
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
File: jqw2_1M-tvj4qmWSAiDPpHHlorE.mft (raw, json)
Hash identifier: zcCGxO4d7me/JJwtowHtfBJVKP2rysJmv14vQXbSFRM=
Subject key identifier: 03:B6:BF:85:27:A4:B8:B9:FA:B4:C5:71:26:70:3A:3D:C4:77:3D:BD
Authority key identifier: 8E:AC:36:FF:53:3E:B6:F8:F8:AA:65:92:02:20:CF:A4:71:E5:A2:B1
Certificate issuer: /CN=8eac36ff533eb6f8f8aa65920220cfa471e5a2b1
Certificate serial: 0199FAA157404568B58C2A9C5D2F9EBCF9B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
Manifest number: 133A
Signing time: Sun 19 Oct 2025 04:01:41 +0000
Manifest this update: Sun 19 Oct 2025 04:01:41 +0000
Manifest next update: Mon 20 Oct 2025 04:01:41 +0000
Files and hashes: 1: Lp4_8KBWJdha2Jzdhq102LYjczg.roa (hash: sRJMp6kjdQS4Uru55TcR1RrRtgv1vq1HoJumS3BQdg8=)
2: jqw2_1M-tvj4qmWSAiDPpHHlorE.crl (hash: 3PJP3ANXoBOrk9UIhhC0jh1/zDaRh6Bt1Ufpr33X+Y4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:57:40:45:68:b5:8c:2a:9c:5d:2f:9e:bc:f9:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eac36ff533eb6f8f8aa65920220cfa471e5a2b1
Validity
Not Before: Oct 19 04:01:41 2025 GMT
Not After : Oct 20 04:01:41 2025 GMT
Subject: CN=03b6bf8527a4b8b9fab4c57126703a3dc4773dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:02:dd:ef:f6:40:ec:5c:2f:6c:73:6b:7e:30:
ee:22:a6:c4:2c:86:2b:38:7b:b9:b7:fd:b1:e0:09:
a9:44:76:ed:eb:2c:2d:5b:da:df:63:4a:0f:2d:c5:
67:f3:4d:4f:1e:9a:88:eb:00:41:7a:d5:fd:47:ec:
0e:cb:e1:08:db:9f:b6:bd:e0:7b:00:62:2e:9f:49:
d3:77:ae:78:cd:d1:03:cc:ec:11:af:bc:1b:c2:d2:
40:39:8a:69:c0:1f:af:a4:0f:eb:33:78:22:c0:3e:
bb:17:08:92:3f:12:61:3d:31:60:e7:e6:78:77:fa:
9b:bf:b4:a8:8a:f8:42:e2:b8:5f:7c:47:af:a7:71:
66:fe:55:8c:71:9d:d2:c5:1f:3c:ad:80:49:17:90:
b4:29:4f:30:37:cf:de:17:62:07:36:a2:af:a2:10:
0d:ec:0a:2c:55:3a:a9:6a:1c:af:af:fb:47:a1:bb:
9d:b2:57:9b:dd:b7:5e:07:da:e0:a6:58:e7:9f:4c:
a6:50:60:6d:1a:fe:5c:d8:33:40:0e:22:eb:b4:bb:
94:3e:9f:e7:a8:aa:35:bf:1d:ef:04:ae:c8:28:5e:
0c:3b:aa:ff:7a:5b:0c:82:44:1e:aa:d3:96:62:a5:
d9:78:87:ae:79:1e:ac:5e:2d:4c:78:d1:62:6b:c6:
aa:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B6:BF:85:27:A4:B8:B9:FA:B4:C5:71:26:70:3A:3D:C4:77:3D:BD
X509v3 Authority Key Identifier:
keyid:8E:AC:36:FF:53:3E:B6:F8:F8:AA:65:92:02:20:CF:A4:71:E5:A2:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqw2_1M-tvj4qmWSAiDPpHHlorE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61a140-110e-4197-8da5-56ba198d17f0/1/jqw2_1M-tvj4qmWSAiDPpHHlorE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e2:1e:fa:f9:ff:e6:a4:e8:63:9b:86:92:c8:33:43:d6:23:
