Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
File: jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft (raw, json)
Hash identifier: qjwpDbriGLfBfVMyhMjmUKS0wwduibocAfNT0EKKwSQ=
Subject key identifier: 38:6B:60:A7:E9:5D:88:CE:55:90:92:CF:9C:2F:80:EC:E6:A9:28:6B
Authority key identifier: 8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
Certificate issuer: /CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Certificate serial: 019849D3C438894403E8FFAA02A7F235A1BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
Manifest number: 1502
Signing time: Sun 27 Jul 2025 03:01:11 +0000
Manifest this update: Sun 27 Jul 2025 03:01:11 +0000
Manifest next update: Mon 28 Jul 2025 03:01:11 +0000
Files and hashes: 1: LEgJcT1HJwyV1gNb8G6Nv4QQcdA.roa (hash: MrTCL4S0d15bcXIlwlUs8e8j+hHw3EZvbQGkeB92Lzs=)
2: eiuuVdDHw7tCNh7-88E3raSuIfc.roa (hash: 3m5MOXmDNJezPlvUGc+JuyJPY6iXYjUfrVVj0/0iqB0=)
3: jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl (hash: MwC1e8tZw6wR6UeYfoLRL2IPSyI7WsP38C3OeakG0I4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:c4:38:89:44:03:e8:ff:aa:02:a7:f2:35:a1:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Validity
Not Before: Jul 27 03:01:11 2025 GMT
Not After : Jul 28 03:01:11 2025 GMT
Subject: CN=386b60a7e95d88ce559092cf9c2f80ece6a9286b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:72:ba:df:40:ab:03:e5:d9:ae:7a:87:74:de:
a0:a5:cd:34:a4:ad:9e:e8:98:f7:ce:56:47:3a:8c:
df:80:b1:25:6a:d1:ad:30:4c:92:d5:f3:04:01:cc:
91:8d:5a:f0:a6:24:7c:20:36:4f:e1:09:97:06:40:
96:25:13:04:2c:f9:4d:08:f6:de:bf:fc:0f:a8:88:
67:5b:17:3f:10:54:09:50:5f:da:16:1b:f1:70:ed:
db:4c:ea:b7:60:cd:fb:13:93:e7:9a:3c:05:f8:e0:
73:cb:3a:09:1d:53:67:d1:7e:69:2a:0b:32:55:90:
fd:39:07:c3:41:27:db:96:9f:7e:69:e5:f4:d0:55:
cd:f9:a1:41:c7:e3:51:55:27:a3:47:e7:90:3a:b0:
1c:7d:ab:56:19:8b:54:6e:fe:65:ad:4c:94:e0:b2:
bb:f9:53:98:4c:73:4b:36:0d:b8:c5:f4:e1:99:af:
a9:46:14:c4:80:64:fd:69:5f:17:70:58:26:d6:2f:
d4:18:d9:cf:d0:2b:b3:cf:e4:87:91:7b:ca:dd:a8:
7b:f8:9b:ec:27:40:97:02:af:69:1f:38:44:c2:40:
c4:cf:44:8e:ce:2f:3a:57:0b:ed:1f:35:cc:5f:12:
8d:ce:2d:61:e4:95:b5:19:4a:f7:b1:f9:01:fc:40:
2b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6B:60:A7:E9:5D:88:CE:55:90:92:CF:9C:2F:80:EC:E6:A9:28:6B
X509v3 Authority Key Identifier:
keyid:8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:16:01:3c:d5:78:91:7d:e3:01:af:8e:4d:78:56:24:66:23:
00:12:2e:b6:d9:21:da:e0:69:98:c3:3d:89:88:6a:67:76:a3:
76:e2:38:8a:fa:8c:51:a6:02:ec:d4:36:97:75:19:ea:ef:cc:
5a:a0:96:3b:a1:9b:6a:a1:e5:b8:07:aa:c8:27:8a:9a:70:4c:
55:de:86:ff:c1:42:86:33:ae:2e:78:90:5f:72:dc:19:39:a0:
ba:31:95:18:3b:c9:37:4b:eb:e2:a3:9b:dd:47:73:39:a2:2b:
02:1c:88:20:4b:4c:4e:c4:ff:c1:40:32:7b:a9:91:c1:06:e6:
e6:18:92:2d:e9:d0:3b:37:00:45:96:16:0c:98:dd:aa:4b:7f:
5f:9c:86:5c:33:ff:3d:81:17:c7:c3:14:c9:8d:5e:30:cf:b8:
03:6f:51:44:22:58:38:1f:9f:58:dd:75:f9:c3:36:79:32:a0:
3a:96:27:19:1e:17:d7:6c:25:8c:87:ef:bb:c5:5c:f7:2d:66:
7e:ed:39:67:52:d7:c3:6d:22:a8:a8:63:8c:6f:b4:0a:c9:80:
bf:c8:ed:71:80:c3:81:fb:bf:29:3f:0a:38:e9:4f:b3:24:95:
31:61:d2:8b:01:b4:36:3b:d6:7e:29:c1:e4:74:8d:ac:bf:4a:
a6:62:55:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:10:06 2025 by rpki-client