Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
File: JqsqOMqsDOPKAf24f9-WNy6FmLY.mft (raw, json)
Hash identifier: A6xfxZd/cFUqRJHYXVVNwdRyxbotFUgiIas76xDEb+Q=
Subject key identifier: 2D:55:1A:CF:07:98:D2:B0:55:2D:98:D0:1C:CC:98:35:5F:B4:B2:89
Authority key identifier: 26:AB:2A:38:CA:AC:0C:E3:CA:01:FD:B8:7F:DF:96:37:2E:85:98:B6
Certificate issuer: /CN=26ab2a38caac0ce3ca01fdb87fdf96372e8598b6
Certificate serial: 0199FB7C93714F79F8E8B3F5814B167B9301
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
Manifest number: 1639
Signing time: Sun 19 Oct 2025 08:01:09 +0000
Manifest this update: Sun 19 Oct 2025 08:01:09 +0000
Manifest next update: Mon 20 Oct 2025 08:01:09 +0000
Files and hashes: 1: JqsqOMqsDOPKAf24f9-WNy6FmLY.crl (hash: 5ZfYwVXzszEmxn63mS1YpdKgNHJqmug2mpT+ka1j16I=)
2: XNhLOVC-U9PPbLs6JsyzlnimIeQ.roa (hash: TD1akY3Fv3FxGktdYVS/WFPDKVHSuXmTFj0vHfZKIvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:93:71:4f:79:f8:e8:b3:f5:81:4b:16:7b:93:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26ab2a38caac0ce3ca01fdb87fdf96372e8598b6
Validity
Not Before: Oct 19 08:01:09 2025 GMT
Not After : Oct 20 08:01:09 2025 GMT
Subject: CN=2d551acf0798d2b0552d98d01ccc98355fb4b289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:33:3f:c2:5e:69:d7:a2:c0:d5:8d:41:f6:5e:
5b:8c:0b:b6:83:21:14:c5:49:de:8f:10:2e:ba:8f:
31:cf:2f:4d:36:90:bf:1d:51:1e:80:11:14:b2:57:
cb:02:d0:cc:66:c9:25:80:a7:1d:ee:fa:62:59:1f:
e4:de:ea:64:3d:f8:48:42:e7:36:b8:7d:c6:cb:e4:
61:ba:dd:36:8c:69:65:92:6d:db:60:97:31:f3:25:
79:af:e9:f6:35:4e:ed:f7:10:ce:e5:31:45:50:33:
10:cd:76:e0:ac:fe:db:5c:f6:cf:ca:26:64:fa:e2:
d4:ce:e1:70:9f:9d:4d:98:f2:98:ad:d3:ea:91:4b:
67:41:23:97:9f:8a:43:f5:a0:3c:f4:0b:2f:0c:e9:
70:ef:60:c0:2b:24:bb:97:e2:29:a7:41:37:ca:33:
e3:a4:6d:76:4f:2a:23:2a:6d:1a:81:6f:34:3b:94:
70:a5:7f:d6:4d:fd:56:fd:98:44:54:9f:e8:96:94:
74:46:a9:0d:45:f1:0b:cf:11:3e:43:fd:26:cd:83:
3a:de:62:61:1a:87:d4:ec:45:93:68:ce:49:9b:44:
d8:77:52:12:91:10:1f:e4:10:2a:d9:85:51:9a:93:
bd:50:f8:40:53:d9:79:eb:6f:83:4e:e6:11:6c:4e:
20:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:55:1A:CF:07:98:D2:B0:55:2D:98:D0:1C:CC:98:35:5F:B4:B2:89
X509v3 Authority Key Identifier:
keyid:26:AB:2A:38:CA:AC:0C:E3:CA:01:FD:B8:7F:DF:96:37:2E:85:98:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:09:98:bb:c9:fc:a8:b8:33:9b:39:17:40:f7:bb:8e:e7:0b:
09:84:b5:09:90:2b:48:a5:17:d7:83:3a:bb:7f:21:4a:16:49:
cd:97:98:88:3b:6b:e1:07:96:78:d7:d3:1f:81:01:5a:8c:99:
bc:5e:90:17:6e:cd:cc:35:69:90:8a:14:3d:a4:eb:3b:24:ff:
ce:97:0a:64:e3:2a:d2:72:e4:12:7d:ef:eb:36:2d:54:a7:24:
91:d2:8f:bc:12:9a:fb:70:89:17:37:70:86:18:b9:eb:65:41:
b7:18:5e:31:cc:eb:e2:2e:d2:1e:61:ec:f0:54:88:1c:ea:d4:
64:4e:4c:32:4f:4a:e7:05:24:18:be:4f:5a:87:4c:1e:cc:1b:
6e:98:a6:dc:ae:ba:15:af:33:b4:2b:e7:4d:57:b9:ad:2a:e5:
de:d5:a3:e0:fc:fa:e4:2a:ec:86:ae:2a:af:ab:bf:2f:71:1b:
80:cb:d5:7a:1a:fd:bc:e5:53:86:02:fb:52:2b:35:39:64:1f:
12:82:79:7f:d3:d8:e4:69:10:73:da:2a:45:fa:d9:3b:61:91:
dd:c9:3e:67:5d:33:f1:df:c8:3c:81:aa:18:ad:4d:0f:e3:5b:
23:20:4a:ef:f3:9b:5b:a3:77:41:16:c2:14:bd:8d:44:18:48:
b4:7a:5b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:03 2025 by rpki-client