Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
File: jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft (raw, json)
Hash identifier: cXNsxzzWG2mTWsVVr+kcD6HT5sAW+z44xWLovdqLMD0=
Subject key identifier: D3:4C:F3:DF:7A:78:95:05:B8:F8:8C:CE:7E:CD:4E:76:87:E4:0A:DD
Authority key identifier: 8E:A1:75:86:1C:ED:0C:F7:0D:51:64:79:B3:FA:88:07:62:6A:C3:1F
Certificate issuer: /CN=8ea175861ced0cf70d516479b3fa8807626ac31f
Certificate serial: 019748F9CEEDFD7D8980052760152F24789D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
Manifest number: 0167
Signing time: Sat 07 Jun 2025 06:00:20 +0000
Manifest this update: Sat 07 Jun 2025 06:00:20 +0000
Manifest next update: Sun 08 Jun 2025 06:00:20 +0000
Files and hashes: 1: jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl (hash: IVUwqem5vwugLD8nOwu2dpwyjsnLVHStDr8/M1vMAN8=)
2: rPcwuV8U2gs2nEIcbxeBJt0QVGU.roa (hash: uIRWM7da9ucOHpupG9xSr3AJa0DcVZ8DVpjTgYL4B3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:ce:ed:fd:7d:89:80:05:27:60:15:2f:24:78:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ea175861ced0cf70d516479b3fa8807626ac31f
Validity
Not Before: Jun 7 06:00:20 2025 GMT
Not After : Jun 8 06:00:20 2025 GMT
Subject: CN=d34cf3df7a789505b8f88cce7ecd4e7687e40add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c2:a3:d1:c0:9f:ea:f0:7d:57:b9:1e:ce:95:
42:c9:5a:85:49:b6:bc:d4:21:7e:da:fa:a8:f7:78:
49:67:bb:a6:85:5b:bd:d3:f1:b0:c2:a8:15:f2:e8:
31:fd:b8:88:bc:46:0b:08:9a:65:4a:3e:99:3a:af:
21:54:75:50:1a:69:ab:49:b3:d5:a6:c9:89:46:e9:
f1:bc:76:1d:90:18:30:9d:82:d8:24:5e:bd:40:0d:
e4:1a:b4:b6:ac:1f:2d:38:50:87:87:9e:cf:a9:6b:
6a:70:91:55:da:b0:b6:e5:0f:02:de:40:12:79:ae:
15:06:2c:51:e6:c0:c0:a0:c2:dc:67:11:76:14:81:
79:43:77:66:4f:08:37:27:bc:42:59:8b:e4:7d:ab:
3f:20:a3:16:af:bc:94:1e:a5:7b:18:36:c1:a1:eb:
ac:10:47:65:3f:73:e2:e7:29:af:08:c6:f5:60:3e:
92:7a:5f:f8:ad:cc:af:05:00:dc:9c:d8:2a:2f:e6:
9b:52:61:39:46:01:c5:14:e2:a1:b4:33:55:84:d6:
50:05:ad:a9:f1:cf:db:9a:ed:5f:dc:82:6e:c3:d7:
3b:06:ba:4b:5c:67:6e:4b:61:66:08:90:57:7c:24:
31:2a:07:b8:41:74:b5:b7:5b:bb:a1:b0:01:54:1d:
8e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4C:F3:DF:7A:78:95:05:B8:F8:8C:CE:7E:CD:4E:76:87:E4:0A:DD
X509v3 Authority Key Identifier:
keyid:8E:A1:75:86:1C:ED:0C:F7:0D:51:64:79:B3:FA:88:07:62:6A:C3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:b1:00:ff:d5:70:19:d3:a3:ba:da:d7:f8:2a:59:d0:f9:44:
9c:aa:2e:ce:95:55:bf:52:3c:7d:42:3b:3a:ea:16:88:b5:1f:
14:9f:6f:b9:08:f0:dd:ae:43:3a:e4:9c:47:fc:da:73:4f:9b:
7c:a2:a7:a7:0d:7f:0d:a5:3e:fe:aa:d5:da:75:47:94:94:10:
4c:bc:8c:2e:2a:04:4e:1a:17:c9:01:7f:52:dc:07:16:ae:a7:
d5:db:b8:53:3f:4c:9c:48:9d:6c:59:32:b6:96:b0:6a:57:98:
b5:8f:c8:c9:e4:20:53:8c:f2:40:f7:58:11:81:91:5b:c4:a9:
13:3a:af:d8:b4:5c:64:97:9f:09:07:8c:cf:a1:75:1c:da:f6:
bf:d2:74:62:36:85:a4:fa:8b:09:ed:28:6d:61:99:c8:c0:10:
c8:4a:a7:2f:c1:c3:3e:dc:51:85:ec:e4:d2:1e:ab:c5:38:7c:
32:4a:3b:d1:aa:43:d8:03:8c:7e:77:86:e4:64:ef:a2:82:e3:
49:36:08:9c:b5:b2:ee:3c:ec:63:6d:47:d7:30:f0:49:53:07:
b4:04:dc:4f:a6:9a:3f:5f:4d:62:a5:c2:9b:ef:d8:02:07:e0:
e6:45:8c:57:25:3f:74:23:71:83:9d:ac:a7:bd:08:a8:6f:2f:
68:aa:42:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:33:38 2025 by rpki-client