Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
File: JqsqOMqsDOPKAf24f9-WNy6FmLY.mft (raw, json)
Hash identifier: s2eetyYXSj4IdRAuci4tV2jNN/cyMB3OlmddruQo1WM=
Subject key identifier: 89:35:81:F1:41:81:36:15:94:69:D6:AD:FC:C5:29:AC:EA:17:94:59
Authority key identifier: 26:AB:2A:38:CA:AC:0C:E3:CA:01:FD:B8:7F:DF:96:37:2E:85:98:B6
Certificate issuer: /CN=26ab2a38caac0ce3ca01fdb87fdf96372e8598b6
Certificate serial: 0197B632BCD989EE80DB7FA6509D8C01A0A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
Manifest number: 150C
Signing time: Sat 28 Jun 2025 11:01:07 +0000
Manifest this update: Sat 28 Jun 2025 11:01:07 +0000
Manifest next update: Sun 29 Jun 2025 11:01:07 +0000
Files and hashes: 1: JqsqOMqsDOPKAf24f9-WNy6FmLY.crl (hash: hH0QCp1w230TukzQtHHoy8VK5eZVPIewijLAh2wWkwg=)
2: XNhLOVC-U9PPbLs6JsyzlnimIeQ.roa (hash: TD1akY3Fv3FxGktdYVS/WFPDKVHSuXmTFj0vHfZKIvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:bc:d9:89:ee:80:db:7f:a6:50:9d:8c:01:a0:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26ab2a38caac0ce3ca01fdb87fdf96372e8598b6
Validity
Not Before: Jun 28 11:01:07 2025 GMT
Not After : Jun 29 11:01:07 2025 GMT
Subject: CN=893581f1418136159469d6adfcc529acea179459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:85:21:5e:20:d4:ad:26:70:b2:6a:dc:bc:11:
7f:7a:b3:c7:47:73:ab:fa:a7:e6:e9:7c:6e:25:c8:
0f:5d:55:66:20:2b:85:0b:bf:59:b9:90:74:be:5d:
e8:5f:6e:42:c3:66:9a:d1:58:17:0e:90:7c:46:ec:
c3:ec:26:19:9d:a7:1c:fa:63:a6:32:6c:eb:03:47:
c4:11:85:35:84:2e:06:a3:d8:2b:5c:50:c0:74:71:
ff:8e:7e:06:c0:8f:c8:d4:20:c4:c1:42:32:5e:5a:
f9:33:7a:a9:e6:3c:ea:2e:40:6c:d5:79:28:5e:55:
83:04:cb:11:48:05:27:25:8f:da:bf:58:ba:45:c5:
a2:ec:df:41:43:1c:65:8c:c3:c2:51:7c:d6:75:34:
cc:41:c1:93:c6:66:13:f2:9c:3f:50:3a:16:20:9f:
3d:6b:d5:fd:70:c7:3e:3b:1f:a0:3f:07:5e:dc:e7:
91:92:a2:60:29:c3:f3:51:d7:8b:d1:08:7a:9f:ce:
6d:3e:6a:a6:f1:e7:e4:df:83:45:8f:9d:1f:bd:91:
14:e4:f7:37:85:e6:7d:fe:f8:96:64:2d:60:21:73:
ae:97:da:ec:7b:95:75:e9:c7:91:a7:81:f3:c0:b2:
e3:6b:7e:a2:a9:7a:cd:cd:3a:e4:15:e0:f3:9f:dc:
73:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:35:81:F1:41:81:36:15:94:69:D6:AD:FC:C5:29:AC:EA:17:94:59
X509v3 Authority Key Identifier:
keyid:26:AB:2A:38:CA:AC:0C:E3:CA:01:FD:B8:7F:DF:96:37:2E:85:98:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqsqOMqsDOPKAf24f9-WNy6FmLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b2770-0d31-4159-a9e9-5b9946dd1bea/1/JqsqOMqsDOPKAf24f9-WNy6FmLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:65:4d:ba:ef:52:fb:1c:a5:e5:9e:ca:bb:46:bc:6a:48:ea:
