Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
File: JtmhbC-n1MNwtTJSFL5EILYR8fk.mft (raw, json)
Hash identifier: gjnm03/LgYEeCCxDKOpoPi5lB1BsT0Lw1JmWUKTAocQ=
Subject key identifier: 28:98:40:98:91:BE:4F:94:D4:DD:FB:DB:B3:68:5A:8B:C8:00:53:D0
Authority key identifier: 26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
Certificate issuer: /CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Certificate serial: 019A029102D32A2D96D74263C5DCEE73BE6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
Manifest number: 16E7
Signing time: Mon 20 Oct 2025 17:00:49 +0000
Manifest this update: Mon 20 Oct 2025 17:00:49 +0000
Manifest next update: Tue 21 Oct 2025 17:00:49 +0000
Files and hashes: 1: 8ugHhLiToKwnzK4NKapWEcPlKh0.roa (hash: 4E0a2T2uUeIhUUG04lFzaUEsCu56I9vGRdi00E/gn7k=)
2: JtmhbC-n1MNwtTJSFL5EILYR8fk.crl (hash: 5HAxvXxKIwyWbaf5ZG3osebJ1TQAxM9esHWvMayeyOc=)
3: zGlqz5otF9hY2Y3sk2pn1erhTAU.roa (hash: ofXFe05Yp+tSBC9fBzRKiln4g1Kad9/L6uAtEFx8Z54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 17:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:91:02:d3:2a:2d:96:d7:42:63:c5:dc:ee:73:be:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Validity
Not Before: Oct 20 17:00:49 2025 GMT
Not After : Oct 21 17:00:49 2025 GMT
Subject: CN=2898409891be4f94d4ddfbdbb3685a8bc80053d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a8:5f:53:87:3c:dc:17:9e:8d:c1:0a:dc:c1:
d6:e7:80:a9:cb:1c:9d:e5:2d:2c:9f:58:a9:4f:4e:
9e:42:b5:b2:a0:44:ec:04:e5:3b:2b:b5:6d:b4:27:
31:47:69:42:92:2d:8e:c9:07:40:b4:99:4d:d1:6f:
22:51:5e:c9:bc:57:1f:00:c2:6c:f6:fe:64:c1:af:
53:1b:2b:38:0c:f3:c2:c7:e9:1b:a1:68:68:42:88:
e6:16:22:89:89:fb:c5:8d:f7:b9:26:f9:97:f5:54:
3c:78:5b:a0:9c:b8:49:f7:3f:1b:45:b9:16:a8:0c:
11:c7:8f:44:a3:72:76:96:22:91:56:e8:5e:4e:1a:
d2:9d:0f:1c:35:7a:74:e6:9a:ec:d4:05:7a:21:e5:
2c:d2:c4:a7:41:8a:1c:c2:21:fc:f4:9a:f4:53:b5:
64:b8:68:db:32:5b:5a:cd:31:b6:eb:55:96:70:c7:
ff:d5:30:6b:4b:e7:38:ae:31:78:86:d8:f3:48:3b:
ff:3b:28:ac:af:41:10:a3:3d:4c:3b:26:d0:d7:29:
bc:91:08:82:6b:aa:f4:22:ea:8f:af:a2:1f:6b:05:
16:9c:b6:1e:a9:8b:16:48:c7:d0:48:8c:26:55:60:
60:ba:fa:7f:7a:ca:f3:74:c5:99:c9:f6:98:40:1d:
b3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:98:40:98:91:BE:4F:94:D4:DD:FB:DB:B3:68:5A:8B:C8:00:53:D0
X509v3 Authority Key Identifier:
keyid:26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:90:13:00:0d:ee:de:5e:57:2c:6f:c9:d6:0e:62:43:17:b9:
c4:da:bf:f0:9f:13:cd:ce:58:7f:a3:5b:ab:a7:df:c0:0b:47:
e2:39:53:c2:e4:e9:8a:1a:1d:dd:9d:7b:43:8e:27:7b:bc:5e:
2a:55:47:1b:11:de:c7:fb:b4:ff:79:e4:94:e0:3a:18:ef:8f:
0e:59:3f:5f:ec:59:28:2c:80:79:b5:d7:c5:6f:bb:73:5d:0b:
1f:3c:6c:ff:05:4a:c2:fb:56:34:a1:5d:fd:b8:94:d8:55:8d:
f3:a7:45:46:ea:62:fa:25:f7:50:e3:e5:d7:c1:26:d4:c9:02:
8e:fe:43:de:03:fd:14:4f:c6:a6:fc:1b:eb:66:2c:aa:bd:71:
e9:86:f6:69:19:33:da:be:af:f5:5d:05:24:f6:48:9d:4b:76:
ed:ba:0f:a7:6f:2e:ba:a2:68:c7:17:6f:ad:d7:f1:41:40:9a:
eb:67:0f:96:6c:f5:54:80:63:7b:15:23:26:cd:fa:d7:79:b5:
b5:64:23:bb:bb:f7:c4:fe:22:c4:c0:ca:44:19:a5:cf:bd:5c:
fe:91:1d:3d:63:53:f9:8b:27:4a:8e:a6:87:38:82:22:f8:a2:
6d:1a:ea:d3:07:32:64:75:e3:8f:30:c5:90:43:12:39:51:ea:
1b:2b:c7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:28:54 2025 by rpki-client