Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
File: JqsqOMqsDOPKAf24f9-WNy6FmLY.mft (raw, json)
Hash identifier: gWcgpRwc1Gtd4xXRrksIJlp1Y7rKg9rjLdfh5uEAPsA=
Subject key identifier: 1F:C4:7B:B1:7C:18:CB:DA:31:04:72:EC:E9:BD:94:50:37:17:06:B0
Authority key identifier: 26:AB:2A:38:CA:AC:0C:E3:CA:01:FD:B8:7F:DF:96:37:2E:85:98:B6
Certificate issuer: /CN=26ab2a38caac0ce3ca01fdb87fdf96372e8598b6
Certificate serial: 0198D5F176D98287C9E773881FAA26497433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
Manifest number: 15A1
Signing time: Sat 23 Aug 2025 08:00:28 +0000
Manifest this update: Sat 23 Aug 2025 08:00:28 +0000
Manifest next update: Sun 24 Aug 2025 08:00:28 +0000
Files and hashes: 1: JqsqOMqsDOPKAf24f9-WNy6FmLY.crl (hash: +U2CJmdvCRkVIMS4g8r+eOJ2BVKI+xsrCSagORNi7yY=)
2: XNhLOVC-U9PPbLs6JsyzlnimIeQ.roa (hash: TD1akY3Fv3FxGktdYVS/WFPDKVHSuXmTFj0vHfZKIvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:76:d9:82:87:c9:e7:73:88:1f:aa:26:49:74:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26ab2a38caac0ce3ca01fdb87fdf96372e8598b6
Validity
Not Before: Aug 23 08:00:28 2025 GMT
Not After : Aug 24 08:00:28 2025 GMT
Subject: CN=1fc47bb17c18cbda310472ece9bd9450371706b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:85:d0:4a:3f:48:0f:52:b4:0e:59:5a:3b:c3:
43:ea:7e:d7:fe:72:d6:c4:d9:2a:9c:3a:ed:7c:c7:
c1:2d:d2:a3:e3:e0:c0:d2:41:be:25:6f:f7:f8:de:
68:42:ec:1a:70:6f:da:88:e6:20:bb:d8:70:57:13:
c8:ab:d8:75:ff:7e:b8:75:5f:13:28:37:32:7a:de:
b9:ab:50:86:09:b7:c7:be:49:54:f5:44:60:8a:d1:
f4:71:d5:88:ee:26:c7:d1:cc:e7:0a:e4:23:34:59:
e7:96:d1:d7:bf:da:d9:39:ca:12:93:2d:1c:7e:2a:
f5:0c:69:9c:1e:8a:48:b2:29:f6:a9:76:2e:00:4f:
54:0a:77:fb:21:54:1d:92:5c:40:a3:e6:dd:a4:91:
bd:a5:1d:a0:91:1b:ed:f5:23:d1:b6:9f:d7:21:9b:
4d:6f:98:82:54:3e:1e:90:52:ca:01:11:c3:ef:32:
1f:d3:2b:9a:2a:9c:c5:2d:17:4c:58:ad:9c:bd:18:
7f:1b:52:8b:56:88:ff:98:0b:96:2e:28:17:bd:50:
2b:3f:ec:f1:a9:9e:27:d5:cd:92:c5:98:8d:2a:70:
81:ed:26:08:33:b6:7f:50:07:97:83:b8:67:ea:1a:
17:6a:09:33:c6:8d:db:9d:f1:42:63:de:e3:4f:98:
c7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C4:7B:B1:7C:18:CB:DA:31:04:72:EC:E9:BD:94:50:37:17:06:B0
X509v3 Authority Key Identifier:
keyid:26:AB:2A:38:CA:AC:0C:E3:CA:01:FD:B8:7F:DF:96:37:2E:85:98:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:61:f3:56:1d:91:e7:ed:e7:40:49:ee:94:d5:91:48:3b:c6:
03:96:9f:f5:bb:0c:fc:01:ba:4b:85:7a:05:c8:08:60:84:4f:
a9:f3:25:c8:3a:9d:27:be:fd:cf:15:24:74:31:a0:29:b1:10:
47:d3:44:f9:57:0a:a7:74:94:b5:6f:28:68:cd:9d:e7:da:df:
41:74:c1:b5:bd:c0:6f:37:0b:87:6a:47:85:8b:b3:50:b3:78:
1c:a7:23:d2:86:d4:7d:2b:df:86:97:74:df:07:1b:ab:04:07:
90:30:cb:3b:d2:4e:22:55:c1:b5:12:a0:aa:e0:88:59:f3:d2:
23:b5:2c:c4:21:10:e1:0a:99:7b:88:c1:3a:fd:87:ea:24:0f:
96:0d:f7:6a:ae:e8:05:4d:6f:75:fc:c8:50:95:46:5b:d4:23:
62:58:f3:5d:ad:dd:39:66:dd:6c:01:af:d1:79:8b:e4:7a:e3:
71:ed:d3:d8:bb:ac:2a:84:bf:22:d7:13:9f:e9:12:1e:cf:97:
50:ea:e9:35:ee:d4:fd:7b:ad:34:54:80:26:50:3b:f8:ce:ac:
77:c8:b1:38:51:dc:f4:fc:2e:43:65:4d:45:87:44:8f:74:5d:
6f:a3:1e:d7:1b:b3:1e:d6:2b:6b:97:79:22:4a:02:19:67:7c:
07:a6:18:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:56:41 2025 by rpki-client