Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft
File: JTNYNY66UbU00_rppsuHHeY34AA.mft (raw, json)
Hash identifier: /mEKOScZTCCPRRT3glZfbrP3wzLOU95xsbKGADK/T74=
Subject key identifier: 99:38:A2:01:DB:7C:87:7B:70:EC:0B:23:44:3C:59:AD:FB:45:33:61
Authority key identifier: 25:33:58:35:8E:BA:51:B5:34:D3:FA:E9:A6:CB:87:1D:E6:37:E0:00
Certificate issuer: /CN=253358358eba51b534d3fae9a6cb871de637e000
Certificate serial: 019510C75FA6FAFC5977E428C4660CA02CE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTNYNY66UbU00_rppsuHHeY34AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft
Manifest number: 07F4
Signing time: Sun 16 Feb 2025 22:00:56 +0000
Manifest this update: Sun 16 Feb 2025 22:00:56 +0000
Manifest next update: Mon 17 Feb 2025 22:00:56 +0000
Files and hashes: 1: AznASXPtSsVB0QJTrOLEwvRqJvg.roa (hash: AIlADlzguhRYCJM9H8PKNEWx4IayFm+wVXpreNrn5jI=)
2: JTNYNY66UbU00_rppsuHHeY34AA.crl (hash: FdaGIfGs7i6xWy3R+1UUy34JVF6J1q5DzDf6Zp5Km8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTNYNY66UbU00_rppsuHHeY34AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 22:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:5f:a6:fa:fc:59:77:e4:28:c4:66:0c:a0:2c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253358358eba51b534d3fae9a6cb871de637e000
Validity
Not Before: Feb 16 22:00:56 2025 GMT
Not After : Feb 17 22:00:56 2025 GMT
Subject: CN=9938a201db7c877b70ec0b23443c59adfb453361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5d:a9:71:f7:73:f1:df:cf:45:1a:06:2b:06:
26:97:0e:d1:dd:96:88:c6:f5:78:9c:47:c6:6e:5c:
23:e9:c0:c0:78:a4:13:35:b3:1c:46:e6:4d:2b:70:
0a:15:14:5c:ed:af:4b:4b:60:47:e6:6c:ee:ee:16:
1e:c0:e8:24:0f:b8:29:94:c6:34:b4:4e:4a:c6:b8:
aa:ec:67:e5:09:28:a3:93:04:db:73:7f:40:ef:7f:
b6:0e:77:4d:8c:68:3a:26:f7:94:36:10:49:5c:75:
96:f7:ef:bb:d6:6d:bd:ee:5d:da:7e:f7:24:bc:0e:
a4:17:cf:77:a4:6d:57:9d:4d:e7:43:f2:b9:48:b7:
ba:2d:d0:1a:05:3b:c6:5f:93:65:54:aa:7c:22:fb:
68:5d:38:1c:f5:ea:4a:3f:d5:c7:cd:da:64:06:30:
65:fa:79:29:6d:a0:2d:5f:5b:00:fb:d4:c3:7b:a6:
4d:3d:bd:b6:03:e4:78:68:b0:6d:da:5f:fc:b0:29:
bf:e3:35:e0:00:68:03:d2:da:d5:97:9b:fb:5f:3d:
a2:c1:32:0e:65:b4:92:e5:8e:73:94:eb:d9:8b:af:
23:48:9b:3b:ba:ff:1f:2c:11:eb:45:ad:cb:df:30:
9e:36:c5:45:4b:27:e4:e7:52:0f:d8:86:3a:b1:92:
6c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:38:A2:01:DB:7C:87:7B:70:EC:0B:23:44:3C:59:AD:FB:45:33:61
X509v3 Authority Key Identifier:
keyid:25:33:58:35:8E:BA:51:B5:34:D3:FA:E9:A6:CB:87:1D:E6:37:E0:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTNYNY66UbU00_rppsuHHeY34AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:f8:e9:6d:0f:f3:94:ed:ff:80:73:f2:c5:82:7f:97:37:12:
40:7f:30:f7:05:46:29:b6:e6:57:e6:64:05:bb:9a:93:cf:bb:
61:6d:9c:2c:e8:69:7b:c2:12:b2:c4:69:0f:76:e9:71:c3:56:
3c:78:cd:15:e1:dc:f4:fd:21:33:ef:d7:84:80:01:02:f0:3f:
8e:aa:91:a9:0e:14:7d:75:4d:e2:6f:56:f8:97:9b:42:9f:c9:
bb:d9:8b:9e:50:93:e2:3d:15:1a:05:90:fa:7f:43:1c:23:83:
d0:42:3f:32:bd:94:7d:74:01:c9:07:6c:8c:3c:52:fa:66:75:
5f:ee:e7:62:6b:93:f9:36:e5:6f:69:a7:3b:f4:42:6e:f8:b2:
c2:6a:85:6f:16:e8:51:f2:d5:5e:35:9d:d6:53:a7:b2:d8:e2:
bc:a9:62:aa:61:65:fd:ea:01:b6:90:6f:97:98:12:b3:c1:d9:
85:83:bf:dc:4b:c5:a6:1c:a1:14:4a:c5:58:a3:5a:0a:cb:59:
d8:c4:fb:fc:f9:f8:63:99:72:0e:f7:e1:64:c9:b6:89:45:d0:
f1:76:58:4e:0e:fd:5b:f0:ac:50:16:3f:62:6a:06:8c:6a:f2:
b3:19:a5:6d:dc:53:7f:07:47:d8:3f:2b:b4:86:8a:ad:07:a0:
bb:56:8d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:42:23 2025 by rpki-client