Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
File: jqw2_1M-tvj4qmWSAiDPpHHlorE.mft (raw, json)
Hash identifier: uMyRIlw/9wocoLREH7I+gBb2dDNMWbz00KWGtsoyuvw=
Subject key identifier: 8F:41:18:9B:6F:1B:96:8F:03:E4:73:FA:DE:DE:BD:14:AE:E5:07:CD
Authority key identifier: 8E:AC:36:FF:53:3E:B6:F8:F8:AA:65:92:02:20:CF:A4:71:E5:A2:B1
Certificate issuer: /CN=8eac36ff533eb6f8f8aa65920220cfa471e5a2b1
Certificate serial: 019A4F98FCE71DBF025A8179653075C4586B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
Manifest number: 1366
Signing time: Tue 04 Nov 2025 16:00:17 +0000
Manifest this update: Tue 04 Nov 2025 16:00:17 +0000
Manifest next update: Wed 05 Nov 2025 16:00:17 +0000
Files and hashes: 1: Lp4_8KBWJdha2Jzdhq102LYjczg.roa (hash: sRJMp6kjdQS4Uru55TcR1RrRtgv1vq1HoJumS3BQdg8=)
2: jqw2_1M-tvj4qmWSAiDPpHHlorE.crl (hash: ZKeQ53rma23DP3H/5kQ5fbuBfq14tj7V9Ecd6nwoqtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:fc:e7:1d:bf:02:5a:81:79:65:30:75:c4:58:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eac36ff533eb6f8f8aa65920220cfa471e5a2b1
Validity
Not Before: Nov 4 16:00:17 2025 GMT
Not After : Nov 5 16:00:17 2025 GMT
Subject: CN=8f41189b6f1b968f03e473fadedebd14aee507cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:58:2d:33:ba:1c:9d:6b:98:d5:40:c5:a5:c2:
0e:c0:79:e1:45:74:58:71:8b:a1:d0:aa:0f:5b:50:
e8:17:33:de:b3:bf:25:dc:a9:c0:83:80:17:87:c5:
37:09:70:3a:5f:79:19:d4:ef:fa:15:86:fd:68:bc:
02:82:8e:1f:bf:9c:a4:32:52:9b:55:d0:0c:ac:0c:
5b:73:dc:0b:4a:18:fd:46:60:fa:53:5c:9e:a1:a4:
1d:83:29:a0:e3:4e:39:0e:1f:e6:3f:b3:e2:34:25:
7e:45:5c:4e:f3:de:1e:e9:0d:06:77:36:59:38:73:
a1:9f:0c:86:cf:70:64:58:78:6f:90:0e:4f:c3:21:
d1:19:78:da:3c:f6:30:8b:98:8e:b3:e2:06:a6:48:
6c:51:fe:c2:49:4b:04:08:b1:04:86:7b:db:5b:03:
a3:bd:a5:eb:ca:0a:12:e8:e4:e4:3f:87:57:05:77:
ce:bd:3a:df:7e:0e:a7:33:77:98:fa:16:9c:38:73:
ba:44:ca:c7:f1:7f:0f:a7:cd:34:aa:88:6b:4a:9a:
84:65:ff:0c:b4:58:f5:18:73:4b:07:3e:6e:12:60:
c3:bf:a6:79:d4:4b:eb:6b:4c:9a:75:b3:d8:00:21:
49:77:c8:bf:04:d0:7c:f9:9c:e5:a9:a8:52:d7:ff:
e6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:41:18:9B:6F:1B:96:8F:03:E4:73:FA:DE:DE:BD:14:AE:E5:07:CD
X509v3 Authority Key Identifier:
keyid:8E:AC:36:FF:53:3E:B6:F8:F8:AA:65:92:02:20:CF:A4:71:E5:A2:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:67:db:92:98:10:cd:d5:3e:80:63:d1:ae:4e:39:14:08:c7:
