Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
File: jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft (raw, json)
Hash identifier: GPU2gvPDCPE+KEM5KjTZmjZX+6LIXgBF8IJb57kxgwk=
Subject key identifier: ED:8B:A2:9F:C8:40:B3:42:5E:0F:60:37:BC:8A:28:CD:AE:D8:65:39
Authority key identifier: 8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
Certificate issuer: /CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Certificate serial: 01987261CEF643652C7463504C1C8DB81FBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
Manifest number: 1517
Signing time: Mon 04 Aug 2025 00:01:09 +0000
Manifest this update: Mon 04 Aug 2025 00:01:09 +0000
Manifest next update: Tue 05 Aug 2025 00:01:09 +0000
Files and hashes: 1: LEgJcT1HJwyV1gNb8G6Nv4QQcdA.roa (hash: MrTCL4S0d15bcXIlwlUs8e8j+hHw3EZvbQGkeB92Lzs=)
2: eiuuVdDHw7tCNh7-88E3raSuIfc.roa (hash: 3m5MOXmDNJezPlvUGc+JuyJPY6iXYjUfrVVj0/0iqB0=)
3: jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl (hash: O0qyqH0dbDPQYoWNMbsft7Eqv3j6k+ZzGcXhX0ie7aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 00:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:61:ce:f6:43:65:2c:74:63:50:4c:1c:8d:b8:1f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Validity
Not Before: Aug 4 00:01:09 2025 GMT
Not After : Aug 5 00:01:09 2025 GMT
Subject: CN=ed8ba29fc840b3425e0f6037bc8a28cdaed86539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ea:ce:dd:a4:8b:46:c9:c8:5c:01:1c:10:59:
e8:66:28:09:cf:40:bf:40:11:b3:bb:d2:c6:5f:cb:
a9:56:8c:96:4f:b2:e5:28:fc:c9:23:a1:cc:eb:c7:
fd:1c:a8:5a:66:cd:ad:60:ce:0b:e7:53:55:6b:66:
74:82:5e:28:b5:75:95:66:aa:40:c3:33:02:64:16:
93:c0:56:2d:d2:06:20:ff:77:60:f9:a1:3b:27:48:
14:f3:a5:06:16:7b:49:6e:41:5e:33:fa:67:d3:c0:
58:36:ab:95:7f:96:5b:2d:89:36:c3:c8:bc:16:1d:
05:33:8c:3f:18:38:af:1c:c9:92:a1:be:11:83:ec:
92:2f:af:52:f0:73:f9:53:0a:1f:b1:45:8d:9f:55:
2e:28:ab:15:ee:f0:97:0c:62:6a:c0:c9:78:4b:1a:
fb:f4:c6:bd:6c:a7:98:6c:c3:aa:8a:07:37:34:b0:
ee:6e:fa:9b:c0:02:2c:8b:53:1b:18:25:5f:21:01:
b2:88:78:8c:c9:7a:d6:db:d9:47:e1:c0:8a:9c:87:
b6:bc:a2:14:74:4a:ac:b9:00:0a:a7:eb:a1:35:c2:
84:e1:4d:56:ad:86:b6:50:83:74:72:72:f6:4d:37:
8a:eb:50:08:98:87:04:17:c3:5c:58:a2:7e:ec:cf:
d0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8B:A2:9F:C8:40:B3:42:5E:0F:60:37:BC:8A:28:CD:AE:D8:65:39
X509v3 Authority Key Identifier:
keyid:8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:59:0e:09:3f:49:00:2b:9b:57:d1:be:a7:da:da:41:fc:94:
