Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
File: JqsqOMqsDOPKAf24f9-WNy6FmLY.mft (raw, json)
Hash identifier: 2FT9fLQWRJqHywfrMy761vmkWUNEDGnxZUPtTmBAl4s=
Subject key identifier: B9:B6:B2:4D:C9:63:0A:57:3E:7F:A7:66:AE:37:84:92:1F:0C:5F:85
Authority key identifier: 26:AB:2A:38:CA:AC:0C:E3:CA:01:FD:B8:7F:DF:96:37:2E:85:98:B6
Certificate issuer: /CN=26ab2a38caac0ce3ca01fdb87fdf96372e8598b6
Certificate serial: 019768F2DF6CA065B0FF9187F3A29A728BC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
Manifest number: 14E4
Signing time: Fri 13 Jun 2025 11:00:36 +0000
Manifest this update: Fri 13 Jun 2025 11:00:36 +0000
Manifest next update: Sat 14 Jun 2025 11:00:36 +0000
Files and hashes: 1: JqsqOMqsDOPKAf24f9-WNy6FmLY.crl (hash: WkczZgv8cgpfZd7Kv2WYMyzO4utmnrgAP/Q36XKhvUI=)
2: XNhLOVC-U9PPbLs6JsyzlnimIeQ.roa (hash: TD1akY3Fv3FxGktdYVS/WFPDKVHSuXmTFj0vHfZKIvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:df:6c:a0:65:b0:ff:91:87:f3:a2:9a:72:8b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26ab2a38caac0ce3ca01fdb87fdf96372e8598b6
Validity
Not Before: Jun 13 11:00:36 2025 GMT
Not After : Jun 14 11:00:36 2025 GMT
Subject: CN=b9b6b24dc9630a573e7fa766ae3784921f0c5f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6d:ad:74:eb:4f:8b:b9:10:08:1e:df:e8:d5:
cc:9b:ec:cb:41:ac:30:94:32:f7:bb:49:a8:ab:0d:
1b:23:b0:05:fa:97:7e:9a:c6:6f:88:23:ee:1a:56:
fa:11:2c:e3:67:ea:e0:e1:ba:1d:93:4d:5b:07:73:
ff:06:e6:e0:42:fd:5a:f6:14:4e:d9:a9:72:9b:97:
fa:a4:b5:23:e8:b3:73:55:a8:c2:50:84:1d:08:7e:
a7:74:e7:36:a7:ec:b2:b9:ae:4b:e3:1c:c5:40:ba:
25:91:81:4d:ee:c4:ec:fc:25:f1:2b:1f:e8:e9:7c:
c0:f9:49:9d:01:30:95:ad:ed:3f:cf:de:3b:b8:86:
74:c0:c7:65:52:81:00:ec:28:60:b9:aa:d5:e9:78:
d1:3f:bd:44:e6:29:75:c1:d2:af:21:72:5c:20:17:
46:2b:19:56:3e:11:b9:0f:b8:42:b3:db:14:68:10:
f3:a8:82:29:00:11:9e:11:57:04:3a:38:bc:05:1b:
ad:b8:62:dc:8d:a2:a5:35:d8:98:3c:40:46:ec:f5:
c5:ab:c2:77:66:4e:ba:46:b0:dc:91:78:cf:43:f2:
d3:de:0b:6f:18:6d:b2:39:70:c8:fb:65:5e:13:9d:
84:f5:df:3e:a1:52:de:d8:90:35:ee:8c:6b:0d:0a:
43:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B6:B2:4D:C9:63:0A:57:3E:7F:A7:66:AE:37:84:92:1F:0C:5F:85
X509v3 Authority Key Identifier:
keyid:26:AB:2A:38:CA:AC:0C:E3:CA:01:FD:B8:7F:DF:96:37:2E:85:98:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:4f:38:ab:6b:a8:83:d7:0f:b5:bf:99:25:54:10:c0:b9:7a:
9a:54:2c:97:6d:32:35:46:fe:39:18:6c:1c:7b:40:36:53:31:
1f:41:e3:90:37:e0:ed:ca:4a:a8:53:48:66:84:f3:2c:6c:af:
a5:25:1f:23:7c:4e:46:a2:43:de:74:4a:44:3b:f8:a4:cc:98:
73:8f:9b:33:5b:9b:9c:86:31:91:5a:e4:38:fa:4c:89:2c:14:
6f:0f:a7:4f:92:b1:47:8e:6e:ec:6f:b3:3e:81:3a:94:6d:5e:
97:4d:95:2c:13:fa:6c:28:72:d6:51:be:d7:25:a7:94:51:8a:
5c:e9:93:a2:20:e5:82:33:fb:b2:d7:89:75:1b:44:93:e6:5e:
fd:68:f2:dc:cd:18:4c:42:8c:f1:57:ef:00:86:a7:5c:6e:2d:
9a:93:fe:f9:1c:c9:7f:f2:22:b3:a8:81:65:37:20:b3:84:41:
a8:38:1f:28:e2:f2:41:29:c7:1a:ad:15:a9:f6:b0:5c:00:16:
18:3b:c7:d9:51:70:90:58:75:fd:d0:5e:2b:7c:2f:d8:6d:2f:
1c:6a:9d:99:72:ff:0f:4a:6e:57:c5:63:af:4c:be:42:7c:ce:
a3:c5:f3:4e:f0:f7:83:2a:62:1d:d1:60:2f:a1:1c:2f:7c:e7:
fb:5b:1a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:20:59 2025 by rpki-client