Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft
File: jQtYT2A1_loofFZ_HjhUuPvCoMI.mft (raw, json)
Hash identifier: joHOOxgD6b36RHEa8+CRggrrNcn+dC20IH9ItEOpSrM=
Subject key identifier: D9:05:37:47:E3:14:CE:3F:52:82:55:8E:21:83:FF:74:88:FD:4F:0F
Authority key identifier: 8D:0B:58:4F:60:35:FE:5A:28:7C:56:7F:1E:38:54:B8:FB:C2:A0:C2
Certificate issuer: /CN=8d0b584f6035fe5a287c567f1e3854b8fbc2a0c2
Certificate serial: 0199FC590F7F6974DB655F643FA7F1B67D88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jQtYT2A1_loofFZ_HjhUuPvCoMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 12:01:59 +0000
Manifest this update: Sun 19 Oct 2025 12:01:59 +0000
Manifest next update: Mon 20 Oct 2025 12:01:59 +0000
Files and hashes: 1: 4QNIL4c6Gz_sxHoIV5bmO3J-yRY.roa (hash: hUEgN9PKhux4KaNWV6X/MwNUuCaPOczFnXagh0lAR1c=)
2: jQtYT2A1_loofFZ_HjhUuPvCoMI.crl (hash: pSVHnbUz398sBHcAfmKEJthBxeKAoknMkChRhEzb8y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jQtYT2A1_loofFZ_HjhUuPvCoMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:0f:7f:69:74:db:65:5f:64:3f:a7:f1:b6:7d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d0b584f6035fe5a287c567f1e3854b8fbc2a0c2
Validity
Not Before: Oct 19 12:01:59 2025 GMT
Not After : Oct 20 12:01:59 2025 GMT
Subject: CN=d9053747e314ce3f5282558e2183ff7488fd4f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bf:a6:18:62:7a:87:08:5c:f6:ab:4e:6e:c6:
9e:be:b5:d5:02:e4:79:77:80:ed:d0:16:cb:db:be:
60:e8:5e:61:cb:b1:82:1c:ef:a1:34:2d:3a:32:64:
6d:2e:7a:1b:5e:42:2d:f3:f4:3c:dd:f5:39:39:93:
43:0d:b5:1d:b5:e3:bd:c9:ce:6d:8d:e6:b2:c3:5f:
a8:c0:dc:4c:69:95:bd:15:0b:5e:f9:db:a9:5a:63:
cf:6d:d1:5a:c5:40:3b:18:6b:d6:43:50:e9:b9:c0:
6c:25:b1:2d:78:96:c5:32:b4:9b:a4:44:9d:c9:96:
03:4b:1b:0f:50:89:e0:c3:a1:73:fd:a5:b4:08:d1:
fc:dd:d4:b9:31:48:b3:e3:1a:3b:9e:ee:20:3f:8a:
60:56:5c:6d:60:e7:6a:cc:3a:ba:ca:6f:90:b5:f7:
b8:02:d8:c0:89:08:86:be:73:8d:52:c9:f6:54:dd:
ef:cd:b7:41:4b:ad:40:df:31:42:d8:e6:39:f3:d0:
6f:92:c3:a3:96:1d:97:c1:66:86:aa:b9:27:7b:d1:
1b:f6:af:55:1c:65:a5:b9:eb:34:7f:06:2e:7b:ad:
5a:ad:56:51:88:7c:a2:20:4f:47:73:23:16:76:af:
f1:7c:7f:4d:83:9b:f4:fb:97:26:06:c3:ca:b3:a6:
c0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:05:37:47:E3:14:CE:3F:52:82:55:8E:21:83:FF:74:88:FD:4F:0F
X509v3 Authority Key Identifier:
keyid:8D:0B:58:4F:60:35:FE:5A:28:7C:56:7F:1E:38:54:B8:FB:C2:A0:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jQtYT2A1_loofFZ_HjhUuPvCoMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:61:3a:4b:76:84:79:fa:28:0b:e6:6b:64:59:45:42:ce:9c:
2c:a4:a5:d0:66:06:73:bb:01:87:90:e1:09:0a:31:30:8a:e0:
e1:90:f4:42:a8:55:a7:3f:53:8f:96:f0:2d:ef:0c:eb:a0:13:
3b:c9:6b:d3:6b:d0:c7:4b:9b:a7:91:fd:64:81:a0:f2:e9:69:
d2:0a:61:49:d6:3f:8c:a3:e8:81:cb:b7:8d:f6:f0:d4:d9:f7:
00:71:2b:89:2f:e8:3b:90:85:0b:32:9a:60:6c:a2:4d:20:53:
78:ab:c6:55:1f:bd:aa:8d:ec:dc:e7:19:fc:d4:be:19:b3:09:
81:9b:a6:54:16:77:39:49:0c:89:fb:fc:24:5a:48:49:7a:32:
36:2d:a5:73:eb:6e:ab:58:9a:f6:e4:49:61:a6:2c:38:07:5e:
79:0f:7e:6c:d2:0b:1d:43:82:51:7d:4d:46:a0:56:2c:1a:9b:
99:7e:c5:24:5c:70:bb:78:3b:1a:c5:a1:d8:29:5c:60:2b:09:
9c:94:e2:8f:1d:c8:21:f5:01:d0:4f:0e:6d:b5:5a:8c:aa:c0:
bc:49:2c:08:14:3e:b5:17:3f:d9:16:5a:fc:12:89:3d:71:88:
49:f3:1f:0d:fe:3e:1c:40:a6:11:41:61:e1:2d:c8:6f:e0:9b:
11:a3:0a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:58:24 2025 by rpki-client