c8:72:4d:16:df:6a:ad:4b:64:7f:c2:34:04:69:cb:50:cb:81:
70:cc:a1:d4:c2:fa:65:f0:3b:70:a8:50:43:4b:48:22:5a:bf:
63:81:2a:3a:48:46:fc:2f:9b:aa:da:c3:50:8d:02:a9:cc:8a:
c3:64:3e:a3:62:f4:3b:13:6c:77:c7:2c:d2:06:88:d2:e3:69:
14:3c:70:ba:79:a4:e8:67:47:2a:e6:2c:20:d5:4c:8f:0e:ff:
55:44:bb:c2:06:21:ce:33:7e:a4:77:60:61:db:f6:6d:5c:19:
96:63:c9:b3:f2:30:6a:02:4f:a5:4c:9b:03:80:b5:ba:cd:a2:
22:9e:2e:cc:49:51:3a:7d:dd:b1:a9:bc:71:5b:64:65:75:2c:
86:85:bd:19:55:b5:e1:19:37:a2:d1:fd:88:a3:f0:51:5b:d8:
8d:a8:e7:91:ee:6a:d1:a0:53:c5:29:b7:db:e8:51:08:0e:d8:
99:38:25:f8:11:c0:d6:62:6f:55:8f:ee:eb:ad:22:b1:1e:4c:
dc:b3:25:ee:ab:0a:ad:33:7f:b0:ce:7a:30:b9:18:00:3e:d1:
0f:eb:97:6f:e5:57:f8:d6:89:26:1e:76:4f:c0:fa:88:2e:68:
f0:14:4a:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyYc72Q2UsdGNQTByNuB+/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYTQzYmIzOGQ2ZTBiZThjMjg5MDk0YmE0YWRmMzg3ZDBk
ZTQwYTAwHhcNMjUwODA0MDAwMTA5WhcNMjUwODA1MDAwMTA5WjAzMTEwLwYDVQQD
EyhlZDhiYTI5ZmM4NDBiMzQyNWUwZjYwMzdiYzhhMjhjZGFlZDg2NTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOrO3aSLRsnIXAEcEFnoZigJz0C/
QBGzu9LGX8upVoyWT7LlKPzJI6HM68f9HKhaZs2tYM4L51NVa2Z0gl4otXWVZqpA
wzMCZBaTwFYt0gYg/3dg+aE7J0gU86UGFntJbkFeM/pn08BYNquVf5ZbLYk2w8i8
Fh0FM4w/GDivHMmSob4Rg+ySL69S8HP5UwofsUWNn1UuKKsV7vCXDGJqwMl4Sxr7
9Ma9bKeYbMOqigc3NLDubvqbwAIsi1MbGCVfIQGyiHiMyXrW29lH4cCKnIe2vKIU
dEqsuQAKp+uhNcKE4U1WrYa2UIN0cnL2TTeK61AImIcEF8NcWKJ+7M/Q1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO2Lop/IQLNCXg9gN7yKKM2u2GU5MB8GA1UdIwQY
MBaAFI6kO7ONbgvowokJS6St84fQ3kCgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanFRN3M0MXVDLWpDaVFsTHBLM3poOURlUUtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82Zjg1YjEtNmEzYy00MDhkLWEzOWIt
MjRmN2Y5NDM2Y2VjLzEvanFRN3M0MXVDLWpDaVFsTHBLM3poOURlUUtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82Zjg1YjEtNmEzYy00MDhkLWEzOWItMjRmN2Y5NDM2Y2Vj
LzEvanFRN3M0MXVDLWpDaVFsTHBLM3poOURlUUtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANFkOCT9J
ACubV9G+p9raQfyUyHJNFt9qrUtkf8I0BGnLUMuBcMyh1ML6ZfA7cKhQQ0tIIlq/
Y4EqOkhG/C+bqtrDUI0CqcyKw2Q+o2L0OxNsd8cs0gaI0uNpFDxwunmk6GdHKuYs
INVMjw7/VUS7wgYhzjN+pHdgYdv2bVwZlmPJs/IwagJPpUybA4C1us2iIp4uzElR
On3dsam8cVtkZXUshoW9GVW14Rk3otH9iKPwUVvYjajnke5q0aBTxSm32+hRCA7Y
mTgl+BHA1mJvVY/u660isR5M3LMl7qsKrTN/sM56MLkYAD7RD+uXb+VX+NaJJh52
T8D6iC5o8BRKOw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:06 2025 by rpki-client