
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
File: jtmMBXCv6fGq69DZ6i_CjB39mIk.mft (raw, json)
Hash identifier: NXcpgDSElGlF1zfHpbWoB67uA1zLBN6gnrfcmHByX+g=
Subject key identifier: 7F:8C:2E:99:95:5D:5A:3B:67:B7:8E:C2:9D:BF:C1:34:47:6B:EE:54
Authority key identifier: 8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89
Certificate issuer: /CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889
Certificate serial: 0199FE7DD1263A48CD0E6ECF2D58CF8CB806
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
Manifest number: 10AE
Signing time: Sun 19 Oct 2025 22:01:22 +0000
Manifest this update: Sun 19 Oct 2025 22:01:22 +0000
Manifest next update: Mon 20 Oct 2025 22:01:22 +0000
Files and hashes: 1: jtmMBXCv6fGq69DZ6i_CjB39mIk.crl (hash: /vpA+89SAynGbCywgapQn+4akunrCdJhcRD0prc2n7g=)
2: xd9VA_78P1dLBFhm7sOrW_QXFZU.roa (hash: QyqCAQo5qDHygqeA0Lpsx+fr8JK0CEsNpPX8qkqt2z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:d1:26:3a:48:cd:0e:6e:cf:2d:58:cf:8c:b8:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889
Validity
Not Before: Oct 19 22:01:22 2025 GMT
Not After : Oct 20 22:01:22 2025 GMT
Subject: CN=7f8c2e99955d5a3b67b78ec29dbfc134476bee54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:05:96:c5:4c:88:4a:37:96:2e:7c:ba:fb:6d:
7f:81:24:ce:75:dc:08:1d:cc:16:db:64:70:54:9f:
58:6c:a8:77:a2:55:82:f9:56:b1:3f:42:2f:03:6a:
9a:2b:da:dd:49:f9:6a:11:4a:45:69:97:75:ae:9c:
22:92:a7:02:1f:7c:2b:2b:8b:75:57:4e:7d:86:4a:
83:ec:c3:9d:6a:be:42:8d:d4:29:27:d8:3c:19:a1:
de:d8:6a:c1:e5:f9:84:b0:20:67:ea:b6:e2:67:af:
19:63:6a:79:12:54:d9:ee:82:37:db:c0:26:5f:13:
8f:59:5a:ad:37:55:ff:65:15:13:37:c3:91:07:ff:
73:46:27:05:3d:1f:d9:8a:6d:2d:07:6c:be:42:4e:
d6:e0:e8:84:33:40:1b:27:97:a8:df:5d:45:21:c6:
b0:25:e3:95:32:4c:b2:ae:dc:84:65:17:7e:e2:0b:
01:2f:db:4f:12:00:8e:44:b6:55:53:9f:34:b9:7f:
04:58:81:19:3f:a6:9b:ef:76:b9:5d:93:3c:f5:9e:
d8:ee:34:ed:27:bf:ea:c4:cb:c8:2c:4f:90:7b:dc:
c8:ee:9d:d0:b2:62:0d:80:66:b0:58:7f:e1:5f:08:
36:ea:5a:e8:c6:4a:89:75:69:5d:86:7f:9b:56:5f:
98:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8C:2E:99:95:5D:5A:3B:67:B7:8E:C2:9D:BF:C1:34:47:6B:EE:54
X509v3 Authority Key Identifier:
keyid:8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:73:78:e8:43:52:c8:6e:75:8e:47:2b:81:72:bb:ea:0e:d9:
be:01:b3:b0:45:b3:ce:ae:61:f8:46:89:bd:9a:34:35:45:44:
cf:e6:87:c8:6d:e1:0a:b5:98:26:d9:ac:19:bc:6c:7f:da:ea:
0f:4e:55:7e:e4:5f:e3:9a:87:d2:13:89:be:49:ec:6e:e7:a2:
d1:1d:16:e0:d4:2f:72:62:10:67:73:61:95:04:68:94:cd:3d:
1f:c4:9e:37:e5:3a:57:8e:94:ce:b0:61:80:42:5b:0c:d8:9f:
cf:b4:fd:03:d5:dd:ac:65:23:67:55:67:79:9b:6f:83:26:05:
1f:d2:a7:e1:92:1e:34:44:70:40:73:02:1e:41:fc:a8:cd:99:
3b:ae:aa:65:1f:1c:60:90:f6:43:52:c6:f5:98:b9:13:0f:9e:
82:e6:b8:92:bd:93:6a:fd:ff:31:c7:46:4b:d1:b9:27:0a:34:
4e:4d:ef:a1:a2:c1:b9:3f:e0:5c:98:be:bc:4d:7f:5f:3e:bc:
18:9f:e2:51:5c:8b:13:9f:ff:b9:cb:f9:b0:02:54:c8:af:14:
1f:83:68:9e:94:b1:e4:cc:b5:d9:f3:b6:eb:6f:87:41:e8:57:
4d:fc:43:41:4a:6c:5c:42:f3:41:01:b9:72:1c:e0:32:39:c4:
58:9a:72:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:15:33 2025 by rpki-client