Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
File: JqRR4kXgG6my-yMUwmCeexUedKI.mft (raw, json)
Hash identifier: UWakacv5CVr1wOdUmIPBkpX65Qgt2nIJHlZaqyA9AEE=
Subject key identifier: 3F:13:04:9F:73:F1:83:F6:B3:C6:71:E5:6E:C2:20:D2:CA:7C:76:0A
Authority key identifier: 26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
Certificate issuer: /CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Certificate serial: 0198D850B7765ED7E35D3A18DAB663BDDDA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 19:03:45 +0000
Manifest this update: Sat 23 Aug 2025 19:03:45 +0000
Manifest next update: Sun 24 Aug 2025 19:03:45 +0000
Files and hashes: 1: JqRR4kXgG6my-yMUwmCeexUedKI.crl (hash: 4Tf9o6hfc4XDoWCpQDHwgZD2Px5YmpFP5haRNzwMFY8=)
2: __QM0Y00A8o9_wWPyDLaVQsYZls.roa (hash: Tt5jgaPYYhPlmRSiaLMYS5DQDbnj5Cw5Zwmf+6k+kyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 19:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:50:b7:76:5e:d7:e3:5d:3a:18:da:b6:63:bd:dd:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Validity
Not Before: Aug 23 19:03:45 2025 GMT
Not After : Aug 24 19:03:45 2025 GMT
Subject: CN=3f13049f73f183f6b3c671e56ec220d2ca7c760a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:13:02:cd:dc:f7:83:50:fb:ab:7f:74:1f:43:
ee:ea:5f:94:46:95:7e:2a:a3:e7:4e:b6:b8:98:ed:
0e:41:ea:18:58:48:e6:ea:fd:2a:5a:ef:1c:16:20:
95:14:a1:a0:c9:35:d0:b9:9d:29:c1:48:bd:86:f0:
de:3a:2a:99:b4:21:14:4c:de:02:39:f5:81:df:d0:
d8:6e:e0:6a:61:34:71:15:5e:1b:f0:30:8a:6a:9f:
49:40:1b:dd:28:03:4d:2f:b5:b5:fc:bf:a4:53:ab:
14:f8:fc:d9:95:44:cd:6e:11:92:2c:09:fa:ba:6a:
67:a4:70:5b:46:9f:ae:e3:9f:da:68:4f:38:67:af:
b2:92:18:10:85:58:be:c4:65:e6:76:ea:ac:7b:a7:
e0:f9:1c:30:0b:37:fe:36:72:6c:89:62:f0:51:56:
58:d4:f2:86:89:ba:19:d8:31:07:9a:d8:e5:d0:48:
b4:82:0b:a8:db:f8:b4:c7:ef:26:7d:45:c4:8c:71:
e5:a4:10:34:2e:bf:e3:46:41:cc:af:28:6a:ba:1d:
82:81:9d:e3:3b:e5:6a:a5:d3:f0:2a:a0:bf:4a:75:
c9:aa:65:93:72:5b:3c:e1:39:d7:46:c6:37:11:81:
f9:c7:ea:b1:71:32:71:06:8c:89:4b:dc:e4:fb:e9:
b0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:13:04:9F:73:F1:83:F6:B3:C6:71:E5:6E:C2:20:D2:CA:7C:76:0A
X509v3 Authority Key Identifier:
keyid:26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:4d:28:16:00:b0:fa:0c:b2:37:ff:cb:11:97:d8:eb:2f:3b:
77:0f:88:f2:5f:54:d1:de:b9:73:b1:83:be:4f:1a:33:74:d6:
21:48:f5:1b:c4:3e:e6:87:c7:b8:ce:df:7d:e0:1e:f5:99:d1:
70:fe:66:02:35:0d:e2:b6:f1:3d:b3:ec:e3:84:28:c5:ac:ef:
88:b6:d8:2d:7a:47:e9:be:58:65:08:d0:f0:0e:e5:d9:24:83:
9d:48:90:e0:67:b3:5a:4c:0d:b3:5b:92:bc:61:05:05:51:23:
64:c3:5f:40:5a:57:81:64:c4:16:59:95:ff:c4:0a:07:f5:99:
64:cc:60:ec:f2:da:3c:da:70:12:63:41:01:e1:35:b7:50:00:
9b:37:ad:b7:43:b2:e7:4b:44:f8:2f:5a:20:43:ae:82:59:49:
bf:cc:d4:b0:ac:ad:31:f9:4d:b9:bb:77:70:99:c7:72:4a:37:
78:3a:ad:50:6a:dc:08:7d:e9:8b:e0:4f:55:1e:79:66:9e:58:
28:7d:ff:a2:20:8e:d2:5e:11:56:03:83:cd:0d:80:90:49:b7:
41:d8:5a:f4:b2:c5:c5:18:df:ad:29:60:db:6e:a7:ff:94:50:
42:82:34:aa:81:b2:0e:ad:aa:ff:14:a0:59:82:37:c2:b9:2c:
b6:73:c8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:06:37 2025 by rpki-client