Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
File: jtmMBXCv6fGq69DZ6i_CjB39mIk.mft (raw, json)
Hash identifier: KVPMN7ulvHBMMNbEOcugPdo3c4pj/N5WiHzeRkvo4BQ=
Subject key identifier: 18:01:C7:DB:C5:4E:D6:5A:BC:C8:84:37:73:A3:FC:89:B8:3E:2A:9D
Authority key identifier: 8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89
Certificate issuer: /CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889
Certificate serial: 019A1797DF7306E73900D86D1B4FFDE3CE34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
Manifest number: 10BB
Signing time: Fri 24 Oct 2025 19:00:20 +0000
Manifest this update: Fri 24 Oct 2025 19:00:20 +0000
Manifest next update: Sat 25 Oct 2025 19:00:20 +0000
Files and hashes: 1: jtmMBXCv6fGq69DZ6i_CjB39mIk.crl (hash: y6PZWG/FjHK4fAoE20w/31E3ngfjpGvoc/Rchw75XRA=)
2: xd9VA_78P1dLBFhm7sOrW_QXFZU.roa (hash: QyqCAQo5qDHygqeA0Lpsx+fr8JK0CEsNpPX8qkqt2z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 15:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:17:97:df:73:06:e7:39:00:d8:6d:1b:4f:fd:e3:ce:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ed98c0570afe9f1aaebd0d9ea2fc28c1dfd9889
Validity
Not Before: Oct 24 19:00:20 2025 GMT
Not After : Oct 25 19:00:20 2025 GMT
Subject: CN=1801c7dbc54ed65abcc8843773a3fc89b83e2a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:98:06:9a:a1:ea:08:b6:d7:9a:32:f4:c6:7f:
c0:40:77:86:2b:ac:2d:47:c2:16:29:55:9f:8c:53:
12:3e:e8:ba:de:f5:48:e3:94:5b:38:a1:9a:f7:dc:
0f:8b:85:e1:44:2c:a7:6d:56:4b:e0:2f:2a:73:f1:
be:a7:8a:06:20:f3:53:99:ed:71:dd:9b:13:c4:ff:
55:e9:99:77:3b:be:a0:2a:95:29:b2:b1:b2:d6:87:
4e:92:ab:0b:60:1a:a7:38:85:8c:af:f9:ef:29:1e:
ba:37:a5:49:8b:22:da:a1:37:21:a7:0f:85:7a:3c:
76:ff:19:11:88:0d:64:84:6a:cc:1c:2b:50:90:ba:
27:bb:d3:3e:2e:44:7e:44:d5:40:10:6d:39:7d:f4:
5a:1f:66:fc:a4:30:00:38:9a:f9:80:52:cf:e1:33:
53:14:79:27:2c:a2:6b:0f:e0:07:d0:c1:49:5a:d7:
91:cb:7f:5e:6a:46:01:8f:35:ad:3d:4e:6d:29:e6:
20:bd:7f:ef:63:de:b3:39:71:08:0a:57:5b:d2:3d:
10:f0:65:db:d0:12:4a:79:96:73:0f:ab:68:ba:ed:
52:d1:c0:18:64:e4:dd:6c:24:b7:e4:bf:94:2a:eb:
39:fb:4d:9b:6e:85:33:99:dc:ae:f4:10:fb:c6:4e:
0d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:01:C7:DB:C5:4E:D6:5A:BC:C8:84:37:73:A3:FC:89:B8:3E:2A:9D
X509v3 Authority Key Identifier:
keyid:8E:D9:8C:05:70:AF:E9:F1:AA:EB:D0:D9:EA:2F:C2:8C:1D:FD:98:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jtmMBXCv6fGq69DZ6i_CjB39mIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/498a6b-8512-493b-86c3-40f8a8cd1bdd/1/jtmMBXCv6fGq69DZ6i_CjB39mIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a1:0e:5b:83:95:9e:35:c2:70:72:43:50:57:00:fd:59:6f:
15:76:6b:73:97:92:74:39:a5:c3:3d:af:4d:35:99:54:3b:72:
21:e0:6d:1c:de:70:84:73:01:02:3a:29:4b:66:5e:9e:d8:c8:
77:e0:0e:d7:f0:54:61:ac:ba:4f:4c:06:f6:28:89:5c:33:2c:
e8:c9:9c:40:81:9b:49:ef:f2:d3:f6:e4:ab:04:61:1c:88:40:
6d:f7:25:5f:c9:fd:bc:7a:d7:a3:b7:d3:77:e3:b7:a7:05:2a:
61:cc:13:b2:ca:3a:93:4c:9d:71:80:f6:f7:6f:50:b3:9b:64:
f4:9c:cf:73:21:2a:08:1c:9c:13:0d:c1:74:3e:b1:15:a2:be:
9b:d8:f1:a1:9c:ee:d7:fa:02:a1:b2:c9:6b:ce:8b:f0:ed:0d:
a5:23:2b:b0:af:4a:21:0e:8c:8b:ca:7b:29:28:57:dc:1a:ac:
bf:da:0b:34:2e:df:fa:ab:f5:81:e4:49:ee:5f:d6:6c:5f:9a:
1f:bb:a4:31:51:9e:63:a7:04:c2:33:e1:17:b9:94:d7:d2:8a:
0b:8f:46:36:13:15:56:11:e5:60:4d:2c:d9:1e:77:ee:7f:25:
ac:0f:05:fd:a6:4f:03:14:bc:15:f3:c0:cc:58:3a:24:3e:48:
74:6b:aa:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoXl99zBuc5ANhtG0/94840MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlZDk4YzA1NzBhZmU5ZjFhYWViZDBkOWVhMmZjMjhjMWRm
ZDk4ODkwHhcNMjUxMDI0MTkwMDIwWhcNMjUxMDI1MTkwMDIwWjAzMTEwLwYDVQQD
EygxODAxYzdkYmM1NGVkNjVhYmNjODg0Mzc3M2EzZmM4OWI4M2UyYTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopgGmqHqCLbXmjL0xn/AQHeGK6wt
R8IWKVWfjFMSPui63vVI45RbOKGa99wPi4XhRCynbVZL4C8qc/G+p4oGIPNTme1x
3ZsTxP9V6Zl3O76gKpUpsrGy1odOkqsLYBqnOIWMr/nvKR66N6VJiyLaoTchpw+F
ejx2/xkRiA1khGrMHCtQkLonu9M+LkR+RNVAEG05ffRaH2b8pDAAOJr5gFLP4TNT
FHknLKJrD+AH0MFJWteRy39eakYBjzWtPU5tKeYgvX/vY96zOXEICldb0j0Q8GXb
0BJKeZZzD6touu1S0cAYZOTdbCS35L+UKus5+02bboUzmdyu9BD7xk4NiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgBx9vFTtZavMiEN3Oj/Im4PiqdMB8GA1UdIwQY
MBaAFI7ZjAVwr+nxquvQ2eovwowd/ZiJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanRtTUJYQ3Y2ZkdxNjlEWjZpX0NqQjM5bUlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi80OThhNmItODUxMi00OTNiLTg2YzMt
NDBmOGE4Y2QxYmRkLzEvanRtTUJYQ3Y2ZkdxNjlEWjZpX0NqQjM5bUlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi80OThhNmItODUxMi00OTNiLTg2YzMtNDBmOGE4Y2QxYmRk
LzEvanRtTUJYQ3Y2ZkdxNjlEWjZpX0NqQjM5bUlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS6EOW4OV
njXCcHJDUFcA/VlvFXZrc5eSdDmlwz2vTTWZVDtyIeBtHN5whHMBAjopS2ZentjI
d+AO1/BUYay6T0wG9iiJXDMs6MmcQIGbSe/y0/bkqwRhHIhAbfclX8n9vHrXo7fT
d+O3pwUqYcwTsso6k0ydcYD2929Qs5tk9JzPcyEqCBycEw3BdD6xFaK+m9jxoZzu
1/oCobLJa86L8O0NpSMrsK9KIQ6Mi8p7KShX3Bqsv9oLNC7f+qv1geRJ7l/WbF+a
H7ukMVGeY6cEwjPhF7mU19KKC49GNhMVVhHlYE0s2R537n8lrA8F/aZPAxS8FfPA
zFg6JD5IdGuqhQ==
-----END CERTIFICATE-----
Generated at Fri Oct 24 21:19:01 2025 by rpki-client