Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.mft
File: JavmeyHTI7KytELGsGrjLMKANY0.mft (raw, json)
Hash identifier: ECOs2iNfvVrr8TS3TN5+HEiIsZ7ucUDq60nQR41dFGI=
Subject key identifier: 2F:55:E4:D1:71:2B:81:40:DB:E5:B9:8F:5C:DC:69:2F:DC:6D:A3:7D
Authority key identifier: 25:AB:E6:7B:21:D3:23:B2:B2:B4:42:C6:B0:6A:E3:2C:C2:80:35:8D
Certificate issuer: /CN=25abe67b21d323b2b2b442c6b06ae32cc280358d
Certificate serial: 0196B3D92D7107B43ABED1B5574DDC5CB30B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JavmeyHTI7KytELGsGrjLMKANY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.mft
Manifest number: 0862
Signing time: Fri 09 May 2025 07:01:16 +0000
Manifest this update: Fri 09 May 2025 07:01:16 +0000
Manifest next update: Sat 10 May 2025 07:01:16 +0000
Files and hashes: 1: JavmeyHTI7KytELGsGrjLMKANY0.crl (hash: e5aqiEeTq4bCm6lh5vb67IDNAKqKVYjTrflTD7+LYdI=)
2: UsGWlIi-7uiN8zG8NI59NtV5c7I.roa (hash: 2oRhDUdkNy5+apDfmRqRD6+hJvX2S16eZftFWdMCk1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JavmeyHTI7KytELGsGrjLMKANY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:d9:2d:71:07:b4:3a:be:d1:b5:57:4d:dc:5c:b3:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25abe67b21d323b2b2b442c6b06ae32cc280358d
Validity
Not Before: May 9 07:01:16 2025 GMT
Not After : May 10 07:01:16 2025 GMT
Subject: CN=2f55e4d1712b8140dbe5b98f5cdc692fdc6da37d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fe:7b:22:e7:df:53:c6:4f:b4:80:a5:33:65:
b3:92:40:d6:03:77:28:9a:ff:28:99:e0:e5:77:68:
cb:bb:1d:8b:4d:3f:94:c6:58:06:a3:aa:68:ab:de:
30:7a:b0:0f:53:3c:0e:58:89:39:e7:97:8e:c7:8e:
7f:ea:fb:5e:56:9a:67:79:6e:d2:fe:63:69:85:c5:
0e:30:83:9d:f3:f0:f5:80:cc:70:8c:d3:2d:51:24:
e3:85:b7:5d:7f:10:e1:2c:f6:11:26:15:35:15:67:
34:19:5b:11:a4:7a:06:21:c1:1e:17:02:60:85:1d:
cf:05:46:ea:2f:66:67:6b:16:7a:14:c4:ae:60:b7:
21:16:28:cb:23:43:f4:46:b8:95:7d:9c:45:1e:5f:
23:08:98:11:41:68:12:67:cd:b5:c4:f3:a8:76:cf:
39:62:93:67:dd:27:88:88:97:f3:2a:94:14:fc:47:
20:3a:70:b8:1e:f2:11:9c:87:29:14:34:f9:a6:89:
5a:53:93:37:5a:cb:cc:8d:1e:71:54:12:e1:fe:c3:
aa:d1:75:e6:ba:bb:12:45:f9:cc:07:ba:02:18:87:
a9:8d:48:e2:68:95:4d:5a:8d:49:8b:c9:1c:11:b5:
14:30:fc:89:2d:1c:71:ec:0c:5e:7d:3d:0d:0e:e2:
c2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:55:E4:D1:71:2B:81:40:DB:E5:B9:8F:5C:DC:69:2F:DC:6D:A3:7D
X509v3 Authority Key Identifier:
keyid:25:AB:E6:7B:21:D3:23:B2:B2:B4:42:C6:B0:6A:E3:2C:C2:80:35:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JavmeyHTI7KytELGsGrjLMKANY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/37b64a-cc5e-4630-96f2-7218a31790f3/1/JavmeyHTI7KytELGsGrjLMKANY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:6e:51:68:b1:f9:5b:87:38:e0:c5:01:00:d1:ad:23:05:86:
68:4e:d3:8e:b8:cd:71:6a:44:8a:c1:20:ab:a5:ad:2c:e8:67:
4c:79:93:47:94:1a:70:82:76:cd:95:7e:81:54:fc:f4:bc:1b:
96:39:55:28:af:9c:e8:8c:d5:1d:24:e9:bf:3c:bf:ba:b1:60:
bc:5d:2e:38:69:f8:84:18:a6:9f:bc:ac:2b:e8:1a:9c:4c:10:
55:58:02:38:86:12:1a:8c:d8:4c:3a:71:33:89:f7:96:23:81:
c8:44:3e:c3:ba:b3:10:fa:28:57:5d:cd:75:f7:5c:1a:92:48:
0d:45:e2:99:dc:a7:e5:7a:d1:eb:1f:00:e0:50:c4:a2:3d:d4:
1c:fc:c9:fb:d0:45:1d:7d:97:81:a0:b9:f9:dd:30:0e:85:f7:
ee:f0:a4:79:cb:d7:e6:9b:32:ec:c4:9f:2f:91:22:44:80:1b:
41:21:a3:27:b7:1d:00:99:79:59:4a:e0:f5:6f:a8:de:c0:0b:
38:5b:b5:9a:5d:57:0c:1b:ce:19:a3:f7:71:74:c0:fd:ab:ed:
ca:12:27:51:33:bc:fd:75:a1:68:83:f9:0a:66:a5:9e:05:e6:
69:cd:42:79:f4:21:8f:c7:e9:85:49:74:e7:2f:39:61:cc:fb:
6f:17:e7:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 12:37:08 2025 by rpki-client