Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft
File: JTNYNY66UbU00_rppsuHHeY34AA.mft (raw, json)
Hash identifier: Hew7VXoLPn2N0XSQc1w+3lUHHaYkQunXAZ7mKijOKDQ=
Subject key identifier: 89:77:04:96:18:F6:49:D5:6D:CA:35:62:93:03:1B:BF:70:57:F5:7D
Authority key identifier: 25:33:58:35:8E:BA:51:B5:34:D3:FA:E9:A6:CB:87:1D:E6:37:E0:00
Certificate issuer: /CN=253358358eba51b534d3fae9a6cb871de637e000
Certificate serial: 0196B5C70A79CF6CE0523B7D7FB1199AD6E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTNYNY66UbU00_rppsuHHeY34AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft
Manifest number: 08CE
Signing time: Fri 09 May 2025 16:00:42 +0000
Manifest this update: Fri 09 May 2025 16:00:42 +0000
Manifest next update: Sat 10 May 2025 16:00:42 +0000
Files and hashes: 1: AznASXPtSsVB0QJTrOLEwvRqJvg.roa (hash: AIlADlzguhRYCJM9H8PKNEWx4IayFm+wVXpreNrn5jI=)
2: JTNYNY66UbU00_rppsuHHeY34AA.crl (hash: 3JmGjR2qA0dxOBBQ+wbmdGzjYHDN1saoBLSSJO9oQCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTNYNY66UbU00_rppsuHHeY34AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 16:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:c7:0a:79:cf:6c:e0:52:3b:7d:7f:b1:19:9a:d6:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253358358eba51b534d3fae9a6cb871de637e000
Validity
Not Before: May 9 16:00:42 2025 GMT
Not After : May 10 16:00:42 2025 GMT
Subject: CN=8977049618f649d56dca356293031bbf7057f57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:17:0e:ef:9b:6f:ae:d6:e3:6f:87:64:db:5f:
0e:de:fe:bc:f7:9f:29:f2:d3:f4:26:29:11:cd:da:
1f:33:2c:2e:bb:49:1e:82:56:2c:b9:a9:20:e5:3d:
2e:6c:26:05:e8:ce:ee:c9:c1:37:7a:51:63:39:74:
5e:db:6a:d6:a9:06:21:93:3c:91:7b:c0:b7:0c:42:
95:38:f1:28:79:d7:5f:07:fc:49:bb:60:2b:f4:98:
8e:11:56:9b:ac:07:2b:d2:19:94:8f:5b:6c:3a:6a:
db:00:b6:4a:72:3d:11:19:c4:c2:64:d4:3c:9c:8f:
29:7f:c7:6c:51:62:c5:ae:c4:dc:71:4c:f5:79:fe:
69:e5:9d:36:5e:39:cb:3e:82:c0:68:68:f7:5e:12:
95:73:a4:bd:91:39:49:eb:ce:8b:48:64:6c:26:74:
2d:4b:d5:e1:0b:68:18:bc:23:07:b3:8d:a4:ab:2b:
cb:8c:83:74:5f:a3:ad:cb:d9:fb:42:7f:95:d8:a2:
f3:0f:ff:35:0c:fe:3d:d3:b5:15:e1:fb:2f:a3:e6:
c4:35:74:c3:5d:e2:8c:5b:06:29:0e:ef:5c:2e:77:
5c:73:1c:e2:eb:e7:e8:af:f9:b7:f9:cf:7c:11:a9:
15:3b:bf:09:33:c3:8b:35:98:f3:ee:a0:27:a7:9e:
db:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:77:04:96:18:F6:49:D5:6D:CA:35:62:93:03:1B:BF:70:57:F5:7D
X509v3 Authority Key Identifier:
keyid:25:33:58:35:8E:BA:51:B5:34:D3:FA:E9:A6:CB:87:1D:E6:37:E0:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTNYNY66UbU00_rppsuHHeY34AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:d8:43:49:ad:d3:23:99:ef:94:fd:de:6d:6d:94:8d:c6:d2:
ec:aa:b0:d4:14:aa:a6:38:8f:90:af:57:a8:e8:6e:f8:fa:c4:
49:96:b7:1f:51:a9:5f:fd:00:a9:94:4b:eb:19:e1:64:54:75:
bc:5e:ae:86:c6:f7:52:63:70:4b:0d:b7:c4:a0:54:cf:31:ea:
a0:0c:32:bc:44:6b:9e:eb:d2:c8:b0:c7:11:19:ce:2f:71:8c:
59:bb:24:ec:c2:cc:7d:a2:36:f7:84:86:3a:f9:a8:c1:46:46:
13:e3:64:da:d4:c8:0d:bb:54:db:78:e6:85:0d:9b:b8:bf:d1:
0a:05:0c:e3:56:08:b5:90:8d:49:0c:ea:b8:8a:9a:8b:3c:66:
73:44:a8:3b:ac:6c:3f:be:39:0a:a7:b5:dd:33:1a:ce:4a:de:
69:e4:ad:80:48:02:1f:2d:37:7a:90:d2:8b:8f:37:c8:4f:83:
ef:e7:7a:74:5a:dc:98:8a:6f:5e:2e:d6:25:02:88:f7:4b:69:
f3:35:e9:4e:2b:a6:f0:99:28:3c:f9:69:61:3b:39:0f:3b:5c:
e8:a4:dc:bd:32:46:5a:76:53:05:0b:e2:e9:33:08:bb:1c:0e:
db:77:1f:d9:7d:2c:77:0f:db:59:39:56:ae:7b:74:68:e4:18:
7b:35:d3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 23:55:34 2025 by rpki-client