Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft
File: JTNYNY66UbU00_rppsuHHeY34AA.mft (raw, json)
Hash identifier: /caDBe0zNPbTD4KIby9ZChvmHJXYzLuADwx3o6bnG1o=
Subject key identifier: 5D:8F:C9:CC:46:B3:3F:4F:6A:86:4B:B7:E2:0D:32:25:8A:52:7C:16
Authority key identifier: 25:33:58:35:8E:BA:51:B5:34:D3:FA:E9:A6:CB:87:1D:E6:37:E0:00
Certificate issuer: /CN=253358358eba51b534d3fae9a6cb871de637e000
Certificate serial: 0196572697EF29120E86BCA3C2793DD81122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTNYNY66UbU00_rppsuHHeY34AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft
Manifest number: 089D
Signing time: Mon 21 Apr 2025 07:01:09 +0000
Manifest this update: Mon 21 Apr 2025 07:01:09 +0000
Manifest next update: Tue 22 Apr 2025 07:01:09 +0000
Files and hashes: 1: AznASXPtSsVB0QJTrOLEwvRqJvg.roa (hash: AIlADlzguhRYCJM9H8PKNEWx4IayFm+wVXpreNrn5jI=)
2: JTNYNY66UbU00_rppsuHHeY34AA.crl (hash: hY/GR35wXhzmupQhcc3jxZ9S8Dn/3Qfj7nTK3BwuxxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTNYNY66UbU00_rppsuHHeY34AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:97:ef:29:12:0e:86:bc:a3:c2:79:3d:d8:11:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253358358eba51b534d3fae9a6cb871de637e000
Validity
Not Before: Apr 21 07:01:09 2025 GMT
Not After : Apr 22 07:01:09 2025 GMT
Subject: CN=5d8fc9cc46b33f4f6a864bb7e20d32258a527c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:87:16:3f:73:92:b0:39:21:50:1e:3d:96:4e:
5a:82:f1:13:de:2e:a7:15:30:07:28:4d:bc:c6:d2:
9d:14:07:7b:18:4a:76:32:6e:6e:79:ae:72:e0:86:
1b:37:e4:69:1e:94:1c:89:3c:75:0c:9e:0d:5a:43:
68:9f:2c:83:7a:a1:5a:8f:05:cc:07:5a:01:e9:7b:
37:49:0d:fb:c6:ef:f9:5f:be:20:be:f6:37:cf:7b:
de:a5:13:88:3a:50:32:e4:be:9f:83:4e:60:41:67:
7a:3d:b4:bb:92:5d:53:08:79:0a:04:a3:a4:f7:9e:
3d:10:d0:6f:44:43:8d:af:8f:3c:97:8e:7e:d1:68:
82:23:f1:2b:27:92:22:19:af:fd:bd:d8:32:5e:ee:
16:0b:32:68:bf:0f:8c:c5:87:c7:d6:ad:f7:7d:25:
6e:a6:8d:6a:3b:fe:5f:d0:79:7d:04:7e:58:8b:d5:
a2:10:10:eb:25:c4:45:7e:4b:8e:a3:af:53:77:b2:
6c:2a:27:61:28:9b:ce:a7:c1:4d:45:af:72:01:74:
e3:2f:54:b2:a3:05:fb:69:39:5a:9e:3e:57:eb:9f:
27:72:d7:54:e1:d2:4d:fe:ee:37:5d:52:27:83:11:
13:d3:03:a7:fe:32:96:18:60:86:bc:f3:32:09:ab:
0b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:8F:C9:CC:46:B3:3F:4F:6A:86:4B:B7:E2:0D:32:25:8A:52:7C:16
X509v3 Authority Key Identifier:
keyid:25:33:58:35:8E:BA:51:B5:34:D3:FA:E9:A6:CB:87:1D:E6:37:E0:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTNYNY66UbU00_rppsuHHeY34AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:e1:ca:16:15:16:62:8f:3d:6c:a0:ea:75:32:e9:95:07:a8:
