Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
File: JqsqOMqsDOPKAf24f9-WNy6FmLY.mft (raw, json)
Hash identifier: qXXr8QzFSl6zw1TWjewPwXigWPQllsxKl5LEzNL3zXA=
Subject key identifier: 65:DC:D3:79:97:7D:D6:37:8B:03:46:4C:F0:03:84:60:BF:41:74:CD
Authority key identifier: 26:AB:2A:38:CA:AC:0C:E3:CA:01:FD:B8:7F:DF:96:37:2E:85:98:B6
Certificate issuer: /CN=26ab2a38caac0ce3ca01fdb87fdf96372e8598b6
Certificate serial: 019A7149C70883CCC2EEBD20970CF6E76416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
Manifest number: 1676
Signing time: Tue 11 Nov 2025 05:00:51 +0000
Manifest this update: Tue 11 Nov 2025 05:00:51 +0000
Manifest next update: Wed 12 Nov 2025 05:00:51 +0000
Files and hashes: 1: JqsqOMqsDOPKAf24f9-WNy6FmLY.crl (hash: 0kB5SBGUwkBzdVSt7Gf3Bomz8NO4yqr+ZJdpgv55dL8=)
2: XNhLOVC-U9PPbLs6JsyzlnimIeQ.roa (hash: TD1akY3Fv3FxGktdYVS/WFPDKVHSuXmTFj0vHfZKIvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:c7:08:83:cc:c2:ee:bd:20:97:0c:f6:e7:64:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26ab2a38caac0ce3ca01fdb87fdf96372e8598b6
Validity
Not Before: Nov 11 05:00:51 2025 GMT
Not After : Nov 12 05:00:51 2025 GMT
Subject: CN=65dcd379977dd6378b03464cf0038460bf4174cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3d:e8:f6:02:da:92:4a:1a:54:b3:11:19:0e:
16:fe:68:46:66:b7:27:ef:ae:40:d7:f7:d6:6d:1f:
26:b1:9e:11:2e:99:28:a2:e2:09:4b:d6:ce:db:65:
3e:3e:c6:93:3f:9f:f8:74:de:77:3b:d9:dd:cc:ef:
26:cb:b8:0c:71:df:ab:64:0c:23:03:4c:ae:37:32:
81:74:fb:fa:b5:41:2b:d7:c8:1d:ce:b7:99:44:b0:
f4:bb:b2:0c:87:1a:7c:65:62:27:b2:25:9f:c0:be:
82:05:45:73:f3:64:bf:02:b5:f3:16:fa:24:5c:f1:
69:04:78:75:68:32:33:bf:2a:2b:c4:da:73:ea:9a:
4a:50:43:fe:c5:2d:6f:06:41:1b:92:60:92:ee:ca:
5e:8c:d0:26:cd:c7:e3:dc:1d:c6:7a:86:c7:93:c8:
7f:3f:79:9a:c3:b1:11:4f:7e:31:c6:76:0f:93:17:
ce:78:6a:cd:64:d1:af:2b:e0:f6:23:2f:f7:1f:50:
ae:d1:43:0f:cb:f4:39:af:97:b6:c7:0e:fb:23:69:
58:44:ab:c9:4d:d0:54:59:e6:42:8f:ea:03:7a:64:
7a:58:34:90:61:bf:a2:cc:24:d5:c4:fd:80:42:7c:
61:ff:54:35:a7:92:2a:f7:c4:b3:db:33:ce:64:37:
d8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DC:D3:79:97:7D:D6:37:8B:03:46:4C:F0:03:84:60:BF:41:74:CD
X509v3 Authority Key Identifier:
keyid:26:AB:2A:38:CA:AC:0C:E3:CA:01:FD:B8:7F:DF:96:37:2E:85:98:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:bc:20:1c:e0:b8:86:aa:d9:cb:79:20:ed:23:3a:5b:7b:a9:
09:5b:ba:4e:d9:03:f0:d1:26:f9:41:c1:22:e2:81:86:bb:d8:
e2:c3:dc:01:1d:ab:3c:1a:19:d4:f3:bc:cb:5b:e1:9a:b3:ef:
81:f8:7a:4c:49:6e:15:b4:7d:d2:49:0c:cb:51:e8:6a:86:05:
fd:77:92:65:de:10:d5:44:0a:2b:96:d0:38:16:b8:78:3a:a7:
ce:7f:92:b9:36:d3:c2:5d:93:ea:e1:f9:51:59:27:51:ca:e2:
73:a2:68:40:9a:af:3f:d3:98:eb:f4:a6:8b:07:71:98:f9:b1:
d1:e1:56:df:86:26:67:68:75:55:e7:34:08:4b:85:d1:fd:91:
55:a0:0d:ea:7e:1c:a8:c4:3f:a3:72:a9:98:5a:e8:81:39:df:
72:5e:91:92:24:d6:78:b6:a0:7e:32:bf:73:d3:ae:3b:09:53:
f4:dc:00:c1:1f:bb:0f:6d:25:1e:ea:a6:57:08:83:b1:11:f0:
cc:72:d8:55:fa:f5:3c:27:6f:c0:85:5d:b3:c6:db:84:fc:20:
61:fe:27:47:7a:4e:d7:b3:95:e5:e0:6d:98:5d:85:2a:03:69:
12:36:70:41:1c:d2:b4:c4:7c:9d:69:b9:c6:6c:b6:23:8b:10:
8d:f6:3f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:02 2025 by rpki-client