Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
File: jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft (raw, json)
Hash identifier: 0hAdguvNCCDLOiP7NLwHHrTBOPw8KH6RD74pX4SKRUM=
Subject key identifier: F5:CB:9A:8D:0B:5C:68:E6:AD:FD:74:92:D6:34:FF:A3:91:20:AE:A8
Authority key identifier: 8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
Certificate issuer: /CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Certificate serial: 019A0222914FBD4F5621BDC95B1DA42E2717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
Manifest number: 15E6
Signing time: Mon 20 Oct 2025 15:00:11 +0000
Manifest this update: Mon 20 Oct 2025 15:00:11 +0000
Manifest next update: Tue 21 Oct 2025 15:00:11 +0000
Files and hashes: 1: LEgJcT1HJwyV1gNb8G6Nv4QQcdA.roa (hash: MrTCL4S0d15bcXIlwlUs8e8j+hHw3EZvbQGkeB92Lzs=)
2: eiuuVdDHw7tCNh7-88E3raSuIfc.roa (hash: 3m5MOXmDNJezPlvUGc+JuyJPY6iXYjUfrVVj0/0iqB0=)
3: jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl (hash: y34FYrA9xbD6SgAGwmUSwNMyz3Fz8s/RgSZKUWEjJC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 15:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:22:91:4f:bd:4f:56:21:bd:c9:5b:1d:a4:2e:27:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Validity
Not Before: Oct 20 15:00:11 2025 GMT
Not After : Oct 21 15:00:11 2025 GMT
Subject: CN=f5cb9a8d0b5c68e6adfd7492d634ffa39120aea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:39:c8:c0:1b:7d:d4:25:8b:36:6f:7f:ab:f0:
32:da:c2:6f:c1:ba:98:92:91:10:b8:6e:9e:5d:df:
6e:f2:ec:77:74:eb:92:b3:56:6e:e3:23:c9:27:74:
7f:2e:27:88:5c:a0:6b:82:23:f7:fc:3f:b6:2c:3d:
c7:93:b4:b8:52:3d:ec:a1:71:16:59:5a:20:69:fc:
b8:c8:52:80:c9:47:ae:48:bf:c5:cc:71:e5:d8:df:
b0:ca:74:5d:da:e2:5b:ee:e7:3f:5c:2a:df:31:16:
64:a6:13:31:0b:85:7a:03:80:ee:7c:f7:98:05:6f:
f5:16:73:ac:e1:b5:3d:33:d8:06:44:05:7a:b6:2e:
c7:6e:49:d2:6c:4f:8c:7f:8c:e4:42:7f:48:b9:c3:
33:d4:a9:14:da:18:1a:12:1f:d7:75:66:a8:d8:b1:
2b:fc:10:b3:78:79:7c:4c:55:42:22:f1:13:b1:c2:
6d:b9:a2:64:32:54:62:c1:30:b8:bd:e1:32:d7:37:
ee:81:fa:38:0d:fe:4a:db:06:cd:2d:90:cf:30:4e:
fc:00:b8:e7:ac:a6:03:57:9e:15:8b:9e:62:1b:9a:
a2:69:c2:23:b6:47:cb:6c:5b:51:bf:53:48:e9:97:
4a:ba:51:0f:a8:a6:c3:7e:b3:ae:f1:c8:46:36:c3:
be:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:CB:9A:8D:0B:5C:68:E6:AD:FD:74:92:D6:34:FF:A3:91:20:AE:A8
X509v3 Authority Key Identifier:
keyid:8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:14:7a:3e:23:91:f7:38:57:92:65:3e:4e:86:2d:66:c8:b9:
2d:13:92:d2:0f:63:57:f1:b0:29:25:e1:a1:01:5b:62:4b:1d:
0f:f1:4e:04:51:0b:0d:9d:6e:33:ec:ec:3a:c4:6c:54:dd:96:
d1:85:2b:0d:8b:97:c5:5b:7f:b2:ec:b6:47:5c:2b:c8:b7:5c:
4c:37:58:e5:78:72:52:c9:44:a8:d2:f2:eb:b4:c7:ba:ea:a1:
15:46:e6:db:dd:45:6e:c7:7f:c0:ba:17:28:95:5e:c5:83:d6:
4c:20:7b:59:8f:a6:4a:77:a5:e6:51:b2:ab:d3:85:2a:89:d3:
e0:44:1e:7a:e9:91:94:60:6a:37:3e:95:4b:b3:6f:2a:07:3e:
d8:fb:50:dd:da:4b:b7:e8:59:70:cf:a0:f7:bb:24:f9:37:b2:
cf:37:e5:c9:61:01:b7:54:aa:2a:0b:d8:2a:fb:7c:b1:01:a4:
a1:e6:cc:a2:83:28:8e:5e:5a:2d:3d:d7:3e:4c:9c:3c:04:39:
dc:b3:75:1f:ac:1b:88:b7:4a:db:b4:7a:d3:cf:d7:af:07:4e:
89:26:a3:2e:79:9a:15:78:50:7c:34:28:6e:11:e4:9a:16:27:
f8:fc:b3:05:0e:b5:85:77:fb:0d:d8:92:90:b5:5b:99:93:5b:
37:5f:7f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:41:31 2025 by rpki-client