Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
File: JTYSS5962om34iZByFbTBTA8H3w.mft (raw, json)
Hash identifier: BdqpfegTR2n+t6nh3fHSN2jNR4S7CCSLJ55aCWJDvRs=
Subject key identifier: 60:B9:0B:26:AE:EF:C8:39:0F:AE:09:90:45:BB:F0:51:D7:FA:70:CB
Authority key identifier: 25:36:12:4B:9F:7A:DA:89:B7:E2:26:41:C8:56:D3:05:30:3C:1F:7C
Certificate issuer: /CN=2536124b9f7ada89b7e22641c856d305303c1f7c
Certificate serial: 0196447AF4CAD1F42FA479F835ADC71689DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
Manifest number: 14F3
Signing time: Thu 17 Apr 2025 16:00:30 +0000
Manifest this update: Thu 17 Apr 2025 16:00:30 +0000
Manifest next update: Fri 18 Apr 2025 16:00:30 +0000
Files and hashes: 1: JTYSS5962om34iZByFbTBTA8H3w.crl (hash: +toynxGIpB7W9ZXQcOG23zH1n2fRNM5eLOa2nlzfIVc=)
2: Oz-OF7QUhf9OkYOY6Er5Z5L_euc.roa (hash: rTcAf8Y3zE28zXssf3PZGZt9Ygw2dFFGFW0xU85GA/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:7a:f4:ca:d1:f4:2f:a4:79:f8:35:ad:c7:16:89:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2536124b9f7ada89b7e22641c856d305303c1f7c
Validity
Not Before: Apr 17 16:00:30 2025 GMT
Not After : Apr 18 16:00:30 2025 GMT
Subject: CN=60b90b26aeefc8390fae099045bbf051d7fa70cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:57:5b:a7:c5:4e:64:05:72:8a:a9:83:d9:80:
ca:db:ff:78:08:5f:fa:73:eb:e9:00:72:fe:1c:b7:
73:be:08:56:4a:23:d2:11:87:df:31:7e:33:63:48:
18:32:61:f6:78:3c:63:88:74:87:5a:f0:df:66:4d:
a4:59:d7:c3:66:97:3e:0a:ce:c7:75:ad:f6:85:5f:
c0:51:88:37:14:44:9d:c3:d6:00:04:51:d3:6c:f3:
d4:00:d5:25:93:ec:83:26:2e:10:b3:a6:fc:e3:b5:
26:95:3e:ff:ec:69:be:a9:2d:ac:b7:be:ec:47:1c:
80:c3:2c:56:17:9c:49:c2:ac:e4:3b:3a:08:32:6b:
f7:ec:3a:30:51:23:72:26:98:cc:81:9e:6f:81:cb:
ac:02:15:5c:c4:bc:ef:e7:0c:6c:3a:b9:57:75:f2:
41:70:db:e4:ce:04:3f:25:18:0f:ec:87:80:dd:0c:
e1:a3:85:c6:a9:0d:b9:95:0b:cb:7e:9a:a1:ad:9a:
b3:5d:73:23:4c:36:1a:4b:db:61:18:ad:8e:0d:6c:
58:35:04:37:60:2c:b2:2a:a2:d0:b7:4f:86:30:65:
6f:cb:b7:0e:b0:d8:ea:bd:0d:d0:92:41:01:25:44:
49:70:a5:9e:2e:e4:a3:16:e8:dc:e9:4f:bc:d4:bc:
08:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B9:0B:26:AE:EF:C8:39:0F:AE:09:90:45:BB:F0:51:D7:FA:70:CB
X509v3 Authority Key Identifier:
keyid:25:36:12:4B:9F:7A:DA:89:B7:E2:26:41:C8:56:D3:05:30:3C:1F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:79:37:a9:77:44:70:4b:2d:95:9b:23:db:b2:26:08:22:d3:
d6:61:f4:ce:dd:6b:f9:08:e6:c1:9f:0f:6c:64:92:37:16:1a:
55:22:dd:33:3d:6a:9f:7e:66:6c:ca:10:4e:33:99:28:8b:8a:
be:5d:0a:33:c3:55:b7:04:27:21:cc:09:70:da:05:17:26:1d:
c4:aa:a3:82:9d:c4:90:6c:d6:c8:62:38:5d:50:a0:5f:12:0b:
27:c5:2b:ce:6f:dd:96:f8:3f:f7:de:c8:e0:29:f7:db:0c:94:
25:d0:1c:83:20:37:3f:76:c5:82:e3:f4:f0:30:39:a0:f7:5f:
64:e9:41:0e:b5:19:3c:58:2b:48:c6:3a:3c:bd:19:62:3e:a1:
69:9b:c7:4b:95:70:82:8b:fe:f1:81:99:de:04:b7:14:ac:b7:
bf:fd:7f:f4:57:ce:06:cc:50:4d:60:4d:81:3a:a4:ab:c4:1b:
41:58:ec:76:ef:82:b4:99:2d:71:f4:9a:04:98:80:86:8a:25:
ae:b5:45:ba:00:33:fb:4b:40:fb:88:53:ae:9e:33:b5:af:af:
0c:b1:48:23:12:cc:a0:ea:f3:22:92:06:e1:d4:4d:af:e2:48:
64:50:6f:cb:d2:24:9b:40:1e:00:a3:a7:0f:72:54:fa:b8:ec:
a0:f5:65:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:41:37 2025 by rpki-client