Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
File: JTKlzyuhjHU-3JXuILZmKT3wLVs.mft (raw, json)
Hash identifier: mjTeo+uywTyxua98PIJOrH6V+5+G9K9TiTaE+0VWr9c=
Subject key identifier: E5:14:A3:85:D2:74:90:10:55:64:7C:E8:23:05:A4:AE:42:F4:FB:1B
Authority key identifier: 25:32:A5:CF:2B:A1:8C:75:3E:DC:95:EE:20:B6:66:29:3D:F0:2D:5B
Certificate issuer: /CN=2532a5cf2ba18c753edc95ee20b666293df02d5b
Certificate serial: 0198D54EADA2DB35E85DE96195B7FBBED950
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
Manifest number: 112B
Signing time: Sat 23 Aug 2025 05:02:39 +0000
Manifest this update: Sat 23 Aug 2025 05:02:39 +0000
Manifest next update: Sun 24 Aug 2025 05:02:39 +0000
Files and hashes: 1: JTKlzyuhjHU-3JXuILZmKT3wLVs.crl (hash: W7xaK/5QH6AawV2RWU1GpREtqJdKYW48DxrJXpAKL8Q=)
2: oBH_u1PqllstMg1clbDeim1fyyE.roa (hash: L3SOkvuxnMh5EHKE9/YilBcdLKJMaucr/0ncA4MIDhw=)
3: zHs9cFuQEsCg45LnMiCsOF3kF4Q.roa (hash: C6+fwUFGNJ/F4sEfe/qDP+eEAltXpbDsycsJBFRmzqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:ad:a2:db:35:e8:5d:e9:61:95:b7:fb:be:d9:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2532a5cf2ba18c753edc95ee20b666293df02d5b
Validity
Not Before: Aug 23 05:02:39 2025 GMT
Not After : Aug 24 05:02:39 2025 GMT
Subject: CN=e514a385d274901055647ce82305a4ae42f4fb1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bd:49:48:0d:bf:db:56:99:f6:7f:cf:94:7a:
05:d5:c2:46:3e:7a:32:54:7c:49:a3:b1:da:b2:38:
f1:b1:ff:c6:c0:bc:0e:03:57:13:d4:64:70:c0:7b:
0a:57:cc:5e:85:a1:b2:9c:6b:46:95:55:9f:75:5f:
c7:e8:43:49:f7:8d:ff:b6:ad:86:4e:0b:27:33:e4:
f1:93:d2:dc:36:f6:0b:74:12:8b:8e:2c:bf:02:f5:
7e:f4:a0:a3:7e:85:81:80:a6:f8:39:7c:93:81:58:
18:72:cb:00:56:38:d9:83:d4:2b:06:c6:2e:34:4c:
3c:d8:dc:ca:26:f5:c6:6e:df:ae:1a:f2:24:5a:0a:
3d:d8:ce:a2:32:58:50:cc:cc:b3:fc:0a:e5:86:4e:
a4:cb:6a:44:90:67:eb:7c:9d:63:6c:be:fe:a4:ef:
42:14:18:6d:5a:52:f8:ec:ab:4f:b6:82:51:46:b2:
bb:fd:6b:69:67:3d:9a:a2:9b:81:53:00:6e:dd:c4:
08:5b:7e:70:4b:0f:7d:86:57:cb:c1:50:dd:e0:8a:
17:c5:c1:7d:a1:fc:15:7a:c7:f3:4d:63:0c:bb:f3:
36:67:80:48:40:0f:45:19:65:12:c4:f8:c1:09:08:
98:e6:29:19:e6:18:06:70:e5:0e:53:bf:41:9e:db:
18:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:14:A3:85:D2:74:90:10:55:64:7C:E8:23:05:A4:AE:42:F4:FB:1B
X509v3 Authority Key Identifier:
keyid:25:32:A5:CF:2B:A1:8C:75:3E:DC:95:EE:20:B6:66:29:3D:F0:2D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:83:31:8d:03:8a:2a:77:29:b9:6e:b5:d8:cc:50:62:65:ea:
