Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
File: jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft (raw, json)
Hash identifier: BPxqFc0nuRWka8nWsNz686fOOq9Pcor80jMOZltdxH8=
Subject key identifier: FA:67:D2:1E:09:BA:CF:59:DC:F1:9A:3A:B9:E2:C9:AB:2F:D6:D3:5E
Authority key identifier: 8E:A1:75:86:1C:ED:0C:F7:0D:51:64:79:B3:FA:88:07:62:6A:C3:1F
Certificate issuer: /CN=8ea175861ced0cf70d516479b3fa8807626ac31f
Certificate serial: 0199FC58CFFA5875BD54F829069FF733BC9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
Manifest number: 02CD
Signing time: Sun 19 Oct 2025 12:01:42 +0000
Manifest this update: Sun 19 Oct 2025 12:01:42 +0000
Manifest next update: Mon 20 Oct 2025 12:01:42 +0000
Files and hashes: 1: jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl (hash: mLmmLAIVQiJomXT/N1yjSwLnawROOSRg91nsmnkRvU8=)
2: rPcwuV8U2gs2nEIcbxeBJt0QVGU.roa (hash: uIRWM7da9ucOHpupG9xSr3AJa0DcVZ8DVpjTgYL4B3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:cf:fa:58:75:bd:54:f8:29:06:9f:f7:33:bc:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ea175861ced0cf70d516479b3fa8807626ac31f
Validity
Not Before: Oct 19 12:01:42 2025 GMT
Not After : Oct 20 12:01:42 2025 GMT
Subject: CN=fa67d21e09bacf59dcf19a3ab9e2c9ab2fd6d35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:69:90:4d:2a:33:8e:82:06:15:3b:cb:17:0c:
3c:9c:08:0d:bc:d4:0f:47:d7:1d:ea:e9:e6:23:36:
7b:25:30:3c:01:e0:07:af:d7:f1:57:58:d2:07:19:
17:14:5b:43:2f:c2:45:0e:ab:c2:7a:39:5a:fd:fd:
64:5f:5a:1b:51:4d:59:c6:66:9f:a6:62:c7:75:2c:
e5:84:d1:61:d7:2f:d0:c2:f3:ec:be:20:fa:50:45:
6c:83:b5:82:7f:40:67:a3:94:c3:b5:31:39:35:12:
9a:35:34:3c:af:b9:0b:59:ce:50:f6:a3:94:09:1d:
fe:ee:43:cb:cc:3a:c2:44:86:e7:af:f3:a3:82:e0:
07:41:27:66:f2:31:ec:8f:aa:50:2c:bd:0b:c0:e3:
10:64:97:2a:b7:49:73:d8:c9:b8:1c:01:16:b6:25:
23:13:42:10:3d:35:0f:18:eb:43:e5:6b:14:39:9e:
7a:1d:f6:90:ea:77:7e:f0:53:89:13:f6:87:87:05:
62:2b:8c:0e:d8:a5:4b:a0:04:46:c8:80:e2:01:f5:
98:e3:36:89:8e:fa:ce:02:61:8b:c2:c7:f1:5e:f9:
4c:c0:5a:51:41:52:db:23:c8:27:68:24:05:27:dc:
be:29:5c:4c:a0:25:67:b8:fc:af:5f:1d:1a:e2:8b:
5c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:67:D2:1E:09:BA:CF:59:DC:F1:9A:3A:B9:E2:C9:AB:2F:D6:D3:5E
X509v3 Authority Key Identifier:
keyid:8E:A1:75:86:1C:ED:0C:F7:0D:51:64:79:B3:FA:88:07:62:6A:C3:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqF1hhztDPcNUWR5s_qIB2Jqwx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ebfac8-57b5-48a4-a690-daed8f1e748b/1/jqF1hhztDPcNUWR5s_qIB2Jqwx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:18:b5:86:46:42:e4:10:da:7e:20:a9:b6:ab:0b:a9:e1:42:
df:28:25:2d:c4:77:8e:ab:1a:5c:3d:f5:75:39:d7:82:5d:dc:
58:bc:26:35:56:95:1b:9c:d9:09:3c:3b:da:ce:8c:1a:de:0d:
9c:11:79:09:3d:38:5d:83:e1:b9:0b:3a:9a:77:ed:8a:91:19:
0b:1a:a8:30:4d:d1:f0:55:f9:04:58:59:c9:89:cd:7e:e6:e1:
61:db:9a:18:23:16:0d:0c:a5:2e:c1:e7:33:cc:67:cc:30:23:
b5:1a:47:40:be:ae:55:74:48:07:1e:27:6b:d6:29:57:68:8b:
64:bb:c1:5a:79:f2:ba:8a:bb:d1:38:e4:ab:92:fd:ea:57:1f:
21:7a:6e:12:2e:43:e1:f0:72:7f:1f:0b:16:2d:13:8b:97:c7:
c9:62:5e:88:a8:6b:5d:e1:6e:09:aa:d3:97:a5:2d:bf:4c:68:
a6:41:de:8b:7e:bc:de:b1:b4:13:2b:8e:bf:5b:4e:5c:c7:0b:
f7:9b:ec:f0:02:03:67:b4:60:43:5d:90:6b:27:ca:3b:da:8b:
d9:1a:31:5c:e3:2f:8d:eb:9c:78:83:d4:17:97:fd:96:52:9f:
37:59:16:52:69:89:9d:d2:b7:73:7c:b6:93:2c:91:94:86:8d:
07:35:83:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:27 2025 by rpki-client