Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
File: jqw2_1M-tvj4qmWSAiDPpHHlorE.mft (raw, json)
Hash identifier: pLgEAmJUE3k7Ny8RVC/S4o+lKNyNcS4ckcwtm+mu9/k=
Subject key identifier: 8C:4B:5D:D1:E1:89:27:B0:61:74:C3:49:78:92:E2:16:76:26:32:39
Authority key identifier: 8E:AC:36:FF:53:3E:B6:F8:F8:AA:65:92:02:20:CF:A4:71:E5:A2:B1
Certificate issuer: /CN=8eac36ff533eb6f8f8aa65920220cfa471e5a2b1
Certificate serial: 019A725C979679716177130C476F443B3622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
Manifest number: 1378
Signing time: Tue 11 Nov 2025 10:01:01 +0000
Manifest this update: Tue 11 Nov 2025 10:01:01 +0000
Manifest next update: Wed 12 Nov 2025 10:01:01 +0000
Files and hashes: 1: Lp4_8KBWJdha2Jzdhq102LYjczg.roa (hash: sRJMp6kjdQS4Uru55TcR1RrRtgv1vq1HoJumS3BQdg8=)
2: jqw2_1M-tvj4qmWSAiDPpHHlorE.crl (hash: HsfnBpAg/WapVA9/7W3WGOVotNvR5I1q/Gh4tAUdWps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:97:96:79:71:61:77:13:0c:47:6f:44:3b:36:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eac36ff533eb6f8f8aa65920220cfa471e5a2b1
Validity
Not Before: Nov 11 10:01:01 2025 GMT
Not After : Nov 12 10:01:01 2025 GMT
Subject: CN=8c4b5dd1e18927b06174c3497892e21676263239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:11:e6:15:9f:0c:d1:0e:48:09:2b:94:5a:13:
18:c3:b2:c3:5b:62:6c:a6:59:35:79:90:69:1c:1d:
17:9e:8c:9c:16:35:78:43:f3:a8:62:83:6d:32:f8:
2b:9d:ff:6e:5c:6a:a3:be:c2:f1:fb:27:5a:cd:40:
54:7c:04:77:0d:2e:1e:7a:ee:b4:d5:99:f3:92:00:
d1:50:d9:e5:e9:6f:60:3d:b3:87:96:3a:68:03:e1:
14:20:40:0e:35:20:b8:48:b0:72:52:7d:dd:68:d7:
7a:cd:2b:2e:ef:f1:90:f4:88:42:d2:fb:a1:fa:66:
40:7c:6f:3f:ff:84:23:18:6b:d6:18:8b:3a:bc:e8:
90:9d:2f:13:ae:60:fe:c0:02:d9:cb:35:3c:09:71:
e1:5e:00:6d:8a:c8:9f:d1:1e:4c:05:de:ff:60:1d:
dc:4b:49:f8:97:3b:f3:0f:39:8b:76:ff:c1:59:b3:
96:a6:f3:89:0e:ea:7e:26:42:4e:68:35:b0:b8:a1:
a6:33:e7:cb:78:69:56:28:85:50:48:f2:b8:17:c7:
72:7c:0b:ef:76:f7:aa:b7:6a:7c:00:03:be:f3:4f:
e4:ce:a5:27:5c:9d:70:99:15:90:f0:6b:9d:19:fb:
49:66:00:b5:c5:1a:ae:d6:9e:ca:5f:ce:69:23:50:
df:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:4B:5D:D1:E1:89:27:B0:61:74:C3:49:78:92:E2:16:76:26:32:39
X509v3 Authority Key Identifier:
keyid:8E:AC:36:FF:53:3E:B6:F8:F8:AA:65:92:02:20:CF:A4:71:E5:A2:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:0f:17:3d:f3:c0:b4:cf:5a:fa:3d:b0:4d:e8:8c:2f:93:7a:
c9:22:7b:bb:98:bb:44:47:e7:d5:60:f0:49:75:a5:80:5c:90:
4d:20:d9:4e:de:89:36:ea:bc:70:0b:71:94:aa:12:de:a7:4b:
85:a1:0d:32:ea:42:8c:76:b3:c5:7c:58:7d:ff:f9:28:d0:b8:
a9:8b:e1:19:36:26:a8:82:c5:26:4b:47:c5:2c:0d:1c:c2:ec:
ea:bd:a1:2d:ae:7d:66:73:f8:de:97:31:d1:07:f5:42:4f:21:
d8:10:5f:45:1f:0c:40:37:7e:05:00:09:64:50:64:5a:38:72:
ed:d7:a9:ee:4c:7b:ea:9b:99:4c:b1:a3:ba:12:73:c7:de:d9:
9b:e0:48:32:60:64:09:b9:fa:75:ae:ec:7b:e9:de:69:89:68:
23:0d:8a:66:92:1f:53:a8:f5:b2:21:da:c8:12:8f:d3:58:51:
6d:72:af:aa:fa:cd:cb:e8:e9:37:4a:6c:1d:5d:66:ce:4b:46:
cb:c0:7d:d9:b8:c6:0b:9a:ad:45:f3:93:32:3a:84:fc:52:69:
87:b7:6c:97:12:45:25:2a:a1:0b:f3:c1:ef:d3:2a:04:e6:44:
2f:46:22:1a:fa:8e:8e:9c:71:5e:b0:f9:d7:bd:5d:6b:3c:74:
4a:7d:26:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:49 2025 by rpki-client