Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
File: jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft (raw, json)
Hash identifier: wfRVs5Nf/Sxzr82cscDhPLLvg/Ivu1odYsOOslg96DI=
Subject key identifier: 36:52:3B:FA:92:A6:93:CF:6D:B6:49:C8:25:DD:8A:BD:66:C5:8C:E5
Authority key identifier: 8E:A1:75:86:1C:ED:0C:F7:0D:51:64:79:B3:FA:88:07:62:6A:C3:1F
Certificate issuer: /CN=8ea175861ced0cf70d516479b3fa8807626ac31f
Certificate serial: 019A72265EBCA5FBB0619D95A4544B72BF4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
Manifest number: 030A
Signing time: Tue 11 Nov 2025 09:01:48 +0000
Manifest this update: Tue 11 Nov 2025 09:01:48 +0000
Manifest next update: Wed 12 Nov 2025 09:01:48 +0000
Files and hashes: 1: jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl (hash: +aIS/Of0S8M0jycS6VDs4wvq7/sFuNjTUsW71lNU6Z4=)
2: rPcwuV8U2gs2nEIcbxeBJt0QVGU.roa (hash: uIRWM7da9ucOHpupG9xSr3AJa0DcVZ8DVpjTgYL4B3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:5e:bc:a5:fb:b0:61:9d:95:a4:54:4b:72:bf:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ea175861ced0cf70d516479b3fa8807626ac31f
Validity
Not Before: Nov 11 09:01:48 2025 GMT
Not After : Nov 12 09:01:48 2025 GMT
Subject: CN=36523bfa92a693cf6db649c825dd8abd66c58ce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bc:a3:67:0d:ac:51:ee:d7:37:60:d7:3e:bc:
e9:22:b4:c3:c1:83:ab:20:18:a9:6f:80:9b:30:77:
49:2d:aa:f8:a8:69:23:f1:d5:f3:28:1b:e6:78:42:
eb:74:74:d7:00:7b:9e:b9:f6:44:5f:17:c8:eb:c8:
9a:eb:b3:4e:ca:6a:8b:26:90:f6:0d:ec:86:f7:55:
61:d2:a0:67:3f:20:b3:db:0b:f4:6d:b1:c8:8d:3f:
c8:b6:3f:78:2a:28:1c:4b:a7:1e:b5:1e:2c:36:ea:
02:c1:9f:33:9b:b6:81:d3:8c:57:43:67:87:92:af:
19:bf:9d:4b:5f:5e:02:ee:7c:c0:30:4e:94:43:26:
31:97:f1:ce:a1:13:7d:81:e4:68:c4:bb:de:cf:a5:
f8:59:1f:50:7d:e6:2f:13:ca:c3:a7:dd:f5:bd:7b:
b3:e1:ac:20:4c:33:03:1d:2d:fc:e4:39:e5:81:0a:
c1:85:e0:2a:62:c3:33:62:30:bc:ab:72:d8:b7:5a:
a8:64:c9:71:15:97:b8:f0:2b:de:a9:e2:21:e7:3d:
a7:0a:04:58:d9:c3:1c:58:96:36:7a:b9:c9:91:f9:
77:df:28:96:c9:f8:c2:cc:31:95:0f:b9:1b:72:85:
e3:34:9f:96:59:2a:36:4c:54:b1:d6:7c:7d:c4:63:
d7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:52:3B:FA:92:A6:93:CF:6D:B6:49:C8:25:DD:8A:BD:66:C5:8C:E5
X509v3 Authority Key Identifier:
keyid:8E:A1:75:86:1C:ED:0C:F7:0D:51:64:79:B3:FA:88:07:62:6A:C3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:8c:b0:ae:73:d0:e6:5b:1c:d5:56:86:34:b4:f7:d4:a7:c9:
c1:19:3a:f2:32:8e:d4:35:ef:c7:f7:b7:cb:4f:49:d6:4f:5f:
2a:ad:c5:db:4f:09:ed:9a:a9:6c:14:e5:b0:87:51:aa:f9:cd:
fe:ec:4b:39:2b:0f:23:6e:f3:7b:14:b8:52:71:a7:23:9a:d8:
d8:26:5f:e0:d7:b0:ba:79:33:a2:43:f0:ac:b4:7d:ce:7a:b1:
54:e7:d9:4c:aa:a4:6d:4c:72:eb:73:90:a3:75:5a:48:97:a1:
68:ea:90:bb:05:f0:4d:bd:54:cc:ec:67:77:51:55:5f:f4:a2:
3f:c3:5b:52:86:5a:3c:f4:52:41:61:4c:93:9e:7e:86:c3:69:
99:65:64:e0:be:99:df:ee:85:0a:31:76:e8:19:7b:8f:0a:52:
92:c3:b2:ec:ab:88:c2:02:07:10:31:74:ed:91:c0:f8:8d:6e:
72:ba:1c:5a:03:21:77:dc:3e:5d:4d:b4:80:78:29:f9:b5:bd:
7f:19:35:e5:9e:5f:8d:b8:42:7d:86:b6:36:fb:d3:94:1c:2c:
1e:3d:6f:96:43:08:fe:2e:9b:94:97:4e:10:29:cf:0f:13:ef:
e3:58:38:d6:99:17:95:ff:73:8a:e9:7d:3f:67:8b:22:18:70:
ac:5a:b7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:04 2025 by rpki-client