Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/298ea2-3af1-49f5-814e-4ef32861c915/1/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.mft
File: JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.mft (raw, json)
Hash identifier: syFiWmPZ/MqHpQ6DD99mTmaXGWnJdl7ibyKJeGzh/QI=
Subject key identifier: E5:D9:45:48:D3:4C:C4:18:CC:4A:2D:DB:1D:FC:4A:9C:6D:65:0D:AD
Authority key identifier: 25:34:41:FE:85:D3:43:5C:71:A1:89:4E:ED:0C:74:41:47:64:4A:39
Certificate issuer: /CN=253441fe85d3435c71a1894eed0c744147644a39
Certificate serial: 0198D65F2B6D1832D343C9FB1EA3A7BFC232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/298ea2-3af1-49f5-814e-4ef32861c915/1/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.mft
Manifest number: 0101
Signing time: Sat 23 Aug 2025 10:00:17 +0000
Manifest this update: Sat 23 Aug 2025 10:00:17 +0000
Manifest next update: Sun 24 Aug 2025 10:00:17 +0000
Files and hashes: 1: JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.crl (hash: GN7OSzKTo0g4FtQKB6+pHbopu9NjOFZ8LTehNAjCfs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/298ea2-3af1-49f5-814e-4ef32861c915/1/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/298ea2-3af1-49f5-814e-4ef32861c915/1/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:2b:6d:18:32:d3:43:c9:fb:1e:a3:a7:bf:c2:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253441fe85d3435c71a1894eed0c744147644a39
Validity
Not Before: Aug 23 10:00:17 2025 GMT
Not After : Aug 24 10:00:17 2025 GMT
Subject: CN=e5d94548d34cc418cc4a2ddb1dfc4a9c6d650dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:22:d3:19:f4:65:1b:e7:ad:3e:a0:b3:da:73:
f8:7f:dd:f9:25:3d:31:1c:44:fd:c7:63:aa:1b:f3:
53:84:c9:e1:af:a0:37:0c:d8:6a:f3:0d:28:4c:d7:
34:26:77:5a:75:de:c3:49:7d:d2:7e:e9:02:3c:86:
0b:e9:13:8d:eb:08:e0:0c:b2:86:0a:27:65:9f:44:
ab:c3:8f:a1:21:36:e5:b0:a1:0e:69:f7:e3:ae:c4:
c8:48:32:a8:4e:c3:5e:e4:48:84:01:7c:5d:21:dc:
46:e7:8d:7f:b6:0a:8e:a0:b8:ad:87:96:90:96:93:
4d:0a:44:f9:7f:4b:c1:a6:11:6b:50:f0:70:2b:fa:
04:8c:a2:e2:3a:a3:57:ce:4f:9a:0c:51:87:5d:6c:
07:bf:1d:d7:85:10:83:87:ac:c4:e3:8c:0e:71:53:
ab:b8:39:d3:59:24:1a:68:ab:05:2c:1f:f6:92:ed:
91:a6:5b:55:c5:78:b7:cd:29:c3:0b:73:7c:89:02:
53:cc:d7:56:5e:41:18:a9:4f:a6:8c:eb:fa:ac:e7:
1b:6c:9f:7a:1a:ea:63:cf:31:c4:ec:94:2d:8c:57:
e4:18:7a:2a:42:09:24:a8:5f:d9:8f:c9:fe:0f:e8:
6c:1d:d7:f2:db:70:c0:67:80:e7:b0:00:fa:d9:ed:
54:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D9:45:48:D3:4C:C4:18:CC:4A:2D:DB:1D:FC:4A:9C:6D:65:0D:AD
X509v3 Authority Key Identifier:
