Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/298ea2-3af1-49f5-814e-4ef32861c915/1/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.mft
File: JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.mft (raw, json)
Hash identifier: xo+XiB+mfZBz8kcdfFz3ZcDP6la75JDMGNLgHPD/m04=
Subject key identifier: 79:6D:8C:F6:A4:A2:71:01:39:61:70:6E:64:72:19:1E:1D:4C:F2:E6
Authority key identifier: 25:34:41:FE:85:D3:43:5C:71:A1:89:4E:ED:0C:74:41:47:64:4A:39
Certificate issuer: /CN=253441fe85d3435c71a1894eed0c744147644a39
Certificate serial: 0199FBEAA1CDB129BB49E5485ADD16A8E339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/298ea2-3af1-49f5-814e-4ef32861c915/1/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.mft
Manifest number: 0199
Signing time: Sun 19 Oct 2025 10:01:21 +0000
Manifest this update: Sun 19 Oct 2025 10:01:21 +0000
Manifest next update: Mon 20 Oct 2025 10:01:21 +0000
Files and hashes: 1: JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.crl (hash: LordCrIPwanKt4a+ZU+VXoC6JzVl5vMZFQL5JKkwF4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/298ea2-3af1-49f5-814e-4ef32861c915/1/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/298ea2-3af1-49f5-814e-4ef32861c915/1/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:a1:cd:b1:29:bb:49:e5:48:5a:dd:16:a8:e3:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253441fe85d3435c71a1894eed0c744147644a39
Validity
Not Before: Oct 19 10:01:21 2025 GMT
Not After : Oct 20 10:01:21 2025 GMT
Subject: CN=796d8cf6a4a271013961706e6472191e1d4cf2e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:aa:59:40:1a:28:f2:88:d3:57:df:24:9e:1f:
59:8e:40:1f:98:02:8b:01:a4:14:3b:43:70:79:48:
c9:e6:f5:84:be:f1:3a:ef:43:e5:56:73:43:b4:4c:
a2:bc:46:28:d3:9a:61:98:b8:ee:30:57:32:75:cd:
8d:08:f7:66:40:43:31:17:7a:31:96:b6:6c:a3:a8:
08:84:66:aa:d8:fe:01:95:f7:6b:40:3e:de:6a:38:
c3:63:f1:c7:24:97:a4:b2:12:e4:39:f0:7b:66:61:
4e:c4:5f:7b:28:d1:ad:6a:cf:31:b2:8f:e3:45:d9:
f3:18:b5:35:20:4b:04:50:a9:9f:2e:7a:60:15:db:
d7:ee:59:c1:5a:a3:e2:43:34:2b:63:3f:eb:cc:39:
7d:7a:3d:ff:ba:23:46:fa:96:ef:7c:e5:a6:63:95:
70:ed:5d:e3:c5:62:1e:f9:43:c7:49:27:27:84:e5:
19:9f:95:8c:a4:1e:c1:f2:24:13:62:68:66:98:9d:
44:62:4e:ca:e7:88:c3:21:f8:ef:30:fd:01:f3:79:
7f:eb:1b:27:2b:44:04:84:f0:5a:eb:87:dc:80:59:
64:5d:af:ce:68:b9:3b:11:3d:fb:35:89:48:db:80:
0f:6b:a5:97:5b:13:f0:35:5d:00:84:5a:f1:b1:16:
70:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:6D:8C:F6:A4:A2:71:01:39:61:70:6E:64:72:19:1E:1D:4C:F2:E6
X509v3 Authority Key Identifier:
keyid:25:34:41:FE:85:D3:43:5C:71:A1:89:4E:ED:0C:74:41:47:64:4A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/298ea2-3af1-49f5-814e-4ef32861c915/1/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/298ea2-3af1-49f5-814e-4ef32861c915/1/JTRB_oXTQ1xxoYlO7Qx0QUdkSjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a7:bf:1e:b4:5d:d4:9c:6b:20:3d:fb:c4:85:5f:72:aa:ec:
3d:dd:9c:98:00:dd:bf:26:0e:f7:43:89:97:fd:58:4c:4e:e3:
d5:51:a6:d5:3a:a9:e8:9e:2d:5c:5f:62:4f:39:ce:5a:58:4c:
44:0c:22:a4:c6:85:96:2d:2e:ca:45:5e:3c:21:e6:4b:93:30:
53:ca:9a:37:5f:1c:6f:53:be:11:07:83:a7:be:a2:72:9a:db:
d7:c4:d9:1e:f6:1b:27:cf:68:92:b8:7a:69:35:8e:e6:89:61:
9d:fb:8d:c9:11:cb:1d:40:62:9f:7c:72:b1:33:6f:c2:81:03:
ee:5d:db:48:b4:23:a1:bf:a0:36:aa:38:aa:3c:63:e9:f7:88:
21:f4:68:42:c1:24:60:b6:ae:c0:52:38:94:9f:ce:e1:3b:f9:
91:7c:19:82:35:ca:15:5e:47:dd:2f:bd:e1:2e:cc:99:78:75:
1c:e6:79:5a:4e:6c:43:b2:c7:be:07:06:ee:e1:69:de:a2:41:
6a:aa:d4:b5:46:11:02:7e:0f:c5:d4:ac:88:ef:81:56:0b:c7:
87:8f:c6:9e:3e:13:9d:b0:c0:33:62:d8:b3:50:cc:e8:4d:86:
f2:61:79:80:5f:5e:56:fd:68:4c:83:78:1c:fa:f0:d7:99:eb:
49:03:9d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:20 2025 by rpki-client