Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
File: JqRR4kXgG6my-yMUwmCeexUedKI.mft (raw, json)
Hash identifier: D8Ca3tkOCXMST8h4bZg90OfoIgOa2LlIWICPYt4zXaQ=
Subject key identifier: AF:B5:71:F8:BF:4E:54:D3:31:C5:A0:2A:54:71:EF:68:F4:0E:4A:07
Authority key identifier: 26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
Certificate issuer: /CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Certificate serial: 019A4D067A5C881670730DEDC866B9573BB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 04:01:01 +0000
Manifest this update: Tue 04 Nov 2025 04:01:01 +0000
Manifest next update: Wed 05 Nov 2025 04:01:01 +0000
Files and hashes: 1: JqRR4kXgG6my-yMUwmCeexUedKI.crl (hash: IbWjptKbN35Qyx+0UoPZj8YHh+xagDNScYoS/4tSqeQ=)
2: __QM0Y00A8o9_wWPyDLaVQsYZls.roa (hash: Tt5jgaPYYhPlmRSiaLMYS5DQDbnj5Cw5Zwmf+6k+kyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:7a:5c:88:16:70:73:0d:ed:c8:66:b9:57:3b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Validity
Not Before: Nov 4 04:01:01 2025 GMT
Not After : Nov 5 04:01:01 2025 GMT
Subject: CN=afb571f8bf4e54d331c5a02a5471ef68f40e4a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1e:8e:34:18:b2:dc:7f:8c:38:35:43:f0:9d:
ad:f2:81:e2:bf:e4:42:74:27:40:f7:4b:96:f8:f4:
7d:f6:07:7d:5a:e6:53:9f:27:ab:53:92:45:58:c4:
8c:cf:e1:cf:0c:a1:94:1b:02:7e:dc:41:a6:36:d5:
65:df:dd:fc:a8:a8:80:5d:5d:ae:11:65:f2:68:b7:
18:fe:a8:80:10:ad:29:e9:d0:6e:70:9a:79:4f:cb:
76:a8:0a:92:69:4d:18:85:c4:5a:fd:e8:92:9b:da:
cb:ee:ad:69:d3:6d:52:f0:c0:c7:85:9f:ba:be:d9:
a9:47:54:2a:fc:88:ec:af:ae:d2:a7:89:6a:cb:9f:
57:2b:34:fb:c1:21:43:59:9b:cd:29:5d:40:54:f4:
3f:72:67:74:42:db:68:09:ed:02:c5:43:e1:57:e3:
1e:21:48:98:cb:15:e5:6d:2a:9c:ff:d2:71:7b:7d:
d1:d8:0c:4f:53:c6:bb:a6:7f:9a:2a:98:3d:22:10:
b2:4f:3d:fd:cc:2b:19:ca:62:f7:b4:3a:63:1a:a5:
ed:5c:1c:1f:aa:b5:cc:6c:21:13:3c:0c:87:27:29:
50:f5:a7:c6:d6:df:ac:4e:f8:bf:d0:e1:17:cf:9b:
82:39:23:b5:56:5a:d4:0a:98:30:c5:b5:53:6f:5e:
0e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B5:71:F8:BF:4E:54:D3:31:C5:A0:2A:54:71:EF:68:F4:0E:4A:07
X509v3 Authority Key Identifier:
keyid:26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:99:e8:40:1d:eb:68:4b:d0:85:ed:a7:47:aa:5d:0e:ab:e0:
de:16:b8:e8:72:ee:78:7f:8c:21:cb:6d:2a:08:dd:b2:3f:2c:
86:d5:72:d4:3c:bd:c6:fc:28:e1:cd:63:fd:14:1f:f9:d2:67:
47:b3:07:32:f6:54:4f:7d:9b:a1:66:6e:19:4d:a2:c1:ec:d4:
cd:79:05:6f:02:02:e4:04:3b:0f:27:dd:d8:eb:9a:ce:ec:6d:
64:a6:07:d9:ae:64:65:d3:7c:05:bd:f0:72:5f:4c:6f:4a:92:
2c:4b:bb:bc:9f:db:49:2e:59:8b:a6:5b:b0:cc:56:0f:e0:27:
94:e9:03:5d:7f:9f:e7:42:7b:2a:c6:f4:cb:22:3d:90:a8:1c:
25:eb:9e:b8:16:c2:e5:b8:80:42:ed:3c:03:e2:66:ed:ab:87:
32:7c:98:6e:e3:63:5e:fc:0b:30:d1:6e:df:dc:07:78:83:59:
98:d0:13:0c:64:66:da:e9:b8:67:57:12:05:84:c7:8b:90:5b:
9f:ef:3f:d5:f1:b3:b6:6d:98:31:e3:76:0e:53:96:a8:af:fe:
95:72:9f:a1:d0:ad:86:2a:2a:71:65:77:ff:f2:9a:06:26:3a:
bb:96:6b:35:0a:0f:26:d7:ec:ca:76:fb:f1:89:3b:c3:7a:01:
74:a9:3c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:49:44 2025 by rpki-client