Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
File: JTKlzyuhjHU-3JXuILZmKT3wLVs.mft (raw, json)
Hash identifier: BRcgg/ccp95Tj/uNt2ccntvQyzj1fLhn4sFwHELz9kY=
Subject key identifier: E9:AE:1E:52:09:9B:86:93:F8:70:88:5B:4C:4C:F1:02:70:52:38:58
Authority key identifier: 25:32:A5:CF:2B:A1:8C:75:3E:DC:95:EE:20:B6:66:29:3D:F0:2D:5B
Certificate issuer: /CN=2532a5cf2ba18c753edc95ee20b666293df02d5b
Certificate serial: 01988BEA3D85D234CAB013A371C92882410F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
Manifest number: 1105
Signing time: Fri 08 Aug 2025 23:00:40 +0000
Manifest this update: Fri 08 Aug 2025 23:00:40 +0000
Manifest next update: Sat 09 Aug 2025 23:00:40 +0000
Files and hashes: 1: JTKlzyuhjHU-3JXuILZmKT3wLVs.crl (hash: X6ebGeE4oOa9NnDA8FSYIIvTcCOA+C877HTe5CBkqb8=)
2: oBH_u1PqllstMg1clbDeim1fyyE.roa (hash: L3SOkvuxnMh5EHKE9/YilBcdLKJMaucr/0ncA4MIDhw=)
3: zHs9cFuQEsCg45LnMiCsOF3kF4Q.roa (hash: C6+fwUFGNJ/F4sEfe/qDP+eEAltXpbDsycsJBFRmzqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:3d:85:d2:34:ca:b0:13:a3:71:c9:28:82:41:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2532a5cf2ba18c753edc95ee20b666293df02d5b
Validity
Not Before: Aug 8 23:00:40 2025 GMT
Not After : Aug 9 23:00:40 2025 GMT
Subject: CN=e9ae1e52099b8693f870885b4c4cf10270523858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:31:aa:cc:59:76:2a:92:bd:ec:e2:b9:56:b0:
64:79:83:3a:4d:96:ba:af:46:c9:b4:70:25:97:41:
de:5f:bc:5f:95:6c:28:c3:a6:14:45:d7:9d:76:a8:
56:b0:63:07:20:0d:2c:24:be:87:f1:59:20:38:64:
03:9d:63:a4:17:09:cb:94:d9:45:5b:68:cd:91:1d:
5b:c0:74:66:5c:6a:87:6f:ef:ff:07:20:e1:b3:29:
55:e9:2a:06:4a:d8:ee:19:11:0d:a7:f6:c4:4f:fd:
7a:7c:a8:a3:db:93:b5:46:16:a4:82:ff:de:31:0c:
1d:95:4b:9a:12:9e:53:53:a7:cd:4e:ba:85:e7:2a:
0a:5a:d6:8b:6f:d6:28:88:da:74:a1:35:ff:c9:a1:
f3:2d:d8:05:f0:b8:9b:f4:83:df:fe:19:ae:04:de:
3f:3e:0e:33:4d:83:d4:b0:f4:06:04:1e:ba:e2:86:
1d:b4:eb:7b:fa:03:1e:7c:97:90:83:d8:20:6b:db:
74:4f:d4:12:a3:eb:93:ec:ba:23:91:15:00:c9:67:
33:bb:00:12:28:26:9e:b9:3d:c0:14:35:1b:08:ee:
b1:68:1d:75:59:24:42:51:2e:60:7e:0a:de:4c:ce:
0e:2d:f8:fe:5e:dc:24:9d:39:c6:5c:9e:e7:56:e7:
50:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AE:1E:52:09:9B:86:93:F8:70:88:5B:4C:4C:F1:02:70:52:38:58
X509v3 Authority Key Identifier:
keyid:25:32:A5:CF:2B:A1:8C:75:3E:DC:95:EE:20:B6:66:29:3D:F0:2D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:26:2e:47:a0:39:e8:2c:55:ac:12:65:ad:48:65:9e:11:b6:
5e:31:f4:99:c6:81:c2:b2:1f:c4:c9:5d:c5:23:96:b6:3f:35:
77:74:8b:a9:f0:9e:04:e9:45:99:89:1e:4d:62:94:6e:a8:e4:
ca:9d:ce:21:c1:07:17:4c:df:c9:e7:ff:6b:76:a4:0f:58:ff:
6b:54:50:79:73:f9:69:37:f5:94:1b:04:55:32:51:d9:20:64:
27:cd:3b:0e:58:a1:6c:a7:f1:55:9f:9e:92:e3:ee:3b:67:c3:
2c:25:2d:54:c4:79:2e:25:68:06:00:f8:86:bc:e7:fe:96:8e:
3a:17:bb:9b:86:55:32:eb:58:9e:6a:6a:1b:b1:a4:77:c7:d3:
eb:d8:89:01:cb:f4:94:b5:f0:2f:6b:91:a5:6c:ec:fe:7d:5d:
62:59:62:2c:0d:c1:39:b4:df:0c:9d:fa:d3:ff:f8:c9:7c:4b:
cf:d6:01:f7:18:79:2d:7b:85:08:59:c7:a2:0e:d6:27:c7:de:
71:77:2a:bd:02:3d:34:d0:ec:14:c3:a8:8c:cc:ac:90:39:40:
8d:a1:33:7a:b0:99:70:2c:c8:27:b9:84:96:6e:08:cf:1b:d8:
5b:e6:18:ed:f1:c8:48:16:df:e4:af:19:95:fb:f7:1d:be:f7:
b1:c6:3c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:26 2025 by rpki-client