
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
File: jtmMBXCv6fGq69DZ6i_CjB39mIk.mft (raw, json)
Hash identifier: yA/Z5TSnwnQuYlOGPjTOc7YsyEm1ApAnOEXF5ni1P/Q=
Subject key identifier: 93:DF:26:02:CD:87:6A:1B:67:0A:13:69:AE:D9:B1:31:1D:B3:57:04
Authority key identifier: 8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89
Certificate issuer: /CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889
Certificate serial: 019916BFA943F25C1CB1283685A04D26C275
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
Manifest number: 1036
Signing time: Thu 04 Sep 2025 22:01:23 +0000
Manifest this update: Thu 04 Sep 2025 22:01:23 +0000
Manifest next update: Fri 05 Sep 2025 22:01:23 +0000
Files and hashes: 1: jtmMBXCv6fGq69DZ6i_CjB39mIk.crl (hash: Piu3Qk2u7NyEFMxiCPmsh2HaT1Qq60Izlvwb/IqgkxM=)
2: xd9VA_78P1dLBFhm7sOrW_QXFZU.roa (hash: QyqCAQo5qDHygqeA0Lpsx+fr8JK0CEsNpPX8qkqt2z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:bf:a9:43:f2:5c:1c:b1:28:36:85:a0:4d:26:c2:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889
Validity
Not Before: Sep 4 22:01:23 2025 GMT
Not After : Sep 5 22:01:23 2025 GMT
Subject: CN=93df2602cd876a1b670a1369aed9b1311db35704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0f:93:c9:f2:fe:e1:0d:48:cc:f4:85:44:b0:
e4:e1:bf:bd:97:21:80:e8:e0:44:50:42:8a:fa:f4:
cf:e2:3f:12:60:1f:b1:d3:6e:85:c5:50:aa:a1:01:
1c:37:cf:b7:ae:b8:de:61:93:df:46:b9:f7:11:61:
3b:c9:e4:68:93:26:78:5d:b8:f9:1b:01:07:68:34:
57:f6:61:2c:63:c6:88:f5:0f:e4:e8:68:3b:9f:58:
1d:40:92:ff:6f:6b:97:07:08:2d:c1:32:b0:f8:f0:
01:8a:d1:37:51:be:5b:eb:83:37:b2:2f:20:a3:a3:
78:47:c4:03:b0:20:e3:93:dc:71:64:d2:8f:d1:d5:
e1:5c:5c:5d:aa:0c:2a:56:c5:01:44:c0:a7:c8:74:
37:d6:40:8b:a9:94:34:64:c2:b5:86:a4:ac:8e:cc:
11:a1:e2:99:2b:ec:2e:e8:b5:0e:ca:de:35:e8:9e:
b4:13:9d:63:fb:cb:b2:5c:9a:48:1f:0c:fe:fd:31:
99:a8:69:49:06:34:1f:f1:70:ac:2e:c3:2d:cb:c7:
f8:a2:f3:6a:e5:07:b3:68:ae:22:fa:41:0a:ba:fa:
05:a4:34:d4:37:45:cf:ed:6b:17:c7:8e:70:14:dc:
b3:df:8c:b1:98:b5:e9:6b:f7:2c:27:f7:2c:b6:2e:
54:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:DF:26:02:CD:87:6A:1B:67:0A:13:69:AE:D9:B1:31:1D:B3:57:04
X509v3 Authority Key Identifier:
keyid:8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:1c:a0:15:03:25:7f:f1:a3:bb:ca:1f:16:90:96:79:89:e2:
4c:2c:4e:a8:8a:18:39:61:e5:a9:6c:a8:4c:e9:db:7d:1f:1e:
dd:66:22:96:09:eb:99:65:95:3f:2a:f3:68:df:39:f7:bf:27:
ce:17:62:d3:ea:b8:29:a7:79:ca:14:58:76:46:44:c4:14:78:
b8:3c:b3:b6:d1:33:52:49:42:a1:9f:f8:e4:3a:04:5b:31:e6:
99:1d:e6:c5:ae:fb:5e:9f:cf:de:f5:6c:bf:35:3a:69:8c:4e:
95:b5:c4:0d:9a:9d:c8:3e:87:1a:d2:79:4c:b5:89:fe:c6:79:
25:70:e2:34:f8:b2:a1:bd:aa:e3:5d:29:6e:e9:ab:ed:56:4e:
6a:b6:1f:fd:b8:3b:52:a4:4c:81:b5:2b:7a:2f:32:b7:39:ff:
d7:64:bd:a2:e6:23:40:3f:15:25:1d:02:df:dc:d1:4a:d0:96:
25:00:01:8d:a5:c6:ac:b8:7b:9f:0e:b5:99:a2:69:35:47:7d:
55:a8:55:63:ae:35:d7:71:31:ee:f4:a5:38:21:67:10:02:f2:
82:d8:3c:71:e0:9c:42:cd:e6:0a:a5:34:46:ff:89:0d:60:b2:
19:f9:e3:a5:7f:30:5c:9d:84:bf:b7:d3:cd:1a:48:d5:7c:18:
71:b0:97:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:04:29 2025 by rpki-client