Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
File: jq1F4xclfhcKIDDnmw9fdEBqeEI.mft (raw, json)
Hash identifier: APnduO8Wd0twexbLdP9L0vwZgHrz4aCRIvQ12ped8rU=
Subject key identifier: CA:EF:56:8A:9E:0C:4D:FB:48:33:7C:47:87:EB:03:2D:73:27:9C:0F
Authority key identifier: 8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42
Certificate issuer: /CN=8ead45e317257e170a2030e79b0f5f74406a7842
Certificate serial: 0198D54E461A52105C2A16B1136D38AE7A6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
Manifest number: 122E
Signing time: Sat 23 Aug 2025 05:02:13 +0000
Manifest this update: Sat 23 Aug 2025 05:02:13 +0000
Manifest next update: Sun 24 Aug 2025 05:02:13 +0000
Files and hashes: 1: U32_Sc22WvD7Fv16LTG7iyrHJKk.roa (hash: HDMDgZcXReJr66n8qO4cBkBwOaGGNGz+zcAfJfe/HW0=)
2: jq1F4xclfhcKIDDnmw9fdEBqeEI.crl (hash: gpdaVQf8VXbxRHyJCdS3qshDcinEJkDqdN+go+QH+uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:46:1a:52:10:5c:2a:16:b1:13:6d:38:ae:7a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ead45e317257e170a2030e79b0f5f74406a7842
Validity
Not Before: Aug 23 05:02:13 2025 GMT
Not After : Aug 24 05:02:13 2025 GMT
Subject: CN=caef568a9e0c4dfb48337c4787eb032d73279c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:7e:0f:4a:27:ac:9f:72:f8:98:82:fe:8e:9a:
4e:78:98:c3:aa:e6:0a:74:c5:fa:d9:02:7f:2e:77:
f7:28:7d:45:a1:75:8e:2a:39:d3:9b:a6:a5:04:91:
ef:7d:b1:29:63:1f:e2:5a:ea:26:fc:91:ea:ba:52:
fd:f7:4d:3d:18:63:35:dd:82:d6:a7:b8:38:5a:ce:
ad:33:7c:4c:e4:6c:3e:95:d5:14:48:07:11:55:1e:
4f:86:3b:25:95:40:a6:81:1f:b5:f0:10:3b:db:e9:
3e:d6:ed:df:a9:5b:54:87:4e:cc:44:09:fb:dc:80:
05:5a:ce:81:81:cc:a2:ad:bb:12:24:23:30:36:84:
a4:ba:2d:10:05:ca:b0:4c:6b:aa:8f:36:d9:cf:78:
ac:06:b3:14:d8:83:ab:33:c2:aa:05:77:c4:00:7f:
09:fc:5c:4d:8f:68:75:28:22:9c:5a:9c:de:85:0f:
2d:f4:6e:cd:fe:37:3b:e0:f3:54:89:f1:9b:03:20:
d3:49:fc:03:14:70:93:ef:48:3b:a1:f0:3a:13:52:
a0:25:d5:8a:db:8e:a5:3b:ec:4a:a3:14:27:e0:d7:
42:e8:97:e3:3b:4f:53:2c:31:9e:b8:6e:ad:ac:87:
99:4a:80:c1:e7:47:09:e2:c0:03:2a:96:90:a4:26:
99:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:EF:56:8A:9E:0C:4D:FB:48:33:7C:47:87:EB:03:2D:73:27:9C:0F
X509v3 Authority Key Identifier:
keyid:8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:70:b7:7a:70:94:85:47:db:f1:92:61:40:58:e1:bf:ee:68:
49:15:76:4f:5b:28:7c:f7:7f:9a:fc:30:fe:8b:dc:5b:2f:a8:
e8:38:04:f0:0b:32:e0:d7:bb:fb:43:b9:4a:40:c0:0c:43:33:
35:e8:54:c2:80:87:aa:fe:98:22:95:0f:43:a5:d7:ec:b5:a6:
88:23:06:b8:65:62:f4:5d:ad:84:b1:d6:8c:05:1f:a6:00:5c:
22:ad:24:04:d5:f3:5d:ad:96:44:71:01:05:25:eb:7b:b5:df:
6a:b7:0c:59:89:e9:14:95:55:13:11:24:24:1e:19:6f:ae:10:
51:59:a7:38:c4:f8:47:8b:af:37:90:fe:93:2b:9d:9c:c8:f2:
2a:d5:65:da:63:79:cf:f4:98:01:e7:cd:c0:95:81:5a:24:f8:
48:f4:c8:b3:57:9e:f6:3e:af:83:29:b7:0d:36:43:62:40:03:
92:46:df:a4:16:c0:a2:2c:55:b2:ca:1c:90:64:f8:12:a1:8f:
01:d3:15:d3:94:65:5a:71:b7:19:3a:b5:34:c2:16:a6:e3:2e:
81:f3:f9:28:ae:ad:d3:44:fe:20:f4:3b:13:09:ba:47:5a:ab:
d0:d5:ff:59:02:2a:ea:3a:c9:cb:2e:fc:ff:c1:ac:79:10:7d:
91:82:c3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:54 2025 by rpki-client