Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
File: _jQJESdDd6icofnBXxgNqYbXRLc.mft (raw, json)
Hash identifier: jdKtbKnNKawH/pwuN1n6/AL/U8lCas6yD9h0jae8H/E=
Subject key identifier: 90:97:16:98:D4:12:65:0B:2F:D7:9E:31:B6:3A:83:E4:B7:90:E5:4E
Authority key identifier: FE:34:09:11:27:43:77:A8:9C:A1:F9:C1:5F:18:0D:A9:86:D7:44:B7
Certificate issuer: /CN=fe340911274377a89ca1f9c15f180da986d744b7
Certificate serial: 0198D73B424AF4289FFCDFAC79B3B6993A85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
Manifest number: 02DD
Signing time: Sat 23 Aug 2025 14:00:41 +0000
Manifest this update: Sat 23 Aug 2025 14:00:41 +0000
Manifest next update: Sun 24 Aug 2025 14:00:41 +0000
Files and hashes: 1: 7qFS32WykIo9De6woWK_a4zI6AE.roa (hash: 2dnjawr1HUy6D3OjqGMisdNqLiSRoZxYXLiFU07VYtM=)
2: _jQJESdDd6icofnBXxgNqYbXRLc.crl (hash: 3AmwFYaFQNB7JiEsQJEsHQ5IEG//fdxYx7QHSbTkvA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:42:4a:f4:28:9f:fc:df:ac:79:b3:b6:99:3a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe340911274377a89ca1f9c15f180da986d744b7
Validity
Not Before: Aug 23 14:00:41 2025 GMT
Not After : Aug 24 14:00:41 2025 GMT
Subject: CN=90971698d412650b2fd79e31b63a83e4b790e54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f5:de:10:24:72:70:a3:76:be:41:77:35:f1:
47:a0:db:3d:68:d7:9d:db:af:0c:a3:57:ea:0c:38:
50:05:d3:c0:74:5c:42:d1:28:ee:97:81:fa:ea:ac:
99:ac:66:10:17:07:a8:b8:19:83:c7:af:9a:85:01:
80:bc:c2:00:85:80:e2:8d:74:e9:53:1f:9e:e4:5f:
5a:ca:91:1c:73:7a:68:33:ec:00:6a:09:c2:fa:c4:
a0:c0:b7:7a:c4:cf:08:ab:b9:4d:db:11:ff:2b:ef:
37:ea:fb:89:a2:64:37:73:f5:3e:66:0e:ff:aa:7e:
86:cb:a9:94:d2:37:d4:69:3c:99:d7:14:cb:91:46:
16:ce:0a:39:c3:ac:cc:e1:18:54:73:81:3f:59:8a:
e0:43:dc:85:87:a2:bb:8f:68:78:e7:b3:da:e4:f4:
f0:13:ae:d0:a0:52:d2:96:72:3a:6b:91:29:d4:2e:
2a:e1:b5:24:5a:17:68:af:cf:08:b3:91:c3:9a:6c:
2c:7f:e3:4b:44:3f:6f:f6:46:77:30:8a:75:da:14:
d4:89:8b:f9:af:12:86:12:ac:8b:3c:9f:49:92:29:
3e:e9:dd:7f:7b:ec:22:b3:fd:2a:c9:e5:53:3d:bd:
3a:b0:c0:7b:47:33:b0:3b:0a:6b:00:75:23:93:96:
9e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:97:16:98:D4:12:65:0B:2F:D7:9E:31:B6:3A:83:E4:B7:90:E5:4E
X509v3 Authority Key Identifier:
keyid:FE:34:09:11:27:43:77:A8:9C:A1:F9:C1:5F:18:0D:A9:86:D7:44:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jQJESdDd6icofnBXxgNqYbXRLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9daf2f-46d2-4d05-926b-a8bf214ed166/1/_jQJESdDd6icofnBXxgNqYbXRLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:93:a6:46:99:2e:d9:33:df:cf:e5:a8:3d:3b:05:0e:23:21:
