Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft
File: JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft (raw, json)
Hash identifier: jz5XtybgivHZOLGr1pAPAOhHi5Nv+Cw2aamgD5oQEic=
Subject key identifier: 7C:C1:68:F8:06:CF:D4:86:01:3E:32:91:BC:32:E8:6A:49:FB:9C:9B
Authority key identifier: 26:A2:50:D6:C4:6F:26:F4:C3:00:5F:A4:2E:40:1A:8A:9E:5C:88:6E
Certificate issuer: /CN=26a250d6c46f26f4c3005fa42e401a8a9e5c886e
Certificate serial: 0198D5F1CD681571D5D0752F7AE6C0EE9EA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqJQ1sRvJvTDAF-kLkAaip5ciG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft
Manifest number: 0422
Signing time: Sat 23 Aug 2025 08:00:50 +0000
Manifest this update: Sat 23 Aug 2025 08:00:50 +0000
Manifest next update: Sun 24 Aug 2025 08:00:50 +0000
Files and hashes: 1: JqJQ1sRvJvTDAF-kLkAaip5ciG4.crl (hash: zoLBRwwZN76sj3RkG1dBXeNMwolZM3IAO7IYbsVS7HI=)
2: hcERp-n1CdH9dpVt3PfnUZqY1zM.roa (hash: cu5zTSvQ8FcA7bEX+Ahl9PjJO9BlJ5Pb1ZUU2INhdXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqJQ1sRvJvTDAF-kLkAaip5ciG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:cd:68:15:71:d5:d0:75:2f:7a:e6:c0:ee:9e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a250d6c46f26f4c3005fa42e401a8a9e5c886e
Validity
Not Before: Aug 23 08:00:50 2025 GMT
Not After : Aug 24 08:00:50 2025 GMT
Subject: CN=7cc168f806cfd486013e3291bc32e86a49fb9c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:65:e2:3f:cf:7f:81:cd:df:b5:32:b5:9b:b0:
63:33:c9:e8:49:f2:bd:cd:21:a3:85:9a:c9:5a:ca:
66:ee:df:4d:5e:1c:13:16:24:26:ee:64:93:df:39:
63:cd:bc:78:76:ee:5b:a7:06:2e:5d:4d:f3:b0:75:
dd:c7:2f:c0:68:fb:0b:8d:4f:a4:85:6e:39:2e:56:
9c:fc:74:83:bc:dc:a0:20:66:2e:bb:70:e7:63:20:
a6:98:c4:57:ea:d9:cb:37:3d:78:59:d3:60:a1:47:
17:58:02:57:84:8d:f2:ea:8d:f5:0e:52:4d:fe:ea:
a0:ca:67:0f:7d:4f:94:fb:45:01:95:02:64:b0:8e:
a8:93:4d:d0:10:52:66:7a:da:d0:66:e0:c1:ba:45:
0c:0c:48:90:bf:09:7b:ce:9b:2c:1e:8e:84:42:0e:
98:27:f4:37:50:fe:98:81:7a:b5:9b:01:0a:71:43:
19:96:cf:70:3a:3a:c0:0b:69:0a:5c:89:d1:1f:be:
c3:eb:52:18:54:d1:6e:ea:40:f6:1d:42:e9:02:c4:
c6:40:e8:c6:05:9d:4f:e5:ba:f6:f4:ec:87:d1:1f:
4a:66:95:06:3b:1d:28:1b:c3:04:5c:1f:9f:b4:23:
94:fb:52:bd:d3:28:84:89:53:90:ab:55:20:7a:71:
75:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C1:68:F8:06:CF:D4:86:01:3E:32:91:BC:32:E8:6A:49:FB:9C:9B
X509v3 Authority Key Identifier:
keyid:26:A2:50:D6:C4:6F:26:F4:C3:00:5F:A4:2E:40:1A:8A:9E:5C:88:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqJQ1sRvJvTDAF-kLkAaip5ciG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/72a50b-55eb-497b-a9f7-1ff7b31e52cd/1/JqJQ1sRvJvTDAF-kLkAaip5ciG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:9a:ca:6e:32:23:0d:8b:c5:07:8c:e0:09:9b:10:dc:74:b5:
a1:84:9a:01:32:f2:3a:a0:08:a0:2f:42:29:53:94:03:6c:ec:
d8:c0:d2:2e:b0:f5:6f:ff:e2:14:23:c3:3f:66:71:9c:f6:3b:
6a:57:3d:12:6c:b8:e3:57:00:42:8a:83:90:eb:44:eb:3c:4a:
14:7e:01:d5:38:cf:43:13:7b:72:62:98:7c:97:9c:e7:db:cf:
5e:04:64:26:1c:48:24:7d:3a:9f:6b:bc:19:62:eb:06:d4:25:
95:6d:3c:64:1d:2b:6d:26:c8:2f:0a:23:14:9c:3f:86:59:66:
fc:57:c7:87:da:89:26:a5:f0:ef:40:00:13:bf:62:9b:63:d9:
98:62:62:61:0e:e8:3e:e6:29:a6:83:3a:ab:f8:4f:37:9d:3e:
32:dc:a8:6e:0d:6b:3a:92:98:bd:2f:25:8b:28:05:ce:61:fa:
66:a2:f5:d9:22:2f:46:39:e5:e9:3c:67:56:f9:94:22:54:58:
98:78:cd:81:4b:de:83:08:8b:e6:d5:50:46:4d:f9:b8:a4:68:
2c:6d:24:78:58:eb:ab:bd:93:db:39:74:f6:0d:ff:fa:45:6c:
7a:ec:64:69:f6:9f:b7:95:9a:8c:66:8d:5e:6d:b5:6e:27:3d:
9c:80:10:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:56 2025 by rpki-client