Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
File: jtmMBXCv6fGq69DZ6i_CjB39mIk.mft (raw, json)
Hash identifier: YmeuoXiKITXBBcwMdt6UMnNCGWzxNqNDCH46o9mESZ4=
Subject key identifier: F6:EC:98:0F:80:F7:33:B3:E9:01:ED:37:B5:C2:3A:68:59:BA:AE:4A
Authority key identifier: 8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89
Certificate issuer: /CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889
Certificate serial: 0198D5162D1431A9C419ECBB163C44D1C4C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
Manifest number: 1014
Signing time: Sat 23 Aug 2025 04:00:57 +0000
Manifest this update: Sat 23 Aug 2025 04:00:57 +0000
Manifest next update: Sun 24 Aug 2025 04:00:57 +0000
Files and hashes: 1: jtmMBXCv6fGq69DZ6i_CjB39mIk.crl (hash: ThpD7FY6xDCYZJxnsuB1bBZQTNftKgzzf3wnmbCD3SI=)
2: xd9VA_78P1dLBFhm7sOrW_QXFZU.roa (hash: QyqCAQo5qDHygqeA0Lpsx+fr8JK0CEsNpPX8qkqt2z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:2d:14:31:a9:c4:19:ec:bb:16:3c:44:d1:c4:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889
Validity
Not Before: Aug 23 04:00:57 2025 GMT
Not After : Aug 24 04:00:57 2025 GMT
Subject: CN=f6ec980f80f733b3e901ed37b5c23a6859baae4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:63:51:bf:99:29:05:14:b3:14:6f:6c:04:22:
4b:bf:a9:f9:96:1e:ff:04:dd:c6:12:28:b5:9e:23:
1b:16:a9:2f:3c:a0:1e:95:da:a3:f3:a9:45:77:68:
4e:34:ef:87:fa:b2:e1:f9:af:6f:22:09:f6:7e:62:
d4:d8:7a:da:76:eb:2b:79:6e:cf:47:4b:cf:d8:fd:
e3:42:41:f4:4a:c5:e7:1d:c1:37:98:d5:13:6c:d0:
6a:0b:0d:ea:6f:b2:c4:57:a6:e9:34:eb:96:c4:42:
74:c6:a5:69:1f:3e:c5:d7:b8:ef:38:d6:a3:38:8a:
46:fa:41:af:e9:9b:26:c4:5f:1d:34:19:f8:72:7b:
e9:da:b8:46:05:6a:f7:f4:12:bd:53:28:1c:13:b8:
c8:9d:09:e9:dc:00:30:75:bb:f3:b4:0d:8f:4b:c7:
0c:72:86:1e:e8:42:5b:f0:d6:ca:70:fc:e6:7f:3a:
17:21:c0:21:d7:fe:79:14:f1:50:76:a7:0f:19:7b:
5d:2a:49:3e:70:e4:87:cc:47:3d:46:e7:72:4f:f1:
89:42:44:d2:08:64:d7:a4:b9:63:c9:54:e5:19:ae:
13:6d:c2:e7:f4:cb:df:87:fb:ef:e9:4e:c9:fd:91:
89:5c:6e:10:c8:43:cd:63:31:99:e6:ef:c1:43:17:
39:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:EC:98:0F:80:F7:33:B3:E9:01:ED:37:B5:C2:3A:68:59:BA:AE:4A
X509v3 Authority Key Identifier:
keyid:8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e6:76:76:ad:1e:6f:e9:d0:01:84:09:3b:8f:d8:de:e5:2f:
d5:82:28:75:5e:0e:00:b9:2f:e3:fd:f5:7f:ff:66:c1:f9:ba:
10:7a:c5:2d:d9:3d:d4:61:39:48:d9:62:ed:bb:26:bc:64:d6:
87:2b:6d:b8:bb:f8:4e:f3:08:55:14:1d:48:6c:25:bd:c3:d4:
e3:b2:1f:53:bc:ff:7a:61:aa:b0:55:ac:d5:fc:19:4a:97:bc:
c2:58:50:cb:04:5c:33:97:31:14:c8:53:8f:4c:03:69:da:cd:
75:aa:87:f9:b8:5f:d6:35:29:4f:7a:e3:d6:22:a8:d4:6f:5b:
1c:7c:ee:72:58:35:be:92:6b:2e:19:bc:f1:9c:fd:86:ae:08:
0c:c2:72:b3:d7:7d:96:48:cc:7d:f4:4a:44:54:ea:4b:4f:8a:
d2:69:ce:f8:af:ef:eb:c5:8c:b1:e8:a6:6d:ed:10:dc:7e:c3:
78:c2:5c:a7:83:24:38:10:8c:1d:1c:50:1a:a7:3f:41:82:31:
c1:74:3f:d8:13:fc:cb:27:c0:75:29:11:28:27:53:68:0c:f3:
4c:b2:a9:a6:d4:f0:50:bd:3d:f8:58:e2:55:c8:31:f3:f5:60:
29:df:20:17:17:d0:8f:05:27:db:b6:b1:4e:0c:91:82:b3:5a:
75:fb:0e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:22 2025 by rpki-client