Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
File: JTYSS5962om34iZByFbTBTA8H3w.mft (raw, json)
Hash identifier: GH5ra9/lTXy030+Qq9GK8X61KCvdJ2AqW1QH9+6O2AE=
Subject key identifier: 51:18:0E:E9:32:9B:EE:70:99:D3:E6:0B:31:EC:E4:7A:5A:8C:F6:EE
Authority key identifier: 25:36:12:4B:9F:7A:DA:89:B7:E2:26:41:C8:56:D3:05:30:3C:1F:7C
Certificate issuer: /CN=2536124b9f7ada89b7e22641c856d305303c1f7c
Certificate serial: 019758A4177A423289365171D8C957A87CF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
Manifest number: 1582
Signing time: Tue 10 Jun 2025 07:00:38 +0000
Manifest this update: Tue 10 Jun 2025 07:00:38 +0000
Manifest next update: Wed 11 Jun 2025 07:00:38 +0000
Files and hashes: 1: JTYSS5962om34iZByFbTBTA8H3w.crl (hash: 42Wc7H2fDa+7lSq49ge54P/CcurrTxpOpf3KtPVZrvQ=)
2: Oz-OF7QUhf9OkYOY6Er5Z5L_euc.roa (hash: rTcAf8Y3zE28zXssf3PZGZt9Ygw2dFFGFW0xU85GA/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:a4:17:7a:42:32:89:36:51:71:d8:c9:57:a8:7c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2536124b9f7ada89b7e22641c856d305303c1f7c
Validity
Not Before: Jun 10 07:00:38 2025 GMT
Not After : Jun 11 07:00:38 2025 GMT
Subject: CN=51180ee9329bee7099d3e60b31ece47a5a8cf6ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:dd:62:27:09:01:35:b3:8d:13:38:c9:a7:c2:
3d:61:e9:32:30:b2:9f:0d:28:aa:34:f4:f4:63:0b:
f9:f4:94:d2:33:a7:5a:61:59:75:60:b1:3b:92:2f:
ed:fd:c9:71:02:58:9b:52:e1:9d:b2:76:2e:4f:2d:
c4:20:3f:3d:50:f1:9b:06:98:bd:7d:6b:1f:a3:35:
19:5c:f6:4f:3e:3b:af:0b:f3:6e:42:5d:cf:67:34:
8a:51:3f:bd:13:d3:94:b3:ed:79:c5:5c:56:bb:46:
5a:3b:63:eb:44:eb:bf:82:41:1d:1d:57:4e:f0:20:
13:f3:c6:4b:65:0d:3b:c0:55:b4:dc:c6:09:73:e9:
0b:42:e7:c5:f1:89:df:22:59:f7:4b:74:8e:25:91:
a4:6b:91:7f:63:d6:df:3b:84:8c:05:3c:de:d9:6a:
3e:6d:f2:43:d4:a3:4c:d5:1d:da:c8:e1:41:14:f2:
04:de:6d:3d:2e:c6:1a:40:b7:f4:6d:cf:ca:15:8f:
e0:2d:45:02:6a:1e:6c:c4:9a:e9:c6:1c:ec:a2:01:
81:58:85:03:cd:8c:7c:db:48:db:32:2c:b5:f1:a8:
25:c3:ad:12:45:36:9d:89:7e:4a:e1:1b:58:e6:ed:
63:09:06:66:c7:8b:07:ff:af:47:31:e6:9b:7f:b4:
b3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:18:0E:E9:32:9B:EE:70:99:D3:E6:0B:31:EC:E4:7A:5A:8C:F6:EE
X509v3 Authority Key Identifier:
keyid:25:36:12:4B:9F:7A:DA:89:B7:E2:26:41:C8:56:D3:05:30:3C:1F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:a5:fd:43:09:b5:f6:05:43:e5:60:d9:fb:cb:6b:59:a5:d7:
27:98:e4:56:01:36:56:d6:43:32:77:93:38:b2:ca:dc:03:43:
7a:b2:4f:ef:0b:40:2c:28:6b:ff:19:c2:c3:d1:a6:48:bc:90:
3a:ca:2e:7d:38:3a:b8:3b:e2:04:f1:00:79:81:e9:ec:c7:c7:
17:d8:a1:7a:c8:1c:cd:db:89:cb:72:d2:ae:76:6e:bf:00:a8:
75:9b:29:ac:ea:84:ea:ce:e9:4e:a7:84:d3:4c:91:a4:98:ea:
ee:5d:51:9c:f7:6b:fd:de:45:65:6d:64:8e:1a:6b:22:9c:8c:
f1:21:25:34:9c:36:7f:cb:f2:b3:5b:87:27:b9:4a:35:09:db:
0b:c1:3b:8f:43:b7:19:f7:ee:3c:2b:16:49:88:6a:29:0b:98:
7e:b4:64:f6:d9:f5:6e:55:8b:91:2c:b7:cd:25:98:db:de:3f:
b4:5d:28:6f:3a:ee:54:bb:0a:e2:87:04:47:d4:b9:27:95:50:
87:fb:00:98:78:47:46:0b:f9:11:93:d5:6e:c2:d5:bd:7a:04:
86:13:34:4e:79:4b:40:d6:bb:4a:4e:0e:32:52:fa:61:00:e8:
a5:ea:6e:4b:23:8b:7a:ed:67:0f:ef:dc:ef:e8:de:5f:e6:f0:
42:ea:2d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:02:37 2025 by rpki-client