Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
File: JqmLYSX1JD4-2DUBWWfN25cUjfE.mft (raw, json)
Hash identifier: Vs8sYZzbcklLmiBEFt86uFZ1UgkjNih7ZK7FP/AHba0=
Subject key identifier: 82:DE:C6:DF:A4:06:7C:BF:08:8A:57:AE:85:32:D9:CB:61:C1:07:77
Authority key identifier: 26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1
Certificate issuer: /CN=26a98b6125f5243e3ed835015967cddb97148df1
Certificate serial: 019855DF4CFC52CE38FC72A990646B400BC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
Manifest number: 11C2
Signing time: Tue 29 Jul 2025 11:09:14 +0000
Manifest this update: Tue 29 Jul 2025 11:09:14 +0000
Manifest next update: Wed 30 Jul 2025 11:09:14 +0000
Files and hashes: 1: 1HlDDcU_awP0Jg600b5QOV5zFyw.roa (hash: DII6lgfGgmt/XXzdShUFtsjKk90R+1ZgqPhGOseU9bY=)
2: JqmLYSX1JD4-2DUBWWfN25cUjfE.crl (hash: dPJXJBYLJw9BEDnmltTDOBjfMhmNtnTBjht9wsT4FxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 11:09:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:df:4c:fc:52:ce:38:fc:72:a9:90:64:6b:40:0b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a98b6125f5243e3ed835015967cddb97148df1
Validity
Not Before: Jul 29 11:09:14 2025 GMT
Not After : Jul 30 11:09:14 2025 GMT
Subject: CN=82dec6dfa4067cbf088a57ae8532d9cb61c10777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0f:ee:65:35:45:c4:9e:b5:a0:39:5a:73:2c:
62:32:52:b7:98:26:96:7b:72:4d:65:64:37:5d:06:
ce:c6:ce:92:19:e9:be:27:56:ca:5d:28:90:61:50:
be:68:bd:e7:70:90:d9:cd:f3:73:c8:3f:bd:02:a4:
b7:aa:75:9d:fb:a1:86:9e:51:a7:a9:59:87:fa:9b:
e6:93:83:ae:14:1e:f6:e9:5d:4a:83:70:cc:2a:6d:
c0:1e:e9:a7:53:89:7b:08:8d:70:2b:8b:ee:93:a6:
5b:78:82:58:d1:e1:2e:11:f8:e5:f3:85:e6:1d:81:
2d:0d:4c:34:ea:62:c7:b1:83:4f:9e:b0:93:06:12:
c6:66:ba:a9:9c:f0:74:2d:a8:e2:19:05:d7:81:7e:
c4:0c:57:d5:47:f7:87:14:7e:67:b3:db:1f:2c:b5:
e3:11:3d:83:6c:e9:47:3d:96:09:66:04:41:ea:d8:
11:f3:ab:4a:6f:8a:33:bc:0d:ef:f5:1c:42:82:6e:
cf:95:77:58:33:da:13:7b:f9:6c:48:a6:a9:c5:62:
e9:19:4d:3c:f1:ce:c1:8a:cc:cb:16:fb:e7:ea:67:
89:61:0a:ad:68:f5:7a:55:9d:ab:c3:42:e3:ba:b7:
1d:4f:a0:25:41:65:2b:6e:2d:36:7f:80:b3:06:c8:
55:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:DE:C6:DF:A4:06:7C:BF:08:8A:57:AE:85:32:D9:CB:61:C1:07:77
X509v3 Authority Key Identifier:
keyid:26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:9f:9a:ba:fe:8a:8d:a3:3e:63:9a:35:09:df:d2:f9:ec:1f:
7f:d9:c4:09:98:d7:96:4c:9e:41:76:44:6f:19:a0:0e:b0:09:
3f:a8:23:49:1d:22:0e:0f:6d:13:2d:a0:5c:d0:f0:b9:5f:e1:
20:53:ab:fa:8f:46:d3:c6:da:51:4d:f0:02:2a:5f:8a:ff:30:
b3:5d:e2:a8:38:b3:48:99:03:1c:44:c4:5f:d8:1c:f3:83:7b:
7e:d1:3c:3f:9d:1b:01:81:20:46:da:1b:2b:c2:a8:2c:c5:db:
0f:c2:62:a5:c6:34:31:3a:5e:32:fa:75:46:87:b3:e7:34:9e:
7f:f1:f6:1f:c9:24:66:14:0e:3b:e5:a2:66:2e:88:69:61:43:
15:d4:24:64:6e:74:45:65:14:09:45:36:d5:f1:e2:bb:55:5f:
f5:31:46:58:8c:2f:59:d0:9e:07:bd:f1:4f:1a:2c:90:a7:01:
4f:55:f3:8f:2e:07:80:04:e9:30:ed:72:67:4a:76:a8:4d:18:
bc:69:92:d7:16:ec:f4:33:c4:d5:36:d0:fc:47:bb:be:3b:9f:
3d:52:cf:92:d3:0b:d7:03:d4:b7:22:21:80:9f:9d:8e:6f:c3:
42:3b:66:b7:c2:04:64:ca:28:e6:fa:aa:b9:e4:6e:7c:82:21:
58:33:d4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 19:00:54 2025 by rpki-client