Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
File: JTYSS5962om34iZByFbTBTA8H3w.mft (raw, json)
Hash identifier: 4vSFUMOsCxefPd4bW8fnVb03QvBMYzYmIMDJctMew1Y=
Subject key identifier: F9:68:AA:83:C7:8B:D2:CD:94:76:FB:1B:89:DD:35:99:DA:31:DC:AD
Authority key identifier: 25:36:12:4B:9F:7A:DA:89:B7:E2:26:41:C8:56:D3:05:30:3C:1F:7C
Certificate issuer: /CN=2536124b9f7ada89b7e22641c856d305303c1f7c
Certificate serial: 01988BB37701B75F4800E58221F284452BB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
Manifest number: 1621
Signing time: Fri 08 Aug 2025 22:00:51 +0000
Manifest this update: Fri 08 Aug 2025 22:00:51 +0000
Manifest next update: Sat 09 Aug 2025 22:00:51 +0000
Files and hashes: 1: JTYSS5962om34iZByFbTBTA8H3w.crl (hash: S8r/dumAiJd70ONpydNIsibsL6wD/b4Ijvaau5MQbaI=)
2: Oz-OF7QUhf9OkYOY6Er5Z5L_euc.roa (hash: rTcAf8Y3zE28zXssf3PZGZt9Ygw2dFFGFW0xU85GA/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:b3:77:01:b7:5f:48:00:e5:82:21:f2:84:45:2b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2536124b9f7ada89b7e22641c856d305303c1f7c
Validity
Not Before: Aug 8 22:00:51 2025 GMT
Not After : Aug 9 22:00:51 2025 GMT
Subject: CN=f968aa83c78bd2cd9476fb1b89dd3599da31dcad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:79:22:f0:e5:e3:78:ae:e5:52:78:6f:2c:97:
79:27:4e:9b:3a:c3:c8:0b:be:b1:76:38:7f:ef:cf:
a1:86:75:c1:ac:ea:d7:b5:cc:82:a7:77:a5:e9:7f:
39:ef:8e:3e:8c:e8:b5:e6:ba:8d:b5:bd:2b:15:dc:
f6:87:e6:da:10:ce:f5:67:2f:31:19:4a:c1:6c:03:
51:e0:18:65:a8:63:2c:53:54:67:1d:df:ee:0b:c1:
93:ea:91:c2:03:73:4e:2e:a0:81:f7:84:84:b9:4e:
da:e7:d4:48:c1:f9:5c:17:4b:73:cb:57:56:e5:e3:
14:70:79:1f:50:c4:e2:01:47:4a:de:e4:08:27:04:
97:7c:a3:86:53:c1:1f:cc:27:ca:66:08:d2:58:f5:
62:1e:8e:13:bc:bf:93:04:97:a9:75:f3:27:72:be:
8d:08:61:72:26:a3:47:9a:c3:82:71:14:6d:fd:5e:
d4:19:0d:dd:b3:3e:7a:b0:85:fc:1e:5b:80:0d:89:
ae:da:a7:29:a1:57:ec:c7:ca:26:8a:55:b8:51:43:
ea:cf:9d:6b:0f:ab:d8:3b:a3:85:40:05:50:83:e2:
14:bb:9e:53:12:94:55:f9:16:e1:d6:9f:d1:c6:19:
79:32:55:b5:1d:5d:90:22:9a:e7:6f:13:75:93:b1:
1d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:68:AA:83:C7:8B:D2:CD:94:76:FB:1B:89:DD:35:99:DA:31:DC:AD
X509v3 Authority Key Identifier:
keyid:25:36:12:4B:9F:7A:DA:89:B7:E2:26:41:C8:56:D3:05:30:3C:1F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:3f:41:69:30:22:5b:27:6f:b2:5a:6d:30:9d:86:b6:f7:6a:
