Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
File: JtmhbC-n1MNwtTJSFL5EILYR8fk.mft (raw, json)
Hash identifier: Y+kn7hHHNdsAgpYeiuNDTjtZoo/9zcYiRW0kGeCffFk=
Subject key identifier: 9E:0F:A8:57:52:F7:CE:4B:24:F2:6F:8F:37:91:83:D4:E3:FB:9D:BF
Authority key identifier: 26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
Certificate issuer: /CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Certificate serial: 01974779D3CBBE21C2714D325816E529949E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
Manifest number: 157D
Signing time: Fri 06 Jun 2025 23:00:55 +0000
Manifest this update: Fri 06 Jun 2025 23:00:55 +0000
Manifest next update: Sat 07 Jun 2025 23:00:55 +0000
Files and hashes: 1: 8ugHhLiToKwnzK4NKapWEcPlKh0.roa (hash: 4E0a2T2uUeIhUUG04lFzaUEsCu56I9vGRdi00E/gn7k=)
2: JtmhbC-n1MNwtTJSFL5EILYR8fk.crl (hash: u/F+juUQoP/WjMnf2WxnWYfN6Ukhz4kyfj7MNF4HOgw=)
3: zGlqz5otF9hY2Y3sk2pn1erhTAU.roa (hash: ofXFe05Yp+tSBC9fBzRKiln4g1Kad9/L6uAtEFx8Z54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:d3:cb:be:21:c2:71:4d:32:58:16:e5:29:94:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Validity
Not Before: Jun 6 23:00:55 2025 GMT
Not After : Jun 7 23:00:55 2025 GMT
Subject: CN=9e0fa85752f7ce4b24f26f8f379183d4e3fb9dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:53:fa:4e:db:86:08:23:f5:d9:d2:dc:63:e8:
74:60:ee:5d:14:25:45:0f:0f:d9:9a:fb:23:7c:2f:
0b:c2:1b:10:1d:08:df:5e:38:72:93:b2:28:3c:1a:
76:e1:f8:df:e6:1b:5e:c7:94:64:05:92:55:b9:81:
cf:c9:19:b9:0e:84:75:43:50:ac:ff:60:69:c3:09:
f4:ad:7a:e8:86:ed:22:3c:75:80:de:73:58:6f:25:
ef:ed:b4:92:77:4f:6a:2b:24:23:28:47:8d:13:d5:
63:f6:b2:6e:02:b4:2b:47:1f:4a:4d:84:98:68:7d:
7a:e3:9e:7a:4b:db:6a:65:60:cf:7e:50:07:43:70:
45:76:71:cf:ec:e6:64:e8:c3:c4:50:42:31:5a:57:
da:63:25:23:09:c8:cb:82:59:9c:f7:fc:9c:c7:54:
09:d6:d0:16:ca:5d:1a:35:f0:04:93:e5:05:b2:a3:
0a:fd:f7:7e:6d:23:c7:0f:37:29:eb:a6:41:9e:ca:
c9:2f:ba:b9:95:af:4c:40:a3:3d:fc:17:14:23:43:
06:1c:c4:16:ac:62:fc:76:4c:01:60:80:7f:9c:c9:
61:f3:37:00:ad:a3:de:e3:15:c9:74:a9:13:98:de:
95:21:0f:d6:1a:34:02:2e:c0:4c:ba:6e:c5:47:85:
c2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:0F:A8:57:52:F7:CE:4B:24:F2:6F:8F:37:91:83:D4:E3:FB:9D:BF
X509v3 Authority Key Identifier:
keyid:26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:04:10:a0:dd:48:74:ef:9e:62:61:ac:47:a9:15:02:30:f0:
4e:f8:5f:e5:29:60:c7:24:f8:c0:27:3b:4c:74:46:73:2b:f2:
0d:91:cf:89:e0:13:8a:c9:ff:70:c3:1b:76:b9:8a:ae:c5:4e:
7f:de:14:b7:c9:28:59:eb:36:ed:4c:05:0b:d5:11:53:41:f0:
6b:9e:ff:e8:ba:55:e0:24:ab:4d:70:16:9f:e8:e0:f1:24:fb:
2e:a0:b9:47:ce:ad:c7:57:b4:37:68:aa:bf:7a:70:5c:fc:4b:
a8:2c:3a:b4:7a:80:4d:58:ce:b0:60:f9:da:76:90:4a:6d:6e:
d7:0c:c1:d3:c7:81:a7:f7:cf:2c:e8:e1:dd:27:d6:6c:b5:03:
6b:e2:17:1a:f1:f2:90:1a:15:76:4f:9d:0f:23:bc:9f:f6:1f:
78:c0:7b:e6:63:34:84:17:2c:ba:48:64:f3:d2:83:0a:ce:b5:
ec:f1:dd:0c:43:2a:e7:34:62:53:bf:a9:9a:ca:32:6d:f7:3e:
39:fa:f1:24:3c:40:6c:e3:b7:96:6e:a8:d2:70:0a:24:df:f1:
43:30:98:ca:e4:2b:db:b8:95:86:cf:6d:77:99:50:f4:06:0a:
0f:34:be:ad:f4:16:87:4d:f6:fa:df:f7:92:29:c9:0c:ae:81:
ce:32:d7:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHedPLviHCcU0yWBblKZSeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2ZDlhMTZjMmZhN2Q0YzM3MGI1MzI1MjE0YmU0NDIwYjYx
MWYxZjkwHhcNMjUwNjA2MjMwMDU1WhcNMjUwNjA3MjMwMDU1WjAzMTEwLwYDVQQD
Eyg5ZTBmYTg1NzUyZjdjZTRiMjRmMjZmOGYzNzkxODNkNGUzZmI5ZGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1P6TtuGCCP12dLcY+h0YO5dFCVF
Dw/ZmvsjfC8LwhsQHQjfXjhyk7IoPBp24fjf5htex5RkBZJVuYHPyRm5DoR1Q1Cs
/2Bpwwn0rXrohu0iPHWA3nNYbyXv7bSSd09qKyQjKEeNE9Vj9rJuArQrRx9KTYSY
aH164556S9tqZWDPflAHQ3BFdnHP7OZk6MPEUEIxWlfaYyUjCcjLglmc9/ycx1QJ
1tAWyl0aNfAEk+UFsqMK/fd+bSPHDzcp66ZBnsrJL7q5la9MQKM9/BcUI0MGHMQW
rGL8dkwBYIB/nMlh8zcAraPe4xXJdKkTmN6VIQ/WGjQCLsBMum7FR4XCZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ4PqFdS985LJPJvjzeRg9Tj+52/MB8GA1UdIwQY
MBaAFCbZoWwvp9TDcLUyUhS+RCC2EfH5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnRtaGJDLW4xTU53dFRKU0ZMNUVJTFlSOGZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9jNWZjNTQtNzRjMi00ZjNkLTk1YzEt
NDQwMjNjM2I3ODRlLzEvSnRtaGJDLW4xTU53dFRKU0ZMNUVJTFlSOGZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9jNWZjNTQtNzRjMi00ZjNkLTk1YzEtNDQwMjNjM2I3ODRl
LzEvSnRtaGJDLW4xTU53dFRKU0ZMNUVJTFlSOGZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFgQQoN1I
dO+eYmGsR6kVAjDwTvhf5SlgxyT4wCc7THRGcyvyDZHPieATisn/cMMbdrmKrsVO
f94Ut8koWes27UwFC9URU0Hwa57/6LpV4CSrTXAWn+jg8ST7LqC5R86tx1e0N2iq
v3pwXPxLqCw6tHqATVjOsGD52naQSm1u1wzB08eBp/fPLOjh3SfWbLUDa+IXGvHy
kBoVdk+dDyO8n/YfeMB75mM0hBcsukhk89KDCs617PHdDEMq5zRiU7+pmsoybfc+
OfrxJDxAbOO3lm6o0nAKJN/xQzCYyuQr27iVhs9td5lQ9AYKDzS+rfQWh032+t/3
kinJDK6BzjLXvg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 00:55:55 2025 by rpki-client