80:15:a1:1c:9a:d4:56:37:4f:97:62:cf:37:f5:73:f3:e6:43:
0e:7a:9e:91:52:22:d5:71:f7:c6:0f:f0:a2:4e:d4:0e:40:e4:
39:b1:49:94:1f:3c:e3:34:b9:81:85:68:75:8b:4a:36:61:c2:
17:61:60:05:f2:f2:e5:e9:14:17:ee:e5:fa:60:89:87:87:d7:
eb:16:de:b7:53:da:7f:93:aa:cb:55:92:51:9c:ba:47:fa:7a:
22:e4:ba:5f:7b:88:fe:c1:88:81:b6:a1:9c:f9:a4:38:5b:63:
70:da:89:a3:89:b5:72:cc:03:5a:48:96:27:3a:59:b5:0e:fa:
71:09:5b:88:7b:28:17:d1:f7:db:01:d9:14:8d:e1:34:b2:66:
ac:c1:2d:78:38:48:07:98:58:2c:98:70:f4:c7:7f:62:c3:93:
4f:ce:12:f8:31:f4:cf:60:3e:53:9c:13:aa:34:cd:b8:0a:49:
c1:6c:a8:7b:62:30:64:af:f0:fc:0c:38:c0:ce:5f:48:40:74:
3c:6e:20:d3:e2:31:0d:78:d3:2a:ce:59:ee:43:97:21:6f:1e:
68:15:87:0c:fd:50:ad:00:68:b4:80:f0:ee:4d:15:b8:57:7c:
9d:84:76:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXO0JK9Cif/N+sebO2mTqFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMzQwOTExMjc0Mzc3YTg5Y2ExZjljMTVmMTgwZGE5ODZk
NzQ0YjcwHhcNMjUwODIzMTQwMDQxWhcNMjUwODI0MTQwMDQxWjAzMTEwLwYDVQQD
Eyg5MDk3MTY5OGQ0MTI2NTBiMmZkNzllMzFiNjNhODNlNGI3OTBlNTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfXeECRycKN2vkF3NfFHoNs9aNed
268Mo1fqDDhQBdPAdFxC0Sjul4H66qyZrGYQFweouBmDx6+ahQGAvMIAhYDijXTp
Ux+e5F9aypEcc3poM+wAagnC+sSgwLd6xM8Iq7lN2xH/K+836vuJomQ3c/U+Zg7/
qn6Gy6mU0jfUaTyZ1xTLkUYWzgo5w6zM4RhUc4E/WYrgQ9yFh6K7j2h457Pa5PTw
E67QoFLSlnI6a5Ep1C4q4bUkWhdor88Is5HDmmwsf+NLRD9v9kZ3MIp12hTUiYv5
rxKGEqyLPJ9Jkik+6d1/e+wis/0qyeVTPb06sMB7RzOwOwprAHUjk5aeGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCXFpjUEmULL9eeMbY6g+S3kOVOMB8GA1UdIwQY
MBaAFP40CREnQ3eonKH5wV8YDamG10S3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2pRSkVTZERkNmljb2ZuQlh4Z05xWWJYUkxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85ZGFmMmYtNDZkMi00ZDA1LTkyNmIt
YThiZjIxNGVkMTY2LzEvX2pRSkVTZERkNmljb2ZuQlh4Z05xWWJYUkxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85ZGFmMmYtNDZkMi00ZDA1LTkyNmItYThiZjIxNGVkMTY2
LzEvX2pRSkVTZERkNmljb2ZuQlh4Z05xWWJYUkxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHJOmRpku
2TPfz+WoPTsFDiMhgBWhHJrUVjdPl2LPN/Vz8+ZDDnqekVIi1XH3xg/wok7UDkDk
ObFJlB884zS5gYVodYtKNmHCF2FgBfLy5ekUF+7l+mCJh4fX6xbet1Paf5Oqy1WS
UZy6R/p6IuS6X3uI/sGIgbahnPmkOFtjcNqJo4m1cswDWkiWJzpZtQ76cQlbiHso
F9H32wHZFI3hNLJmrMEteDhIB5hYLJhw9Md/YsOTT84S+DH0z2A+U5wTqjTNuApJ
wWyoe2IwZK/w/Aw4wM5fSEB0PG4g0+IxDXjTKs5Z7kOXIW8eaBWHDP1QrQBotIDw
7k0VuFd8nYR2Tw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:30:30 2025 by rpki-client