Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
File: jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft (raw, json)
Hash identifier: OTLQneokFXyXwfnpINMUazhcDlfUyGUuITjM30Omdac=
Subject key identifier: C6:BC:83:4D:35:A1:E1:20:24:75:0D:EA:29:E9:0B:22:50:F6:38:BA
Authority key identifier: 8E:A1:75:86:1C:ED:0C:F7:0D:51:64:79:B3:FA:88:07:62:6A:C3:1F
Certificate issuer: /CN=8ea175861ced0cf70d516479b3fa8807626ac31f
Certificate serial: 019849D36987040EF98D61246A8AABBAFF45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
Manifest number: 01EC
Signing time: Sun 27 Jul 2025 03:00:48 +0000
Manifest this update: Sun 27 Jul 2025 03:00:48 +0000
Manifest next update: Mon 28 Jul 2025 03:00:48 +0000
Files and hashes: 1: jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl (hash: Y0I/QT/jPbpMiojrVUEQFYnDJSVmRZEYu3wDdnFvkT4=)
2: rPcwuV8U2gs2nEIcbxeBJt0QVGU.roa (hash: uIRWM7da9ucOHpupG9xSr3AJa0DcVZ8DVpjTgYL4B3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:69:87:04:0e:f9:8d:61:24:6a:8a:ab:ba:ff:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ea175861ced0cf70d516479b3fa8807626ac31f
Validity
Not Before: Jul 27 03:00:48 2025 GMT
Not After : Jul 28 03:00:48 2025 GMT
Subject: CN=c6bc834d35a1e12024750dea29e90b2250f638ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c6:97:eb:ea:09:16:2d:94:44:fb:91:51:ed:
dd:27:65:29:61:63:da:6c:2a:90:30:2f:b1:1f:0a:
d1:93:77:83:45:dc:0a:c0:b5:dd:bb:41:27:e9:e7:
5b:dd:62:92:3b:cb:e1:07:3a:a2:3c:7c:1a:72:fa:
27:30:72:48:d9:1d:4c:c7:3a:b8:80:1e:dd:41:27:
45:7c:a2:67:cd:eb:ad:e4:d3:50:ba:35:ac:9a:5c:
45:8e:b8:e9:eb:7d:33:2b:6b:9c:cb:3e:9e:cc:78:
3e:03:84:76:04:81:a4:d1:9d:ef:58:02:bf:24:94:
ed:b0:93:1a:02:99:b1:b4:9d:01:5f:bc:d2:f2:64:
b3:5f:a7:b5:ac:3a:e2:d5:07:e5:20:04:77:73:db:
88:0d:9c:3f:79:94:75:9d:12:0f:3f:67:f3:e3:0b:
19:aa:85:cc:f8:fd:d5:93:18:5a:95:fa:a6:01:3e:
a2:c7:25:97:d8:36:3a:12:68:ed:9b:dc:f9:12:86:
0a:e3:74:c2:28:ac:b2:41:dd:af:d1:92:f9:73:c1:
40:56:72:4f:18:d7:4b:72:93:a9:d3:f2:a3:47:65:
59:bc:64:fa:83:e3:57:19:ed:54:fe:97:04:d6:93:
7b:3b:a0:c8:6e:30:67:b7:35:ed:b2:22:eb:59:79:
88:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:BC:83:4D:35:A1:E1:20:24:75:0D:EA:29:E9:0B:22:50:F6:38:BA
X509v3 Authority Key Identifier:
keyid:8E:A1:75:86:1C:ED:0C:F7:0D:51:64:79:B3:FA:88:07:62:6A:C3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:01:1e:52:ef:41:da:b0:3e:b8:5b:98:f6:4d:f1:04:10:3d:
82:4f:19:51:e0:95:4b:fb:60:a3:d3:0e:17:77:00:97:bc:8a:
11:c1:90:9c:c9:d2:47:9c:43:5d:24:1a:e2:bd:ba:59:e0:ad:
68:d7:59:1f:70:55:ec:c5:95:2f:ba:a7:73:88:34:84:ee:39:
19:2a:cc:38:a7:fd:e6:5a:f4:1e:86:2b:bd:8b:5e:60:74:76:
a7:21:6a:46:58:58:ee:10:bb:a3:1c:9a:96:88:74:46:a6:7a:
0b:fb:f2:21:b8:fa:6a:39:a8:ae:e1:d4:08:ca:46:93:6a:2c:
50:90:b1:0c:1c:ee:67:4e:e3:77:30:9c:c1:50:f3:a6:83:d6:
1b:2e:36:e0:47:8b:cb:a2:00:a9:ff:15:1c:78:fe:b6:cd:bd:
41:8d:d4:49:0b:e9:ae:89:2d:97:12:72:4c:f7:a3:ad:bd:e1:
30:fa:ea:31:a7:ad:05:72:b7:0d:24:d3:d7:b7:cd:a1:d8:de:
ab:03:c0:f5:37:cb:25:85:3d:87:d7:46:f9:2a:a0:a1:0e:aa:
28:47:e2:16:a7:bc:c6:cc:29:f8:eb:8a:95:db:c8:e3:17:7c:
21:27:b5:9b:45:ec:9e:43:dd:ea:e2:e2:33:4b:2e:be:8c:d0:
37:fa:11:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:14:56 2025 by rpki-client