Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
File: JqmLYSX1JD4-2DUBWWfN25cUjfE.mft (raw, json)
Hash identifier: 34yzvTUFghYcBRxGgZsmlDGeSHr+CEA7z7zfMR7A1Xk=
Subject key identifier: 84:31:0E:9A:71:BD:1C:93:9A:14:69:9B:19:FB:1E:D9:28:14:75:37
Authority key identifier: 26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1
Certificate issuer: /CN=26a98b6125f5243e3ed835015967cddb97148df1
Certificate serial: 01988FC6C80AADFC3A9610E0B35C722747E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
Manifest number: 11E0
Signing time: Sat 09 Aug 2025 17:00:25 +0000
Manifest this update: Sat 09 Aug 2025 17:00:25 +0000
Manifest next update: Sun 10 Aug 2025 17:00:25 +0000
Files and hashes: 1: 1HlDDcU_awP0Jg600b5QOV5zFyw.roa (hash: DII6lgfGgmt/XXzdShUFtsjKk90R+1ZgqPhGOseU9bY=)
2: JqmLYSX1JD4-2DUBWWfN25cUjfE.crl (hash: VlbguF1TAlRynpKO6y6Kr44XhfKrxQ/eB2Sy7Ddz970=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:c6:c8:0a:ad:fc:3a:96:10:e0:b3:5c:72:27:47:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a98b6125f5243e3ed835015967cddb97148df1
Validity
Not Before: Aug 9 17:00:25 2025 GMT
Not After : Aug 10 17:00:25 2025 GMT
Subject: CN=84310e9a71bd1c939a14699b19fb1ed928147537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0d:ab:2e:9d:f6:7e:63:10:27:37:b1:cf:75:
ee:44:b0:f0:3b:d9:e4:e4:ab:9d:1e:37:07:67:72:
87:f2:8f:1d:da:88:54:73:c2:3b:19:83:f5:c5:5e:
7d:fc:18:c6:70:a9:72:6a:bc:95:09:14:ec:26:22:
8d:62:1b:62:7b:ea:60:9c:45:0f:35:28:4e:9f:a2:
5c:1a:bc:a0:1c:f6:3a:85:fc:27:b3:05:9e:84:e6:
70:a4:fc:ed:4a:dc:e9:bd:1f:df:5b:da:64:19:79:
d0:ad:c8:bb:97:c7:66:8b:55:b1:ef:2f:a3:c1:ec:
17:bb:7d:2b:52:1e:3d:4c:3c:b1:ab:b0:1c:cb:76:
77:9b:13:eb:a6:f5:60:9c:d6:c3:f2:03:be:96:5f:
2b:1f:53:5e:25:ef:00:d9:46:01:5b:e1:32:43:ae:
29:e7:22:14:c1:cd:14:3c:87:a8:5e:e2:26:50:e1:
51:a4:37:94:ee:d6:e6:5b:d7:f2:36:f7:03:2d:30:
bb:7b:9b:65:7e:fd:e3:e7:dd:c3:04:db:09:90:ad:
83:19:aa:f8:28:c7:ca:11:c8:d4:61:85:87:07:24:
3a:40:89:28:e4:83:26:6b:a4:b3:89:53:52:6f:9b:
7d:7c:8e:6f:12:15:77:32:12:f1:43:84:8f:04:07:
4d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:31:0E:9A:71:BD:1C:93:9A:14:69:9B:19:FB:1E:D9:28:14:75:37
X509v3 Authority Key Identifier:
keyid:26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:c9:0d:3a:2c:79:54:85:83:dc:53:23:3b:67:e8:2e:d9:c1:
79:e9:9c:b6:d9:23:27:02:15:a6:28:2f:5e:02:2d:73:0d:5d:
e4:40:3b:20:3e:54:9a:db:19:20:64:ea:45:11:37:f0:8d:3f:
91:28:ab:00:f8:78:2d:80:db:9d:f4:99:f1:52:3e:38:d2:6a:
fc:a9:24:8e:33:f2:a0:51:c6:6a:b6:ce:de:18:04:eb:74:e8:
8f:dc:51:ce:2d:d3:4f:e6:b4:07:45:a1:f6:7a:eb:cc:c0:87:
57:5e:2e:a7:26:e0:0f:54:6b:28:fe:84:90:51:52:25:07:1b:
f6:63:1e:a0:51:77:46:36:10:8c:1f:35:68:85:39:a0:e8:b3:
b5:f8:18:1d:6a:75:59:61:71:da:47:de:b8:cd:c4:d1:de:e3:
5a:33:3e:2e:30:f9:bd:0f:ff:4e:d4:98:cc:e0:08:40:14:9c:
e0:b6:34:63:85:17:a5:35:7d:26:96:aa:72:1e:43:27:48:48:
9b:8d:98:05:b1:47:a9:37:ba:10:a2:b8:7e:ad:c8:9f:52:5b:
ce:f8:b3:54:ca:20:de:87:cb:9f:f3:74:89:b2:7f:f8:65:c4:
d0:ee:95:68:d2:78:4d:04:1d:18:07:29:83:36:2d:24:79:12:
56:5c:fd:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:52:19 2025 by rpki-client