Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
File: jq3tC4P6TjHOCghA60KbqKnxjjk.mft (raw, json)
Hash identifier: nhweM156EYH9JnfXcOEm4tHPejzeyNXvKL51W+Tfvkw=
Subject key identifier: 2B:B2:C3:84:9E:E6:AA:97:29:4F:A9:70:D4:D7:A1:9B:88:FE:7C:43
Authority key identifier: 8E:AD:ED:0B:83:FA:4E:31:CE:0A:08:40:EB:42:9B:A8:A9:F1:8E:39
Certificate issuer: /CN=8eaded0b83fa4e31ce0a0840eb429ba8a9f18e39
Certificate serial: 0199CC11320297CB37D754839D20AA7D3960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
Manifest number: 06CE
Signing time: Fri 10 Oct 2025 03:01:42 +0000
Manifest this update: Fri 10 Oct 2025 03:01:42 +0000
Manifest next update: Sat 11 Oct 2025 03:01:42 +0000
Files and hashes: 1: fOA4QEEv2iE5RkcdLFwthV_oCaY.roa (hash: SMdTaFFWP+rXvRJosbthSJCn7qx9H0XnpSFPw0TAUfk=)
2: jq3tC4P6TjHOCghA60KbqKnxjjk.crl (hash: 0GJX2MLrlmFj64xhmiGZ3WwmLSMUmP8/+/tMPjcPsYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Oct 2025 03:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cc:11:32:02:97:cb:37:d7:54:83:9d:20:aa:7d:39:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eaded0b83fa4e31ce0a0840eb429ba8a9f18e39
Validity
Not Before: Oct 10 03:01:42 2025 GMT
Not After : Oct 11 03:01:42 2025 GMT
Subject: CN=2bb2c3849ee6aa97294fa970d4d7a19b88fe7c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:26:46:2c:f8:62:40:be:25:70:8e:b8:94:17:
1c:de:97:92:e4:20:8d:62:18:d5:7f:af:ea:76:2b:
31:df:e8:91:6f:e3:dd:c0:5c:0d:67:9c:70:24:7b:
13:c0:1d:6d:5e:60:58:ec:f9:d5:ca:96:1e:6f:34:
76:ff:f3:c0:5a:66:63:93:0a:d2:2f:ab:48:74:73:
e0:28:fe:b6:08:24:54:33:52:88:d4:f2:ab:0e:71:
27:7b:71:5a:53:64:68:90:59:31:f3:ae:0c:8a:92:
a3:67:82:25:73:fe:18:77:4f:84:4f:ac:19:dc:a0:
60:c6:e7:d3:a0:cf:7b:49:63:ae:4e:71:d4:23:b4:
44:64:d1:97:51:4e:8a:10:9e:3e:d9:07:66:e4:83:
ed:9a:b6:ae:fe:26:ec:17:f2:c2:74:4d:14:90:02:
dc:a4:6b:c2:f8:41:b3:3f:01:c9:5d:7d:bd:dc:24:
f1:1c:f9:93:b9:bd:10:c4:73:43:5e:ab:d0:47:70:
a7:e8:23:ad:fb:72:d9:95:97:5f:3f:d6:d8:9e:97:
ab:1d:b7:c5:f7:35:6a:f6:4b:80:52:8a:8b:86:1d:
49:6c:98:5b:11:37:8c:4a:4c:7d:1d:52:ee:b8:2b:
cf:b7:f5:be:50:39:44:8b:e1:4c:68:41:ab:59:75:
33:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B2:C3:84:9E:E6:AA:97:29:4F:A9:70:D4:D7:A1:9B:88:FE:7C:43
X509v3 Authority Key Identifier:
keyid:8E:AD:ED:0B:83:FA:4E:31:CE:0A:08:40:EB:42:9B:A8:A9:F1:8E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f9:58:bd:78:b7:d0:06:1c:02:4e:10:57:15:f3:77:c5:32:
a0:76:95:c0:b4:e8:48:9b:d9:43:7f:4e:fd:bd:df:96:1e:81:
27:73:d1:2f:94:9a:a3:77:ac:ea:53:f7:95:ab:7d:30:ca:4a:
a8:e8:bd:7a:37:73:44:d6:0c:73:44:80:7b:0a:76:0a:cb:74:
46:7e:42:ed:9d:3a:e8:4a:6f:e2:7e:f1:cd:3b:4b:74:41:59:
d4:d3:5d:cf:60:10:b9:86:5c:be:7f:02:4c:35:71:b3:9b:45:
c7:74:95:54:38:92:ba:cf:92:a4:06:00:4b:50:72:cc:ef:a7:
09:af:15:31:d1:c8:69:b4:c8:4f:07:f9:1d:e0:9e:81:96:08:
62:51:7d:32:ae:ae:98:43:3f:61:16:a2:b9:31:6a:53:21:b4:
92:28:6e:b7:1f:85:a6:20:69:a8:71:34:1a:d2:68:37:c0:ae:
c2:46:1e:a9:dc:a1:4f:1f:97:57:a8:23:78:14:8a:39:9a:2e:
e9:ad:88:30:9a:ac:a7:f8:75:62:ca:25:5c:d6:2f:07:b0:5f:
24:72:f4:16:86:21:cf:b2:1a:e7:d1:64:87:b8:f6:17:30:20:
07:56:f6:f3:5b:d7:91:24:de:59:67:c9:08:af:e5:b5:5a:2f:
01:c5:2b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 10:40:09 2025 by rpki-client