Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
File: JtmhbC-n1MNwtTJSFL5EILYR8fk.mft (raw, json)
Hash identifier: mGFAS/n8jUgO0J2F4hqGgoLwMXEhhqGjO4gdL49SeNo=
Subject key identifier: 2A:82:EB:F9:45:70:5B:A5:E8:31:81:34:71:C9:1A:D0:6B:DD:04:0B
Authority key identifier: 26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
Certificate issuer: /CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Certificate serial: 019931FF44761CBA267A4FCBFBDF2D8039EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
Manifest number: 167B
Signing time: Wed 10 Sep 2025 05:00:36 +0000
Manifest this update: Wed 10 Sep 2025 05:00:36 +0000
Manifest next update: Thu 11 Sep 2025 05:00:36 +0000
Files and hashes: 1: 8ugHhLiToKwnzK4NKapWEcPlKh0.roa (hash: 4E0a2T2uUeIhUUG04lFzaUEsCu56I9vGRdi00E/gn7k=)
2: JtmhbC-n1MNwtTJSFL5EILYR8fk.crl (hash: owyy85YQJ7w2Hji3gYml7SAE6tJBNDtPzUrsKHPeCmw=)
3: zGlqz5otF9hY2Y3sk2pn1erhTAU.roa (hash: ofXFe05Yp+tSBC9fBzRKiln4g1Kad9/L6uAtEFx8Z54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:ff:44:76:1c:ba:26:7a:4f:cb:fb:df:2d:80:39:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Validity
Not Before: Sep 10 05:00:36 2025 GMT
Not After : Sep 11 05:00:36 2025 GMT
Subject: CN=2a82ebf945705ba5e831813471c91ad06bdd040b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f7:58:3a:d5:63:93:7d:d0:9a:8e:dd:d5:67:
3e:4a:b6:51:ab:df:6a:8c:e1:79:a7:01:85:bb:9b:
4f:f9:ba:94:98:75:70:f7:39:e2:2a:9c:02:6c:47:
08:73:8b:ab:2e:aa:d8:2b:77:fb:b5:7e:e1:04:09:
d8:e6:91:5e:83:8a:32:a5:21:d6:a0:2f:0b:05:7e:
ef:c5:40:75:21:80:ee:b2:35:d0:0f:b8:32:6c:94:
7a:5d:8c:bf:b8:6f:15:23:12:aa:af:e6:2c:84:8f:
b7:62:af:14:c4:c2:2f:69:2f:04:0d:f2:ef:7e:97:
2a:02:47:44:30:c1:80:6f:8f:7b:0f:fe:51:f5:4f:
57:75:6c:88:5d:c2:78:dd:a8:aa:8f:91:bb:8e:75:
22:91:30:df:3b:64:1e:2f:fc:14:af:0c:a8:34:83:
f0:06:10:54:ea:c5:5c:46:2a:e5:05:1d:4d:df:86:
bb:44:43:42:d5:7f:4c:08:c5:9a:46:44:30:9e:36:
61:31:e2:53:2c:67:d3:e2:d3:f4:e3:24:d0:ad:bf:
72:a4:7b:44:30:31:69:f7:8f:31:77:62:7f:ad:88:
ed:e2:59:5a:0e:d3:1e:e8:c6:5c:8f:07:6c:f4:c9:
37:8c:62:7a:ae:51:2f:8d:8b:a7:6b:13:94:58:4d:
ac:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:82:EB:F9:45:70:5B:A5:E8:31:81:34:71:C9:1A:D0:6B:DD:04:0B
X509v3 Authority Key Identifier:
keyid:26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ed:c3:3e:80:2e:5e:c1:e3:53:e2:6a:d9:4d:0d:50:16:35:
69:8f:66:c9:9b:3a:df:c7:76:c2:1d:db:68:7f:ee:ee:e2:52:
2b:8e:92:28:f2:06:5d:b5:a6:8b:cf:1b:c2:3d:c6:ef:c6:97:
b6:0b:86:81:f3:f5:9b:77:e2:8b:6c:83:a6:c9:2c:e9:5e:39:
c0:37:bd:71:86:10:72:23:f5:85:9f:ee:fa:d9:55:be:8e:be:
ef:31:93:b8:97:f7:eb:ea:ee:34:7b:15:b5:d8:83:99:90:67:
fa:18:68:1e:95:f5:48:db:a0:2d:a9:76:3a:cd:ac:1b:c8:f1:
23:e6:41:54:77:e8:cc:aa:e2:6d:d5:6f:02:e6:58:ae:73:2e:
3b:6a:6f:45:c1:c4:13:08:c4:7d:9c:43:20:43:b7:90:69:af:
06:fe:da:b0:2b:08:45:c6:83:bb:4e:dd:f5:3f:a1:d8:b1:ff:
78:36:e0:16:a7:54:eb:45:ef:4a:4a:48:e1:93:9b:5a:80:81:
e8:da:c7:da:11:c3:06:e6:16:cf:51:3c:00:b3:54:34:76:ad:
cf:40:52:77:ed:81:23:49:81:99:cb:07:c2:51:db:89:36:0f:
f0:a6:46:3c:fd:7d:20:c0:09:39:71:f4:45:de:2c:21:a9:d3:
d6:84:46:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 13:52:19 2025 by rpki-client