Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
File: JtmhbC-n1MNwtTJSFL5EILYR8fk.mft (raw, json)
Hash identifier: Kp02zlaUlh8DZ/3Ey5zfS5CUv94/4srhLZOj3apmnz8=
Subject key identifier: 04:EE:9B:13:3A:D5:72:A4:F0:70:54:D7:D9:1A:60:55:6A:C8:60:32
Authority key identifier: 26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
Certificate issuer: /CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Certificate serial: 019A2176850556DB12FBDB3E85D67805535B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
Manifest number: 16F7
Signing time: Sun 26 Oct 2025 17:00:06 +0000
Manifest this update: Sun 26 Oct 2025 17:00:06 +0000
Manifest next update: Mon 27 Oct 2025 17:00:06 +0000
Files and hashes: 1: 8ugHhLiToKwnzK4NKapWEcPlKh0.roa (hash: 4E0a2T2uUeIhUUG04lFzaUEsCu56I9vGRdi00E/gn7k=)
2: JtmhbC-n1MNwtTJSFL5EILYR8fk.crl (hash: 4QQEXbZwXPAI9tfgl3WS1onPEopLdbvAzGQJcw7vd2I=)
3: zGlqz5otF9hY2Y3sk2pn1erhTAU.roa (hash: ofXFe05Yp+tSBC9fBzRKiln4g1Kad9/L6uAtEFx8Z54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:76:85:05:56:db:12:fb:db:3e:85:d6:78:05:53:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Validity
Not Before: Oct 26 17:00:06 2025 GMT
Not After : Oct 27 17:00:06 2025 GMT
Subject: CN=04ee9b133ad572a4f07054d7d91a60556ac86032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3b:69:3c:dd:f6:70:cc:a4:1a:ba:c4:06:d9:
f5:72:12:78:cf:d8:74:e9:3e:1d:8a:9b:52:07:48:
cb:4b:fe:cc:a6:82:51:4b:2d:e4:86:9c:ad:62:ef:
69:28:ac:58:b9:43:12:64:ef:74:a9:ac:13:55:fe:
d9:5d:f2:6d:6b:de:01:50:48:19:61:8b:aa:8b:71:
7a:c2:1b:95:0b:ed:54:79:cd:3d:4d:e6:7d:df:40:
5a:b6:29:34:47:76:ed:39:8f:e6:0c:7c:7e:48:00:
84:de:5c:d1:ab:78:8b:95:41:a1:8b:75:e1:af:14:
ba:ae:07:ee:d7:31:20:46:e6:f6:b4:ca:73:12:0e:
ab:c6:87:17:40:62:ad:e6:96:1d:50:77:92:54:9f:
9b:a4:ba:c7:c4:3e:6a:92:5a:c7:a5:40:9d:cd:a1:
0a:58:7a:80:13:83:d0:54:91:e9:76:30:97:8d:b2:
76:e6:98:78:7e:d9:92:d1:d7:be:40:c6:20:20:0e:
d3:5b:da:8d:42:66:50:c8:5c:e3:4f:1e:7a:90:c2:
f7:fc:01:53:6c:a5:e1:54:46:86:28:34:37:80:4f:
21:7b:bb:5e:42:7e:9a:39:a8:18:66:25:8f:80:f5:
46:29:f1:09:56:ac:8e:4d:38:00:cf:01:20:a6:96:
0e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:EE:9B:13:3A:D5:72:A4:F0:70:54:D7:D9:1A:60:55:6A:C8:60:32
X509v3 Authority Key Identifier:
keyid:26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:df:c1:3c:d0:09:70:a3:24:c6:2c:cd:12:93:6a:f6:09:01:
75:91:06:7e:8f:e8:d5:c2:74:3e:c8:c4:3a:d3:65:71:33:d8:
bd:d9:73:10:8d:b3:c3:8e:9b:6f:1a:fb:92:ca:1f:51:47:64:
23:55:34:51:25:76:0f:ac:a0:a0:60:79:39:85:21:1a:9d:24:
bd:1b:26:21:39:11:1f:d8:17:97:04:05:4d:d9:9a:12:60:c3:
1c:b9:2a:38:e0:1c:0a:bc:9b:e8:e6:b7:63:42:ae:f4:b3:8a:
4e:3f:42:12:72:bd:17:87:31:7a:ac:6e:d5:c0:a0:4a:39:67:
3a:96:42:f6:10:57:b6:85:2a:20:81:af:e2:8c:0c:5e:4e:f1:
8c:43:b5:ab:1b:a2:e6:42:fa:f8:3f:de:96:d5:a8:bc:9b:10:
12:1b:f7:d1:0a:c4:ef:13:4e:7f:ca:a0:ce:f0:20:aa:5a:25:
e8:39:33:38:f2:ac:4d:36:75:5f:4e:db:6a:13:88:9d:b6:93:
71:87:86:ec:75:11:29:3c:ce:d2:37:d8:c1:bd:41:3b:a5:eb:
83:0e:ed:11:12:53:c0:7c:2b:a0:b3:36:68:98:ff:02:8e:a3:
74:6d:b7:44:ef:45:d1:3a:21:84:4c:a9:34:bd:5f:a5:59:cb:
40:03:53:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:12:16 2025 by rpki-client