Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
File: JqmLYSX1JD4-2DUBWWfN25cUjfE.mft (raw, json)
Hash identifier: tRDAvRcj76zbCOT/9Ewy/i59M3GZNGCJI4e2lv2/EXo=
Subject key identifier: 2D:FE:24:61:06:8A:98:D2:A2:6A:F9:C1:BB:AF:85:94:AE:51:DC:D5
Authority key identifier: 26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1
Certificate issuer: /CN=26a98b6125f5243e3ed835015967cddb97148df1
Certificate serial: 0198D54EB1742E742D1252802FDE245CDF14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
Manifest number: 1204
Signing time: Sat 23 Aug 2025 05:02:40 +0000
Manifest this update: Sat 23 Aug 2025 05:02:40 +0000
Manifest next update: Sun 24 Aug 2025 05:02:40 +0000
Files and hashes: 1: 1HlDDcU_awP0Jg600b5QOV5zFyw.roa (hash: DII6lgfGgmt/XXzdShUFtsjKk90R+1ZgqPhGOseU9bY=)
2: JqmLYSX1JD4-2DUBWWfN25cUjfE.crl (hash: Iqd/VmHXI4Q3uRdyOBlEf2V6Bidu7YdZkOiimKoHs2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:b1:74:2e:74:2d:12:52:80:2f:de:24:5c:df:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a98b6125f5243e3ed835015967cddb97148df1
Validity
Not Before: Aug 23 05:02:40 2025 GMT
Not After : Aug 24 05:02:40 2025 GMT
Subject: CN=2dfe2461068a98d2a26af9c1bbaf8594ae51dcd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:19:e0:12:0d:d5:8a:e0:26:25:85:3c:56:51:
fc:80:94:c7:06:88:70:d5:ff:c5:93:d1:13:6f:4a:
2f:4b:c3:3c:61:b8:c7:ad:38:f1:e9:f4:8d:45:b8:
7d:34:e4:7f:c1:8c:5a:30:eb:0e:b7:d7:cc:59:d3:
ee:68:5f:11:96:8a:0a:25:46:f5:2e:a3:e7:e2:e2:
0a:4a:1c:88:75:08:40:72:9f:cb:d5:55:7e:7f:cc:
b9:50:2d:0e:b2:76:4d:39:2e:c5:62:59:b0:7e:9e:
38:dd:eb:41:94:85:cc:10:25:9c:96:ed:fa:4e:72:
4d:2a:9a:a6:75:02:04:14:9b:99:b5:9b:b2:38:1d:
bf:f1:2f:96:bf:27:15:9b:a2:0f:ef:47:64:41:dc:
06:4b:90:f9:58:96:14:16:76:c5:56:bf:20:cf:9a:
8c:fd:30:8e:78:3c:b1:a3:3c:54:b5:ee:73:3f:c2:
b1:67:56:6d:e6:77:cc:29:4a:f1:26:be:22:89:a0:
b2:2d:96:86:d3:eb:09:0e:d2:ce:2f:5f:f3:38:bb:
e0:8d:1d:04:3b:c3:c2:93:e4:31:ee:bc:54:aa:2a:
83:76:bf:e4:00:2d:0e:07:81:7f:c2:a8:f3:44:1b:
a6:92:e5:6e:8d:92:5f:2a:54:49:3a:6d:ae:c3:b4:
5c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:FE:24:61:06:8A:98:D2:A2:6A:F9:C1:BB:AF:85:94:AE:51:DC:D5
X509v3 Authority Key Identifier:
keyid:26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:16:e6:20:8b:71:ae:4c:d4:38:50:a9:ac:bb:dd:6d:71:42:
a4:22:81:d3:19:9b:16:ed:a9:ca:eb:6e:d3:d4:d9:87:88:0e:
b5:b2:db:da:2b:57:e2:43:f8:ba:fa:fe:54:41:f3:04:25:6a:
44:ce:9f:14:21:21:ee:1c:71:d5:f6:c2:83:f8:40:b9:53:23:
45:82:8d:4d:6d:45:fa:b0:15:f6:fb:fb:20:1f:b3:8a:61:72:
9d:a6:9c:9e:a3:3e:da:46:c9:89:d5:6e:a3:66:ba:ea:63:31:
27:8e:b7:7f:bc:b3:28:04:50:ca:8d:25:83:b9:34:4c:39:dd:
92:43:dd:2f:da:be:05:68:31:cb:30:a1:c6:f9:24:ad:7f:99:
ab:83:23:8b:1b:86:d9:21:e0:cb:5c:70:12:08:69:8e:45:e6:
5b:eb:eb:f0:83:25:85:e4:aa:c5:cb:6a:dc:5b:46:a3:43:07:
78:8c:5c:f0:bf:3a:e3:1e:1f:c9:42:cd:67:27:7f:8e:81:ac:
8d:ba:61:36:1a:eb:23:5d:95:7d:c5:1e:06:ed:8e:4b:fe:04:
ef:4c:52:24:f4:91:ad:cf:cc:84:d5:e9:57:45:3a:62:e4:a2:
34:98:47:e8:ca:74:8e:4e:8c:89:f4:2e:7b:79:40:fb:06:6b:
0d:ff:2e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:32:28 2025 by rpki-client