
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft
File: JTNYNY66UbU00_rppsuHHeY34AA.mft (raw, json)
Hash identifier: ESSlIibuIyy3y49AviCz8Qu6dObJ7WFBQmFjXYd9nvg=
Subject key identifier: 09:44:58:AE:78:AC:B1:ED:FB:DE:A0:DD:2B:BB:73:FC:B0:BE:F6:76
Authority key identifier: 25:33:58:35:8E:BA:51:B5:34:D3:FA:E9:A6:CB:87:1D:E6:37:E0:00
Certificate issuer: /CN=253358358eba51b534d3fae9a6cb871de637e000
Certificate serial: 0197B6A0689B56257A63ADED5BB6395A3125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTNYNY66UbU00_rppsuHHeY34AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft
Manifest number: 0953
Signing time: Sat 28 Jun 2025 13:00:55 +0000
Manifest this update: Sat 28 Jun 2025 13:00:55 +0000
Manifest next update: Sun 29 Jun 2025 13:00:55 +0000
Files and hashes: 1: AznASXPtSsVB0QJTrOLEwvRqJvg.roa (hash: AIlADlzguhRYCJM9H8PKNEWx4IayFm+wVXpreNrn5jI=)
2: JTNYNY66UbU00_rppsuHHeY34AA.crl (hash: 1gPPFZc/gDZtOJZ+qcmTnEaQ57Wa2EnzeWN4jebf2dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTNYNY66UbU00_rppsuHHeY34AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:68:9b:56:25:7a:63:ad:ed:5b:b6:39:5a:31:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253358358eba51b534d3fae9a6cb871de637e000
Validity
Not Before: Jun 28 13:00:55 2025 GMT
Not After : Jun 29 13:00:55 2025 GMT
Subject: CN=094458ae78acb1edfbdea0dd2bbb73fcb0bef676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d0:92:9c:90:97:2a:8b:69:fa:ec:c0:75:9b:
1b:27:58:d9:20:f2:b8:0c:5f:31:72:c9:28:80:70:
5f:e0:9e:a4:e0:85:59:0d:00:4c:9a:ed:aa:fa:9f:
11:8c:cf:eb:f8:9a:c9:8f:e8:4b:1a:ed:63:52:46:
9c:5c:a0:6d:00:fc:c1:d0:b6:54:a6:f5:e4:58:3b:
bd:03:20:8b:36:8f:2a:ec:56:b6:12:d3:90:69:44:
ef:a3:a7:00:84:60:ee:c9:34:a2:34:ea:22:a4:ac:
10:47:8f:79:41:1d:79:0d:ea:2b:11:cc:35:fd:56:
22:96:f0:e3:96:d0:6d:3c:3c:96:3f:ca:7c:ee:41:
40:91:d9:5f:5f:c5:f3:d8:f7:ac:3f:e0:fc:92:58:
17:29:b9:c0:1e:52:96:7e:0b:4d:b1:df:e2:de:7e:
6e:1f:8d:8f:52:6b:90:b9:fb:54:76:e1:d3:7d:e8:
d9:d0:d5:ca:27:dc:fa:4c:1b:dd:2d:0d:b8:81:65:
74:62:3b:f3:73:0a:93:0d:7c:50:a6:2b:79:4a:8f:
05:9a:26:31:4b:30:8e:66:7f:71:89:da:bf:4f:20:
7d:8f:2e:f8:44:e7:68:bf:84:b7:15:bc:a2:65:52:
60:6b:fc:7e:69:3d:de:f7:a8:b1:6c:48:54:d7:f4:
e0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:44:58:AE:78:AC:B1:ED:FB:DE:A0:DD:2B:BB:73:FC:B0:BE:F6:76
X509v3 Authority Key Identifier:
keyid:25:33:58:35:8E:BA:51:B5:34:D3:FA:E9:A6:CB:87:1D:E6:37:E0:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTNYNY66UbU00_rppsuHHeY34AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ed:20:83:14:74:3a:72:a0:c3:cf:6f:71:35:ca:4d:fd:ca:
e6:73:cf:75:2b:78:b2:76:a2:8c:4a:cc:a9:67:eb:13:06:9d:
0c:6f:f5:42:c6:5b:df:59:29:b0:ba:39:0e:87:22:a0:7a:b1:
f2:37:d4:d3:5f:d2:a3:16:9c:31:ce:e5:e1:20:2c:2d:8f:38:
a4:31:a8:62:73:21:63:13:39:fa:06:3f:57:58:8a:21:16:1e:
29:e2:fb:1a:b4:6d:aa:41:e2:de:67:7e:54:20:87:2a:e2:88:
ca:09:2e:4a:a0:64:86:43:70:0a:0a:0f:b0:c6:a8:54:a6:92:
00:3e:93:57:2e:ba:34:24:e7:ec:b8:7f:cc:b6:5b:35:3b:cc:
b9:ae:4d:f0:f4:a8:1a:c0:5f:dc:f5:7b:05:67:f5:0d:34:fc:
60:10:bb:ed:a2:69:89:0a:97:f4:fc:d0:d9:f8:7b:bd:55:0e:
96:86:cf:3a:ea:43:56:49:53:8d:00:c3:3c:e9:40:d0:93:c6:
d3:b3:c5:36:4c:e8:74:88:4a:eb:68:80:1e:ee:77:ca:0e:ce:
a3:ce:92:e4:83:c3:6f:49:f9:f7:31:92:db:00:7d:ab:9f:dc:
81:8c:6d:40:ce:96:e0:5a:a1:eb:3e:20:18:82:1a:0b:c0:91:
01:19:4a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:25 2025 by rpki-client