06:4a:ba:77:f4:6e:3b:7d:91:a8:8d:09:9d:44:64:52:38:69:
9a:b9:b7:85:c0:cb:73:23:9e:7c:16:29:2d:13:a3:63:4e:ca:
fb:a0:1a:82:e9:6c:51:2e:4b:f0:45:ca:94:2a:58:bb:ec:79:
62:0b:02:23:80:1c:27:57:0f:95:51:e7:97:36:84:ab:dc:9b:
5e:4a:fd:c5:82:3e:65:84:8e:e1:79:a6:60:0b:63:1f:98:ff:
42:a4:a2:32:f5:c8:f2:b2:24:2a:17:a9:ad:44:e5:48:f1:6a:
33:85:ca:67:c6:ec:86:0e:19:6d:cd:61:ee:34:f3:2b:97:48:
6d:7c:60:1f:1f:dd:da:8d:a0:06:e0:e6:44:73:b0:56:29:60:
ac:c0:bf:30:bf:a0:43:17:6a:2b:2e:ef:e5:57:96:dc:fc:3f:
6f:de:5f:ef:aa:43:93:6e:1a:2e:45:b2:73:b5:19:64:5f:06:
83:fe:ff:46:fd:83:a6:c7:a8:50:b5:37:73:57:ed:8d:0d:fa:
40:2a:4b:58:d6:9e:44:5e:02:11:8d:15:c5:8a:42:fd:47:d9:
d7:cf:5b:e6:a7:1c:a7:8b:be:26:13:a3:b3:ae:89:b3:57:b2:
8c:d0:18:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2MrzZie6A23+mUJ2MAaCkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2YWIyYTM4Y2FhYzBjZTNjYTAxZmRiODdmZGY5NjM3MmU4
NTk4YjYwHhcNMjUwNjI4MTEwMTA3WhcNMjUwNjI5MTEwMTA3WjAzMTEwLwYDVQQD
Eyg4OTM1ODFmMTQxODEzNjE1OTQ2OWQ2YWRmY2M1MjlhY2VhMTc5NDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IUhXiDUrSZwsmrcvBF/erPHR3Or
+qfm6XxuJcgPXVVmICuFC79ZuZB0vl3oX25Cw2aa0VgXDpB8RuzD7CYZnacc+mOm
MmzrA0fEEYU1hC4Go9grXFDAdHH/jn4GwI/I1CDEwUIyXlr5M3qp5jzqLkBs1Xko
XlWDBMsRSAUnJY/av1i6RcWi7N9BQxxljMPCUXzWdTTMQcGTxmYT8pw/UDoWIJ89
a9X9cMc+Ox+gPwde3OeRkqJgKcPzUdeL0Qh6n85tPmqm8efk34NFj50fvZEU5Pc3
heZ9/viWZC1gIXOul9rse5V16ceRp4HzwLLja36iqXrNzTrkFeDzn9xzzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIk1gfFBgTYVlGnWrfzFKazqF5RZMB8GA1UdIwQY
MBaAFCarKjjKrAzjygH9uH/fljcuhZi2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnFzcU9NcXNET1BLQWYyNGY5LVdOeTZGbUxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82YjI3NzAtMGQzMS00MTU5LWE5ZTkt
NWI5OTQ2ZGQxYmVhLzEvSnFzcU9NcXNET1BLQWYyNGY5LVdOeTZGbUxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi82YjI3NzAtMGQzMS00MTU5LWE5ZTktNWI5OTQ2ZGQxYmVh
LzEvSnFzcU9NcXNET1BLQWYyNGY5LVdOeTZGbUxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcWVNuu9S
+xyl5Z7Ku0a8akjqBkq6d/RuO32RqI0JnURkUjhpmrm3hcDLcyOefBYpLROjY07K
+6AagulsUS5L8EXKlCpYu+x5YgsCI4AcJ1cPlVHnlzaEq9ybXkr9xYI+ZYSO4Xmm
YAtjH5j/QqSiMvXI8rIkKheprUTlSPFqM4XKZ8bshg4Zbc1h7jTzK5dIbXxgHx/d
2o2gBuDmRHOwVilgrMC/ML+gQxdqKy7v5VeW3Pw/b95f76pDk24aLkWyc7UZZF8G
g/7/Rv2DpseoULU3c1ftjQ36QCpLWNaeRF4CEY0VxYpC/UfZ189b5qccp4u+JhOj
s66Js1eyjNAYTg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:07:51 2025 by rpki-client