Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.mft
File: jqzH87IYxJLYjb68nNy5otLTDtE.mft (raw, json)
Hash identifier: mYbwS+zVM7QYSj4ubRdYWpEPHBUQGhYQsgRm1Lhb+o8=
Subject key identifier: 26:A0:B2:E3:F8:46:BB:88:35:7C:3E:C3:69:AB:30:A3:E3:E6:5D:02
Authority key identifier: 8E:AC:C7:F3:B2:18:C4:92:D8:8D:BE:BC:9C:DC:B9:A2:D2:D3:0E:D1
Certificate issuer: /CN=8eacc7f3b218c492d88dbebc9cdcb9a2d2d30ed1
Certificate serial: 019A71B7888A30BB8BEAB2AFA4B438560CD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqzH87IYxJLYjb68nNy5otLTDtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:00:44 +0000
Manifest this update: Tue 11 Nov 2025 07:00:44 +0000
Manifest next update: Wed 12 Nov 2025 07:00:44 +0000
Files and hashes: 1: G4xGjeiK9NbX0jXJY8uDkRmJuDc.roa (hash: muHuLGPiPatokQGw15YR2MNayDycTrh2aeAcpqtHkYI=)
2: _bjBL5LK2WVAfL5nxIuCTdAEYdU.roa (hash: hu7dwrJP9WhWK3glmNV0xBWx3TcYlk14ctZGu4bZyLs=)
3: jqzH87IYxJLYjb68nNy5otLTDtE.crl (hash: uW/QFf4zubk9Or9/qGj6dvZ8ZM5dzeRQ+bsB1bwB6PU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqzH87IYxJLYjb68nNy5otLTDtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:88:8a:30:bb:8b:ea:b2:af:a4:b4:38:56:0c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eacc7f3b218c492d88dbebc9cdcb9a2d2d30ed1
Validity
Not Before: Nov 11 07:00:44 2025 GMT
Not After : Nov 12 07:00:44 2025 GMT
Subject: CN=26a0b2e3f846bb88357c3ec369ab30a3e3e65d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:81:a3:22:0e:53:71:29:e0:f2:d8:a7:af:a2:
64:87:53:34:f6:79:ff:88:82:d9:c0:64:39:6f:15:
04:af:ab:ef:40:73:56:bd:df:1d:8a:39:5a:b6:ec:
51:ac:e9:76:d8:07:65:54:0c:0d:98:16:5c:66:7d:
05:95:50:79:40:9b:59:48:76:8c:3f:cd:b3:42:34:
5a:ef:3e:81:fb:d9:1a:c6:08:84:32:b5:da:f5:93:
36:43:09:d9:ca:10:ca:8e:17:97:7c:1b:0c:00:08:
77:3b:62:f2:20:f7:ef:39:5d:86:69:f1:a3:b5:49:
e2:16:81:8f:20:95:1b:82:00:e6:d0:6f:b0:b5:0d:
00:4d:94:7e:7a:ff:a1:af:54:f9:8a:30:d2:a6:7b:
60:0f:ac:af:4c:99:7c:de:dd:4f:c1:14:72:fc:23:
d2:03:b7:c3:c4:59:4c:73:0c:8b:a1:36:b0:c3:db:
8e:2d:c1:0f:6b:0e:83:f4:16:ed:11:7f:c8:04:7a:
d3:38:7e:37:d6:80:98:a9:3a:63:05:82:e8:11:0a:
8a:4a:ef:0c:96:06:b8:fb:27:d8:66:83:d7:52:79:
23:a2:89:e4:5d:6c:ef:34:06:9a:d5:78:91:fa:a0:
e4:aa:a4:fe:b6:e4:11:05:1b:c3:81:55:d8:c4:50:
0b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A0:B2:E3:F8:46:BB:88:35:7C:3E:C3:69:AB:30:A3:E3:E6:5D:02
X509v3 Authority Key Identifier:
keyid:8E:AC:C7:F3:B2:18:C4:92:D8:8D:BE:BC:9C:DC:B9:A2:D2:D3:0E:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqzH87IYxJLYjb68nNy5otLTDtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:67:9d:a3:56:3d:8d:54:24:cd:82:ae:eb:90:40:5e:d2:8b:
ba:0b:c6:bf:9b:c3:c7:b5:42:8e:bb:af:ba:6d:da:98:82:b4:
ca:bd:83:af:83:ed:87:c6:26:ac:87:38:c4:3c:83:ff:56:b5:
63:66:62:36:79:f5:10:52:9a:3e:2b:d9:c1:46:e4:54:78:4f:
39:8e:8f:f6:c2:67:b7:80:f6:7b:fb:c9:7a:f1:e6:34:9f:aa:
91:e7:6f:4b:18:72:79:6a:46:a0:4a:44:f5:28:60:60:76:a0:
bb:e4:f3:66:b4:15:f2:d6:5f:29:b1:5c:6a:c9:b2:18:cd:88:
66:9d:0d:10:84:e9:10:44:65:e3:6a:75:77:88:b7:dc:a3:bd:
48:4d:e3:9c:a7:17:f2:30:f4:a2:3c:c6:55:15:be:3d:38:ca:
e3:43:8f:53:0d:dc:d7:f7:84:1c:f1:0c:4e:3d:42:32:db:1b:
05:27:7e:e5:3f:98:20:7b:05:28:8f:09:29:49:ec:35:70:8a:
3b:87:bd:d6:5e:a4:fb:51:c2:f3:b7:de:aa:17:de:71:13:74:
1b:0f:55:3c:27:86:26:ee:b1:21:c3:d3:56:93:50:48:83:9e:
97:c2:7e:77:b2:1f:3b:70:6e:52:64:ec:8b:9d:fc:3a:dd:60:
15:3f:46:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:34 2025 by rpki-client