Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
File: JTYSS5962om34iZByFbTBTA8H3w.mft (raw, json)
Hash identifier: F3nPo14D5xHIUHlYYz+vxUSJrjyOWPyUWnmkHMtPLrA=
Subject key identifier: 2C:30:1B:9D:B4:97:B0:D3:E0:CE:3D:81:74:72:A1:AC:42:17:76:05
Authority key identifier: 25:36:12:4B:9F:7A:DA:89:B7:E2:26:41:C8:56:D3:05:30:3C:1F:7C
Certificate issuer: /CN=2536124b9f7ada89b7e22641c856d305303c1f7c
Certificate serial: 0199FE7E07393EF6CB606D4C842E23456147
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 22:01:36 +0000
Manifest this update: Sun 19 Oct 2025 22:01:36 +0000
Manifest next update: Mon 20 Oct 2025 22:01:36 +0000
Files and hashes: 1: JTYSS5962om34iZByFbTBTA8H3w.crl (hash: NhU8qI+mKyaKfnTPfEQ8HX2os5Vd+VUAq2kPvY0398s=)
2: Oz-OF7QUhf9OkYOY6Er5Z5L_euc.roa (hash: rTcAf8Y3zE28zXssf3PZGZt9Ygw2dFFGFW0xU85GA/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7e:07:39:3e:f6:cb:60:6d:4c:84:2e:23:45:61:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2536124b9f7ada89b7e22641c856d305303c1f7c
Validity
Not Before: Oct 19 22:01:36 2025 GMT
Not After : Oct 20 22:01:36 2025 GMT
Subject: CN=2c301b9db497b0d3e0ce3d817472a1ac42177605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9b:29:93:ff:a8:ae:2f:69:d5:b3:a0:24:8d:
20:c6:49:d9:53:b4:f0:64:e3:f2:bd:95:dc:7c:79:
c2:3c:05:fb:3a:8b:18:3a:21:88:57:0d:6a:e7:34:
26:9f:cf:13:ef:3f:50:4a:5c:ee:8a:2a:52:00:f4:
38:5e:4e:bb:7c:b8:2f:58:5a:82:e9:a4:08:0a:45:
40:70:f7:0d:6f:75:c9:d3:4b:e6:bc:ba:bb:52:18:
5c:1d:ae:30:21:2c:d9:02:06:f6:78:26:00:48:9d:
65:2f:b5:37:2d:0c:7f:53:34:1a:54:75:a1:63:5a:
7f:90:3b:f6:93:8a:f2:97:ee:71:a3:98:ec:d8:db:
b2:cd:d2:5a:4f:09:c9:9c:17:5a:68:f1:10:ad:3f:
e2:5d:74:c8:31:70:b6:3f:e4:5b:02:04:6f:19:c9:
85:e9:0c:8a:63:1e:35:37:3c:fb:96:94:4b:70:df:
8c:1b:e8:6d:34:2c:df:82:04:d8:10:02:42:f3:b5:
f4:e1:7f:a4:d5:28:41:9e:f5:0e:07:8d:2d:84:1f:
12:00:97:18:5b:30:ed:22:c9:4f:f6:84:a5:d7:b7:
6e:9e:99:64:36:1f:d5:6f:45:15:00:61:ea:7a:95:
cd:e4:1e:15:d1:f6:ed:39:8e:48:1d:40:8f:f3:f4:
fd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:30:1B:9D:B4:97:B0:D3:E0:CE:3D:81:74:72:A1:AC:42:17:76:05
X509v3 Authority Key Identifier:
keyid:25:36:12:4B:9F:7A:DA:89:B7:E2:26:41:C8:56:D3:05:30:3C:1F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:09:c0:85:28:ed:7b:72:4d:e9:6b:10:0f:72:9a:dc:28:67:
9f:71:69:90:94:1a:bd:b6:78:e7:55:f9:b5:dc:e2:78:53:6f:
05:4b:fc:ed:91:3f:f3:33:d3:bf:ab:81:fb:92:fc:11:a5:89:
9a:b5:0f:d9:55:0d:b3:68:8b:93:9c:43:dd:9a:07:42:22:ec:
57:64:48:58:a5:01:37:09:61:72:87:e6:54:7f:54:66:53:1e:
67:ef:70:2c:f1:1a:6e:f7:29:e0:a1:f5:48:df:94:f6:56:17:
e5:18:1a:bb:bf:88:8e:eb:13:c3:8f:00:4d:c4:a8:c7:90:79:
ce:bc:ff:cd:ae:f4:db:c9:96:99:5c:82:e1:e7:78:2e:52:5c:
1d:33:ac:78:ec:99:d7:64:f1:61:f1:c9:36:f2:7a:3a:84:47:
f4:dd:fd:f4:20:b8:7d:67:c0:96:40:34:f3:57:66:39:ae:65:
38:a6:f5:7b:7f:c0:4c:8c:cb:a0:83:ee:e8:ce:0a:76:05:15:
b8:43:2b:fd:50:6e:ce:f3:24:cb:1b:ab:dd:48:70:80:e9:1e:
0a:dd:8f:63:2b:47:db:15:3c:08:74:49:01:51:22:07:b3:bc:
e1:55:65:fe:8b:de:d3:a9:42:86:e0:c7:d8:51:03:c8:41:25:
f1:0e:0d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:58:58 2025 by rpki-client