Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
File: JtmhbC-n1MNwtTJSFL5EILYR8fk.mft (raw, json)
Hash identifier: t3gLs/dh0rNvnH5CXOhd2WjtDZVzoCgNhiileZWCSpA=
Subject key identifier: EF:2D:9D:91:A0:EC:4C:C4:14:46:33:19:61:17:2E:CA:04:35:19:8E
Authority key identifier: 26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
Certificate issuer: /CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Certificate serial: 0197B58E48D7BB6D0303B968DDC07737B34D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 08:01:30 +0000
Manifest this update: Sat 28 Jun 2025 08:01:30 +0000
Manifest next update: Sun 29 Jun 2025 08:01:30 +0000
Files and hashes: 1: 8ugHhLiToKwnzK4NKapWEcPlKh0.roa (hash: 4E0a2T2uUeIhUUG04lFzaUEsCu56I9vGRdi00E/gn7k=)
2: JtmhbC-n1MNwtTJSFL5EILYR8fk.crl (hash: yC8eNBZ7MKbEFa+t74uOBmkgeP0EGu4Tj9eGPWNv6fQ=)
3: zGlqz5otF9hY2Y3sk2pn1erhTAU.roa (hash: ofXFe05Yp+tSBC9fBzRKiln4g1Kad9/L6uAtEFx8Z54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 08:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:8e:48:d7:bb:6d:03:03:b9:68:dd:c0:77:37:b3:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Validity
Not Before: Jun 28 08:01:30 2025 GMT
Not After : Jun 29 08:01:30 2025 GMT
Subject: CN=ef2d9d91a0ec4cc41446331961172eca0435198e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8f:f7:e5:ae:93:64:8a:d4:32:e5:76:c3:0d:
b2:00:50:d3:55:ff:fd:e8:25:7c:32:df:2c:43:2e:
18:c4:17:87:17:7e:63:ef:50:61:84:8b:8c:41:54:
27:a3:a5:f2:f6:9f:47:36:ac:b2:45:a3:3d:d5:17:
2b:b3:25:fd:32:fb:0d:91:67:f4:31:f7:0c:85:73:
3b:52:8f:d1:e8:25:d2:c8:13:cc:e2:b2:74:0e:60:
69:f9:7d:e5:9f:a9:26:9f:c7:77:e7:cd:c3:4d:a9:
c5:91:5f:fd:fb:8f:70:57:96:5a:c2:81:c1:a4:23:
c1:8c:ea:61:df:70:cf:4f:ff:b2:f8:d3:e3:15:c9:
c4:26:dc:99:d4:84:0b:d8:58:4f:b8:41:5c:1f:c6:
4d:4c:b6:6d:12:0f:b6:3b:86:b4:b2:f2:15:e5:06:
7d:3e:bd:e6:11:2e:5e:05:ac:35:8f:2b:25:34:d8:
59:bb:04:7c:a9:4a:96:f7:a4:20:fb:69:72:dc:61:
c9:d1:fe:bc:86:32:da:6b:68:d8:2f:76:ce:3f:89:
82:2c:40:35:fc:6b:70:d2:4f:81:b6:5e:b8:29:56:
55:06:b6:a5:c6:53:16:84:df:01:e2:3d:b2:f9:90:
f6:ed:09:1f:e5:55:82:d8:db:1e:50:44:26:6f:4d:
8b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:2D:9D:91:A0:EC:4C:C4:14:46:33:19:61:17:2E:CA:04:35:19:8E
X509v3 Authority Key Identifier:
keyid:26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:02:3f:75:d5:90:b0:fa:6f:05:b2:39:ad:b5:6d:a7:55:ab:
8c:ae:27:24:c9:b8:28:59:ac:f5:96:63:89:f1:ef:81:95:51:
e3:0a:81:8a:ab:73:98:33:f2:c9:ba:1e:84:a4:59:71:f4:13:
18:df:c1:80:ad:a8:04:68:68:99:ba:36:21:00:56:bd:c2:b3:
00:02:da:94:43:b4:52:2c:d5:61:ca:59:8e:af:18:b5:96:f4:
d6:c3:4c:a3:c2:7c:3a:a6:9f:8c:72:79:f0:f3:81:42:67:bf:
7e:b3:a2:4e:3f:f7:fa:56:18:78:c5:98:a5:eb:ac:6b:d7:fb:
27:c1:aa:8d:9d:1d:36:a3:e1:1b:d7:c7:0d:36:53:f6:11:1d:
06:4a:2c:02:15:c3:a2:89:43:62:11:e5:a2:da:7f:cd:1d:45:
a3:9c:c1:b4:33:ef:91:a6:f0:d9:4c:c9:ea:1b:b2:b5:70:79:
81:fa:54:78:5f:df:6f:ad:27:6c:45:7f:c2:16:38:69:bf:c9:
43:90:db:b0:dc:d4:28:4e:2b:6c:91:9e:e0:4e:c3:51:6c:df:
55:46:4e:68:7d:f4:39:82:75:8b:33:cb:55:3c:3f:34:b2:01:
c8:99:25:95:0d:ab:c3:76:8c:d9:b0:69:4b:8f:0f:a8:f3:15:
1b:0d:f4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:54:48 2025 by rpki-client