Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
File: JqRR4kXgG6my-yMUwmCeexUedKI.mft (raw, json)
Hash identifier: D74+BkRRh+w2LP/dAZJsxOezejrST8FdpU403SU4cLA=
Subject key identifier: 7A:F4:25:BC:46:67:F7:5A:61:B6:A1:42:CA:80:E6:2E:05:33:46:CD
Authority key identifier: 26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
Certificate issuer: /CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Certificate serial: 0199FDD994FC4FA9C04CBA64E774B5A37A44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 19:01:59 +0000
Manifest this update: Sun 19 Oct 2025 19:01:59 +0000
Manifest next update: Mon 20 Oct 2025 19:01:59 +0000
Files and hashes: 1: JqRR4kXgG6my-yMUwmCeexUedKI.crl (hash: qtZPcmxzM/JmMJWNOcHm+LrPr/VMNXC+7nhs5GCMLI8=)
2: __QM0Y00A8o9_wWPyDLaVQsYZls.roa (hash: Tt5jgaPYYhPlmRSiaLMYS5DQDbnj5Cw5Zwmf+6k+kyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:94:fc:4f:a9:c0:4c:ba:64:e7:74:b5:a3:7a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Validity
Not Before: Oct 19 19:01:59 2025 GMT
Not After : Oct 20 19:01:59 2025 GMT
Subject: CN=7af425bc4667f75a61b6a142ca80e62e053346cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e0:18:d8:42:78:da:34:b1:b8:81:2f:c4:12:
d0:32:18:54:86:a1:54:8d:5a:57:b8:fd:f4:bc:48:
b7:8f:9d:8f:1d:84:e5:98:96:53:e4:87:29:a6:39:
e3:04:f5:f1:d1:48:e3:ab:4c:81:1d:1f:ba:c5:93:
58:6d:3d:ae:b1:86:52:51:4b:39:c0:6e:f5:6d:6d:
92:5f:1b:fa:0d:8e:38:94:e7:2c:e6:67:3a:9f:1f:
f5:9b:a3:59:bc:6d:20:0d:92:b9:7d:c0:cf:76:3d:
5f:8c:ae:42:7c:22:6e:22:44:95:ff:c9:7b:30:bc:
8c:d2:ae:b8:a9:83:00:1f:7a:ea:83:ff:83:de:ad:
a5:14:5f:e2:6f:fb:d1:d8:cc:9a:b9:80:7f:4f:cc:
c3:d2:d4:f2:df:83:de:48:ec:96:84:a2:5d:44:92:
da:bf:7c:69:7a:ef:b3:a6:1d:fa:48:9b:d7:78:34:
19:d8:64:0b:e8:aa:ff:9b:04:75:00:d1:23:f5:bd:
ee:a1:b1:18:c0:8d:4b:06:1e:11:64:d5:10:01:34:
55:71:29:0c:52:83:60:13:52:db:70:3c:b9:ac:54:
4e:6d:90:cd:7b:cf:39:ae:23:2b:05:83:28:33:b7:
85:59:0e:cb:97:87:27:27:0f:57:74:54:5f:33:1d:
77:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:F4:25:BC:46:67:F7:5A:61:B6:A1:42:CA:80:E6:2E:05:33:46:CD
X509v3 Authority Key Identifier:
keyid:26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:06:e2:47:54:ce:fc:3e:82:78:6c:70:81:e3:f7:f3:5d:57:
44:cf:1d:33:6c:0f:eb:2a:32:b5:ef:18:ea:d0:ec:ff:c7:c3:
19:8f:4e:68:b8:af:1a:96:a3:18:75:2d:a6:10:6e:ff:ba:53:
f8:1f:6f:d8:90:44:83:72:ed:99:83:4a:e5:fe:e3:11:88:65:
7e:c0:47:4f:f4:5f:ea:7b:e4:01:ef:68:59:b4:c7:dc:31:cd:
49:15:af:21:16:1d:46:5e:da:ba:63:1e:89:87:f7:58:68:3c:
15:a0:0c:ef:27:8c:9f:7c:f0:44:b3:7e:d7:44:42:fc:c3:90:
5a:6d:78:23:42:b3:6c:96:e9:cd:7d:94:fb:72:14:af:29:36:
08:04:5e:77:cf:fb:84:a9:04:1e:00:6d:41:8f:cb:d3:86:cd:
dd:14:6e:77:e7:84:62:c1:f2:90:89:f2:c0:91:c9:d9:de:75:
bf:fa:0a:77:66:7d:32:26:6b:05:8f:17:2c:1e:e6:de:5f:99:
ed:da:9e:2d:9c:4c:26:1b:c4:9b:71:ab:71:48:85:f4:4a:17:
aa:6b:57:b7:c4:b6:c8:64:25:6b:2e:6a:30:5e:9b:49:71:0c:
e6:3c:3e:33:a3:3e:65:50:59:42:82:52:c7:ab:42:af:34:59:
3f:71:bf:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:53:32 2025 by rpki-client