Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft
File: jQtYT2A1_loofFZ_HjhUuPvCoMI.mft (raw, json)
Hash identifier: dJjtYW4oMQNDzv7DMaBeKpjtmUQBPrdrpeSPCDNWsqo=
Subject key identifier: 9B:5D:18:C8:EB:8B:B4:AD:4D:18:6D:31:03:3B:BA:31:78:48:3C:99
Authority key identifier: 8D:0B:58:4F:60:35:FE:5A:28:7C:56:7F:1E:38:54:B8:FB:C2:A0:C2
Certificate issuer: /CN=8d0b584f6035fe5a287c567f1e3854b8fbc2a0c2
Certificate serial: 0198D6CDA14C0E4885BDE634B5F75A826DB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jQtYT2A1_loofFZ_HjhUuPvCoMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 12:00:56 +0000
Manifest this update: Sat 23 Aug 2025 12:00:56 +0000
Manifest next update: Sun 24 Aug 2025 12:00:56 +0000
Files and hashes: 1: 4QNIL4c6Gz_sxHoIV5bmO3J-yRY.roa (hash: hUEgN9PKhux4KaNWV6X/MwNUuCaPOczFnXagh0lAR1c=)
2: jQtYT2A1_loofFZ_HjhUuPvCoMI.crl (hash: KJcgmX+qt1WTq7ddrHRd2w7zKa0oiVUeeEp9XG0kE+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jQtYT2A1_loofFZ_HjhUuPvCoMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:a1:4c:0e:48:85:bd:e6:34:b5:f7:5a:82:6d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d0b584f6035fe5a287c567f1e3854b8fbc2a0c2
Validity
Not Before: Aug 23 12:00:56 2025 GMT
Not After : Aug 24 12:00:56 2025 GMT
Subject: CN=9b5d18c8eb8bb4ad4d186d31033bba3178483c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:58:e8:9e:0f:84:6f:1b:b4:47:3a:34:13:a3:
32:d6:8c:d0:38:0b:2c:01:aa:e6:50:00:bd:6f:5f:
89:7d:31:d1:16:52:a1:77:ec:72:7f:55:fc:3a:08:
c3:6a:0a:04:46:47:ba:8b:5b:ba:af:fe:de:6b:06:
d6:d1:18:3b:2f:ec:c7:9d:7c:32:e9:f5:6c:ce:b8:
4f:f4:bb:42:d0:d2:93:81:15:b1:da:bd:72:bb:f9:
c1:1d:55:24:42:76:7b:13:9b:0d:e4:19:ee:b5:a3:
4f:96:e2:e0:15:ff:74:cb:43:8e:f6:2a:f4:31:e0:
75:b4:a9:6e:f2:32:24:45:3a:80:ad:fa:f0:12:20:
a8:e5:8b:f8:6a:1d:9b:16:b4:ee:5d:6d:16:3d:ed:
33:eb:67:d4:e4:33:74:02:5c:8f:1f:60:e2:f3:47:
cd:1d:90:96:d3:2f:43:4f:11:88:c4:97:76:62:02:
77:7a:0c:8e:9d:d8:48:fa:96:dc:4d:32:e0:a2:e6:
58:9b:b2:11:ba:67:29:ef:4b:ee:6e:e9:c8:d8:71:
7f:c6:78:30:7c:57:c6:d5:e5:59:9b:a2:d1:48:86:
84:59:75:39:94:98:fd:a3:a0:83:c4:e2:20:a8:f4:
ea:23:e1:94:48:f7:49:15:02:b1:b0:a7:26:4a:50:
02:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5D:18:C8:EB:8B:B4:AD:4D:18:6D:31:03:3B:BA:31:78:48:3C:99
X509v3 Authority Key Identifier:
keyid:8D:0B:58:4F:60:35:FE:5A:28:7C:56:7F:1E:38:54:B8:FB:C2:A0:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jQtYT2A1_loofFZ_HjhUuPvCoMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/393131-1743-48e5-ae54-a9bf3a769377/1/jQtYT2A1_loofFZ_HjhUuPvCoMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:eb:ae:e4:89:34:4f:99:a3:50:1c:08:8f:82:dc:52:0b:55:
b8:19:23:ce:1d:c3:85:df:29:30:f1:31:69:18:c4:ae:01:0a:
e7:83:7d:5d:bd:15:12:fb:06:fd:5b:a8:3e:49:a1:f6:36:2e:
10:8b:a2:75:a8:b7:b9:42:32:32:76:4c:5f:7c:6a:69:fa:14:
d8:57:b9:06:d5:8c:eb:11:69:e6:37:b1:12:e2:2f:8d:16:f8:
7e:44:55:9a:57:c4:39:ce:f7:74:01:5a:4b:18:6a:52:c3:b3:
5e:d1:95:67:94:fd:c0:23:a6:8e:0f:e9:d7:ed:14:41:71:32:
60:59:07:9c:f3:b7:aa:ac:0f:90:b5:43:4c:f2:36:d4:a4:28:
55:d7:ea:f8:75:4c:ae:a6:89:18:be:e3:f4:5c:8d:b0:33:03:
7c:4d:b2:27:ae:da:7c:06:9f:c2:89:0a:0f:23:35:04:fc:a9:
eb:af:13:27:4b:1e:d3:26:27:91:5f:6d:48:e9:38:22:11:e8:
17:3f:8d:db:cc:ea:32:fd:2a:d6:39:39:19:67:de:f0:62:70:
a5:b6:ac:e4:01:f4:2c:10:be:73:5a:db:3e:c2:da:49:53:24:
51:05:f3:f5:a6:f1:c8:de:d3:5b:ca:f6:f9:b1:b4:be:3a:06:
d4:d8:bc:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:37:50 2025 by rpki-client