Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
File: jqw2_1M-tvj4qmWSAiDPpHHlorE.mft (raw, json)
Hash identifier: bSXGKAmlKeiZzRhtTbxEPIPAp/CDZpVDJWrtjjYxjoo=
Subject key identifier: 19:D6:41:46:EE:DE:1F:D5:4C:38:26:AC:3F:19:58:60:C8:97:E8:6F
Authority key identifier: 8E:AC:36:FF:53:3E:B6:F8:F8:AA:65:92:02:20:CF:A4:71:E5:A2:B1
Certificate issuer: /CN=8eac36ff533eb6f8f8aa65920220cfa471e5a2b1
Certificate serial: 0197474283DFE72E03503DE5449780DCA6DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
Manifest number: 11D4
Signing time: Fri 06 Jun 2025 22:00:30 +0000
Manifest this update: Fri 06 Jun 2025 22:00:30 +0000
Manifest next update: Sat 07 Jun 2025 22:00:30 +0000
Files and hashes: 1: Lp4_8KBWJdha2Jzdhq102LYjczg.roa (hash: sRJMp6kjdQS4Uru55TcR1RrRtgv1vq1HoJumS3BQdg8=)
2: jqw2_1M-tvj4qmWSAiDPpHHlorE.crl (hash: 4WwHZaXYKgrxL0WTvPYNfoX1lFQ9eX/PObehhyPGJsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:83:df:e7:2e:03:50:3d:e5:44:97:80:dc:a6:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eac36ff533eb6f8f8aa65920220cfa471e5a2b1
Validity
Not Before: Jun 6 22:00:30 2025 GMT
Not After : Jun 7 22:00:30 2025 GMT
Subject: CN=19d64146eede1fd54c3826ac3f195860c897e86f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2e:86:d1:d7:35:da:ae:5d:ee:73:cf:90:5e:
14:ae:5e:08:09:56:82:ac:27:35:8d:6b:95:bb:4e:
a8:8e:cd:0f:0f:74:d0:6a:4d:e3:81:2a:48:31:cb:
9b:c6:4d:f5:70:76:26:78:ad:9c:4d:bf:8a:5b:fd:
fc:b2:eb:90:b7:1c:8f:0e:25:0e:05:63:36:31:ec:
f5:f3:db:1c:ad:19:d1:e2:b1:e5:9f:a4:72:73:90:
46:04:86:2d:83:8f:fd:4d:d4:5d:f8:78:55:a8:eb:
f9:20:87:ec:f8:80:b1:98:4c:df:50:86:73:5e:21:
75:2c:21:b8:c8:81:e1:18:74:91:c6:76:86:e8:1e:
48:38:ed:e4:98:9e:58:0e:ec:16:6f:a6:47:93:82:
ef:07:88:be:fe:c6:98:35:5e:16:15:65:02:73:34:
ef:e6:46:3d:f8:38:4c:bd:0c:02:ba:7d:87:d3:21:
2f:d7:b0:40:a9:c4:0d:89:3a:38:5c:95:e6:00:b3:
c6:eb:a4:fd:24:8a:14:f7:7c:75:8d:06:ca:0c:44:
ba:c6:3f:1b:fa:66:01:3a:48:e2:64:2d:9d:e0:9a:
ba:7b:53:0f:d8:ba:a6:47:4e:c4:de:4a:21:2e:b6:
62:63:e7:1c:b0:39:de:52:a0:61:46:12:81:9f:0e:
34:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D6:41:46:EE:DE:1F:D5:4C:38:26:AC:3F:19:58:60:C8:97:E8:6F
X509v3 Authority Key Identifier:
keyid:8E:AC:36:FF:53:3E:B6:F8:F8:AA:65:92:02:20:CF:A4:71:E5:A2:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:e4:ab:bd:0a:5b:0d:1d:14:91:69:99:ff:9a:0a:ce:85:23:
26:6b:52:7b:e9:e6:4d:85:5f:b5:4d:1c:49:95:aa:8c:c7:fa:
ce:5d:6d:65:24:4a:93:dc:da:82:00:56:67:b8:d0:ca:29:25:
ec:37:2f:d2:44:69:5c:78:a7:bd:80:75:ff:fc:9c:8a:95:f1:
37:a0:94:c7:5f:fc:68:ed:de:d1:33:00:26:3c:e6:1b:9e:a6:
7b:99:b5:13:8b:0a:52:dc:54:75:03:f9:96:a5:99:6b:b7:cd:
59:2c:77:78:40:2f:36:41:d3:eb:61:bb:48:65:fc:0c:fe:38:
32:46:d8:b2:29:a8:ae:22:66:2e:a4:45:16:8e:08:6f:f5:8d:
29:18:b1:80:eb:a1:76:28:4e:12:94:e7:13:2b:51:43:e7:6e:
8e:b5:06:8b:ce:51:ee:72:f5:8f:e7:b5:b0:11:e9:b5:40:f8:
9b:31:4c:83:4c:46:f4:de:b9:c6:f8:69:26:70:90:52:98:9a:
0b:df:83:f1:ff:3e:54:3b:0f:56:16:6f:25:71:45:0f:1f:f0:
90:59:47:c3:21:8c:94:57:ff:f1:43:65:64:33:c3:50:53:0f:
8c:7c:39:75:c8:e3:59:2e:74:eb:5a:07:4c:ab:6d:b2:39:3a:
4e:01:92:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:56:54 2025 by rpki-client