61:ac:4a:d4:f7:7b:00:b7:6c:c6:a6:33:90:94:c3:2d:1b:60:
e3:8d:da:c5:e2:29:a7:c2:3c:fe:a0:0c:1b:82:fc:cb:ca:88:
3d:56:da:42:1d:c4:a6:e3:26:6f:82:aa:de:6a:9e:a6:10:e3:
ea:9b:20:03:de:99:86:05:24:d3:84:84:e1:bf:0e:c6:0c:48:
a5:f9:2f:54:51:be:98:bf:22:70:63:06:70:b7:f1:b8:78:60:
1c:dd:e0:f2:09:ce:e9:a3:01:5a:0e:4e:d9:93:c6:6a:3c:94:
52:89:7e:76:72:d3:08:73:80:4c:f6:06:96:e6:7d:d9:c3:60:
85:68:a1:63:d9:4c:59:8b:e5:15:d1:94:81:be:47:f2:ca:40:
46:68:01:e2:7d:ff:60:b5:30:37:67:1c:56:0a:3f:b0:48:96:
89:2f:9f:88:de:d4:7e:9f:74:f9:91:d7:48:fe:31:34:2b:45:
04:be:84:2c:44:08:f5:d9:35:82:52:6e:4c:ce:2c:c0:df:95:
70:6a:b4:4e:d5:3f:36:69:30:5e:e3:cb:88:b4:c7:22:4d:84:
7f:99:c5:95:16:32:5f:74:10:8a:68:7c:13:28:e2:7d:df:16:
bf:bd:35:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn6oVdARWi1jCqcXS+evPm5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYWMzNmZmNTMzZWI2ZjhmOGFhNjU5MjAyMjBjZmE0NzFl
NWEyYjEwHhcNMjUxMDE5MDQwMTQxWhcNMjUxMDIwMDQwMTQxWjAzMTEwLwYDVQQD
EygwM2I2YmY4NTI3YTRiOGI5ZmFiNGM1NzEyNjcwM2EzZGM0NzczZGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwLd7/ZA7FwvbHNrfjDuIqbELIYr
OHu5t/2x4AmpRHbt6ywtW9rfY0oPLcVn801PHpqI6wBBetX9R+wOy+EI25+2veB7
AGIun0nTd654zdEDzOwRr7wbwtJAOYppwB+vpA/rM3giwD67FwiSPxJhPTFg5+Z4
d/qbv7SoivhC4rhffEevp3Fm/lWMcZ3SxR88rYBJF5C0KU8wN8/eF2IHNqKvohAN
7AosVTqpahyvr/tHobudsleb3bdeB9rgpljnn0ymUGBtGv5c2DNADiLrtLuUPp/n
qKo1vx3vBK7IKF4MO6r/elsMgkQeqtOWYqXZeIeueR6sXi1MeNFia8aqXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAO2v4UnpLi5+rTFcSZwOj3Edz29MB8GA1UdIwQY
MBaAFI6sNv9TPrb4+KplkgIgz6Rx5aKxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanF3Ml8xTS10dmo0cW1XU0FpRFBwSEhsb3JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82MWExNDAtMTEwZS00MTk3LThkYTUt
NTZiYTE5OGQxN2YwLzEvanF3Ml8xTS10dmo0cW1XU0FpRFBwSEhsb3JFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS82MWExNDAtMTEwZS00MTk3LThkYTUtNTZiYTE5OGQxN2Yw
LzEvanF3Ml8xTS10dmo0cW1XU0FpRFBwSEhsb3JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATeIe+vn/
5qToY5uGksgzQ9YjYaxK1Pd7ALdsxqYzkJTDLRtg443axeIpp8I8/qAMG4L8y8qI
PVbaQh3EpuMmb4Kq3mqephDj6psgA96ZhgUk04SE4b8OxgxIpfkvVFG+mL8icGMG
cLfxuHhgHN3g8gnO6aMBWg5O2ZPGajyUUol+dnLTCHOATPYGluZ92cNghWihY9lM
WYvlFdGUgb5H8spARmgB4n3/YLUwN2ccVgo/sEiWiS+fiN7Ufp90+ZHXSP4xNCtF
BL6ELEQI9dk1glJuTM4swN+VcGq0TtU/NmkwXuPLiLTHIk2Ef5nFlRYyX3QQimh8
Eyjifd8Wv701AA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:22 2025 by rpki-client