Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
File: JTYSS5962om34iZByFbTBTA8H3w.mft (raw, json)
Hash identifier: ArbWu5SrrYPmiuMFGYnyEdepmrDbecvR6oD4DjXr3Jw=
Subject key identifier: 15:19:FC:DE:0B:AF:B1:66:76:05:10:74:2A:E8:99:14:B5:DF:0C:2D
Authority key identifier: 25:36:12:4B:9F:7A:DA:89:B7:E2:26:41:C8:56:D3:05:30:3C:1F:7C
Certificate issuer: /CN=2536124b9f7ada89b7e22641c856d305303c1f7c
Certificate serial: 0197B745B19A9DD41B8C43561ED547CFFF33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 16:01:27 +0000
Manifest this update: Sat 28 Jun 2025 16:01:27 +0000
Manifest next update: Sun 29 Jun 2025 16:01:27 +0000
Files and hashes: 1: JTYSS5962om34iZByFbTBTA8H3w.crl (hash: nGUjqlfMTxqiAFrtfUv6UyWyk80Xfpb8P7cgvXrvaxg=)
2: Oz-OF7QUhf9OkYOY6Er5Z5L_euc.roa (hash: rTcAf8Y3zE28zXssf3PZGZt9Ygw2dFFGFW0xU85GA/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:b1:9a:9d:d4:1b:8c:43:56:1e:d5:47:cf:ff:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2536124b9f7ada89b7e22641c856d305303c1f7c
Validity
Not Before: Jun 28 16:01:27 2025 GMT
Not After : Jun 29 16:01:27 2025 GMT
Subject: CN=1519fcde0bafb166760510742ae89914b5df0c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:af:da:45:e2:08:6e:77:df:e8:29:55:ec:ea:
9d:6f:e7:d6:b2:81:0a:ad:2d:72:3b:49:19:6c:39:
7d:ca:f7:f7:ba:b4:bd:b5:c9:2c:93:e0:c1:a0:fb:
8f:b0:b2:e2:81:e2:64:14:8d:c4:80:85:51:bd:b0:
3a:64:72:d0:20:86:3a:93:18:b0:25:e7:20:1c:f2:
59:72:df:0d:7d:6f:66:da:b1:42:97:fd:70:03:f3:
66:fa:48:92:ee:32:06:ad:26:be:0d:79:0b:d7:50:
00:aa:15:d6:0c:5f:07:07:18:b3:71:ab:9b:72:03:
cf:78:15:15:58:61:c2:3b:66:60:ed:b7:c6:05:d6:
98:56:f1:f7:4b:09:39:64:e5:85:a5:df:8f:79:de:
ba:c4:69:d6:a7:aa:7e:09:c2:b7:b4:af:56:69:50:
a4:c7:a8:d8:96:f4:3e:df:8f:28:a4:5f:0f:b0:c9:
7d:fb:31:ad:7e:be:1d:77:0b:0c:f2:0e:e4:8d:30:
bd:6c:18:f5:1f:8a:4e:17:dd:19:23:19:02:67:80:
6a:1f:ce:ba:53:0c:e9:05:0c:09:b7:2e:e1:e3:9c:
27:b7:e3:00:23:fa:9c:91:ad:86:bb:12:f5:d9:04:
6f:b1:20:b9:f7:52:aa:91:60:00:48:3d:ef:4b:e7:
4f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:19:FC:DE:0B:AF:B1:66:76:05:10:74:2A:E8:99:14:B5:DF:0C:2D
X509v3 Authority Key Identifier:
keyid:25:36:12:4B:9F:7A:DA:89:B7:E2:26:41:C8:56:D3:05:30:3C:1F:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTYSS5962om34iZByFbTBTA8H3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ded583-b67b-4583-a240-7742d26452ed/1/JTYSS5962om34iZByFbTBTA8H3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:33:62:6a:47:bc:56:06:b3:82:28:04:4a:74:93:d3:ce:03:
1b:df:f7:1a:d8:48:56:c5:ba:92:13:03:5a:fd:c8:9e:87:4a:
24:13:9d:8f:58:0b:04:40:8e:d2:90:fd:53:61:0f:5e:a1:6f:
d3:67:4b:f6:d8:53:a4:ed:a0:5d:7e:5d:34:aa:a2:a7:28:a5:
2d:5e:4a:a2:17:93:94:7b:97:34:dc:c5:76:38:89:bb:78:d6:
42:5c:13:4a:09:01:fa:4a:20:ec:ca:cf:5b:cd:9a:20:7e:83:
f0:d4:90:b1:f2:a3:10:88:a4:ce:82:29:84:c0:e2:2f:74:1f:
71:c9:fb:41:49:34:33:da:cb:4c:49:8a:6f:f3:87:7d:d4:4e:
05:b3:d1:0f:54:1e:f0:05:80:67:6d:4c:39:81:76:73:8b:be:
fa:32:f1:61:6c:54:59:7d:39:ae:c9:19:5b:b5:23:5d:a4:5a:
40:b7:d3:4b:bc:aa:c3:d4:2b:a8:ac:a5:02:4f:ba:e7:b7:c2:
cb:b8:0c:da:d7:11:14:e6:47:a5:d2:5b:48:de:e8:fc:e9:bc:
0c:77:26:09:4c:fb:46:b3:74:8e:b7:d7:88:4a:02:9f:36:42:
98:fa:eb:66:a3:c0:e1:d0:5b:1b:13:01:db:90:18:95:75:2d:
55:74:59:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:59:16 2025 by rpki-client