Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
File: JtmhbC-n1MNwtTJSFL5EILYR8fk.mft (raw, json)
Hash identifier: 4tmfoT5BrtTIz5fNVTXn+r9NA2kK+KLiyspRGnBQ1nA=
Subject key identifier: E6:B6:B0:2D:69:B4:57:34:C3:2E:3B:D7:5F:C2:DE:36:FA:5B:5B:C9
Authority key identifier: 26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
Certificate issuer: /CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Certificate serial: 019874BE0F2DDF7DD07A5849578B169725E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 11:01:09 +0000
Manifest this update: Mon 04 Aug 2025 11:01:09 +0000
Manifest next update: Tue 05 Aug 2025 11:01:09 +0000
Files and hashes: 1: 8ugHhLiToKwnzK4NKapWEcPlKh0.roa (hash: 4E0a2T2uUeIhUUG04lFzaUEsCu56I9vGRdi00E/gn7k=)
2: JtmhbC-n1MNwtTJSFL5EILYR8fk.crl (hash: RLzOUhpuxY8C9uZG6wPDC1XLG/VrhpSByipoobCwDVY=)
3: zGlqz5otF9hY2Y3sk2pn1erhTAU.roa (hash: ofXFe05Yp+tSBC9fBzRKiln4g1Kad9/L6uAtEFx8Z54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:be:0f:2d:df:7d:d0:7a:58:49:57:8b:16:97:25:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Validity
Not Before: Aug 4 11:01:09 2025 GMT
Not After : Aug 5 11:01:09 2025 GMT
Subject: CN=e6b6b02d69b45734c32e3bd75fc2de36fa5b5bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:05:c8:7c:8e:28:5d:53:a0:a1:a4:23:2a:fb:
bf:ea:b5:11:22:33:9e:16:04:4e:3c:6d:5d:30:57:
ee:df:45:70:e4:cc:0d:15:d2:d9:36:bc:d4:69:d9:
21:0e:7e:95:0f:95:d2:77:88:84:6d:80:04:d9:99:
d4:7d:61:8b:56:4a:f0:d7:99:62:6b:b6:f7:29:98:
a0:da:23:55:63:ae:f5:f3:b5:e8:29:4d:74:dd:28:
f0:32:4e:e8:d9:32:63:3d:ee:3b:2a:41:ac:04:13:
c4:b8:f3:cc:51:9f:7d:2a:37:58:0d:e2:1b:54:5e:
b4:a7:6f:5f:12:0e:f6:ec:e9:f8:bd:08:64:8e:99:
3a:8c:cc:36:2b:d0:53:a3:a8:45:71:ab:ed:2c:c6:
09:b2:93:2e:fa:9f:eb:7e:e3:03:8e:c9:b3:fe:ed:
76:48:5f:7e:b7:77:10:a8:34:a4:ba:fb:aa:74:30:
c7:5c:6a:81:9e:49:89:58:3e:2a:08:e9:9d:5e:1c:
02:6c:87:6f:08:ff:89:a8:ba:68:4a:e1:92:0a:61:
f5:64:ad:0b:9b:1d:77:12:3c:f6:c2:7b:be:fb:36:
4f:32:f5:9f:93:12:bd:71:da:39:71:ed:22:5c:69:
3a:ab:7b:65:ab:b4:11:33:29:d6:d5:52:3e:9f:78:
69:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B6:B0:2D:69:B4:57:34:C3:2E:3B:D7:5F:C2:DE:36:FA:5B:5B:C9
X509v3 Authority Key Identifier:
keyid:26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:08:da:c6:f9:b1:eb:a3:b2:0a:71:ee:f2:e2:02:4f:aa:3c:
a9:2e:d9:eb:2d:26:2e:36:56:71:8a:30:4c:4a:26:ab:46:ac:
0b:f5:7e:e8:4a:26:a2:0a:3a:b4:c4:19:01:13:3e:2c:99:5f:
aa:dc:b8:0c:80:0b:79:d7:4b:66:ce:1e:c7:bd:5d:4f:ef:08:
1d:1b:47:dd:d3:8e:5e:17:07:33:a1:f8:8f:da:8b:06:a6:c9:
af:92:e2:e5:73:f4:c3:b0:6c:cd:fb:0a:2d:09:a5:b3:19:d8:
e9:0b:e1:85:97:3e:27:99:74:a3:43:d0:12:4f:e3:6c:1f:07:
8c:4a:4b:55:08:26:05:84:39:51:10:09:13:97:6a:16:89:5c:
36:c2:16:7d:3f:5f:87:9d:46:1e:ea:70:cd:d9:52:18:dd:2f:
cf:ab:86:a6:13:5c:80:0a:d4:10:f3:ce:36:63:be:97:34:c7:
49:78:a7:d3:02:bf:82:e8:d0:e1:18:86:56:df:51:2f:8e:e7:
e5:94:cd:7e:46:b4:e8:fb:36:d2:fd:83:1d:6c:44:64:e6:41:
a3:c1:3c:d3:84:51:ea:a3:c0:a5:23:d7:18:1b:16:ad:a4:a6:
ed:a9:8b:2b:7d:42:83:0b:67:da:c3:84:43:3f:6d:79:58:5f:
d6:ba:6a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 13:58:37 2025 by rpki-client