06:52:67:01:af:b0:ea:2e:a8:bd:74:3f:21:19:dd:71:05:90:
a0:bc:44:47:4f:9f:37:1c:8d:0a:26:77:03:1b:37:d8:6e:fe:
a0:11:46:9c:5b:77:3b:45:ed:e0:b7:3e:cf:2c:a0:4d:a6:93:
a2:c4:bb:0d:4c:94:99:ee:a1:6c:d0:34:95:dc:93:52:8d:ad:
87:68:e4:a4:54:a6:55:9d:b3:d2:4d:32:1d:e7:2f:41:9c:54:
cc:79:a5:3f:f5:79:81:e1:e2:32:7c:56:6c:7c:11:37:72:8a:
ac:b7:a2:ed:af:3c:7d:d7:ea:d4:1f:7e:4f:32:8f:2f:eb:54:
a3:bd:50:55:98:f0:8b:6e:9e:7d:11:c7:6b:d4:dc:b8:df:98:
f5:d7:41:e9:03:a7:49:41:56:46:85:4f:16:79:1d:b6:da:e5:
ad:6f:1b:d4:7b:f9:86:be:7d:bf:6b:1d:d3:25:45:6c:32:e1:
97:81:f3:5e:71:10:72:72:87:6d:66:53:be:2a:90:58:65:7a:
ff:c5:67:a3:a2:92:d1:b6:95:f6:c3:37:c1:86:7a:f4:4e:67:
85:4d:69:6b:27:ec:a6:1b:30:70:63:6b:71:98:83:e1:89:41:
bc:31:25:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXJpfvKRIOhryjwnk92BEiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1MzM1ODM1OGViYTUxYjUzNGQzZmFlOWE2Y2I4NzFkZTYz
N2UwMDAwHhcNMjUwNDIxMDcwMTA5WhcNMjUwNDIyMDcwMTA5WjAzMTEwLwYDVQQD
Eyg1ZDhmYzljYzQ2YjMzZjRmNmE4NjRiYjdlMjBkMzIyNThhNTI3YzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ocWP3OSsDkhUB49lk5agvET3i6n
FTAHKE28xtKdFAd7GEp2Mm5uea5y4IYbN+RpHpQciTx1DJ4NWkNonyyDeqFajwXM
B1oB6Xs3SQ37xu/5X74gvvY3z3vepROIOlAy5L6fg05gQWd6PbS7kl1TCHkKBKOk
9549ENBvREONr488l45+0WiCI/ErJ5IiGa/9vdgyXu4WCzJovw+MxYfH1q33fSVu
po1qO/5f0Hl9BH5Yi9WiEBDrJcRFfkuOo69Td7JsKidhKJvOp8FNRa9yAXTjL1Sy
owX7aTlanj5X658nctdU4dJN/u43XVIngxET0wOn/jKWGGCGvPMyCasL8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF2PycxGsz9PaoZLt+INMiWKUnwWMB8GA1UdIwQY
MBaAFCUzWDWOulG1NNP66abLhx3mN+AAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlROWU5ZNjZVYlUwMF9ycHBzdUhIZVkzNEFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8xYzJmOTAtMjZlYS00ZDU5LTkxYTkt
NGQ3NzU2MjJiY2I2LzEvSlROWU5ZNjZVYlUwMF9ycHBzdUhIZVkzNEFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8xYzJmOTAtMjZlYS00ZDU5LTkxYTktNGQ3NzU2MjJiY2I2
LzEvSlROWU5ZNjZVYlUwMF9ycHBzdUhIZVkzNEFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3uHKFhUW
Yo89bKDqdTLplQeoBlJnAa+w6i6ovXQ/IRndcQWQoLxER0+fNxyNCiZ3Axs32G7+
oBFGnFt3O0Xt4Lc+zyygTaaTosS7DUyUme6hbNA0ldyTUo2th2jkpFSmVZ2z0k0y
HecvQZxUzHmlP/V5geHiMnxWbHwRN3KKrLei7a88fdfq1B9+TzKPL+tUo71QVZjw
i26efRHHa9TcuN+Y9ddB6QOnSUFWRoVPFnkdttrlrW8b1Hv5hr59v2sd0yVFbDLh
l4HzXnEQcnKHbWZTviqQWGV6/8Vno6KS0baV9sM3wYZ69E5nhU1payfsphswcGNr
cZiD4YlBvDElsw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:43:22 2025 by rpki-client