Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
File: JQ599DyC0SChPTyGXx8G9JZEseE.mft (raw, json)
Hash identifier: /XODfEO7RE7TVRbsIKj1mkmMfp+BCRyFurRRImfChDc=
Subject key identifier: A8:4E:C6:60:0B:62:47:92:D4:64:2A:F8:7D:DE:50:21:93:A8:B9:DF
Authority key identifier: 25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1
Certificate issuer: /CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
Certificate serial: 0198D5BB9E5F10B6D195C0C0B912E060CAD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
Manifest number: 0E2F
Signing time: Sat 23 Aug 2025 07:01:39 +0000
Manifest this update: Sat 23 Aug 2025 07:01:39 +0000
Manifest next update: Sun 24 Aug 2025 07:01:39 +0000
Files and hashes: 1: JQ599DyC0SChPTyGXx8G9JZEseE.crl (hash: suOoFqQqIG9gTrrw6iuYpM4aZfffghFfmQJ6icRawn4=)
2: NxEFYabQ1De2D9MRDvZOgIu0R4g.roa (hash: lAojMYDzIDb75W7SBnvnLzGQZua9BCv398UHDwqthXo=)
3: uBhMU8FaL6yzEgI8KXo0amRkPt0.roa (hash: rZaJZ+vs9poyZNeTB4YM94eOiwwWluQ2wWx8JrMOGHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:9e:5f:10:b6:d1:95:c0:c0:b9:12:e0:60:ca:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
Validity
Not Before: Aug 23 07:01:39 2025 GMT
Not After : Aug 24 07:01:39 2025 GMT
Subject: CN=a84ec6600b624792d4642af87dde502193a8b9df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:65:74:aa:f9:c6:7d:93:39:98:f8:eb:63:bb:
74:df:d1:4e:2a:ad:80:e4:3e:e9:68:65:47:3e:d8:
cc:25:54:52:65:94:2f:84:ac:d3:df:51:2f:7b:50:
99:07:4d:ff:8b:1c:a9:f8:72:46:96:76:27:a3:5b:
35:1c:fe:b6:b0:9f:8f:bd:e7:9b:9e:bf:e7:c9:1f:
ff:10:d7:bc:03:be:8f:b4:0b:de:0f:94:a8:ac:5a:
c9:44:62:72:b0:2e:08:ee:4c:80:81:f6:69:bb:c4:
6a:5b:bb:26:0c:ee:94:cb:67:7d:58:4e:25:35:b2:
ad:46:eb:a1:93:ee:7c:de:60:7a:81:38:e3:42:bb:
55:60:de:25:cc:76:5f:00:a9:f8:bc:51:10:ba:fa:
16:60:33:8d:49:42:a3:d0:cd:23:94:7f:8d:c6:e4:
4f:cd:2e:3a:d0:01:c2:d1:fe:84:ea:0b:b2:5d:0b:
54:e9:0b:53:d7:2d:ec:de:07:98:ab:a4:d5:a2:d7:
71:16:5f:6f:7d:4c:bb:9f:a2:4f:46:de:91:e9:dd:
a1:2b:b6:d4:bc:ff:a3:2f:01:bc:b3:20:46:89:0b:
db:ea:cd:dc:18:52:b4:1b:25:cf:f3:c1:47:ef:aa:
a1:50:53:b3:80:2d:39:8c:de:d2:33:0b:d0:11:b1:
84:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4E:C6:60:0B:62:47:92:D4:64:2A:F8:7D:DE:50:21:93:A8:B9:DF
X509v3 Authority Key Identifier:
keyid:25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:e1:da:f2:c1:0f:b3:38:2c:d3:3a:5d:0c:ae:12:3d:64:4f:
69:cf:df:cf:ef:d4:72:51:6d:56:36:5d:35:fa:a9:e4:af:d4:
3c:23:b1:3b:50:03:ed:77:41:de:96:d8:9c:11:a8:6a:32:47:
1f:9b:2a:89:27:42:72:0e:da:f2:41:a9:7e:de:ed:64:c8:b2:
42:c5:97:0c:ac:4c:bf:bf:98:50:23:60:8b:3a:22:74:47:a0:
78:84:72:8d:21:69:d6:a3:26:89:e9:0a:85:21:9f:18:41:cd:
85:dd:d3:fb:77:b5:80:21:54:2f:1c:9f:ae:0e:8d:ee:5e:0a:
00:7a:bc:db:3d:3c:9f:42:9b:c8:b8:df:73:e2:b3:08:db:90:
ee:70:05:73:4f:26:e8:31:2d:6d:ce:bf:bb:c1:d6:8c:75:d9:
5b:ba:58:6a:ab:63:ae:76:f3:7c:9d:92:b9:cd:6f:77:e4:fc:
6c:da:53:06:4f:6b:1c:bc:73:46:83:b2:5d:d3:30:83:6f:ef:
7f:6f:92:3b:20:ee:d6:62:95:cb:1d:0a:33:e2:7b:41:4f:a5:
13:13:25:c4:7f:1a:ed:89:a5:86:91:b2:fa:74:d2:de:0a:97:
71:8d:c2:0f:ce:2b:ee:c5:58:ff:82:90:9f:ae:ed:44:3f:d1:
d2:49:91:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:10 2025 by rpki-client