Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
File: jtmMBXCv6fGq69DZ6i_CjB39mIk.mft (raw, json)
Hash identifier: 2LMhwFRZisN+Q12rcphwLGcmBzFifvjh2L4Vza9ejfI=
Subject key identifier: E0:B6:BD:C0:84:3F:8B:94:E9:01:EC:D3:82:70:1D:C4:5D:C2:F1:BC
Authority key identifier: 8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89
Certificate issuer: /CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889
Certificate serial: 01987A522A67F31FD9893714D9731EAF7240
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
Manifest number: 0FE5
Signing time: Tue 05 Aug 2025 13:01:01 +0000
Manifest this update: Tue 05 Aug 2025 13:01:01 +0000
Manifest next update: Wed 06 Aug 2025 13:01:01 +0000
Files and hashes: 1: jtmMBXCv6fGq69DZ6i_CjB39mIk.crl (hash: auzt3WtxNu48VLBye3x1RZlujNQq1v8jhb/mRMEZrMc=)
2: xd9VA_78P1dLBFhm7sOrW_QXFZU.roa (hash: QyqCAQo5qDHygqeA0Lpsx+fr8JK0CEsNpPX8qkqt2z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:52:2a:67:f3:1f:d9:89:37:14:d9:73:1e:af:72:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889
Validity
Not Before: Aug 5 13:01:01 2025 GMT
Not After : Aug 6 13:01:01 2025 GMT
Subject: CN=e0b6bdc0843f8b94e901ecd382701dc45dc2f1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:28:79:d1:ea:a2:31:52:be:7c:3d:66:18:1a:
ad:a6:5a:4a:43:2f:df:f9:f1:8f:66:50:f5:64:69:
91:0d:9f:8d:51:c2:4b:01:60:db:eb:5b:dd:0b:e4:
42:8c:f6:90:ac:50:40:f4:94:5a:0a:7d:80:99:6f:
3f:a8:e7:17:53:44:1d:d4:9d:33:4f:f7:5c:a3:f8:
36:1f:ce:b1:77:83:53:02:20:aa:31:3d:2c:ec:10:
a1:74:71:f6:ce:fc:db:38:2f:33:b4:ae:8c:15:e2:
7e:e5:2f:85:3d:b7:e7:3c:a3:3d:03:54:e2:e0:d5:
08:23:53:dc:2c:30:10:b4:0e:00:f8:99:c2:0c:59:
9c:5d:45:91:7f:2a:e1:b6:5d:ca:0d:51:b7:40:d5:
ae:ef:e5:07:cc:40:4a:e6:d6:2b:86:87:9c:18:cf:
95:4b:41:b7:6a:73:93:4e:52:a7:28:fa:e4:97:34:
4b:8f:48:45:63:12:eb:0b:53:d3:80:ac:ff:6a:35:
c5:ab:0e:40:82:17:2e:f2:dd:3a:e7:36:91:55:15:
80:c3:8c:fd:59:9c:5e:94:8b:48:38:45:c5:99:f1:
7d:2c:bd:68:6f:41:51:72:b7:88:f1:10:8b:6f:8f:
ca:04:c4:c4:33:64:9e:26:4a:10:c4:11:db:f6:d4:
db:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B6:BD:C0:84:3F:8B:94:E9:01:EC:D3:82:70:1D:C4:5D:C2:F1:BC
X509v3 Authority Key Identifier:
keyid:8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:79:06:19:28:85:e0:ea:ba:e5:f2:23:9d:08:ce:ff:fa:d2:
46:79:55:ed:10:8b:c0:db:11:0a:5a:6b:26:8e:9f:98:47:b1:
b3:7e:86:70:23:e4:2b:be:a8:68:e9:02:ed:c0:ce:a5:db:0c:
32:76:b6:f6:24:13:c6:6e:4a:05:a9:b2:2b:02:f3:6c:22:73:
19:c5:8b:1c:c1:2a:a7:05:3b:cf:99:1f:99:07:ef:f7:9b:74:
c9:8a:98:d7:9a:b0:d8:1c:9a:ae:e6:2c:35:4c:c7:78:b9:ee:
fe:6a:37:fb:4d:e4:b0:f1:9f:6a:b9:50:42:1b:87:d5:8b:09:
d5:03:8c:c9:c2:ec:eb:85:67:93:1e:4f:a2:21:23:6c:3a:19:
19:79:c3:1e:02:fc:61:a4:70:ad:e6:a7:f5:de:dc:c5:9d:d4:
55:e7:67:af:46:78:f8:56:7d:aa:fc:55:12:04:be:59:44:f1:
f8:f5:00:ef:57:e4:f5:d4:0d:db:56:e5:3f:b3:6e:1b:99:19:
af:fe:97:d0:93:2f:fc:fd:35:bd:a9:dd:b7:33:2f:32:a4:e8:
06:96:b7:e7:53:16:9e:11:00:cd:1b:39:da:b8:0a:3d:70:e1:
a7:f6:34:87:5a:12:d4:e9:eb:42:b8:0d:59:05:4f:9e:f3:ee:
01:c9:0d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:15:07 2025 by rpki-client