
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
File: JqRR4kXgG6my-yMUwmCeexUedKI.mft (raw, json)
Hash identifier: lN/bZPOAjPqUsCJBpg1kUkcfoU7ZVhgYAPgst82qBH8=
Subject key identifier: C0:B4:9C:6A:0D:E9:0A:7F:E2:6D:27:A6:DC:8E:3C:D0:5B:50:B9:30
Authority key identifier: 26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
Certificate issuer: /CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Certificate serial: 01984965E7F3E797A8B78EB15679ED248561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 01:01:11 +0000
Manifest this update: Sun 27 Jul 2025 01:01:11 +0000
Manifest next update: Mon 28 Jul 2025 01:01:11 +0000
Files and hashes: 1: JqRR4kXgG6my-yMUwmCeexUedKI.crl (hash: 74ljzoyPBIwiCnxVGJQ0UvY450bj7+gu6zKLIeRpcuw=)
2: __QM0Y00A8o9_wWPyDLaVQsYZls.roa (hash: Tt5jgaPYYhPlmRSiaLMYS5DQDbnj5Cw5Zwmf+6k+kyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:e7:f3:e7:97:a8:b7:8e:b1:56:79:ed:24:85:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Validity
Not Before: Jul 27 01:01:11 2025 GMT
Not After : Jul 28 01:01:11 2025 GMT
Subject: CN=c0b49c6a0de90a7fe26d27a6dc8e3cd05b50b930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1a:d4:bc:3c:90:67:56:ec:66:84:30:9e:56:
11:4b:dd:02:df:d5:b4:1a:a9:c1:c9:27:fd:66:d1:
8d:56:b4:5d:8b:f0:46:57:73:53:2a:b5:04:17:49:
1c:8e:0d:c3:82:db:82:af:c9:da:e9:d1:ec:de:95:
2c:29:16:b0:c9:ff:9e:f5:80:31:fb:1d:ab:68:48:
04:08:fa:0b:7b:69:c7:54:74:7a:33:11:79:17:b7:
4d:bd:be:e9:6b:d6:3e:a7:b8:24:61:78:34:75:a6:
0a:18:d7:03:4a:54:eb:07:c9:f6:bf:e5:e7:1a:a8:
32:b4:28:1f:77:2a:07:64:43:a1:14:75:f7:82:61:
01:07:01:70:72:24:09:56:34:7b:a0:dc:07:01:8a:
d5:78:22:4b:db:6d:c5:48:d4:65:92:57:5d:69:a8:
01:80:25:d4:c6:f6:da:54:fe:77:d5:d2:7c:ab:7e:
e7:8e:91:1b:8d:e7:d9:13:bc:57:a4:2b:32:34:5c:
f3:0b:96:cc:e3:bf:e8:a9:b6:bf:02:f4:fd:ed:82:
a4:3c:30:06:7c:0a:f5:a5:e5:9f:61:b7:50:db:94:
fe:2d:e9:f6:0c:44:a8:ab:5b:b8:7f:c1:95:60:7d:
e8:47:24:69:b3:2b:1d:76:37:81:a4:13:f1:66:8f:
01:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B4:9C:6A:0D:E9:0A:7F:E2:6D:27:A6:DC:8E:3C:D0:5B:50:B9:30
X509v3 Authority Key Identifier:
keyid:26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:20:b6:5d:1d:dc:79:95:e6:47:9b:10:33:27:5b:83:cb:c0:
c0:7b:28:1c:97:15:26:03:2f:03:30:5b:4d:bf:11:81:1c:73:
52:ec:6f:6a:9d:5d:51:ac:65:f6:f0:11:e1:54:fa:36:f6:84:
a8:fe:0f:e3:d4:be:f3:46:c0:f0:6f:63:ea:c9:a4:11:1e:4f:
24:d0:ec:e1:d2:21:1a:96:93:8d:8d:96:d3:7a:e8:0c:20:1e:
78:85:eb:85:3c:45:7b:75:92:4d:ba:ed:21:30:64:27:a7:c6:
f2:3b:2e:96:4f:12:58:fe:95:a2:7d:ed:82:d1:bf:40:4e:3d:
31:01:8c:e9:3f:60:d9:03:10:c5:90:91:b0:9c:c7:e9:d3:fd:
47:8c:1a:a4:79:91:54:b1:14:e6:55:45:44:ae:78:13:54:b3:
9a:f8:b4:82:a1:5a:4e:01:91:07:88:e1:71:34:d7:ae:b0:c3:
20:bc:06:e7:05:be:3e:45:7c:75:3d:29:2f:db:27:dd:9a:54:
14:0b:56:78:20:ac:65:d3:cc:94:3c:eb:b8:4c:05:a4:91:b0:
06:1e:c5:7d:7c:13:b4:9c:25:ef:ea:e2:bd:de:e6:4b:51:66:
47:b2:f1:bb:ea:09:31:01:39:e4:64:52:a6:dc:0d:cd:0c:87:
b3:16:f3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:36:05 2025 by rpki-client