
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
File: JTYSS5962om34iZByFbTBTA8H3w.mft (raw, json)
Hash identifier: bvxca2N5cmVJQyibiJeN4j2rU5QPwT9Ne3laeAaWC4c=
Subject key identifier: EB:75:44:2A:9E:19:F8:D0:F8:34:24:41:28:FC:DE:FA:DD:35:7A:49
Authority key identifier: 25:36:12:4B:9F:7A:DA:89:B7:E2:26:41:C8:56:D3:05:30:3C:1F:7C
Certificate issuer: /CN=2536124b9f7ada89b7e22641c856d305303c1f7c
Certificate serial: 0196C20244D58F7D5E48F1C6DEADECE7E554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
Manifest number: 1534
Signing time: Mon 12 May 2025 01:00:50 +0000
Manifest this update: Mon 12 May 2025 01:00:50 +0000
Manifest next update: Tue 13 May 2025 01:00:50 +0000
Files and hashes: 1: JTYSS5962om34iZByFbTBTA8H3w.crl (hash: 8YToh9X8eYnjP48FITSG6TjcoGw/1kxnMdR2fLTcHNc=)
2: Oz-OF7QUhf9OkYOY6Er5Z5L_euc.roa (hash: rTcAf8Y3zE28zXssf3PZGZt9Ygw2dFFGFW0xU85GA/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:02:44:d5:8f:7d:5e:48:f1:c6:de:ad:ec:e7:e5:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2536124b9f7ada89b7e22641c856d305303c1f7c
Validity
Not Before: May 12 01:00:50 2025 GMT
Not After : May 13 01:00:50 2025 GMT
Subject: CN=eb75442a9e19f8d0f834244128fcdefadd357a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:60:b2:ea:ab:1a:0d:de:fa:a8:ef:84:8d:db:
1b:d2:f9:e5:e8:29:64:58:3c:fc:66:0d:05:fb:88:
3d:01:1b:d3:9a:96:65:49:42:80:27:26:4a:bd:c6:
a0:93:f3:21:a9:d7:d5:e1:30:0e:18:49:3d:a5:5a:
87:2f:76:b5:86:f5:3e:de:b0:c9:6c:ee:64:d8:49:
c5:b8:39:d9:14:05:d3:1a:14:4c:6e:d9:db:af:17:
22:9a:d6:ae:7f:5b:01:f4:a6:29:6b:29:dd:70:24:
3c:82:d6:77:b9:d1:43:4b:41:a0:bd:f7:e2:6f:5e:
30:82:b4:7a:63:7d:71:09:d1:33:1c:2e:ed:cb:3f:
d9:05:10:04:01:7d:e9:c5:71:55:f5:80:b9:6b:2b:
0f:8c:30:db:11:1d:f9:16:36:0c:29:da:15:75:c7:
ef:e9:11:aa:e0:fe:fe:c6:2c:c6:55:75:1d:1d:a5:
be:a7:de:61:98:94:64:c4:bf:7f:cd:e6:ae:3a:8a:
00:4d:d6:54:cb:6d:15:e3:07:ac:dc:4e:12:aa:83:
72:e2:38:fe:08:b5:8a:a9:42:c1:73:b5:77:17:38:
14:78:1f:99:64:22:c2:50:8e:b9:da:90:31:66:4f:
52:3b:e4:0a:e5:37:69:a0:8e:d0:b3:a4:df:c1:f4:
dd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:75:44:2A:9E:19:F8:D0:F8:34:24:41:28:FC:DE:FA:DD:35:7A:49
X509v3 Authority Key Identifier:
keyid:25:36:12:4B:9F:7A:DA:89:B7:E2:26:41:C8:56:D3:05:30:3C:1F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:b3:55:87:47:74:3e:aa:3d:fa:46:71:7c:cd:6b:3f:63:77:
d6:b1:f0:69:45:b1:c5:76:92:94:98:ed:a6:be:4a:75:4b:53:
b3:9c:ac:bd:8e:86:43:c6:4e:de:a9:60:b4:42:5e:1a:b5:81:
d5:ae:76:38:30:2b:50:e1:8a:78:c9:20:a6:5d:15:ad:c8:d7:
78:41:fa:ef:ce:55:da:bb:66:25:f9:1b:4c:d7:4b:c9:83:32:
e0:9e:d5:e1:c0:6a:cb:5d:eb:ae:9b:87:48:13:74:94:73:82:
0e:dd:2c:39:8d:51:e4:04:3c:af:8c:da:1c:e7:99:6d:5d:db:
d5:cb:8f:d2:16:c6:36:6e:45:b9:6b:26:11:58:42:c3:85:d7:
51:95:dc:65:49:69:c2:18:41:e9:cc:75:4b:d7:1e:19:94:41:
f7:c7:2d:d3:39:e6:a9:00:91:42:ec:b3:62:e1:6a:20:f9:94:
b2:02:c7:13:80:0a:64:d9:38:de:44:7c:9b:69:15:b9:f2:38:
a5:e3:4c:67:d8:d8:30:9c:ff:ea:12:ff:9a:5c:76:2c:ce:dd:
38:85:a5:d5:26:79:e4:4e:b3:d6:cd:cd:f0:c3:d6:bb:5a:63:
4e:da:22:ba:f5:29:77:03:7f:f4:64:06:00:af:2f:2c:c7:7d:
31:bf:ce:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:23:25 2025 by rpki-client