Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
File: jqw2_1M-tvj4qmWSAiDPpHHlorE.mft (raw, json)
Hash identifier: y0p0ikguoHtcyGDqyuSqCPN/nmv96LtZrCWliOtyqUs=
Subject key identifier: 99:EF:40:D6:EA:36:98:56:6F:A9:54:5A:B4:B8:D2:39:8B:CA:52:2C
Authority key identifier: 8E:AC:36:FF:53:3E:B6:F8:F8:AA:65:92:02:20:CF:A4:71:E5:A2:B1
Certificate issuer: /CN=8eac36ff533eb6f8f8aa65920220cfa471e5a2b1
Certificate serial: 019922554C8A1D762C15B94C694F6A6BE3BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
Manifest number: 12CA
Signing time: Sun 07 Sep 2025 04:00:39 +0000
Manifest this update: Sun 07 Sep 2025 04:00:39 +0000
Manifest next update: Mon 08 Sep 2025 04:00:39 +0000
Files and hashes: 1: Lp4_8KBWJdha2Jzdhq102LYjczg.roa (hash: sRJMp6kjdQS4Uru55TcR1RrRtgv1vq1HoJumS3BQdg8=)
2: jqw2_1M-tvj4qmWSAiDPpHHlorE.crl (hash: AVrA0Eya9NBy1nE4tt5QbL3bM6NwMZY2rdK3qm1Om+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:4c:8a:1d:76:2c:15:b9:4c:69:4f:6a:6b:e3:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eac36ff533eb6f8f8aa65920220cfa471e5a2b1
Validity
Not Before: Sep 7 04:00:39 2025 GMT
Not After : Sep 8 04:00:39 2025 GMT
Subject: CN=99ef40d6ea3698566fa9545ab4b8d2398bca522c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c9:fa:0d:fc:eb:8e:eb:c5:1d:91:fd:fb:d6:
4b:fa:c0:dc:86:47:c4:cf:10:b0:c6:0f:f1:49:1a:
5e:5d:c4:57:34:80:7d:1f:fe:e6:0b:3b:3f:01:d6:
11:42:82:0a:16:c7:ae:06:c3:df:51:e1:98:08:57:
1d:0d:d1:74:e6:ba:60:86:a9:58:cc:29:dc:bd:63:
4e:98:de:eb:40:c1:6c:97:bd:d9:bd:9d:49:b6:41:
af:2b:a5:e0:c5:86:eb:20:8f:74:30:97:c2:21:8b:
62:f2:98:26:23:82:5a:2a:62:9f:87:83:71:67:87:
54:8b:51:d2:10:f3:45:a3:96:d4:10:60:ae:6f:59:
2c:09:97:ed:9a:f9:df:4d:a1:00:e2:78:79:26:f0:
42:db:03:f2:ad:cc:34:6d:81:32:0f:80:c4:23:b7:
5a:68:16:ba:fd:14:af:65:65:e5:a5:81:33:d0:ed:
f7:62:f6:5f:ca:4a:d2:4b:7a:e0:91:7e:fd:07:77:
b8:62:91:79:59:da:c1:7b:94:5c:34:61:b7:62:e8:
0e:e7:b6:b1:08:29:31:63:4a:d5:aa:1c:02:f2:a6:
eb:1d:6d:f6:51:61:41:0b:65:52:38:0d:81:68:d2:
53:d9:aa:90:a5:c6:c2:30:d1:a5:90:f2:f9:74:95:
be:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:EF:40:D6:EA:36:98:56:6F:A9:54:5A:B4:B8:D2:39:8B:CA:52:2C
X509v3 Authority Key Identifier:
keyid:8E:AC:36:FF:53:3E:B6:F8:F8:AA:65:92:02:20:CF:A4:71:E5:A2:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:99:73:6a:d4:68:d2:85:59:10:d8:79:0e:d4:1e:65:59:48:
82:cf:7e:48:23:66:f8:f7:62:7b:c1:bd:50:e6:41:38:5c:00:
f0:57:27:d5:83:bd:57:53:76:0d:ec:42:54:e7:fd:7f:46:0b:
6c:85:87:96:65:e2:5b:5e:45:6d:fe:e6:bb:66:c4:ac:c1:61:
46:cc:9b:0f:79:c1:24:9e:11:1a:6c:98:7c:f1:ea:56:d9:41:
49:76:c3:1a:f8:f9:a3:a4:ec:d5:a5:b2:c9:9e:d0:de:b2:d4:
fa:18:c7:ff:85:9a:e6:ce:4e:e9:6a:b9:6e:2f:de:2a:09:9d:
2d:b2:e3:e8:49:c0:9e:fb:9b:b0:99:e7:cb:6a:28:3c:49:79:
2a:a5:fe:02:87:d4:99:82:10:6d:76:86:79:f9:5f:92:53:a6:
d2:b0:73:67:e7:66:5b:ea:60:57:b1:2c:40:90:2f:69:7d:cd:
2f:77:e2:73:0b:b9:12:d7:a9:85:1b:5c:0b:2a:eb:80:a5:72:
1c:4d:bd:1b:5e:03:c5:e8:eb:1a:bb:35:bd:14:de:35:bf:f3:
c4:ff:56:46:70:45:5e:d8:40:01:57:b2:ba:31:31:32:92:4a:
60:74:5b:91:68:4b:ae:72:26:cb:e2:8c:1a:91:66:26:24:1a:
95:ef:27:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiVUyKHXYsFblMaU9qa+O9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYWMzNmZmNTMzZWI2ZjhmOGFhNjU5MjAyMjBjZmE0NzFl
NWEyYjEwHhcNMjUwOTA3MDQwMDM5WhcNMjUwOTA4MDQwMDM5WjAzMTEwLwYDVQQD
Eyg5OWVmNDBkNmVhMzY5ODU2NmZhOTU0NWFiNGI4ZDIzOThiY2E1MjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sn6DfzrjuvFHZH9+9ZL+sDchkfE
zxCwxg/xSRpeXcRXNIB9H/7mCzs/AdYRQoIKFseuBsPfUeGYCFcdDdF05rpghqlY
zCncvWNOmN7rQMFsl73ZvZ1JtkGvK6XgxYbrII90MJfCIYti8pgmI4JaKmKfh4Nx
Z4dUi1HSEPNFo5bUEGCub1ksCZftmvnfTaEA4nh5JvBC2wPyrcw0bYEyD4DEI7da
aBa6/RSvZWXlpYEz0O33YvZfykrSS3rgkX79B3e4YpF5WdrBe5RcNGG3YugO57ax
CCkxY0rVqhwC8qbrHW32UWFBC2VSOA2BaNJT2aqQpcbCMNGlkPL5dJW+/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJnvQNbqNphWb6lUWrS40jmLylIsMB8GA1UdIwQY
MBaAFI6sNv9TPrb4+KplkgIgz6Rx5aKxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanF3Ml8xTS10dmo0cW1XU0FpRFBwSEhsb3JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82MWExNDAtMTEwZS00MTk3LThkYTUt
NTZiYTE5OGQxN2YwLzEvanF3Ml8xTS10dmo0cW1XU0FpRFBwSEhsb3JFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS82MWExNDAtMTEwZS00MTk3LThkYTUtNTZiYTE5OGQxN2Yw
LzEvanF3Ml8xTS10dmo0cW1XU0FpRFBwSEhsb3JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR5lzatRo
0oVZENh5DtQeZVlIgs9+SCNm+Pdie8G9UOZBOFwA8Fcn1YO9V1N2DexCVOf9f0YL
bIWHlmXiW15Fbf7mu2bErMFhRsybD3nBJJ4RGmyYfPHqVtlBSXbDGvj5o6Ts1aWy
yZ7Q3rLU+hjH/4Wa5s5O6Wq5bi/eKgmdLbLj6EnAnvubsJnny2ooPEl5KqX+AofU
mYIQbXaGeflfklOm0rBzZ+dmW+pgV7EsQJAvaX3NL3ficwu5EtephRtcCyrrgKVy
HE29G14DxejrGrs1vRTeNb/zxP9WRnBFXthAAVeyujExMpJKYHRbkWhLrnImy+KM
GpFmJiQale8nMA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:41 2025 by rpki-client