Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
File: JTYSS5962om34iZByFbTBTA8H3w.mft (raw, json)
Hash identifier: 1wQADYXnlUIga0goxAs154WnW5HaoG9YeqSStb56ogY=
Subject key identifier: 38:9D:CD:EC:E1:06:25:79:85:07:93:8B:CD:02:4C:42:E4:11:4D:90
Authority key identifier: 25:36:12:4B:9F:7A:DA:89:B7:E2:26:41:C8:56:D3:05:30:3C:1F:7C
Certificate issuer: /CN=2536124b9f7ada89b7e22641c856d305303c1f7c
Certificate serial: 019752D8F6A2F2606CB4AB7E9701C5444B7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
Manifest number: 157F
Signing time: Mon 09 Jun 2025 04:00:40 +0000
Manifest this update: Mon 09 Jun 2025 04:00:40 +0000
Manifest next update: Tue 10 Jun 2025 04:00:40 +0000
Files and hashes: 1: JTYSS5962om34iZByFbTBTA8H3w.crl (hash: 6bFZv8XD5TeJVIHxW2noU2jfl4T5+6nN2AJ44hnC6Tw=)
2: Oz-OF7QUhf9OkYOY6Er5Z5L_euc.roa (hash: rTcAf8Y3zE28zXssf3PZGZt9Ygw2dFFGFW0xU85GA/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:d8:f6:a2:f2:60:6c:b4:ab:7e:97:01:c5:44:4b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2536124b9f7ada89b7e22641c856d305303c1f7c
Validity
Not Before: Jun 9 04:00:40 2025 GMT
Not After : Jun 10 04:00:40 2025 GMT
Subject: CN=389dcdece10625798507938bcd024c42e4114d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b3:ee:52:4d:3f:ac:9d:ba:84:56:fe:36:e6:
20:58:cb:7a:aa:4a:11:31:9b:a0:e6:53:37:d9:f8:
96:fb:9a:f8:ea:76:6f:42:37:14:7a:b3:40:7c:eb:
88:0a:af:da:d0:e0:ed:94:cd:5c:20:77:03:a0:0a:
7d:32:28:4e:a3:89:4d:f9:51:43:0d:02:e1:35:5d:
38:ea:26:d1:3f:ae:30:5c:37:c3:84:70:7f:10:7c:
d5:09:b1:39:eb:20:8f:4f:59:c2:55:0f:09:ee:68:
88:c2:ed:51:a1:f2:59:a3:20:74:85:68:6e:1e:95:
a8:8d:63:62:ab:b7:01:b0:6a:65:5e:35:b3:5c:1a:
22:f4:da:9f:e4:7b:aa:cd:8e:22:8a:61:bc:96:37:
95:ed:82:35:2f:bb:f5:c1:ef:5f:c5:77:c1:aa:e4:
01:12:b5:60:c6:9e:fb:63:e3:98:23:37:44:4b:ac:
9f:10:fc:bb:1d:5b:72:1b:37:3c:05:d3:2c:52:58:
fe:ae:1b:a8:42:77:46:3f:97:87:e5:6f:3b:92:64:
67:ef:6a:73:44:99:d4:af:52:6a:0e:1c:5f:f7:ef:
02:f1:f1:4d:32:54:ec:e2:c0:94:da:99:1c:4c:fe:
59:57:19:27:69:4d:98:b8:5e:6b:5b:23:e3:e5:8f:
67:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9D:CD:EC:E1:06:25:79:85:07:93:8B:CD:02:4C:42:E4:11:4D:90
X509v3 Authority Key Identifier:
keyid:25:36:12:4B:9F:7A:DA:89:B7:E2:26:41:C8:56:D3:05:30:3C:1F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:9f:95:32:1c:1d:6d:fd:c4:d3:03:71:2f:4b:f9:3d:be:c2:
26:88:15:35:86:ec:40:b4:97:f0:41:80:d8:4b:8d:f9:5e:a1:
3e:b9:3a:05:dd:e0:74:b4:38:b6:cb:99:77:55:4a:14:80:02:
32:4a:29:6c:eb:15:c2:db:72:45:bd:27:48:30:72:6e:b7:06:
1e:66:78:db:4a:ce:0e:3c:f6:9e:58:bf:56:ec:bf:3a:28:dd:
c8:cf:b9:97:a2:f6:f6:e8:60:77:1c:9a:4e:46:de:88:71:e6:
d7:7e:0a:0e:54:03:9b:28:4f:3d:3e:6f:21:58:f2:bd:64:54:
97:5d:85:b4:79:4b:39:b7:a2:aa:38:09:e3:37:c8:2b:95:c8:
4e:05:de:da:f9:2d:e4:16:e2:fe:2a:49:43:e5:95:70:5d:ce:
e8:6d:b0:8f:d0:8b:4a:19:4a:09:32:3d:a9:5a:65:40:0c:31:
6c:00:0c:32:22:e1:d0:b6:12:bd:21:2e:d6:02:22:99:a5:2c:
36:c7:01:f2:82:7e:01:09:89:c9:32:f6:94:d0:19:00:66:09:
0f:67:bc:6b:3a:22:1c:90:a3:03:35:aa:fa:d6:35:1d:1b:7f:
f1:e6:a2:93:d7:b9:7e:96:83:3a:94:dc:1f:2d:ed:b6:d3:cc:
bb:ef:d1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 08:23:52 2025 by rpki-client