Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.mft
File: jqzH87IYxJLYjb68nNy5otLTDtE.mft (raw, json)
Hash identifier: U5NmBLajE4pPlgEF5LT0BycZkz5IdgHwvHaiTznQmxU=
Subject key identifier: E6:4C:6A:7B:C6:36:9E:D3:88:F3:AE:09:9C:46:67:43:58:B1:FB:5E
Authority key identifier: 8E:AC:C7:F3:B2:18:C4:92:D8:8D:BE:BC:9C:DC:B9:A2:D2:D3:0E:D1
Certificate issuer: /CN=8eacc7f3b218c492d88dbebc9cdcb9a2d2d30ed1
Certificate serial: 0198D660921E231F49F8B6075355298D5D8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqzH87IYxJLYjb68nNy5otLTDtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 10:01:49 +0000
Manifest this update: Sat 23 Aug 2025 10:01:49 +0000
Manifest next update: Sun 24 Aug 2025 10:01:49 +0000
Files and hashes: 1: G4xGjeiK9NbX0jXJY8uDkRmJuDc.roa (hash: muHuLGPiPatokQGw15YR2MNayDycTrh2aeAcpqtHkYI=)
2: _bjBL5LK2WVAfL5nxIuCTdAEYdU.roa (hash: hu7dwrJP9WhWK3glmNV0xBWx3TcYlk14ctZGu4bZyLs=)
3: jqzH87IYxJLYjb68nNy5otLTDtE.crl (hash: 9/wTIOYdjZAPnMaVnwKFPMxNUHts+wOa6A4ipbmMnQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqzH87IYxJLYjb68nNy5otLTDtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:92:1e:23:1f:49:f8:b6:07:53:55:29:8d:5d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eacc7f3b218c492d88dbebc9cdcb9a2d2d30ed1
Validity
Not Before: Aug 23 10:01:49 2025 GMT
Not After : Aug 24 10:01:49 2025 GMT
Subject: CN=e64c6a7bc6369ed388f3ae099c46674358b1fb5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:de:65:b4:7b:e5:1e:7c:d0:87:f9:6c:f8:6a:
51:9e:cc:47:1b:88:57:dd:c2:fc:26:3d:b6:20:46:
eb:b3:65:fc:98:bc:da:3c:ed:2b:0b:b5:2b:dc:05:
b3:2c:b4:15:e1:b5:d6:0a:1b:c9:9a:bd:6f:d1:f1:
8e:31:b4:65:3e:b0:bd:8a:22:03:97:a2:64:2a:c2:
a8:5f:8a:c1:ca:fa:8a:4f:bd:0a:43:09:b1:bd:96:
3e:4d:8f:31:c6:58:0b:c3:a5:1a:4c:52:19:aa:8b:
8d:03:cc:d0:f2:06:e0:cc:51:f1:c3:55:42:e2:57:
e6:65:da:62:c1:f7:ab:97:a9:8b:34:50:43:95:25:
bb:c2:85:1b:b7:38:29:75:b6:d5:af:33:e5:7b:fc:
a9:91:98:c5:35:13:78:5c:01:6b:b4:05:da:8f:fe:
b4:fc:7f:a7:d1:17:5a:61:44:64:f3:de:5f:96:cb:
f8:99:87:e1:a5:09:29:85:76:8a:d8:53:6f:1e:17:
6d:cf:e7:8f:02:b3:63:12:40:25:ff:e2:3d:da:bf:
3e:5e:d4:8e:c0:70:4d:f2:f1:09:19:d3:32:a5:17:
54:67:ca:06:e2:9c:da:b9:ca:14:46:ea:ec:31:09:
0a:e2:25:a5:e0:0d:44:5c:88:66:e4:4e:d3:db:29:
03:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4C:6A:7B:C6:36:9E:D3:88:F3:AE:09:9C:46:67:43:58:B1:FB:5E
X509v3 Authority Key Identifier:
keyid:8E:AC:C7:F3:B2:18:C4:92:D8:8D:BE:BC:9C:DC:B9:A2:D2:D3:0E:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqzH87IYxJLYjb68nNy5otLTDtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/bd42ea-ebb6-4445-bd20-775da6aa3123/1/jqzH87IYxJLYjb68nNy5otLTDtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:5f:c4:a5:98:53:1e:62:e0:ba:da:29:6a:4a:15:9f:57:47:
68:e3:50:6b:95:d2:1a:de:f9:4a:bb:58:a3:a4:0c:cb:02:52:
4b:b0:78:9c:91:32:91:08:e0:8b:fd:54:9c:f8:8b:a9:52:95:
9d:ef:7e:8c:aa:81:65:16:7d:b5:74:a7:db:fe:53:1b:e0:2e:
9d:68:4a:58:90:75:e8:6a:73:0a:05:f1:58:a9:7e:46:d5:2c:
07:09:a5:bb:70:52:02:e6:46:ce:32:4b:e0:bb:b0:40:a2:d0:
c7:31:21:bb:e2:9d:b5:2e:4e:93:1a:67:5b:ae:f2:ee:80:4a:
48:4a:1b:c7:53:f2:fa:71:aa:20:8e:6f:b3:81:d1:46:58:30:
be:48:1c:e2:5e:fd:61:df:7e:01:38:e2:de:9c:20:c6:ef:ff:
8a:1e:dd:f8:d1:ae:ea:4f:e5:2e:e4:43:89:21:46:32:2a:7c:
c1:35:1f:18:41:ed:67:9d:a2:5a:de:95:b6:f1:83:2a:78:cc:
1a:b8:24:99:7f:ea:6a:d0:8c:52:51:97:82:28:1b:b4:b4:ce:
9d:09:72:48:07:2a:cc:b8:7d:ad:42:a6:0c:56:83:5b:c0:9e:
68:dd:de:36:1d:05:2a:34:96:73:b2:c8:ef:64:91:4c:f9:59:
69:16:7b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:32:50 2025 by rpki-client