Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.mft
File: jqJrRYrUHUfSYadtjF3A_I0aniw.mft (raw, json)
Hash identifier: D0xTvsqPwP7SeEXHyxIcL0cF45cdsM6bBkfx9/yp6bE=
Subject key identifier: D0:B6:A4:71:F3:DE:06:8E:1A:59:2F:DB:7C:AA:DD:7C:75:1B:EF:E2
Authority key identifier: 8E:A2:6B:45:8A:D4:1D:47:D2:61:A7:6D:8C:5D:C0:FC:8D:1A:9E:2C
Certificate issuer: /CN=8ea26b458ad41d47d261a76d8c5dc0fc8d1a9e2c
Certificate serial: 0199FAD7C130769024EEA9D5A3BD913E8A6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqJrRYrUHUfSYadtjF3A_I0aniw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.mft
Manifest number: 0790
Signing time: Sun 19 Oct 2025 05:01:07 +0000
Manifest this update: Sun 19 Oct 2025 05:01:07 +0000
Manifest next update: Mon 20 Oct 2025 05:01:07 +0000
Files and hashes: 1: jqJrRYrUHUfSYadtjF3A_I0aniw.crl (hash: 1fPyBxryv5dB/c74zvBsxpoOvZFImTEeBf8ZcKaLSy4=)
2: wBXvBP-sIHkTwmZUmnZjwsOY0so.roa (hash: sf9c/AK0uTzIyNN2fC+2QGD8WVkysi/YAMOyb/8pxmk=)
3: wLZVru27R5hLrY-IBfRtSt_tUx8.roa (hash: 76J4QSugwyDTtKGwWKRlLvHMLnsw0aj0+Qke60PpJqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqJrRYrUHUfSYadtjF3A_I0aniw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:c1:30:76:90:24:ee:a9:d5:a3:bd:91:3e:8a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ea26b458ad41d47d261a76d8c5dc0fc8d1a9e2c
Validity
Not Before: Oct 19 05:01:07 2025 GMT
Not After : Oct 20 05:01:07 2025 GMT
Subject: CN=d0b6a471f3de068e1a592fdb7caadd7c751befe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:11:d5:46:2e:a1:76:c4:aa:e9:e7:39:17:bf:
48:3a:eb:9a:64:3f:0a:49:d6:cc:8c:8d:5f:33:b0:
63:93:78:af:24:0c:1f:82:fe:13:cc:41:8a:5e:39:
3a:81:eb:56:f2:c0:17:5a:89:15:aa:f6:be:c1:b2:
99:81:85:2d:8e:5e:15:47:38:f2:a7:cd:ab:28:f4:
5d:1c:6c:b6:04:bd:76:12:e0:9a:aa:7d:22:92:02:
42:35:51:60:33:34:69:2e:e7:4c:7d:93:14:52:16:
6c:76:d3:63:11:f1:62:07:51:de:42:5b:54:4e:e5:
df:64:2e:e9:cd:2e:ef:b3:16:0d:c2:4a:02:68:2b:
13:6e:6b:a0:ff:17:b3:3d:1a:4f:03:ff:0c:9c:b1:
7c:46:9a:34:f2:75:80:7e:10:80:3c:ee:4c:d6:bd:
68:a2:aa:cb:67:22:e7:47:f3:36:09:bc:7b:f1:f8:
8c:77:d2:fa:0d:45:9b:ce:86:96:df:ac:a2:7e:38:
a0:ef:56:7e:b4:68:4c:e7:8a:8b:a5:3e:7e:1c:8b:
19:bc:bc:23:98:6c:b7:72:f0:04:32:8d:78:73:a9:
78:b6:9b:8a:84:52:1d:b9:20:8e:c7:c8:6c:9e:72:
0d:3c:72:fe:bf:31:f7:65:9f:03:ee:a8:d5:86:ef:
1f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B6:A4:71:F3:DE:06:8E:1A:59:2F:DB:7C:AA:DD:7C:75:1B:EF:E2
X509v3 Authority Key Identifier:
keyid:8E:A2:6B:45:8A:D4:1D:47:D2:61:A7:6D:8C:5D:C0:FC:8D:1A:9E:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqJrRYrUHUfSYadtjF3A_I0aniw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:88:4f:72:7b:fc:d4:3a:cf:92:db:99:66:ef:00:14:82:43:
f1:c6:5f:79:39:90:6d:57:1f:d9:6c:2a:37:13:59:83:5c:de:
b0:45:a9:15:ff:a4:89:de:19:16:3e:4a:b9:40:c2:39:0f:7f:
7b:19:56:7d:35:5a:a6:62:fe:ee:9d:70:45:c8:56:d5:29:78:
49:21:59:ed:48:1b:94:f3:37:e5:93:fd:2a:92:35:fd:c2:4e:
d3:5f:6a:55:35:4c:67:f3:c5:c5:a1:c9:9a:51:47:53:9a:25:
d4:af:f7:74:0f:be:e7:c0:43:6e:05:a1:ef:4c:51:aa:7e:2e:
84:02:3d:8e:95:45:06:58:9d:b9:67:11:5c:0f:6a:b2:85:2e:
0a:c4:71:4f:7e:93:ca:09:b2:21:6a:4d:77:3a:b2:81:2f:50:
90:26:f6:28:f7:f2:7a:19:12:43:41:20:20:8f:5c:ae:33:b8:
f5:8d:4d:93:b3:b7:0d:84:43:5e:ff:3f:ec:d2:c6:72:4d:73:
20:1e:65:05:02:95:9e:a1:01:22:a9:84:5a:4d:f6:13:ea:9d:
63:94:b3:67:47:55:99:fc:d1:fb:c5:1d:bf:81:46:7f:2a:f3:
22:aa:76:23:a1:5d:9f:d8:94:34:d9:c0:ea:e8:d5:c6:fe:f4:
08:0e:80:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:43 2025 by rpki-client