad:4f:89:dd:83:d8:1b:22:93:b7:b2:2d:
bd:3a:63:a7:57:d8:5e:29:63:af:6e:19:f6:98:e5:
79:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:07:00:62:14:E2:7F:08:72:3F:EA:A3:81:19:7D:FF:7C:FE:68:50
X509v3 Authority Key Identifier:
keyid:8D:0B:58:4F:60:35:FE:5A:28:7C:56:7F:1E:38:54:B8:FB:C2:A0:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jQtYT2A1_loofFZ_HjhUuPvCoMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ba:24:f9:80:8d:cf:63:b8:fb:23:e9:94:a2:8d:9a:ec:2e:
90:a9:59:17:7c:17:06:c5:31:c8:cd:06:90:f9:fc:60:ff:92:
5b:68:be:c2:25:75:38:cb:36:dd:f0:ca:aa:e0:04:64:85:9d:
e4:31:6c:53:75:a8:84:5f:68:a5:bd:17:37:36:fa:bb:f3:f8:
89:ca:c5:e6:25:09:8e:0d:c2:39:8b:31:9a:11:c2:2b:47:5b:
b8:74:9c:81:cd:b8:c2:ef:8c:97:2b:54:08:f3:ea:c7:08:d8:
05:37:ad:05:04:6d:7f:be:9e:87:a2:ee:a1:c0:89:be:fd:ec:
7e:33:a3:73:15:b2:64:2f:f4:47:bb:7c:bb:33:43:45:c2:f3:
2c:b7:cb:fc:e8:db:bb:aa:71:b1:df:b1:c7:12:14:6a:ce:94:
99:60:ec:81:b3:22:e9:e0:6c:09:c9:4f:1e:4c:1e:ea:75:ce:
73:cc:65:54:48:29:a6:91:77:98:7b:5f:70:9d:fc:a8:ef:53:
3c:62:00:34:e6:2f:c6:c6:6c:30:b6:fa:6c:29:f5:61:4f:a0:
a0:b8:05:5c:cf:17:0b:21:b6:8d:7a:1a:da:1d:74:8b:87:d6:
27:90:1a:33:d5:66:7f:5c:99:f7:c3:26:2b:c4:fc:35:14:10:
c5:a2:09:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:30 2025 by rpki-client