Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
File: jqw2_1M-tvj4qmWSAiDPpHHlorE.mft (raw, json)
Hash identifier: lzG0R9Ht49+cglBKohO6YjhZGj+l5+awH755XG/nFuo=
Subject key identifier: BD:B3:2B:B2:9E:93:FD:FB:C2:CE:35:DF:47:D5:8A:0B:EF:88:3D:D7
Authority key identifier: 8E:AC:36:FF:53:3E:B6:F8:F8:AA:65:92:02:20:CF:A4:71:E5:A2:B1
Certificate issuer: /CN=8eac36ff533eb6f8f8aa65920220cfa471e5a2b1
Certificate serial: 01976A05B7D829EE8B463134B354D01B0BD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
Manifest number: 11E6
Signing time: Fri 13 Jun 2025 16:00:49 +0000
Manifest this update: Fri 13 Jun 2025 16:00:49 +0000
Manifest next update: Sat 14 Jun 2025 16:00:49 +0000
Files and hashes: 1: Lp4_8KBWJdha2Jzdhq102LYjczg.roa (hash: sRJMp6kjdQS4Uru55TcR1RrRtgv1vq1HoJumS3BQdg8=)
2: jqw2_1M-tvj4qmWSAiDPpHHlorE.crl (hash: kqfa+fvQx+o3Td3DE4VUtLaYLlH1/BPEqwgb2/gz85Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:b7:d8:29:ee:8b:46:31:34:b3:54:d0:1b:0b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eac36ff533eb6f8f8aa65920220cfa471e5a2b1
Validity
Not Before: Jun 13 16:00:49 2025 GMT
Not After : Jun 14 16:00:49 2025 GMT
Subject: CN=bdb32bb29e93fdfbc2ce35df47d58a0bef883dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c5:ac:ce:10:72:b5:27:a4:69:54:b1:29:c5:
93:1b:46:77:de:f9:5f:1f:c4:ab:8a:5b:82:b4:e2:
2a:fb:8c:7c:84:da:8f:1a:05:5d:2d:1b:df:f2:f9:
02:69:9b:5b:c2:11:23:be:e1:ee:ae:91:bf:f8:27:
a5:fb:ac:f3:22:a2:6b:d3:5d:3c:57:ed:b3:fc:a7:
8d:21:d2:94:18:79:3c:8c:c1:3e:b8:f0:48:1f:71:
60:57:62:11:a7:da:9b:aa:5e:84:81:1e:db:a4:88:
aa:79:09:20:c7:0d:83:0f:00:f8:1c:57:73:81:eb:
78:3b:f0:4e:27:be:a4:16:98:a0:41:f5:84:e5:da:
7d:01:de:1d:c0:52:db:d9:66:a2:b0:fe:f5:b8:37:
c9:40:e2:59:32:78:a5:0e:a1:8f:da:24:c3:6e:23:
95:50:7d:58:94:57:b3:c7:a5:93:68:3a:14:b3:d9:
15:25:a0:72:b1:1d:04:ba:e3:8d:2e:4d:0f:13:77:
2a:17:3c:92:8f:a0:6d:fc:3a:4a:41:2d:05:45:eb:
a6:42:14:33:42:39:85:e7:52:be:db:85:98:18:f4:
45:3f:9e:ac:26:b4:a3:be:d0:83:b4:9a:ca:00:39:
17:a1:90:16:5e:54:0c:f7:f5:eb:71:79:a4:c5:cf:
b4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B3:2B:B2:9E:93:FD:FB:C2:CE:35:DF:47:D5:8A:0B:EF:88:3D:D7
X509v3 Authority Key Identifier:
keyid:8E:AC:36:FF:53:3E:B6:F8:F8:AA:65:92:02:20:CF:A4:71:E5:A2:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:6e:41:6f:e5:05:93:b6:29:42:65:ed:7f:85:c7:77:9a:97:
76:9c:6c:8a:86:04:b1:6f:09:b5:f9:34:40:eb:f8:75:d3:c4:
ea:a0:d4:7b:ef:7b:4e:e7:6e:4c:3b:d6:62:86:e5:d2:c4:18:
5d:0f:f4:8b:21:57:47:34:c4:22:f0:b1:34:21:8c:9e:eb:76:
36:da:45:9d:dc:91:9f:6c:64:a8:40:54:35:7a:13:ce:91:0c:
3e:81:0f:61:52:7d:0a:9d:e9:54:cf:ca:cb:63:5b:70:e1:66:
dc:53:d8:de:82:a4:17:b1:98:14:ab:c2:7e:25:36:43:78:3c:
8b:49:d1:cf:de:b2:83:c9:ab:a4:b1:a1:4d:22:41:bd:e8:49:
9a:d3:7e:3b:b2:0c:7b:fe:22:62:71:b9:d7:d9:38:ce:69:2d:
a9:15:8d:27:5e:cf:80:b2:6f:22:37:08:3b:e9:e3:c4:e8:44:
0b:ad:b6:3d:1a:cc:49:10:0e:0e:8c:e8:b5:90:ee:7a:38:c6:
46:2a:ce:da:4d:30:55:8c:82:3e:08:e7:a7:ce:ce:03:45:5f:
4a:10:bb:57:90:cd:d7:cf:6f:13:f7:ce:73:6a:c8:17:14:40:
ec:cb:a0:de:57:26:b3:dc:68:dd:8c:3a:82:e7:f2:e7:bd:63:
b3:6d:bc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:57:05 2025 by rpki-client