Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
File: jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft (raw, json)
Hash identifier: 87NrIOWoWnsLaxhlgTo8uFhTUXbcLlwHuUUr6WQp6hI=
Subject key identifier: F4:B4:CB:1B:C3:69:D2:F0:DA:08:7D:B9:5C:01:B0:A6:2A:15:EF:11
Authority key identifier: 8E:A1:75:86:1C:ED:0C:F7:0D:51:64:79:B3:FA:88:07:62:6A:C3:1F
Certificate issuer: /CN=8ea175861ced0cf70d516479b3fa8807626ac31f
Certificate serial: 0197B8FD20E0BAFF746F398B7AFC8111C28E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
Manifest number: 01A1
Signing time: Sun 29 Jun 2025 00:01:26 +0000
Manifest this update: Sun 29 Jun 2025 00:01:26 +0000
Manifest next update: Mon 30 Jun 2025 00:01:26 +0000
Files and hashes: 1: jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl (hash: nqdruZXz4GlX5LAmBtNut9DCcHhbWV/rs5cJxtfYWoc=)
2: rPcwuV8U2gs2nEIcbxeBJt0QVGU.roa (hash: uIRWM7da9ucOHpupG9xSr3AJa0DcVZ8DVpjTgYL4B3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:20:e0:ba:ff:74:6f:39:8b:7a:fc:81:11:c2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ea175861ced0cf70d516479b3fa8807626ac31f
Validity
Not Before: Jun 29 00:01:26 2025 GMT
Not After : Jun 30 00:01:26 2025 GMT
Subject: CN=f4b4cb1bc369d2f0da087db95c01b0a62a15ef11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bc:94:f5:42:ed:e8:d7:23:af:6e:c1:ae:f1:
34:a8:64:c9:d5:44:9d:ef:bd:f1:00:e2:35:a9:4f:
e0:72:85:81:15:7f:e5:27:44:cb:19:be:11:14:04:
c6:25:b2:c9:bc:b5:17:ff:04:67:3a:e5:13:ca:6a:
e8:35:ff:ed:ec:f5:ff:f0:8c:42:c3:ea:06:3f:44:
90:dd:4e:f9:6d:82:bb:79:c0:c0:b6:52:b0:1d:55:
1e:9a:ef:44:7a:97:db:46:c8:30:3d:91:c8:8f:33:
6b:31:8e:db:1b:1e:e0:9c:e4:3d:7d:c3:d4:18:22:
b2:d6:27:d7:05:60:d1:2d:23:c9:15:64:71:10:ca:
ff:3f:0a:65:63:9c:86:0c:de:f0:56:63:a2:5a:40:
09:6b:34:d6:08:62:19:97:c5:b7:93:7e:7f:23:4f:
76:d8:71:d7:28:e8:fb:be:15:ec:01:91:9a:98:6c:
d9:e5:5c:f9:45:aa:68:3f:8e:bd:e9:9b:3c:f2:8f:
13:dd:3d:3c:cc:77:35:d6:cd:79:25:8f:d4:3a:2a:
30:7e:cd:a5:66:4c:7f:ec:1c:f8:5e:05:bd:95:f3:
be:76:15:99:1d:ad:50:24:f1:63:71:3d:f4:d4:80:
9e:02:5c:24:9e:cf:ca:58:a0:ef:80:2f:1c:d6:7a:
58:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B4:CB:1B:C3:69:D2:F0:DA:08:7D:B9:5C:01:B0:A6:2A:15:EF:11
X509v3 Authority Key Identifier:
keyid:8E:A1:75:86:1C:ED:0C:F7:0D:51:64:79:B3:FA:88:07:62:6A:C3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:33:20:ad:2b:62:30:a0:81:bb:e8:c9:39:31:8e:a3:b1:9d:
e1:df:f4:06:5c:6b:13:ca:46:9d:8a:32:f0:56:6e:51:90:ca:
24:65:3e:a4:c9:c6:06:2e:56:2d:2e:13:40:8a:47:6e:aa:88:
72:5a:36:2d:6e:0b:d3:ea:87:af:e9:72:45:29:dd:00:58:7b:
5c:d7:62:b7:6a:c3:ca:96:78:47:54:95:85:ec:a5:ac:c4:a0:
ac:f0:56:69:9e:4a:49:3c:fc:7a:37:2c:a1:bb:80:88:8a:7e:
c6:f9:54:10:78:9c:d1:59:be:d9:88:8f:ae:68:c0:7a:b5:a3:
18:f4:a1:f5:57:c2:c6:5a:c0:d1:a3:f2:14:e9:39:bd:5d:de:
16:f1:e1:53:8e:07:03:15:93:cd:a6:68:90:2b:b4:5e:ec:47:
43:84:1e:6c:30:2e:a4:ae:0d:10:82:13:88:20:44:6b:39:0f:
10:82:27:cc:c2:01:28:3f:ae:b3:8c:aa:38:a2:50:3b:c6:73:
85:1b:24:10:a2:7a:49:f4:81:ee:14:7b:59:a9:b1:bf:4b:74:
90:5a:6a:31:c7:2f:0e:66:b7:11:a4:52:fa:14:ed:6e:6d:e2:
46:ff:72:55:86:61:c0:cd:16:00:66:a3:a2:26:9c:d5:3e:a8:
63:10:9b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:17:47 2025 by rpki-client