Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
File: JtmhbC-n1MNwtTJSFL5EILYR8fk.mft (raw, json)
Hash identifier: z5QNIoQoGSiUm3OUgzntbs7I6iyMfT5H89GjdBL3umM=
Subject key identifier: AB:C9:20:CA:D3:D8:AF:7E:A9:24:88:88:44:B9:BD:90:E0:8B:2E:31
Authority key identifier: 26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
Certificate issuer: /CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Certificate serial: 019848534677A40EE135E2CCACEC3976EF30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 20:01:13 +0000
Manifest this update: Sat 26 Jul 2025 20:01:13 +0000
Manifest next update: Sun 27 Jul 2025 20:01:13 +0000
Files and hashes: 1: 8ugHhLiToKwnzK4NKapWEcPlKh0.roa (hash: 4E0a2T2uUeIhUUG04lFzaUEsCu56I9vGRdi00E/gn7k=)
2: JtmhbC-n1MNwtTJSFL5EILYR8fk.crl (hash: wienq4nswdciMyQhR2hdoNiqgLM//16tqB2RRB9GnZU=)
3: zGlqz5otF9hY2Y3sk2pn1erhTAU.roa (hash: ofXFe05Yp+tSBC9fBzRKiln4g1Kad9/L6uAtEFx8Z54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:53:46:77:a4:0e:e1:35:e2:cc:ac:ec:39:76:ef:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Validity
Not Before: Jul 26 20:01:13 2025 GMT
Not After : Jul 27 20:01:13 2025 GMT
Subject: CN=abc920cad3d8af7ea924888844b9bd90e08b2e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a2:44:b1:4b:09:d5:7f:0b:f0:7c:8f:02:67:
ab:0d:24:3b:c3:7b:42:e8:4d:f7:38:37:2d:7d:ae:
d5:c8:2f:7e:91:31:5c:87:76:3b:42:8c:6f:2a:7d:
a3:6b:f6:aa:0b:24:7d:a8:83:cd:11:b4:f2:18:e3:
9d:6e:9b:d7:01:bf:05:1c:c5:05:d1:82:c5:e0:ce:
8d:3c:f4:8c:73:a7:d4:93:7a:0c:24:f8:4b:b4:a0:
9b:b2:b8:b8:81:c8:23:08:93:5a:c8:83:1b:15:3a:
1f:7a:a5:b1:bf:84:66:f6:cc:0f:86:a0:d7:8b:31:
b2:26:e0:1a:5d:57:22:86:8b:10:38:6c:da:c4:76:
27:7f:63:c4:aa:a1:70:6d:a8:95:1c:48:ba:fb:ff:
15:1c:71:1d:f0:f4:85:1b:d0:74:50:7b:b8:ae:67:
93:f9:f3:c2:e8:95:34:5d:d7:89:e1:a8:28:b3:66:
01:68:26:da:f4:9d:69:e3:4b:e4:c9:65:69:50:6d:
ea:1d:e0:e1:42:c4:21:58:63:b3:61:e0:fa:17:65:
42:52:e4:c3:89:1b:38:e5:3c:a1:29:28:07:ed:89:
a8:c3:8b:8b:02:ca:23:f9:6e:18:d7:30:df:bd:a3:
75:2a:ff:0b:96:38:c1:92:8e:6a:f8:7a:e6:ad:95:
99:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C9:20:CA:D3:D8:AF:7E:A9:24:88:88:44:B9:BD:90:E0:8B:2E:31
X509v3 Authority Key Identifier:
keyid:26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:0a:27:bb:e0:59:72:bf:09:0a:01:e7:86:4c:29:bc:a8:4a:
0e:91:61:27:f6:31:56:df:92:f5:5c:07:2b:e0:e2:f2:50:95:
83:d7:a7:8c:3d:58:4c:7c:f4:d0:2b:1b:8e:e8:1f:f4:52:7a:
c8:50:10:66:0b:1b:5e:68:f6:f7:60:9c:7b:33:d8:d8:b3:f0:
84:0e:8d:1a:55:4f:40:8e:78:bb:d3:85:45:b3:96:96:b6:26:
d4:cf:92:6f:62:3c:f0:c1:39:72:4f:9f:84:23:31:bc:55:91:
ab:ea:3c:fd:7f:af:ab:b4:2b:e1:69:ab:f9:5d:df:7f:6f:e2:
9f:b1:89:20:43:b7:05:34:c3:8f:b0:85:90:7d:ee:67:6b:3b:
34:ec:94:16:d6:92:cc:5c:66:a8:6b:72:29:b6:5f:c3:dd:72:
48:7f:70:6f:e0:0f:8f:a8:a2:e5:83:d4:59:0e:71:24:e2:e7:
9b:76:0e:3a:18:d3:43:5e:1c:c9:48:68:40:a4:a2:85:a8:c3:
22:d2:6f:b0:1d:be:ac:0b:d1:cd:1b:ec:b1:ea:8f:5e:9d:a0:
31:10:0d:dc:3d:dc:ed:dd:a5:90:8a:ca:45:ad:33:bc:81:78:
83:ca:bd:93:d2:1b:4c:2a:83:c9:89:08:83:25:89:76:c0:c7:
d5:e6:80:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:56:06 2025 by rpki-client