Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
File: JTYSS5962om34iZByFbTBTA8H3w.mft (raw, json)
Hash identifier: MRoC/Ia260PYiFeGTywJpN+xIyYsiESyDtak9O1Pyqc=
Subject key identifier: 41:C7:DE:CF:42:52:62:2A:2B:45:0D:5E:16:E5:A5:4F:E4:64:F1:90
Authority key identifier: 25:36:12:4B:9F:7A:DA:89:B7:E2:26:41:C8:56:D3:05:30:3C:1F:7C
Certificate issuer: /CN=2536124b9f7ada89b7e22641c856d305303c1f7c
Certificate serial: 0198D515C147E83590F578C55407577966C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 04:00:29 +0000
Manifest this update: Sat 23 Aug 2025 04:00:29 +0000
Manifest next update: Sun 24 Aug 2025 04:00:29 +0000
Files and hashes: 1: JTYSS5962om34iZByFbTBTA8H3w.crl (hash: 7Wz9FOtloDO3+xyN2PLLUELJ/5MU++9Q2810lyM6ftQ=)
2: Oz-OF7QUhf9OkYOY6Er5Z5L_euc.roa (hash: rTcAf8Y3zE28zXssf3PZGZt9Ygw2dFFGFW0xU85GA/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:c1:47:e8:35:90:f5:78:c5:54:07:57:79:66:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2536124b9f7ada89b7e22641c856d305303c1f7c
Validity
Not Before: Aug 23 04:00:29 2025 GMT
Not After : Aug 24 04:00:29 2025 GMT
Subject: CN=41c7decf4252622a2b450d5e16e5a54fe464f190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fd:58:d8:0e:40:89:21:e0:fe:0c:97:40:52:
19:11:8a:79:e1:02:eb:19:4e:d5:79:bf:85:0c:ba:
6a:61:8f:c3:a6:0b:0f:b3:9f:bd:bb:d8:5a:21:88:
34:39:b8:1d:5a:fd:e0:96:e7:2c:64:3e:51:a0:2e:
fe:cb:e4:7e:d3:2b:fd:c1:39:33:7b:a9:98:11:02:
97:94:db:35:21:28:ba:db:d7:06:ed:86:79:c9:90:
0f:04:ab:9e:7c:91:19:64:1a:c8:b5:d5:fa:35:6c:
1f:0e:c0:45:3d:0b:42:51:30:bd:cf:da:6d:1c:03:
b6:75:1c:04:6d:b5:f1:7c:b7:1c:f4:f4:70:0e:ab:
66:d8:d9:8a:f5:c7:ea:95:17:ce:1a:71:12:c4:26:
92:42:af:c8:47:97:42:16:3f:46:ba:85:c2:5d:7c:
7f:ae:8b:3f:cd:d8:82:fc:a2:35:79:c4:4b:ac:be:
ab:1c:5a:7f:92:58:3d:c4:4c:1c:ab:15:34:66:b6:
f7:75:89:35:13:48:07:46:78:f3:3d:68:6e:7c:0c:
8b:60:16:55:68:61:ba:a1:3d:e4:00:fb:9a:49:5a:
97:ce:db:a3:65:56:06:b2:f6:87:f1:4d:32:4d:c4:
ec:92:fb:f0:64:f0:83:9f:f4:0e:70:cf:ac:c8:91:
87:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C7:DE:CF:42:52:62:2A:2B:45:0D:5E:16:E5:A5:4F:E4:64:F1:90
X509v3 Authority Key Identifier:
keyid:25:36:12:4B:9F:7A:DA:89:B7:E2:26:41:C8:56:D3:05:30:3C:1F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:d2:90:96:70:03:a2:12:1e:1c:c8:03:36:36:75:2a:f9:30:
0c:de:26:6b:00:83:e8:98:8b:05:df:ca:38:5e:8e:04:f6:09:
49:b2:02:d3:7c:d7:87:d9:2d:dc:c0:2e:69:9e:08:7f:3e:6d:
d8:8e:98:39:df:b2:7c:be:36:bb:f7:07:4e:c0:fc:52:89:85:
77:ae:14:ef:bc:a5:3e:c1:9e:c0:a9:e6:3f:20:db:c7:3f:4e:
5b:6f:42:ea:cc:56:90:06:53:10:ed:66:18:7e:04:0f:75:5f:
6a:75:3a:42:1a:b8:69:df:33:c8:19:43:c7:1a:0f:a1:4c:f0:
bf:5d:9e:8d:91:22:c2:dd:50:a6:af:bb:fe:2e:cb:36:3b:a9:
8e:45:d5:ed:e6:6f:98:d7:0f:6e:bf:55:bd:74:08:82:34:b1:
14:0a:32:de:4c:b4:51:65:d1:b8:4c:82:1d:50:ac:b0:81:98:
cd:38:04:fa:88:9f:25:18:58:40:17:28:82:d2:1c:04:4e:c6:
63:c6:81:6e:b3:90:dc:9b:ab:67:64:d4:6a:c1:73:f6:d9:15:
a1:03:60:63:8f:4d:ae:28:bc:03:dd:65:d6:86:09:9e:7c:01:
87:6e:3d:c8:03:11:87:ec:30:c1:28:bc:8b:74:2e:bd:78:db:
d1:44:5f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:44 2025 by rpki-client