3e:a3:eb:f7:82:be:37:da:f2:37:5a:a4:80:b2:65:59:f1:7e:
a7:56:ea:5d:ff:ea:0d:80:b2:a9:98:63:e7:80:b4:31:02:5b:
b7:65:f5:57:d5:8a:5a:85:54:f0:49:19:63:db:53:ae:e1:a6:
f2:18:f2:32:1b:d4:43:3f:12:3f:05:a5:a4:7f:64:12:8f:ff:
8b:2c:58:98:d5:86:a0:3f:25:35:e3:0b:80:9e:8c:94:3e:50:
bf:b1:4c:52:bf:5e:a1:6a:3b:fa:6f:2e:68:67:f9:20:08:82:
87:5c:86:c3:77:a3:57:56:32:6a:d5:1d:ac:b1:ef:96:c6:62:
2b:9b:28:42:2c:bd:97:a0:4a:3c:4b:60:08:b5:dc:cb:d1:c1:
21:e6:d4:12:db:a3:38:d8:2e:00:57:11:8c:c4:a2:fe:95:6a:
74:7b:e6:c0:46:b3:4b:3c:69:2f:10:1a:bc:80:56:45:36:4f:
b7:59:27:53:68:59:88:77:97:2d:80:b8:f2:ac:ea:7d:cf:d2:
84:2e:ee:f0:d0:ff:68:a7:b4:1f:44:25:14:c4:97:b9:31:4e:
f9:df:e2:9b:b8:5f:c8:6a:06:f8:d3:06:ac:68:79:bf:e2:46:
bf:cd:5e:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLs3cBt19IAOWCIfKERSuwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1MzYxMjRiOWY3YWRhODliN2UyMjY0MWM4NTZkMzA1MzAz
YzFmN2MwHhcNMjUwODA4MjIwMDUxWhcNMjUwODA5MjIwMDUxWjAzMTEwLwYDVQQD
EyhmOTY4YWE4M2M3OGJkMmNkOTQ3NmZiMWI4OWRkMzU5OWRhMzFkY2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6nki8OXjeK7lUnhvLJd5J06bOsPI
C76xdjh/78+hhnXBrOrXtcyCp3el6X85744+jOi15rqNtb0rFdz2h+baEM71Zy8x
GUrBbANR4BhlqGMsU1RnHd/uC8GT6pHCA3NOLqCB94SEuU7a59RIwflcF0tzy1dW
5eMUcHkfUMTiAUdK3uQIJwSXfKOGU8EfzCfKZgjSWPViHo4TvL+TBJepdfMncr6N
CGFyJqNHmsOCcRRt/V7UGQ3dsz56sIX8HluADYmu2qcpoVfsx8omilW4UUPqz51r
D6vYO6OFQAVQg+IUu55TEpRV+Rbh1p/Rxhl5MlW1HV2QIprnbxN1k7EdtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPloqoPHi9LNlHb7G4ndNZnaMdytMB8GA1UdIwQY
MBaAFCU2EkufetqJt+ImQchW0wUwPB98MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlRZU1M1OTYyb20zNGlaQnlGYlRCVEE4SDN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9kZWQ1ODMtYjY3Yi00NTgzLWEyNDAt
Nzc0MmQyNjQ1MmVkLzEvSlRZU1M1OTYyb20zNGlaQnlGYlRCVEE4SDN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9kZWQ1ODMtYjY3Yi00NTgzLWEyNDAtNzc0MmQyNjQ1MmVk
LzEvSlRZU1M1OTYyb20zNGlaQnlGYlRCVEE4SDN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMD9BaTAi
WydvslptMJ2GtvdqPqPr94K+N9ryN1qkgLJlWfF+p1bqXf/qDYCyqZhj54C0MQJb
t2X1V9WKWoVU8EkZY9tTruGm8hjyMhvUQz8SPwWlpH9kEo//iyxYmNWGoD8lNeML
gJ6MlD5Qv7FMUr9eoWo7+m8uaGf5IAiCh1yGw3ejV1YyatUdrLHvlsZiK5soQiy9
l6BKPEtgCLXcy9HBIebUEtujONguAFcRjMSi/pVqdHvmwEazSzxpLxAavIBWRTZP
t1knU2hZiHeXLYC48qzqfc/ShC7u8ND/aKe0H0QlFMSXuTFO+d/im7hfyGoG+NMG
rGh5v+JGv81eag==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:09:49 2025 by rpki-client