Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
File: JqsqOMqsDOPKAf24f9-WNy6FmLY.mft (raw, json)
Hash identifier: sS0aiOtVfDAyzolpj5LPu15o4lSp3A5r9uDkvD1wvUE=
Subject key identifier: A4:77:01:A7:BB:CA:54:AA:0F:43:B7:CD:BF:D6:4D:62:40:77:1D:DD
Authority key identifier: 26:AB:2A:38:CA:AC:0C:E3:CA:01:FD:B8:7F:DF:96:37:2E:85:98:B6
Certificate issuer: /CN=26ab2a38caac0ce3ca01fdb87fdf96372e8598b6
Certificate serial: 01992330EA4A1E1101A689365FD04E07D19D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
Manifest number: 15C9
Signing time: Sun 07 Sep 2025 08:00:32 +0000
Manifest this update: Sun 07 Sep 2025 08:00:32 +0000
Manifest next update: Mon 08 Sep 2025 08:00:32 +0000
Files and hashes: 1: JqsqOMqsDOPKAf24f9-WNy6FmLY.crl (hash: J8fw3UcaNHdx3VFarbFGOePII06dTN6zRfQbnkysDH0=)
2: XNhLOVC-U9PPbLs6JsyzlnimIeQ.roa (hash: TD1akY3Fv3FxGktdYVS/WFPDKVHSuXmTFj0vHfZKIvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:ea:4a:1e:11:01:a6:89:36:5f:d0:4e:07:d1:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26ab2a38caac0ce3ca01fdb87fdf96372e8598b6
Validity
Not Before: Sep 7 08:00:32 2025 GMT
Not After : Sep 8 08:00:32 2025 GMT
Subject: CN=a47701a7bbca54aa0f43b7cdbfd64d6240771ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:30:da:b6:53:c2:0a:78:35:9f:67:25:2d:2c:
53:11:e1:dd:f6:8d:72:33:27:74:d6:78:f8:cf:fe:
79:51:8d:80:5c:3a:ff:c9:78:37:16:e8:fd:52:49:
58:aa:46:c9:c5:9f:5e:f2:06:7f:73:fe:ec:7d:a1:
48:27:7a:1c:cb:bc:2f:a3:94:fa:0a:f1:f0:d9:ad:
1a:22:e8:c0:be:ab:b9:02:8b:89:38:f0:d0:26:2b:
1c:78:3b:d7:12:5d:5a:66:95:ad:95:b2:75:85:d6:
2d:9c:c3:3f:8c:8a:83:49:03:81:29:9d:45:fe:af:
67:86:f1:3d:2e:6e:23:33:e2:15:49:5f:93:84:e4:
58:83:d3:93:60:71:f3:94:99:e4:ed:f8:fa:5e:07:
5c:57:43:1c:c2:6c:20:14:88:20:63:f1:b5:20:ab:
30:f8:d3:b3:49:39:8e:cd:db:83:cf:97:cb:a0:42:
3a:55:4e:f9:e3:40:52:bd:a7:47:9b:ad:36:06:18:
39:9a:44:86:5f:d5:c0:e1:76:f3:d4:83:d6:b4:14:
0b:0c:22:f8:a9:77:93:d5:c2:7c:f1:15:3e:1f:30:
ce:d5:49:5f:2f:f0:75:8e:90:00:0d:13:c7:ff:fc:
51:6e:77:8b:b2:94:36:73:ac:8d:df:16:3e:7d:c2:
fb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:77:01:A7:BB:CA:54:AA:0F:43:B7:CD:BF:D6:4D:62:40:77:1D:DD
X509v3 Authority Key Identifier:
keyid:26:AB:2A:38:CA:AC:0C:E3:CA:01:FD:B8:7F:DF:96:37:2E:85:98:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:c2:b0:a9:72:bc:99:6c:11:15:7e:52:05:9e:6f:33:64:24:
58:eb:00:9b:b8:b1:dc:30:42:5b:c4:dd:22:2c:87:71:20:00:
4a:57:2f:1f:13:61:f7:2d:ba:e3:96:95:ac:a5:3a:b8:9d:97:
f6:a2:b6:c6:51:72:c2:07:f9:fe:f0:5c:a3:82:33:08:f0:cc:
f1:f5:c4:5c:0d:b2:ab:17:c2:31:50:a5:b8:03:f6:c1:3f:d7:
94:2c:e7:b6:f6:17:46:68:9e:f1:e9:43:9a:bf:91:6f:99:be:
fc:ac:8b:1f:c8:55:bd:2c:02:2e:11:b5:7f:23:af:40:f4:74:
98:0a:28:0e:a0:3d:d8:15:d1:d2:ae:f5:44:b8:b4:d6:7f:5c:
c7:05:52:35:40:af:0d:7a:fb:e2:95:50:0c:0e:f6:64:00:11:
36:aa:c2:d2:73:92:a8:7a:4a:99:68:09:d1:3b:18:3e:c0:1e:
d4:f2:84:ab:c8:df:1c:6c:c3:d0:15:f9:f1:e3:d0:c0:34:ce:
3e:f1:01:98:b9:24:12:3c:72:06:65:76:0d:21:6a:3d:29:e8:
81:43:c7:79:b3:57:d3:51:99:4f:ee:18:8c:3b:8b:97:e5:74:
66:0b:f4:e3:3b:83:16:ae:02:ab:d4:57:9e:36:e9:c6:c7:f8:
5f:33:38:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:52:13 2025 by rpki-client