Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
File: JqRR4kXgG6my-yMUwmCeexUedKI.mft (raw, json)
Hash identifier: O8QUr5A4sfQW4mMz0ugZRdh7ZZrxhbZ0FsOlBNyQ3qU=
Subject key identifier: D4:6A:AE:84:2E:37:47:BD:33:83:96:5F:82:80:B2:96:32:F7:8D:81
Authority key identifier: 26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
Certificate issuer: /CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Certificate serial: 019A26660FBA811FBAEAA4481052A9A2CA8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
Manifest number: 16F9
Signing time: Mon 27 Oct 2025 16:00:14 +0000
Manifest this update: Mon 27 Oct 2025 16:00:14 +0000
Manifest next update: Tue 28 Oct 2025 16:00:14 +0000
Files and hashes: 1: JqRR4kXgG6my-yMUwmCeexUedKI.crl (hash: ro2C132LeXsDWHKEo0V5wy36Q4YnG+t6ay7wMDF5WJM=)
2: __QM0Y00A8o9_wWPyDLaVQsYZls.roa (hash: Tt5jgaPYYhPlmRSiaLMYS5DQDbnj5Cw5Zwmf+6k+kyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:66:0f:ba:81:1f:ba:ea:a4:48:10:52:a9:a2:ca:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Validity
Not Before: Oct 27 16:00:14 2025 GMT
Not After : Oct 28 16:00:14 2025 GMT
Subject: CN=d46aae842e3747bd3383965f8280b29632f78d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3b:36:f6:f1:b0:a3:ca:64:c9:77:9a:f7:c8:
9b:f3:aa:cb:8c:dc:95:55:29:c1:df:9a:fa:af:4e:
76:8b:fe:17:a2:91:2a:00:28:32:d5:6c:47:20:56:
84:5b:b7:90:f0:67:03:4d:f2:ae:87:82:3f:78:fd:
fa:4c:16:b3:5d:65:08:0c:e7:d1:8e:47:be:cd:79:
23:35:c7:ea:8c:02:9d:a5:4d:20:82:c9:3e:5f:5a:
cf:28:f2:1f:e3:be:d3:18:e9:6d:1f:94:e7:7b:78:
cf:80:72:d0:24:36:5d:13:ac:a3:2d:59:62:27:67:
20:aa:e9:7f:95:04:bc:bc:0c:c3:3e:f5:f8:f0:8c:
f4:33:37:da:da:36:bc:2f:89:3f:c3:b4:fb:8d:97:
a3:2c:91:b4:ff:a3:58:cc:c5:d3:32:f2:f7:e7:12:
f9:7e:ba:34:fb:3c:c5:84:7a:bb:64:eb:bb:81:98:
25:88:a6:a5:29:7a:cf:23:5e:bd:7f:a1:05:29:6e:
bd:c3:6e:a9:ac:c4:99:e4:f7:83:c3:73:68:4e:72:
83:a0:4b:6c:ff:d2:10:f5:ca:bc:db:31:28:6c:53:
71:8a:b7:e2:f6:42:1f:00:73:97:ab:fc:3d:6e:ed:
d4:6d:46:97:c9:e8:53:39:a7:8b:06:09:84:0d:64:
fe:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6A:AE:84:2E:37:47:BD:33:83:96:5F:82:80:B2:96:32:F7:8D:81
X509v3 Authority Key Identifier:
keyid:26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:2c:02:26:0e:c9:13:b5:89:82:00:da:4d:fc:a6:ce:7d:48:
54:b1:df:4f:51:1d:28:4b:ec:a3:d8:e7:80:b3:20:0f:4a:09:
40:fd:74:90:64:4e:50:be:c2:4f:ec:a7:cd:4f:75:6e:e9:ee:
23:c5:b6:26:2f:99:06:b6:08:ab:7c:02:c0:28:84:c8:1f:f2:
13:39:06:fb:e6:2d:9f:dd:77:ad:33:ea:23:2a:75:21:ba:f8:
4b:e1:ea:33:cb:b1:a5:23:16:b0:d4:1d:da:f4:d7:3b:46:ee:
bc:d5:ca:78:69:1d:50:55:e4:f9:a9:84:23:31:2e:7e:cb:12:
b3:30:75:a7:4c:8c:90:02:d7:5b:75:57:0d:e7:fb:0e:e4:a0:
7b:28:b5:b2:eb:14:e7:85:bb:f7:65:77:6b:2e:35:b4:52:95:
c3:d3:33:61:da:0d:2f:ad:54:99:2d:30:3a:2f:53:5d:65:5a:
b3:55:49:d2:ed:f4:d4:dd:b0:81:e3:56:1a:45:af:25:f3:ee:
87:5a:9f:ea:7b:ba:4a:c7:4a:80:f7:a0:05:00:76:00:e9:18:
05:cc:52:a8:c2:fb:a7:fb:c7:aa:43:ab:fd:e3:5e:58:aa:c0:
70:47:5e:3e:fe:2d:ee:f8:b2:c0:52:5b:4a:9c:68:6a:70:71:
a0:29:37:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 22:07:39 2025 by rpki-client