Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
File: JtmhbC-n1MNwtTJSFL5EILYR8fk.mft (raw, json)
Hash identifier: E386p9tLBbhGt+MN7obzkZoca5R1919b7T78SLBnW7o=
Subject key identifier: 12:64:85:0F:F0:DB:1C:87:76:ED:43:24:9C:29:F1:1C:3F:9D:74:E6
Authority key identifier: 26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
Certificate issuer: /CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Certificate serial: 019A53AD22929930AFABD789CA7D3F648173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 11:00:46 +0000
Manifest this update: Wed 05 Nov 2025 11:00:46 +0000
Manifest next update: Thu 06 Nov 2025 11:00:46 +0000
Files and hashes: 1: 8ugHhLiToKwnzK4NKapWEcPlKh0.roa (hash: 4E0a2T2uUeIhUUG04lFzaUEsCu56I9vGRdi00E/gn7k=)
2: JtmhbC-n1MNwtTJSFL5EILYR8fk.crl (hash: v21zgI980MNuzYOUX6r4gF5vNj+vCQgDAYONlXlVyM4=)
3: zGlqz5otF9hY2Y3sk2pn1erhTAU.roa (hash: ofXFe05Yp+tSBC9fBzRKiln4g1Kad9/L6uAtEFx8Z54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ad:22:92:99:30:af:ab:d7:89:ca:7d:3f:64:81:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Validity
Not Before: Nov 5 11:00:46 2025 GMT
Not After : Nov 6 11:00:46 2025 GMT
Subject: CN=1264850ff0db1c8776ed43249c29f11c3f9d74e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:67:21:05:20:e7:af:ab:ac:e9:e9:c5:f5:d8:
7e:39:aa:84:17:93:ec:9a:d7:07:e8:88:ff:55:97:
ea:bc:b9:85:ee:4d:0a:10:2e:9f:b1:45:32:58:3c:
b3:f7:89:ea:6a:c6:ef:14:35:d0:f4:d1:6e:f0:ba:
68:3b:ef:ea:11:ac:0d:b1:9d:65:2c:d6:7f:0e:2d:
79:7c:d9:d7:3a:d6:f9:59:8b:09:b2:87:00:3f:52:
93:29:fb:80:c3:ba:ca:0f:b9:e6:60:82:80:df:6f:
54:2e:68:21:71:e4:d2:c9:59:9a:cc:9b:d4:23:76:
9d:2a:eb:32:d9:86:a9:89:68:32:12:d8:1d:0c:29:
ed:52:7d:45:22:3f:0a:f5:36:a3:72:eb:ed:61:bc:
94:fc:f4:49:c8:59:da:e0:a9:fc:b8:f9:4c:1b:fc:
a2:0d:3b:d1:98:bb:81:81:fb:83:65:6a:1a:34:e7:
a3:22:ba:39:21:8b:08:79:95:78:6d:fb:b2:af:37:
57:17:7c:fc:45:aa:b4:64:2f:4e:88:38:9d:ec:56:
b5:5f:91:ea:6a:8f:69:3d:52:64:82:dd:95:7e:40:
b1:d2:5f:90:5d:27:a3:28:fc:2f:d0:92:99:a5:1b:
a1:88:87:71:02:2d:31:bf:9c:06:40:14:a8:9a:2a:
c3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:64:85:0F:F0:DB:1C:87:76:ED:43:24:9C:29:F1:1C:3F:9D:74:E6
X509v3 Authority Key Identifier:
keyid:26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:32:14:55:8a:f3:04:81:15:49:e7:a1:b8:cc:0f:b5:20:50:
63:ed:06:72:1a:82:44:d0:92:d4:13:03:5f:90:b5:78:bc:fd:
f1:d7:ad:b1:0c:15:83:07:8f:11:d1:48:5d:c5:25:83:71:8d:
a5:fa:07:23:b3:25:6a:04:c0:df:60:10:1c:a3:08:50:bd:89:
c7:db:39:ee:a0:85:a1:aa:ec:d9:32:d1:6f:cb:f6:e8:7a:d4:
a1:36:2f:d3:c9:6c:cb:4e:33:d1:7d:9d:e5:9a:22:87:89:70:
a8:b7:34:c5:cd:27:9b:cf:2f:31:17:51:7e:03:8d:55:e4:5b:
64:bf:fa:15:38:8f:34:2f:2e:93:c2:28:b0:50:c1:50:c6:f6:
2a:46:99:ee:9d:ad:53:f6:fd:9d:b3:61:f6:91:c2:04:bf:5a:
cf:47:3a:93:bb:04:a4:7d:43:02:ad:10:95:79:be:a9:14:4f:
5f:93:80:59:01:fa:3b:86:ef:00:e6:c6:23:88:a5:8d:86:e8:
54:2a:13:cd:5f:f8:65:b4:19:9b:44:55:76:2f:5f:c6:23:2f:
2b:e0:fb:65:5c:ff:01:55:01:fd:be:a9:11:50:45:25:58:17:
a7:38:f1:99:a4:3a:6f:1b:86:59:35:32:ac:53:20:76:1b:9d:
e6:8e:4a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:55:59 2025 by rpki-client