Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
File: JqsqOMqsDOPKAf24f9-WNy6FmLY.mft (raw, json)
Hash identifier: rUIYRknAyJAE4e+zjY/aOUBNfhHygxpNsk9HUug3tJg=
Subject key identifier: E1:9C:1D:D9:3F:57:34:EE:44:94:20:1E:64:47:1C:B7:17:5B:3F:F0
Authority key identifier: 26:AB:2A:38:CA:AC:0C:E3:CA:01:FD:B8:7F:DF:96:37:2E:85:98:B6
Certificate issuer: /CN=26ab2a38caac0ce3ca01fdb87fdf96372e8598b6
Certificate serial: 019A4E86AF3A01E2979A6617A09166604756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
Manifest number: 1664
Signing time: Tue 04 Nov 2025 11:00:40 +0000
Manifest this update: Tue 04 Nov 2025 11:00:40 +0000
Manifest next update: Wed 05 Nov 2025 11:00:40 +0000
Files and hashes: 1: JqsqOMqsDOPKAf24f9-WNy6FmLY.crl (hash: LXXavQzgFLtJPzBr5XHHu1YIfHmkSdZjOJ5JTprYyUs=)
2: XNhLOVC-U9PPbLs6JsyzlnimIeQ.roa (hash: TD1akY3Fv3FxGktdYVS/WFPDKVHSuXmTFj0vHfZKIvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:af:3a:01:e2:97:9a:66:17:a0:91:66:60:47:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26ab2a38caac0ce3ca01fdb87fdf96372e8598b6
Validity
Not Before: Nov 4 11:00:40 2025 GMT
Not After : Nov 5 11:00:40 2025 GMT
Subject: CN=e19c1dd93f5734ee4494201e64471cb7175b3ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:98:5c:e6:8a:e5:10:bc:db:c0:51:c0:5e:ec:
7e:03:7a:4a:60:ed:79:0c:22:64:63:52:f6:b4:ce:
97:00:a2:48:d2:18:73:be:29:5b:15:25:92:67:2e:
13:ff:5f:b4:81:50:85:62:f3:f4:b6:20:cb:60:fc:
5d:78:cd:6f:0f:2e:9e:ae:3f:bf:0e:1f:fc:39:c4:
24:e0:44:7d:81:56:d3:f1:8e:c8:2f:86:b4:c8:e9:
1d:7e:6e:3e:a9:9d:35:64:15:89:12:f3:00:a2:7d:
08:1e:88:a2:58:be:c6:70:31:35:81:69:f7:99:09:
c6:0c:e9:03:f9:ac:18:0c:6d:94:fc:91:22:9b:b1:
76:5f:c8:e6:10:86:a6:36:a0:08:5a:d8:38:0d:80:
bd:02:99:c5:d3:17:36:f8:a2:aa:12:ed:c6:30:97:
8a:11:d4:70:41:c4:ee:d0:75:d6:7c:cc:7b:af:45:
82:0a:86:c4:af:a5:8e:61:3c:cd:21:b4:4b:10:99:
3f:a4:81:6a:2e:f9:c4:0f:9b:89:36:0a:7c:0c:38:
bd:e1:ec:96:9e:63:19:ab:ca:f0:94:6f:7d:03:c8:
d2:b7:36:21:17:0d:3c:37:0e:64:a5:f3:05:05:22:
5e:52:d6:95:8c:70:08:cb:f1:c4:1a:56:b4:77:02:
74:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:9C:1D:D9:3F:57:34:EE:44:94:20:1E:64:47:1C:B7:17:5B:3F:F0
X509v3 Authority Key Identifier:
keyid:26:AB:2A:38:CA:AC:0C:E3:CA:01:FD:B8:7F:DF:96:37:2E:85:98:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:f1:0c:3d:0a:13:0a:92:32:34:cf:69:1f:04:21:23:ab:f6:
29:d9:42:74:fe:d4:87:58:04:97:bf:69:b2:ab:9c:89:f9:fe:
d6:92:ba:64:fb:63:e5:65:7c:ec:34:63:0f:28:65:09:2b:b3:
73:54:ae:b5:42:c3:37:db:3c:91:74:01:3c:c8:05:04:ea:80:
c7:62:e4:10:9e:11:25:00:e0:d2:9c:a2:a0:e3:4d:2e:1e:a5:
fc:15:e8:8b:c7:b0:a3:c0:95:83:4a:a9:d4:99:d3:1d:84:1a:
57:43:4a:27:25:21:8d:6d:5d:52:a4:04:32:d3:36:75:5c:67:
92:29:e0:d9:fa:69:6c:51:f2:30:e5:ab:9a:f8:33:f8:96:cf:
87:e9:67:e8:ea:b7:82:8a:64:55:2d:37:09:e6:d2:d8:61:67:
31:16:3d:ef:f9:14:1c:f7:be:9d:8a:92:97:91:69:f7:03:5c:
2d:71:8a:b5:ea:97:36:f8:6b:ce:b3:87:24:f8:92:d4:74:98:
6d:18:f0:1c:94:ca:82:97:0d:f3:2a:90:f4:fb:22:66:93:46:
42:3f:d3:38:8e:72:02:08:57:5c:94:a0:53:4a:78:ff:bc:06:
7d:74:7c:f2:88:2b:20:85:83:88:f0:48:12:e3:b3:12:06:56:
df:bc:91:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:37:59 2025 by rpki-client