Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
File: _jQJESdDd6icofnBXxgNqYbXRLc.mft (raw, json)
Hash identifier: G2tCUxJjrTiHn9Ff4pL0LBo5FkOnScI4y0N140fZvXI=
Subject key identifier: 15:0E:42:E3:04:2D:FA:CD:8C:DF:CA:AA:3C:C9:0F:19:90:A9:56:E1
Authority key identifier: FE:34:09:11:27:43:77:A8:9C:A1:F9:C1:5F:18:0D:A9:86:D7:44:B7
Certificate issuer: /CN=fe340911274377a89ca1f9c15f180da986d744b7
Certificate serial: 019874BDDBB17C4C469751201B86043AD4D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
Manifest number: 02AA
Signing time: Mon 04 Aug 2025 11:00:56 +0000
Manifest this update: Mon 04 Aug 2025 11:00:56 +0000
Manifest next update: Tue 05 Aug 2025 11:00:56 +0000
Files and hashes: 1: 7qFS32WykIo9De6woWK_a4zI6AE.roa (hash: 2dnjawr1HUy6D3OjqGMisdNqLiSRoZxYXLiFU07VYtM=)
2: _jQJESdDd6icofnBXxgNqYbXRLc.crl (hash: y64I0SkBNTJXG8RtkPVvf/GAOfojQ6zwQlpX2IR0bYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:db:b1:7c:4c:46:97:51:20:1b:86:04:3a:d4:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe340911274377a89ca1f9c15f180da986d744b7
Validity
Not Before: Aug 4 11:00:56 2025 GMT
Not After : Aug 5 11:00:56 2025 GMT
Subject: CN=150e42e3042dfacd8cdfcaaa3cc90f1990a956e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dd:ca:00:03:03:54:d6:da:94:36:16:6b:e9:
a8:2b:1b:45:c2:ba:59:e2:fc:ab:ac:e0:03:85:c9:
6f:3c:84:8a:fa:4a:30:41:7f:38:db:04:e6:7c:67:
8a:5d:05:03:99:3e:9c:eb:ff:17:97:cf:b2:96:b7:
54:f0:45:f7:b7:d1:b5:90:21:bd:6f:9e:5d:c0:68:
2c:5f:77:12:50:b2:fb:c4:6f:24:33:31:49:c7:f2:
5e:a3:27:07:f6:8c:5d:82:a9:92:a2:d8:0b:dc:08:
c0:6e:2a:af:1a:fa:00:67:14:18:f7:de:d0:27:64:
a7:a5:cb:d1:70:64:0d:d3:f4:3a:1a:f3:83:25:90:
93:92:ff:70:b1:fa:c8:d6:6c:4b:b2:1e:82:8d:08:
d5:5d:7d:38:60:7c:47:0b:f4:0d:63:20:a1:d9:c4:
0d:0e:bb:77:e4:fa:58:99:9e:92:e8:82:ec:ee:e4:
8f:03:1c:48:38:43:3a:63:57:32:d8:ab:b4:c7:28:
07:7f:d8:5c:80:57:38:f9:6b:27:32:33:0a:1b:34:
fd:2e:a0:54:fa:6f:94:75:88:3a:c3:ce:f3:a1:18:
6f:cd:c0:ef:e9:18:92:11:d7:95:5c:1c:b2:09:42:
59:a0:70:d3:86:08:b4:f0:8a:eb:97:59:0b:6b:e9:
73:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:0E:42:E3:04:2D:FA:CD:8C:DF:CA:AA:3C:C9:0F:19:90:A9:56:E1
X509v3 Authority Key Identifier:
keyid:FE:34:09:11:27:43:77:A8:9C:A1:F9:C1:5F:18:0D:A9:86:D7:44:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:9c:35:96:46:f4:55:58:f9:04:40:30:10:6b:5a:d5:30:95:
e3:5e:03:05:ee:90:92:ba:55:70:0b:0a:16:23:6e:c4:87:c7:
9c:4e:bd:d0:d7:64:2a:54:f3:d1:8a:1c:38:b6:cd:59:9d:b9:
8c:be:66:ea:32:97:af:ec:28:46:86:90:49:08:73:cd:2f:d3:
7f:bb:c9:05:f1:3d:e1:d6:c6:38:c3:34:04:15:f1:1b:9b:8c:
26:98:fe:2e:de:4c:e3:31:11:a0:de:60:3f:e1:f4:78:2f:11:
ae:df:2e:46:55:76:13:e7:8b:ca:b6:9c:36:8b:db:16:5f:04:
59:bc:f8:6b:22:33:54:ef:f9:68:89:f6:c0:04:dc:b5:3f:7d:
f9:47:fb:09:33:6f:e5:85:69:25:ff:30:4d:dd:05:a1:62:34:
75:54:eb:fc:09:0c:cc:4b:bd:15:36:49:05:1f:a6:88:b9:4a:
8c:4c:a9:ea:05:d2:4a:8e:f9:50:de:7a:7d:79:1f:58:37:05:
a3:77:fd:a8:21:e3:c0:c6:35:1a:cc:85:25:30:82:04:78:5a:
8c:03:8d:8d:17:e0:38:42:3f:37:1d:69:a2:7c:20:27:e2:6f:
6a:26:88:03:0a:76:8b:13:b2:13:12:05:9a:8c:19:5c:ed:75:
c7:21:d5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:59:40 2025 by rpki-client