Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft
File: JY9ajila0de0ih4RlYeQBStXolM.mft (raw, json)
Hash identifier: yxuTiHn9mj3r5ea21c3eO4iqfyCSjYr27u2auOaShGM=
Subject key identifier: 1B:5E:09:D5:39:52:87:22:2B:D9:BA:71:9B:18:6A:AF:59:3B:01:57
Authority key identifier: 25:8F:5A:8E:29:5A:D1:D7:B4:8A:1E:11:95:87:90:05:2B:57:A2:53
Certificate issuer: /CN=258f5a8e295ad1d7b48a1e11958790052b57a253
Certificate serial: 01974DE9BEEDE58CDCA329E3DC1D5920B033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft
Manifest number: 14D6
Signing time: Sun 08 Jun 2025 05:00:53 +0000
Manifest this update: Sun 08 Jun 2025 05:00:53 +0000
Manifest next update: Mon 09 Jun 2025 05:00:53 +0000
Files and hashes: 1: HL0tpswU2gQezd0-x9ZWDdfR-RY.roa (hash: NAIPlF1KgdG7sggbmAwv2GRB6aTgtE/arOeqKYJF690=)
2: JY9ajila0de0ih4RlYeQBStXolM.crl (hash: Jl86XnLZl5Il3Wr51MqkLgIxaV0qmRh8AHHdpLKxnl8=)
3: X5-jl_Od0mEO_dSg7rALYkevjoQ.roa (hash: xqc4fnPLjvYYKZxEv5pbNLPSZEhrMf7SnWN3fQ6sCO8=)
4: ljF5u-YRkQFhR1-JzkqgY4rX8fg.roa (hash: yARJg/r5KzAJTCBC6Aa8YbBreZ5SqvZOXFrSvclMQ38=)
5: s_QDIrLshBQNlu6RPwCemGYvy74.roa (hash: 6Y18bq+vtApdDZHTDEQgo5JwDFt4pJR0lVY1yqjzjsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:be:ed:e5:8c:dc:a3:29:e3:dc:1d:59:20:b0:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=258f5a8e295ad1d7b48a1e11958790052b57a253
Validity
Not Before: Jun 8 05:00:53 2025 GMT
Not After : Jun 9 05:00:53 2025 GMT
Subject: CN=1b5e09d5395287222bd9ba719b186aaf593b0157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0e:1c:6b:24:10:34:10:e7:fd:14:bf:fd:16:
eb:4c:33:fa:09:f5:e4:6c:d4:95:a5:47:7f:4c:dd:
4f:f9:0c:d9:a9:20:2e:c8:2f:eb:4d:b2:16:41:ce:
71:f6:bf:3c:dc:5e:e2:22:09:8f:af:53:45:2b:11:
07:f8:3c:88:da:34:d3:9f:cf:9e:45:1c:7f:94:4d:
a0:20:51:bc:a2:d6:8f:70:c5:29:57:e1:bb:a6:15:
55:af:c8:45:f4:35:5b:b4:db:6e:b2:6c:bc:6a:50:
a4:87:a6:01:2c:c2:f3:62:5d:fc:de:b8:7f:91:05:
5c:3e:77:28:20:3c:e7:8f:13:70:70:31:93:f9:34:
6a:70:fb:c1:fa:53:ca:66:06:a2:ab:a2:1b:07:e1:
aa:00:ae:b7:25:47:f6:97:a1:43:70:58:2a:a8:fe:
fb:df:3f:a9:a6:ec:89:70:da:94:fb:9c:10:71:54:
c8:15:77:8e:e7:9d:f1:57:58:ae:14:d8:89:b3:a9:
df:91:64:2b:46:58:b8:7f:44:fd:ba:ce:4b:c8:75:
e6:52:ff:be:ad:a4:1b:65:9e:a5:93:f4:72:80:1f:
02:63:f1:29:e7:6d:42:37:78:a3:07:5b:79:0a:59:
32:09:40:db:5a:2a:b1:9d:0a:c2:8b:33:88:70:5a:
65:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:5E:09:D5:39:52:87:22:2B:D9:BA:71:9B:18:6A:AF:59:3B:01:57
X509v3 Authority Key Identifier:
keyid:25:8F:5A:8E:29:5A:D1:D7:B4:8A:1E:11:95:87:90:05:2B:57:A2:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:70:59:06:4f:7a:52:b5:e3:b2:8d:b5:f5:02:32:cb:f6:60:
b1:c0:84:f6:93:a1:54:45:88:a6:42:ba:5b:54:b3:d9:fa:3c:
e1:e9:c9:21:06:6d:51:2a:aa:28:ff:3f:81:d3:1f:7e:bc:0f:
e2:8d:5b:4d:f6:68:88:20:23:a6:24:a3:8b:a0:fb:2f:cf:7f:
3c:65:23:98:44:5f:c9:99:34:1e:1c:11:d4:5c:1d:c9:14:64:
b8:56:b3:60:51:75:7c:00:3d:01:59:79:1b:ef:10:b2:13:b4:
a4:74:28:62:8b:d7:d4:1b:53:27:31:2c:eb:2d:41:ba:7a:86:
5c:ce:c7:5a:30:f6:77:fd:1d:92:ea:dc:74:b3:13:7d:6e:e9:
42:93:6d:87:53:8d:5e:25:25:8b:50:52:dd:3c:94:38:f4:00:
f9:a9:b6:ee:43:90:ef:08:f7:7b:f8:9a:21:7a:b1:fb:21:a8:
af:83:22:ca:9c:62:18:78:0e:13:09:bc:78:a1:10:35:1d:b6:
5b:82:b6:a7:d9:64:e2:44:12:ec:f6:c9:50:c2:25:21:dc:04:
47:46:00:94:c0:ae:06:94:5c:67:44:d1:16:c8:b7:28:1a:12:
d0:62:50:4e:f0:72:15:27:80:97:9a:4d:62:00:c1:0d:61:65:
f9:1b:90:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:02:48 2025 by rpki-client