Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
File: JqmLYSX1JD4-2DUBWWfN25cUjfE.mft (raw, json)
Hash identifier: YhaCNDRqyxk+Tw3+mV9/zxsxyNtRXl+oN8jziHS4V0c=
Subject key identifier: 18:19:F9:F9:26:7E:52:45:D9:C3:3D:98:F4:0A:4E:BF:01:34:9F:DC
Authority key identifier: 26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1
Certificate issuer: /CN=26a98b6125f5243e3ed835015967cddb97148df1
Certificate serial: 0197B77C495B958D05BB76EB206CF529C60E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
Manifest number: 1170
Signing time: Sat 28 Jun 2025 17:01:05 +0000
Manifest this update: Sat 28 Jun 2025 17:01:05 +0000
Manifest next update: Sun 29 Jun 2025 17:01:05 +0000
Files and hashes: 1: 1HlDDcU_awP0Jg600b5QOV5zFyw.roa (hash: DII6lgfGgmt/XXzdShUFtsjKk90R+1ZgqPhGOseU9bY=)
2: JqmLYSX1JD4-2DUBWWfN25cUjfE.crl (hash: Izzw+EfSLHo77A2abxOuvfyHMTLnUIvCX4tk1Kyoq98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:49:5b:95:8d:05:bb:76:eb:20:6c:f5:29:c6:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a98b6125f5243e3ed835015967cddb97148df1
Validity
Not Before: Jun 28 17:01:05 2025 GMT
Not After : Jun 29 17:01:05 2025 GMT
Subject: CN=1819f9f9267e5245d9c33d98f40a4ebf01349fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:6c:bf:54:a4:62:41:36:64:04:5f:50:f3:05:
5b:80:37:1d:fc:30:67:f0:4f:a6:1e:94:9c:1a:b9:
ec:62:c4:4b:3d:95:03:46:98:94:ad:3e:2b:e4:67:
24:2e:88:77:1e:f3:cb:f8:e4:34:e8:2e:72:a5:61:
ec:c4:b2:6b:26:1a:c7:d0:ee:b5:08:7a:79:d8:5d:
dd:1d:70:0f:ab:44:ea:79:10:5d:f0:3c:d3:ac:d9:
76:0e:c0:4a:7a:ce:c8:32:32:f9:ed:f5:ed:b1:59:
54:e4:e0:73:b4:81:09:32:14:4c:76:e9:a5:76:c7:
91:1b:e7:f7:16:a3:53:3c:57:29:23:ee:82:50:d5:
85:2a:46:0c:be:be:1a:7f:0d:3f:81:8a:52:b6:f3:
79:10:26:78:4b:55:ea:b8:13:9a:46:d7:eb:72:05:
7f:0b:d9:28:04:72:43:3e:8a:e6:46:be:a1:c6:8c:
05:31:be:dc:21:2b:f5:d9:67:4f:e0:be:ce:2c:d3:
5a:3e:1f:76:d3:50:0a:21:81:5d:6c:5a:7d:fd:47:
a5:84:d5:e3:11:2b:4f:cf:ce:af:5e:77:ae:8b:56:
bf:78:33:02:9a:c3:5f:dc:28:28:82:9c:92:fb:51:
b0:a8:54:5b:39:b8:73:c9:de:73:df:d6:87:c9:11:
00:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:19:F9:F9:26:7E:52:45:D9:C3:3D:98:F4:0A:4E:BF:01:34:9F:DC
X509v3 Authority Key Identifier:
keyid:26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:29:5c:13:91:d9:63:a8:4f:6a:9e:26:b9:c8:78:6f:2e:2f:
61:9f:ba:a5:49:69:37:a2:ea:0b:e5:68:24:6f:56:c8:f0:73:
72:66:3c:d4:28:4b:39:93:fe:1e:24:dd:80:54:9c:28:e2:2c:
10:f7:d9:bb:82:02:3c:43:32:d9:21:10:1d:b2:27:8a:b9:40:
a9:8c:54:63:64:dd:82:62:78:79:a7:dc:1d:89:a8:b6:c1:2b:
11:c6:be:12:b1:b8:f9:48:9e:d0:b8:6e:b4:84:07:25:4e:d0:
24:eb:e1:20:df:f6:b4:27:04:b4:12:71:3b:8c:9c:43:da:0e:
36:3f:6f:77:55:6a:98:0b:ed:2c:66:c1:f6:47:3a:4e:4f:8b:
3c:bc:58:54:ea:83:f3:73:99:6e:20:c2:73:e1:3f:3c:c8:84:
a1:e7:6e:0d:95:da:18:58:89:38:ec:e0:f3:2c:82:ee:a0:66:
1c:61:ae:a9:42:5b:d9:63:b9:aa:2f:49:dc:55:38:39:e5:f5:
75:96:81:14:4c:8e:3e:78:95:b3:c7:b0:ae:02:9b:2c:01:48:
f9:ae:e7:93:f7:03:18:c5:cc:68:a3:6d:c4:50:74:c1:e9:86:
51:fa:47:52:52:04:52:72:31:bc:32:f4:c7:f8:9b:77:c6:56:
49:e1:c4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:13 2025 by rpki-client