a8:6e:8b:89:9c:33:df:2b:59:d3:cd:71:4e:85:cc:56:71:4f:
dd:8e:54:6f:d4:7c:d0:f3:3f:7a:9c:9f:21:d7:88:25:71:11:
bf:c7:12:dc:6c:2c:ee:6a:1f:55:2a:52:a8:b0:4e:5b:34:ed:
59:e8:39:a2:79:df:19:ad:77:33:d6:60:ea:fa:72:33:30:ab:
b6:6b:a3:e3:a8:03:1a:42:e3:74:f2:3c:bc:f8:3d:38:a7:c1:
05:92:de:63:62:df:61:98:6f:a4:ea:06:fe:26:24:10:80:61:
f0:ac:61:fa:76:41:ab:b0:0c:5f:a7:68:b1:40:77:65:00:aa:
12:44:88:3d:a7:58:37:51:3a:51:56:10:21:ed:cb:d9:e5:be:
00:f9:4f:f3:6a:a5:43:ba:c5:5b:ad:32:64:40:d4:d7:d9:18:
1e:cb:82:b7:66:02:cd:95:92:d7:24:77:91:b6:ff:ce:3d:09:
b6:a9:98:96:9d:81:1e:6c:b1:94:9b:70:17:cb:57:c2:81:49:
2a:08:15:a3:dd:06:93:3f:16:56:c3:be:27:5a:c6:6f:ac:80:
80:7f:a0:a3:17:3e:ed:9f:f0:65:64:d0:ac:5f:de:3b:20:96:
5c:a7:e3:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTq2i2zXoXelhlbf7vtlQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1MzJhNWNmMmJhMThjNzUzZWRjOTVlZTIwYjY2NjI5M2Rm
MDJkNWIwHhcNMjUwODIzMDUwMjM5WhcNMjUwODI0MDUwMjM5WjAzMTEwLwYDVQQD
EyhlNTE0YTM4NWQyNzQ5MDEwNTU2NDdjZTgyMzA1YTRhZTQyZjRmYjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwr1JSA2/21aZ9n/PlHoF1cJGPnoy
VHxJo7Hasjjxsf/GwLwOA1cT1GRwwHsKV8xehaGynGtGlVWfdV/H6ENJ943/tq2G
TgsnM+Txk9LcNvYLdBKLjiy/AvV+9KCjfoWBgKb4OXyTgVgYcssAVjjZg9QrBsYu
NEw82NzKJvXGbt+uGvIkWgo92M6iMlhQzMyz/Arlhk6ky2pEkGfrfJ1jbL7+pO9C
FBhtWlL47KtPtoJRRrK7/WtpZz2aopuBUwBu3cQIW35wSw99hlfLwVDd4IoXxcF9
ofwVesfzTWMMu/M2Z4BIQA9FGWUSxPjBCQiY5ikZ5hgGcOUOU79BntsYZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUUo4XSdJAQVWR86CMFpK5C9PsbMB8GA1UdIwQY
MBaAFCUypc8roYx1PtyV7iC2Zik98C1bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlRLbHp5dWhqSFUtM0pYdUlMWm1LVDN3TFZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8xZTAyZmEtZjgyMy00MWM4LTg2YjIt
MTUxY2Y2MWRlODNlLzEvSlRLbHp5dWhqSFUtM0pYdUlMWm1LVDN3TFZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8xZTAyZmEtZjgyMy00MWM4LTg2YjItMTUxY2Y2MWRlODNl
LzEvSlRLbHp5dWhqSFUtM0pYdUlMWm1LVDN3TFZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfIMxjQOK
KncpuW612MxQYmXqqG6LiZwz3ytZ081xToXMVnFP3Y5Ub9R80PM/epyfIdeIJXER
v8cS3Gws7mofVSpSqLBOWzTtWeg5onnfGa13M9Zg6vpyMzCrtmuj46gDGkLjdPI8
vPg9OKfBBZLeY2LfYZhvpOoG/iYkEIBh8Kxh+nZBq7AMX6dosUB3ZQCqEkSIPadY
N1E6UVYQIe3L2eW+APlP82qlQ7rFW60yZEDU19kYHsuCt2YCzZWS1yR3kbb/zj0J
tqmYlp2BHmyxlJtwF8tXwoFJKggVo90Gkz8WVsO+J1rGb6yAgH+goxc+7Z/wZWTQ
rF/eOyCWXKfjIw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:06 2025 by rpki-client