Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
File: JqsqOMqsDOPKAf24f9-WNy6FmLY.mft (raw, json)
Hash identifier: oQrtPDU+JjzZ11fw6+LZNckIYja3z8kV6ooAW9xcJRc=
Subject key identifier: 6D:45:4F:7B:8A:98:FC:88:08:60:E1:AC:0F:95:83:A1:01:3E:B8:6B
Authority key identifier: 26:AB:2A:38:CA:AC:0C:E3:CA:01:FD:B8:7F:DF:96:37:2E:85:98:B6
Certificate issuer: /CN=26ab2a38caac0ce3ca01fdb87fdf96372e8598b6
Certificate serial: 01987373E6EF915C381156FED95B1FFBF159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
Manifest number: 156E
Signing time: Mon 04 Aug 2025 05:00:32 +0000
Manifest this update: Mon 04 Aug 2025 05:00:32 +0000
Manifest next update: Tue 05 Aug 2025 05:00:32 +0000
Files and hashes: 1: JqsqOMqsDOPKAf24f9-WNy6FmLY.crl (hash: no4seyHjaoRWcPrrBAE+Iqew5niLNKkWJecGuzAiV+4=)
2: XNhLOVC-U9PPbLs6JsyzlnimIeQ.roa (hash: TD1akY3Fv3FxGktdYVS/WFPDKVHSuXmTFj0vHfZKIvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:73:e6:ef:91:5c:38:11:56:fe:d9:5b:1f:fb:f1:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26ab2a38caac0ce3ca01fdb87fdf96372e8598b6
Validity
Not Before: Aug 4 05:00:32 2025 GMT
Not After : Aug 5 05:00:32 2025 GMT
Subject: CN=6d454f7b8a98fc880860e1ac0f9583a1013eb86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:33:5c:9f:5e:b2:c8:c8:e6:ef:40:79:04:ba:
2b:ba:f0:a3:eb:75:fc:66:81:b5:b8:7f:4e:4e:b8:
d9:22:bf:9e:84:d7:71:ed:1b:11:1a:bb:89:24:5d:
4a:dd:38:e9:c3:2e:9a:7e:72:d3:2b:e0:c0:1f:a0:
76:cd:ba:27:3e:b4:4e:24:a5:9e:69:13:7c:06:86:
d7:dd:1a:0b:40:b9:2f:0f:90:df:68:81:05:cf:59:
f4:d6:cb:ea:db:1d:d4:9f:eb:2a:c3:dc:10:49:9e:
9e:63:9d:54:52:4a:13:9b:ec:d5:c2:8e:81:09:fe:
08:c1:b6:72:76:23:06:df:b7:4a:41:5a:c1:bb:85:
f0:7d:55:31:db:9f:ea:34:28:6d:2b:ce:65:0e:ce:
86:35:8c:0e:ec:5f:a9:93:49:6b:ed:ef:e6:ae:c7:
e6:ed:c9:2c:d3:54:fe:62:86:f9:f1:d0:70:e2:18:
1d:24:02:0e:b8:db:16:c0:8e:de:bc:25:30:43:85:
ac:8e:2d:6f:ea:62:4d:d4:cd:06:a6:53:20:e3:3e:
d4:db:22:10:57:ad:a3:af:c9:08:ef:20:97:8a:fe:
9f:30:22:0a:e8:30:f6:c1:de:ad:4d:e2:41:4b:56:
2c:2c:e7:6f:f5:a4:19:4d:2f:39:50:7d:db:91:45:
93:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:45:4F:7B:8A:98:FC:88:08:60:E1:AC:0F:95:83:A1:01:3E:B8:6B
X509v3 Authority Key Identifier:
keyid:26:AB:2A:38:CA:AC:0C:E3:CA:01:FD:B8:7F:DF:96:37:2E:85:98:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:92:f2:3c:9a:8c:b2:f9:5d:63:d3:2d:f6:4e:7c:92:d5:dc:
57:a4:6f:14:00:2c:f0:16:52:bf:21:f2:70:35:8d:e0:31:ec:
8b:d0:13:c6:cd:1f:20:be:ff:8a:b9:2f:a5:75:8d:27:61:fb:
e8:bc:1a:f4:12:7f:82:c3:1a:60:87:e5:6e:7e:92:bb:0f:f7:
d7:2c:a0:86:06:76:75:49:10:ec:21:57:bf:67:03:69:aa:f9:
e8:25:59:d7:0d:17:4e:dc:78:f9:e4:4d:4d:00:e2:53:2d:a2:
44:68:cc:84:20:eb:9c:10:3a:00:3a:65:65:be:81:ac:66:fc:
5c:d8:7a:01:60:03:bf:b9:18:da:fb:86:d6:0b:e4:a5:4f:25:
f3:35:7e:fe:ce:72:e9:9b:ea:e4:d0:64:15:7a:01:99:21:6f:
ec:35:9b:89:44:0e:62:65:e7:61:fd:30:d4:86:14:80:2e:5b:
07:fb:e1:63:5b:35:6b:17:f9:97:7e:bc:34:59:fe:90:6c:23:
5b:67:ca:d6:dd:22:05:e1:23:f3:b8:8f:64:a4:8d:d2:03:bb:
4e:fa:3d:81:94:7e:90:2f:14:e3:a4:be:aa:21:f4:2b:23:74:
77:c6:f3:c2:ee:71:3d:3c:1d:b1:b0:c0:81:82:e0:74:56:83:
f7:92:e7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:10 2025 by rpki-client