Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
File: JtmhbC-n1MNwtTJSFL5EILYR8fk.mft (raw, json)
Hash identifier: 1GoS7sI+AkD5LySMQnsSIs5C6b1CFqvvfVwMTA1qLFI=
Subject key identifier: F3:C0:5C:64:83:47:C5:F8:0D:C2:1D:F6:DA:BB:9D:76:94:B4:1D:96
Authority key identifier: 26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
Certificate issuer: /CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Certificate serial: 0196C6155B4D1D703ECA4DD399945A15B194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
Manifest number: 153A
Signing time: Mon 12 May 2025 20:00:10 +0000
Manifest this update: Mon 12 May 2025 20:00:10 +0000
Manifest next update: Tue 13 May 2025 20:00:10 +0000
Files and hashes: 1: 8ugHhLiToKwnzK4NKapWEcPlKh0.roa (hash: 4E0a2T2uUeIhUUG04lFzaUEsCu56I9vGRdi00E/gn7k=)
2: JtmhbC-n1MNwtTJSFL5EILYR8fk.crl (hash: BUwr4xpeByyhffJV62JMDGtuYI2j7uRScnlYU3tKeLA=)
3: zGlqz5otF9hY2Y3sk2pn1erhTAU.roa (hash: ofXFe05Yp+tSBC9fBzRKiln4g1Kad9/L6uAtEFx8Z54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:15:5b:4d:1d:70:3e:ca:4d:d3:99:94:5a:15:b1:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Validity
Not Before: May 12 20:00:10 2025 GMT
Not After : May 13 20:00:10 2025 GMT
Subject: CN=f3c05c648347c5f80dc21df6dabb9d7694b41d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bd:54:53:24:53:ad:01:2e:c0:c5:69:bc:5d:
47:27:1f:f3:eb:9b:a7:c1:7a:e9:ab:94:53:a8:db:
a0:74:38:a5:1a:e0:5f:8b:ae:82:fe:97:05:76:f3:
b1:73:69:07:9d:93:8f:8e:d8:6d:83:cd:bb:30:c0:
63:1e:c9:c5:ca:e7:fb:8a:79:36:86:e6:39:07:b0:
e6:61:7f:de:5e:7a:63:01:40:8a:0c:4c:6a:0a:c6:
12:57:f5:6d:7e:57:c1:4f:fa:0c:b2:ff:e5:db:96:
71:61:5e:83:8c:62:7c:d3:2c:44:03:15:99:e2:b8:
b2:31:ef:ce:f4:db:81:20:49:6d:d9:f8:bf:b9:d5:
6b:c3:8e:e3:e5:83:d6:19:d0:6c:e5:c7:88:9d:df:
e3:b9:27:f8:d9:c8:88:fc:ae:1b:38:7f:bc:ad:10:
7c:9c:7d:9d:5b:b4:24:5c:ae:13:1e:8c:30:83:bf:
8e:47:58:b0:aa:cb:78:05:f5:45:b1:88:bd:14:78:
45:da:51:5c:04:15:b8:ab:51:84:50:ec:b5:f2:a8:
b5:b7:27:60:92:82:7e:f0:94:5f:26:05:94:0d:9a:
4b:26:84:a9:12:ce:78:d8:1d:2d:d9:43:1a:5c:bf:
20:ae:ee:9c:80:a1:c0:37:e9:27:0d:2f:85:8a:e4:
e5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C0:5C:64:83:47:C5:F8:0D:C2:1D:F6:DA:BB:9D:76:94:B4:1D:96
X509v3 Authority Key Identifier:
keyid:26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ab:b6:99:74:25:5d:3e:94:50:8a:69:74:b0:34:e0:d9:5f:
5c:79:04:96:a5:98:de:fc:4b:13:15:3a:71:f8:2d:18:eb:b7:
b0:d5:98:f6:bd:cd:d6:78:55:e2:61:d5:0f:66:2e:da:27:70:
fe:a6:89:1f:96:c3:09:27:d8:9f:e3:2d:c2:41:88:89:22:c9:
3e:51:61:81:69:36:4f:cd:76:11:db:b6:04:a8:41:3e:5b:33:
94:59:25:d7:9c:51:c9:0a:40:ad:2f:c9:c2:b9:5b:d1:90:66:
6f:1c:3e:f4:84:57:0c:a6:55:d6:31:7e:ac:84:3e:ea:f1:45:
e0:a0:db:98:04:a9:46:9d:62:c6:6c:d9:3d:af:7d:8e:f1:8c:
31:c3:70:33:f1:7f:10:cf:fd:ed:f2:4d:df:1d:cd:01:f0:9e:
33:cd:a2:e6:c1:44:ef:3a:74:51:5a:ed:06:d4:6b:53:44:e0:
40:1f:de:62:ba:e3:91:18:c2:67:e7:0a:77:1b:0f:3c:79:9f:
60:18:27:25:df:e4:1a:a2:02:43:12:d7:56:c2:f0:4c:3f:bb:
72:d3:f6:9a:4c:60:34:ec:8d:c3:0e:63:38:b4:2b:76:68:6c:
a3:1f:c3:d7:1e:b7:76:73:7b:cf:56:07:15:23:fc:b4:73:2d:
98:de:d4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:57:51 2025 by rpki-client