keyid:25:34:41:FE:85:D3:43:5C:71:A1:89:4E:ED:0C:74:41:47:64:4A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/298ea2-3af1-49f5-814e-4ef32861c915/1/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/298ea2-3af1-49f5-814e-4ef32861c915/1/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:bb:70:e0:29:36:d2:35:df:56:79:84:04:d6:91:26:b3:2e:
1a:96:ad:fa:11:26:c2:69:25:9e:98:57:c1:0b:49:eb:f3:13:
5f:4d:f2:bc:5b:b8:5d:e0:ae:c7:88:7f:eb:ce:f9:27:89:4c:
c1:68:1f:f7:44:79:eb:01:ab:6c:18:44:e2:f3:46:ef:88:ab:
3e:5e:bd:c8:77:f9:27:8c:15:24:03:15:22:07:d1:ac:bd:86:
37:69:50:91:df:d4:a9:ef:c6:64:46:37:ff:d4:7e:2b:ff:8d:
d8:3b:0b:fd:9a:eb:8c:ce:51:a9:3b:35:7a:e6:3a:87:68:51:
e0:ee:5d:c0:8a:ce:0d:67:f2:c2:59:f8:85:b0:fb:c7:a0:ee:
47:a3:5d:d1:cc:af:0e:25:c8:9f:d3:fd:c8:23:61:da:18:b8:
75:f9:fc:53:8d:21:46:db:af:5c:36:c1:01:c9:f8:4f:3c:0e:
2c:a3:14:22:34:1d:94:e8:74:32:63:42:15:c3:d1:b2:5a:f0:
4f:0c:06:6e:45:21:36:9f:a9:e4:28:e1:00:40:6e:b4:4e:ba:
b5:d7:60:53:0b:47:48:c1:cb:b9:16:ce:09:f0:a4:bc:73:ca:
1c:3f:16:f0:98:c0:99:a3:e9:79:b6:38:5e:83:28:1c:0f:61:
1b:2e:0c:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWXyttGDLTQ8n7HqOnv8IyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1MzQ0MWZlODVkMzQzNWM3MWExODk0ZWVkMGM3NDQxNDc2
NDRhMzkwHhcNMjUwODIzMTAwMDE3WhcNMjUwODI0MTAwMDE3WjAzMTEwLwYDVQQD
EyhlNWQ5NDU0OGQzNGNjNDE4Y2M0YTJkZGIxZGZjNGE5YzZkNjUwZGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iLTGfRlG+etPqCz2nP4f935JT0x
HET9x2OqG/NThMnhr6A3DNhq8w0oTNc0Jndadd7DSX3SfukCPIYL6RON6wjgDLKG
Cidln0Srw4+hITblsKEOaffjrsTISDKoTsNe5EiEAXxdIdxG541/tgqOoLith5aQ
lpNNCkT5f0vBphFrUPBwK/oEjKLiOqNXzk+aDFGHXWwHvx3XhRCDh6zE44wOcVOr
uDnTWSQaaKsFLB/2ku2RpltVxXi3zSnDC3N8iQJTzNdWXkEYqU+mjOv6rOcbbJ96
GupjzzHE7JQtjFfkGHoqQgkkqF/Zj8n+D+hsHdfy23DAZ4DnsAD62e1UqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOXZRUjTTMQYzEot2x38SpxtZQ2tMB8GA1UdIwQY
MBaAFCU0Qf6F00NccaGJTu0MdEFHZEo5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlRSQl9vWFRRMXh4b1lsTzdReDBRVWRrU2prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8yOThlYTItM2FmMS00OWY1LTgxNGUt
NGVmMzI4NjFjOTE1LzEvSlRSQl9vWFRRMXh4b1lsTzdReDBRVWRrU2prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8yOThlYTItM2FmMS00OWY1LTgxNGUtNGVmMzI4NjFjOTE1
LzEvSlRSQl9vWFRRMXh4b1lsTzdReDBRVWRrU2prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACbtw4Ck2
0jXfVnmEBNaRJrMuGpat+hEmwmklnphXwQtJ6/MTX03yvFu4XeCux4h/6875J4lM
wWgf90R56wGrbBhE4vNG74irPl69yHf5J4wVJAMVIgfRrL2GN2lQkd/Uqe/GZEY3
/9R+K/+N2DsL/ZrrjM5RqTs1euY6h2hR4O5dwIrODWfywln4hbD7x6DuR6Nd0cyv
DiXIn9P9yCNh2hi4dfn8U40hRtuvXDbBAcn4TzwOLKMUIjQdlOh0MmNCFcPRslrw
TwwGbkUhNp+p5CjhAEButE66tddgUwtHSMHLuRbOCfCkvHPKHD8W8JjAmaPpebY4
XoMoHA9hGy4MAw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:45 2025 by rpki-client