Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft
File: jQtYT2A1_loofFZ_HjhUuPvCoMI.mft (raw, json)
Hash identifier: gUR4bqPEyy8In5uYK5MouKdxB4eCzCUhSj0iP2EBG34=
Subject key identifier: D9:5C:FA:C5:19:CB:07:74:34:45:72:79:C2:68:8B:B1:20:0F:E7:5A
Authority key identifier: 8D:0B:58:4F:60:35:FE:5A:28:7C:56:7F:1E:38:54:B8:FB:C2:A0:C2
Certificate issuer: /CN=8d0b584f6035fe5a287c567f1e3854b8fbc2a0c2
Certificate serial: 019A7226470FB51926ACC599574D55EBBC2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jQtYT2A1_loofFZ_HjhUuPvCoMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 09:01:42 +0000
Manifest this update: Tue 11 Nov 2025 09:01:42 +0000
Manifest next update: Wed 12 Nov 2025 09:01:42 +0000
Files and hashes: 1: 4QNIL4c6Gz_sxHoIV5bmO3J-yRY.roa (hash: hUEgN9PKhux4KaNWV6X/MwNUuCaPOczFnXagh0lAR1c=)
2: jQtYT2A1_loofFZ_HjhUuPvCoMI.crl (hash: C5FFQDoyFg7d3u7tiDxKzaThPg4epeJnAwxMnhRF/8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jQtYT2A1_loofFZ_HjhUuPvCoMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:47:0f:b5:19:26:ac:c5:99:57:4d:55:eb:bc:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d0b584f6035fe5a287c567f1e3854b8fbc2a0c2
Validity
Not Before: Nov 11 09:01:42 2025 GMT
Not After : Nov 12 09:01:42 2025 GMT
Subject: CN=d95cfac519cb077434457279c2688bb1200fe75a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:eb:34:bb:9d:a5:96:10:35:ce:f1:fe:08:84:
24:68:f4:0e:5f:e0:8b:e9:8d:d5:d3:53:97:b6:95:
53:23:f0:7b:8b:65:1d:99:63:dd:d8:cf:fd:44:36:
b4:9e:82:54:4f:fc:4a:de:6d:fe:3b:44:aa:76:4c:
b7:93:a1:10:03:92:a1:7b:39:85:49:5f:fb:fd:57:
5a:e7:62:66:6b:92:a6:9b:6d:fe:6d:9f:0a:81:93:
56:66:b0:66:63:5b:c6:f2:de:34:a9:bb:a8:5f:1c:
43:81:e6:83:83:cf:40:92:59:4b:4c:6c:e6:80:ce:
a0:7b:26:42:b6:18:02:80:84:de:a4:5a:b7:64:f6:
ee:51:cf:3c:f5:64:6f:bd:3c:f2:0a:cb:07:26:f1:
30:86:df:78:9f:e8:68:44:1b:1b:2d:12:ca:20:25:
a0:12:e5:7c:97:bf:e9:ad:e2:06:57:58:a3:3d:1d:
54:ae:32:0a:04:68:3b:bb:59:61:6f:fe:ec:33:fa:
18:4f:a8:ab:3e:ed:79:e5:c2:5a:7b:32:80:e7:01:
45:02:54:e9:c3:4a:fe:53:19:8e:ea:6f:3c:d9:2d:
92:b3:ec:61:00:f6:ba:a1:63:c7:6d:91:76:9e:a9:
ad:65:e7:5f:bf:70:c6:4b:24:49:27:80:5d:04:e4:
3b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:5C:FA:C5:19:CB:07:74:34:45:72:79:C2:68:8B:B1:20:0F:E7:5A
X509v3 Authority Key Identifier:
keyid:8D:0B:58:4F:60:35:FE:5A:28:7C:56:7F:1E:38:54:B8:FB:C2:A0:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jQtYT2A1_loofFZ_HjhUuPvCoMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b9:2f:1b:a7:3b:7a:fc:01:1b:df:bc:af:66:2c:b0:e0:6f:
f8:01:5f:ca:90:bd:5d:f9:a0:7e:d5:d5:7e:31:a2:34:f4:97:
20:f3:8a:01:47:58:3a:5b:95:b9:f3:0c:09:f5:b9:9e:8c:8d:
e0:78:28:a2:4a:ce:08:7c:5f:c5:17:45:39:24:7c:3c:c2:c5:
ee:fb:40:26:87:e7:a7:bb:d7:66:af:33:34:a9:eb:8a:04:5d:
06:64:6e:cd:92:10:a7:06:12:c2:83:22:ca:8e:fc:61:be:59:
36:49:30:d2:7d:50:fd:d3:a0:87:1e:1d:9b:c4:7f:1c:6f:96:
b5:a0:fa:4e:9f:11:37:52:d7:6f:72:e8:0f:41:d9:fa:d0:33:
2c:09:98:e7:76:2d:35:38:76:fc:60:12:78:08:5c:dd:73:72:
b4:58:4b:06:0b:ce:dd:70:ad:33:a3:48:b0:54:1f:16:cc:1a:
cb:66:e7:ce:a9:25:7a:91:6c:a8:6d:13:ba:27:1a:7d:18:c9:
42:8c:c5:3e:5a:4a:ca:15:55:51:cf:e1:70:d8:63:43:dd:89:
11:09:d1:51:47:b8:3c:8a:6b:63:fb:1b:18:ec:9b:d8:6d:06:
bc:4b:21:9a:25:7d:32:af:b1:84:5b:3c:88:f9:6c:82:48:69:
b1:51:5c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:40 2025 by rpki-client