79:00:c5:55:33:e1:a6:17:2c:4c:20:93:07:28:57:11:00:8c:
92:72:0c:c9:56:6f:cb:8b:3a:40:44:22:83:72:28:54:2e:31:
2a:a1:ef:77:a3:ad:e5:c9:d9:9b:93:96:14:f8:b2:e8:b0:37:
52:62:de:3b:c2:1b:55:8a:aa:ee:6b:2b:a6:ae:64:01:a3:b4:
83:89:a4:5d:9d:03:98:63:84:16:cd:15:67:bf:17:a6:f5:c1:
b3:13:5d:6e:22:a0:d5:d8:54:a8:04:6f:a2:0c:47:b9:34:a7:
c8:e2:88:f4:f6:3c:5c:72:9b:35:b6:ac:96:5a:01:7b:d6:48:
12:11:f1:fe:da:8b:49:13:0c:36:8c:f6:55:46:06:22:4d:c1:
30:b1:71:3d:81:e9:4e:4c:a5:e9:0a:47:d1:51:9d:0f:ea:58:
01:5a:01:56:87:82:66:5f:c8:90:ff:b2:59:d8:ec:63:86:86:
89:f0:86:ae:88:15:b6:fd:21:16:a1:9b:da:67:da:d9:1b:dc:
44:19:8a:0f:0d:11:9d:5e:25:90:86:11:1c:44:15:27:87:7e:
93:d7:09:de:c7:10:6e:8b:40:27:48:5d:ba:66:7e:82:e6:bf:
cc:1b:66:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPmPznHb8CWoF5ZTB1xFhrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYWMzNmZmNTMzZWI2ZjhmOGFhNjU5MjAyMjBjZmE0NzFl
NWEyYjEwHhcNMjUxMTA0MTYwMDE3WhcNMjUxMTA1MTYwMDE3WjAzMTEwLwYDVQQD
Eyg4ZjQxMTg5YjZmMWI5NjhmMDNlNDczZmFkZWRlYmQxNGFlZTUwN2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61gtM7ocnWuY1UDFpcIOwHnhRXRY
cYuh0KoPW1DoFzPes78l3KnAg4AXh8U3CXA6X3kZ1O/6FYb9aLwCgo4fv5ykMlKb
VdAMrAxbc9wLShj9RmD6U1yeoaQdgymg4045Dh/mP7PiNCV+RVxO894e6Q0GdzZZ
OHOhnwyGz3BkWHhvkA5PwyHRGXjaPPYwi5iOs+IGpkhsUf7CSUsECLEEhnvbWwOj
vaXrygoS6OTkP4dXBXfOvTrffg6nM3eY+hacOHO6RMrH8X8Pp800qohrSpqEZf8M
tFj1GHNLBz5uEmDDv6Z51Evra0yadbPYACFJd8i/BNB8+ZzlqahS1//mbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI9BGJtvG5aPA+Rz+t7evRSu5QfNMB8GA1UdIwQY
MBaAFI6sNv9TPrb4+KplkgIgz6Rx5aKxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanF3Ml8xTS10dmo0cW1XU0FpRFBwSEhsb3JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82MWExNDAtMTEwZS00MTk3LThkYTUt
NTZiYTE5OGQxN2YwLzEvanF3Ml8xTS10dmo0cW1XU0FpRFBwSEhsb3JFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS82MWExNDAtMTEwZS00MTk3LThkYTUtNTZiYTE5OGQxN2Yw
LzEvanF3Ml8xTS10dmo0cW1XU0FpRFBwSEhsb3JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2fbkpgQ
zdU+gGPRrk45FAjHeQDFVTPhphcsTCCTByhXEQCMknIMyVZvy4s6QEQig3IoVC4x
KqHvd6Ot5cnZm5OWFPiy6LA3UmLeO8IbVYqq7msrpq5kAaO0g4mkXZ0DmGOEFs0V
Z78XpvXBsxNdbiKg1dhUqARvogxHuTSnyOKI9PY8XHKbNbaslloBe9ZIEhHx/tqL
SRMMNoz2VUYGIk3BMLFxPYHpTkyl6QpH0VGdD+pYAVoBVoeCZl/IkP+yWdjsY4aG
ifCGrogVtv0hFqGb2mfa2RvcRBmKDw0RnV4lkIYRHEQVJ4d+k9cJ3scQbotAJ0hd
umZ+gua/zBtm0w==
-----END CERTIFICATE-----
Generated at Tue Nov 4 22:32:13 2025 by rpki-client