Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
File: jq1F4xclfhcKIDDnmw9fdEBqeEI.mft (raw, json)
Hash identifier: tIZrkXprDjrU3tCQd2e4lWdEYleViYDyEmCLPfE0RrY=
Subject key identifier: B6:A9:BB:4A:76:AD:18:BD:20:78:EB:F8:59:82:6C:60:D1:E8:6D:42
Authority key identifier: 8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42
Certificate issuer: /CN=8ead45e317257e170a2030e79b0f5f74406a7842
Certificate serial: 0198C5DB6F840A62E0C744DD1AAB7946BAEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
Manifest number: 1226
Signing time: Wed 20 Aug 2025 05:02:29 +0000
Manifest this update: Wed 20 Aug 2025 05:02:29 +0000
Manifest next update: Thu 21 Aug 2025 05:02:29 +0000
Files and hashes: 1: U32_Sc22WvD7Fv16LTG7iyrHJKk.roa (hash: HDMDgZcXReJr66n8qO4cBkBwOaGGNGz+zcAfJfe/HW0=)
2: jq1F4xclfhcKIDDnmw9fdEBqeEI.crl (hash: 4YsOCHol4mTRizsA55Edt1t57YPVKbL83rs4nCTq4Ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 05:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c5:db:6f:84:0a:62:e0:c7:44:dd:1a:ab:79:46:ba:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ead45e317257e170a2030e79b0f5f74406a7842
Validity
Not Before: Aug 20 05:02:29 2025 GMT
Not After : Aug 21 05:02:29 2025 GMT
Subject: CN=b6a9bb4a76ad18bd2078ebf859826c60d1e86d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b0:f0:44:50:fd:c7:b9:1b:a7:77:76:b6:f8:
b0:a5:28:03:89:c7:6b:64:62:05:28:96:10:d5:8d:
95:dd:ab:e1:0d:e1:c7:83:dc:a9:8a:02:b1:d7:a7:
dc:1a:36:58:76:64:c4:ce:4f:fc:7b:6a:23:40:11:
8d:48:18:5c:e6:53:37:ce:46:b0:00:c6:a1:f2:ff:
6b:e2:23:7b:75:5a:f0:ca:c6:6d:e7:e2:f2:be:f5:
76:a3:9c:ff:bd:eb:bd:90:37:92:77:dd:4d:0d:c0:
72:05:c4:d5:de:3e:68:58:83:93:ff:d3:bc:bb:a2:
af:96:bc:a1:8e:84:be:ba:a2:88:8e:a7:19:f4:77:
76:fa:0e:8a:e8:3a:68:bc:bf:b2:7d:b4:5c:80:c3:
06:49:2c:26:68:e1:9b:ec:6d:a6:ea:23:c7:3a:57:
6a:41:f8:77:b4:e5:27:9e:cb:8c:12:1c:48:31:16:
52:e9:e8:be:e2:85:f1:c4:3b:90:e7:8d:8d:f3:7f:
15:a4:ac:61:f6:17:58:e9:8e:91:f9:d7:56:0c:87:
d4:df:a9:51:2b:63:28:56:b0:be:c9:e0:3d:37:ba:
b1:69:40:8f:0f:2c:63:a1:1a:71:35:b4:a8:23:b9:
bb:14:7a:74:66:60:60:9b:08:92:de:c6:9e:45:3a:
ab:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A9:BB:4A:76:AD:18:BD:20:78:EB:F8:59:82:6C:60:D1:E8:6D:42
X509v3 Authority Key Identifier:
keyid:8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:df:ae:5f:e4:66:04:41:bd:bf:56:c4:ad:29:cb:f9:9e:cd:
ff:96:7d:f8:f8:ab:09:38:3d:7f:ae:ff:9f:37:fd:2a:17:a3:
3b:fe:63:f4:67:ac:c0:4d:09:de:9c:65:e1:5d:52:a4:9b:9c:
da:e1:da:5a:b2:99:35:14:e7:8f:5f:ac:03:0a:ca:02:6a:33:
3b:82:3b:3f:e7:b4:5c:f7:d9:9f:a5:4a:0b:68:1c:fc:4b:9b:
4a:04:2a:af:f9:d5:26:bd:3a:2e:cb:9e:a7:34:ea:e3:95:b0:
28:e1:c7:18:d5:b9:eb:fd:21:5f:34:7e:1f:94:2a:53:ee:af:
9d:69:0a:72:56:25:da:5d:b3:8a:77:7a:14:fb:82:97:55:8c:
04:17:b2:8b:d3:fb:83:04:f8:7b:fc:6d:92:5d:61:d1:82:63:
e0:f4:bf:dc:2c:c2:79:08:09:7a:18:48:63:df:1e:4a:cd:e8:
f2:55:8f:63:a2:5c:60:ac:cd:97:fa:1e:ff:fa:c4:a9:ba:34:
98:43:3d:73:b3:b2:53:d8:41:bf:67:66:6e:2c:b5:9b:8e:70:
46:54:50:1b:48:16:54:7a:72:fc:d1:07:8a:86:19:f7:37:42:
8e:57:5c:94:da:a7:ea:35:2e:ff:59:06:ad:e0:86:c5:36:ad:
88:03:a3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:50:55 2025 by rpki-client