Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
File: jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft (raw, json)
Hash identifier: lFxgmFfyxH9tPTvkXnlhbWpx8z1l9xMv/PUcip2v6tk=
Subject key identifier: 24:D1:F8:97:B3:11:F8:34:A1:2C:EC:5D:DB:46:F3:C9:8C:A1:50:27
Authority key identifier: 8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
Certificate issuer: /CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Certificate serial: 019A2E8D7172C35014CA8661F42CF15224EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
Manifest number: 15FD
Signing time: Wed 29 Oct 2025 06:00:12 +0000
Manifest this update: Wed 29 Oct 2025 06:00:12 +0000
Manifest next update: Thu 30 Oct 2025 06:00:12 +0000
Files and hashes: 1: LEgJcT1HJwyV1gNb8G6Nv4QQcdA.roa (hash: MrTCL4S0d15bcXIlwlUs8e8j+hHw3EZvbQGkeB92Lzs=)
2: eiuuVdDHw7tCNh7-88E3raSuIfc.roa (hash: 3m5MOXmDNJezPlvUGc+JuyJPY6iXYjUfrVVj0/0iqB0=)
3: jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl (hash: p9H5w//83Of8XDrTueO0U8z5HYtXFC2IKuVCGIYPz3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:8d:71:72:c3:50:14:ca:86:61:f4:2c:f1:52:24:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Validity
Not Before: Oct 29 06:00:12 2025 GMT
Not After : Oct 30 06:00:12 2025 GMT
Subject: CN=24d1f897b311f834a12cec5ddb46f3c98ca15027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9c:17:b7:c1:df:44:55:a1:47:f5:00:67:ec:
ec:d0:93:bf:77:3d:ff:d2:20:1d:5f:fa:eb:82:29:
02:fc:e2:90:51:c2:e1:9d:1e:90:e1:cd:13:ed:1a:
5b:1a:3e:9a:5a:ff:77:df:2a:ab:00:6d:3f:81:9b:
c5:a0:cc:b0:3f:e3:cd:e9:4d:94:f8:8c:de:36:71:
28:c6:7a:f3:68:f2:b5:03:74:e7:ef:94:97:db:fa:
97:2f:8e:8b:bf:a0:71:d9:16:1a:2c:62:bf:af:3f:
46:66:5e:00:a1:da:93:d6:c3:46:84:f5:78:56:3f:
c6:d5:f3:aa:a9:5c:75:8a:f2:fc:47:6b:d1:25:c8:
b1:f2:7e:29:86:23:b8:22:f0:50:ce:3a:15:13:6f:
7e:c6:35:1f:26:23:66:7f:bd:c9:7b:9d:33:aa:c6:
1f:dc:18:9f:a5:39:78:44:81:fb:8d:23:6c:e9:c8:
0c:4c:ed:ac:43:ef:63:a1:18:6c:8b:a7:67:3d:d6:
99:77:40:57:28:51:7d:73:a4:89:6c:2a:63:f4:c4:
e9:1e:c6:bd:d7:bb:f8:35:5b:78:d2:ea:41:96:96:
7e:e7:4d:43:8a:dd:f4:13:d1:b4:a0:17:d8:68:38:
4f:9a:90:ee:9e:9a:d4:25:b3:91:cd:12:ce:0e:86:
af:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D1:F8:97:B3:11:F8:34:A1:2C:EC:5D:DB:46:F3:C9:8C:A1:50:27
X509v3 Authority Key Identifier:
keyid:8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:16:32:ee:09:bd:fa:b8:ed:51:fc:da:d3:13:98:30:f8:d9:
93:49:4d:87:0a:6a:cf:ee:b6:80:5a:86:8d:a6:63:db:60:a4:
40:f3:2b:6d:a9:e3:2f:63:93:22:2e:64:c9:e0:a7:5b:83:bc:
36:80:f5:1c:1e:ee:9e:ce:44:eb:75:8f:0d:fd:58:a9:7f:23:
10:e0:89:bf:b7:33:cd:f8:f6:28:ad:6c:de:3d:6b:31:81:8a:
b3:53:68:f3:0e:fd:2e:38:95:ed:fd:91:f3:09:c8:dc:a8:4f:
5d:72:70:e5:2f:8e:9a:dc:7f:68:82:2b:14:0c:bf:1a:1a:df:
74:c1:3b:24:b9:6b:5b:ee:99:ad:98:cf:d9:19:ae:16:c7:7e:
2c:4d:cf:19:16:51:50:60:ca:0d:14:de:48:16:53:e1:1f:03:
e8:03:f1:bf:bf:a1:9d:5c:9a:ca:72:73:1b:01:24:4d:80:4d:
aa:c9:58:7c:70:26:91:ed:a0:33:e1:a9:e5:03:fa:04:81:ec:
f6:d2:1d:84:78:34:4e:8c:01:26:6b:5b:4f:3e:80:99:ca:21:
e7:3e:b8:a7:f7:e4:9b:fe:06:f8:2e:a8:23:3a:68:f1:71:e1:
75:39:20:a9:55:a0:92:57:65:e1:95:37:e1:4a:ba:15:3e:f4:
76:58:15:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 09:11:00 2025 by rpki-client