Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
File: jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft (raw, json)
Hash identifier: TK7r39zQYuKZ40+havyPumKAwNlOYJ4b+cwd0NN4CNI=
Subject key identifier: B1:E7:00:9B:D9:A4:5B:78:4E:0D:D2:5C:FA:C4:62:66:98:E2:2E:96
Authority key identifier: 8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
Certificate issuer: /CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Certificate serial: 01993380B53C6446D5E2EDB858541FF1D9FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
Manifest number: 157B
Signing time: Wed 10 Sep 2025 12:01:36 +0000
Manifest this update: Wed 10 Sep 2025 12:01:36 +0000
Manifest next update: Thu 11 Sep 2025 12:01:36 +0000
Files and hashes: 1: LEgJcT1HJwyV1gNb8G6Nv4QQcdA.roa (hash: MrTCL4S0d15bcXIlwlUs8e8j+hHw3EZvbQGkeB92Lzs=)
2: eiuuVdDHw7tCNh7-88E3raSuIfc.roa (hash: 3m5MOXmDNJezPlvUGc+JuyJPY6iXYjUfrVVj0/0iqB0=)
3: jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl (hash: J7mCHplA6eMNG78ZSwgWdahXSJKyOYXQTSKnV8/c63E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:80:b5:3c:64:46:d5:e2:ed:b8:58:54:1f:f1:d9:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Validity
Not Before: Sep 10 12:01:36 2025 GMT
Not After : Sep 11 12:01:36 2025 GMT
Subject: CN=b1e7009bd9a45b784e0dd25cfac4626698e22e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:76:ff:54:3d:c5:e9:a2:83:6b:d9:5d:71:9a:
98:5e:2c:96:b9:fd:29:ea:69:14:86:83:81:bf:c4:
7b:bd:4c:dd:b9:a3:da:c6:b0:60:2a:5a:3d:9d:16:
6c:95:80:16:ac:5c:7e:b6:98:20:82:63:15:ce:56:
54:8e:f7:90:f2:88:aa:9b:f1:96:7f:a9:b0:f1:99:
af:b9:13:69:63:ba:c0:23:20:36:55:8a:17:bb:e8:
f9:e2:6e:05:3a:de:f9:1d:88:9a:f5:c4:b6:91:a3:
8e:d0:fd:9c:06:50:b3:09:39:e2:fe:19:a6:05:33:
6b:80:c9:05:e7:4b:3b:6e:02:50:8a:9a:2e:59:b1:
a6:64:08:37:43:87:14:52:42:8b:c0:d4:5a:e7:ca:
59:a9:3d:b3:05:a1:54:3f:f6:cf:ba:49:37:81:1b:
cd:6d:00:44:09:5f:58:04:e7:db:fd:9c:77:fa:ef:
d4:87:0e:1f:a7:bb:1a:32:77:3b:4e:45:76:0a:c1:
48:4d:85:ed:40:5f:f6:ad:2e:dd:1c:a0:44:7e:74:
30:ec:b1:9e:d4:04:62:c4:fd:d2:61:ef:40:87:0a:
95:29:4c:21:16:1f:08:f3:9f:e2:5d:b3:be:4a:4e:
72:fc:fd:b3:96:92:c7:1d:32:26:30:d6:8c:0d:cb:
90:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E7:00:9B:D9:A4:5B:78:4E:0D:D2:5C:FA:C4:62:66:98:E2:2E:96
X509v3 Authority Key Identifier:
keyid:8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:57:39:17:fd:79:cb:f2:bd:1c:73:19:bf:bf:d2:0e:fe:6d:
16:c2:ef:50:2b:d1:24:60:e3:6d:83:bf:c7:17:b3:16:cf:3d:
3e:96:41:23:c1:bd:a1:a5:05:f8:56:d4:53:cb:1c:99:84:41:
78:f2:ca:d8:e9:96:b9:30:41:ab:ea:10:79:e6:79:91:13:c4:
1d:07:4f:2b:78:c6:95:37:3a:a7:a5:85:42:06:ba:ff:a6:af:
44:7c:43:1e:8e:01:3f:e0:fc:6a:d7:f6:65:ca:60:aa:dc:86:
bb:d2:ba:d1:fe:84:67:b5:32:fe:2f:38:54:3e:39:b6:d4:ad:
5c:00:a4:44:f5:c2:11:a5:36:c8:fb:19:c1:f6:1b:9b:7b:f7:
18:b0:6f:35:c3:ea:5c:bf:15:66:af:fd:45:0c:6f:fe:15:91:
e1:b3:b0:c3:b7:5c:4d:9a:fc:db:19:5c:c1:ae:63:06:32:ba:
19:17:44:ee:05:a1:83:9e:15:22:b3:d6:ef:83:04:ae:55:dd:
02:fb:80:37:83:8c:10:7d:b3:d7:6a:b8:00:d6:96:41:94:45:
c1:e8:06:7e:88:5f:1e:54:87:84:38:bf:28:93:7e:3d:38:4d:
05:ef:69:e0:33:77:46:17:5c:44:13:10:ea:c2:4c:48:86:ee:
05:4c:ff:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 17:13:59 2025 by rpki-client