Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
File: JTYSS5962om34iZByFbTBTA8H3w.mft (raw, json)
Hash identifier: B8CsEBKLIn0mhne8nZgY2mi5/bqBosArrlKADwYjANE=
Subject key identifier: 42:B1:C6:35:B4:40:0B:B8:B3:5D:FF:27:46:82:9C:8C:C9:89:FF:EA
Authority key identifier: 25:36:12:4B:9F:7A:DA:89:B7:E2:26:41:C8:56:D3:05:30:3C:1F:7C
Certificate issuer: /CN=2536124b9f7ada89b7e22641c856d305303c1f7c
Certificate serial: 01968435E311D1D780D43174F64F6ACA7811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
Manifest number: 1514
Signing time: Wed 30 Apr 2025 01:00:46 +0000
Manifest this update: Wed 30 Apr 2025 01:00:46 +0000
Manifest next update: Thu 01 May 2025 01:00:46 +0000
Files and hashes: 1: JTYSS5962om34iZByFbTBTA8H3w.crl (hash: DYMNqlrevHPpIEYEh9aFOu9oPERIxJge/2aehrMgPsU=)
2: Oz-OF7QUhf9OkYOY6Er5Z5L_euc.roa (hash: rTcAf8Y3zE28zXssf3PZGZt9Ygw2dFFGFW0xU85GA/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:35:e3:11:d1:d7:80:d4:31:74:f6:4f:6a:ca:78:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2536124b9f7ada89b7e22641c856d305303c1f7c
Validity
Not Before: Apr 30 01:00:46 2025 GMT
Not After : May 1 01:00:46 2025 GMT
Subject: CN=42b1c635b4400bb8b35dff2746829c8cc989ffea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:df:b0:b8:11:00:2d:a8:39:26:96:8d:2f:9b:
5f:2f:2f:5b:36:f2:17:a3:87:d6:28:77:0b:b0:e0:
93:ff:82:55:8d:3e:81:18:d7:c6:a7:f8:5d:9f:71:
e5:03:4f:7d:99:31:d1:be:21:d5:a7:54:0e:ab:4d:
07:f4:04:8d:26:15:c1:90:a3:57:c1:52:1e:ca:0a:
a2:bf:40:e4:29:3b:7a:18:81:31:d7:4d:45:81:b3:
7c:5b:83:4c:2e:f0:d2:b8:63:da:00:3c:d0:60:8a:
57:97:c8:87:48:2c:cb:04:da:ff:8e:4e:a6:ef:55:
1c:3e:07:7a:c6:a4:fb:4b:96:f1:4c:88:97:3c:54:
e0:3a:fe:5d:43:23:cd:90:52:fe:3f:11:ee:87:1e:
62:30:9f:61:7f:6d:cf:29:39:99:65:5d:02:6c:66:
98:e0:da:f0:7e:8d:52:a7:85:99:1c:37:a9:82:3b:
cc:b7:98:0f:6c:71:f9:fb:04:e8:96:d5:7d:9a:8c:
be:03:1c:1a:9d:46:f0:ff:4c:41:0e:72:d0:f9:93:
02:b3:af:93:68:13:fd:44:dc:8f:4a:b1:ef:6d:89:
dd:64:d5:cf:c7:2d:b5:a6:0f:d9:89:b4:be:3b:29:
aa:e9:6d:4c:f8:b1:60:b9:5b:ac:6e:b6:18:e3:42:
13:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B1:C6:35:B4:40:0B:B8:B3:5D:FF:27:46:82:9C:8C:C9:89:FF:EA
X509v3 Authority Key Identifier:
keyid:25:36:12:4B:9F:7A:DA:89:B7:E2:26:41:C8:56:D3:05:30:3C:1F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:b2:49:1b:2f:06:77:10:8e:f6:66:8b:bd:fb:56:23:4a:6c:
de:fa:3b:d1:37:67:7a:15:1f:96:5c:28:02:ac:93:0d:c2:0a:
e7:24:83:e4:6e:a7:3c:60:5f:f8:2c:f4:8e:49:c2:2f:8d:49:
9a:aa:58:5e:4a:db:20:d0:f4:d8:e5:de:da:a7:26:eb:c3:f6:
13:f6:0d:0e:5e:80:65:cd:4b:7f:bd:b4:e7:8f:5f:37:87:1f:
13:5d:d7:cf:85:32:f6:f9:9d:e9:db:12:ef:fd:72:45:a3:3e:
9c:7c:df:3a:13:af:47:cf:25:f9:9a:04:2a:ce:43:89:02:5f:
37:e8:0b:ca:cc:ce:97:f9:6b:21:d2:a2:96:89:0d:0b:74:e0:
d7:94:b5:9b:d0:3c:16:b8:a2:bc:f6:c6:d5:ca:05:7b:94:ad:
53:e9:1d:85:98:6f:76:6e:26:91:ba:78:99:65:d7:b3:5a:e3:
4d:61:31:32:f0:95:3a:fe:79:dc:3e:8b:ed:6b:c7:b3:c4:26:
5a:30:4a:3f:d7:ea:16:89:60:9e:86:dc:5b:db:21:00:b4:20:
3c:21:56:9c:5b:02:bd:c1:ae:3c:74:4f:59:3d:a8:38:94:7f:
37:d7:66:cd:3d:5d:d1:6e:67:78:ab:6b:29:54:ab:41:04:1d:
8d:72:4a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:53:32 2025 by rpki-client