Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft
File: JCH_to6rl-JKkGJtkEmL5-1wZvA.mft (raw, json)
Hash identifier: g6zvzm2whcnUl9KEop/cuElOaV+Dvgi/wuOfpN6JIlI=
Subject key identifier: DB:3B:A2:1E:A9:FC:FD:F4:A4:CC:A0:A3:24:97:DF:64:9F:1D:50:12
Authority key identifier: 24:21:FF:B6:8E:AB:97:E2:4A:90:62:6D:90:49:8B:E7:ED:70:66:F0
Certificate issuer: /CN=2421ffb68eab97e24a90626d90498be7ed7066f0
Certificate serial: 019A4E862C731488EE8A2B0EB07218CFAB1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JCH_to6rl-JKkGJtkEmL5-1wZvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 11:00:07 +0000
Manifest this update: Tue 04 Nov 2025 11:00:07 +0000
Manifest next update: Wed 05 Nov 2025 11:00:07 +0000
Files and hashes: 1: JCH_to6rl-JKkGJtkEmL5-1wZvA.crl (hash: P3tmrCFptF+kZga62MSd8XDkLUjKb98vb7XSB/Mtfpc=)
2: N0X6xiVzqXxKq1FAQhtD_X-LptY.roa (hash: /exbdfoldwGhZ8sHg6pfpGAkHOc1ALsLXny1F95l6KY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JCH_to6rl-JKkGJtkEmL5-1wZvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:2c:73:14:88:ee:8a:2b:0e:b0:72:18:cf:ab:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2421ffb68eab97e24a90626d90498be7ed7066f0
Validity
Not Before: Nov 4 11:00:07 2025 GMT
Not After : Nov 5 11:00:07 2025 GMT
Subject: CN=db3ba21ea9fcfdf4a4cca0a32497df649f1d5012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d9:54:64:31:e8:33:d5:59:4f:36:e3:32:92:
af:05:98:fd:b1:9a:7f:88:26:89:2c:5d:96:00:ba:
4e:dc:b7:6d:a5:91:6a:f0:1e:74:00:41:21:16:17:
0a:87:8f:17:f3:46:1b:45:4e:80:9d:5d:df:6b:73:
4a:84:26:57:6c:3a:74:26:45:c3:40:5b:50:9e:a8:
95:5a:ee:a4:d9:a0:03:d4:1b:b5:04:b5:a6:c9:de:
00:6f:e7:50:aa:f7:ef:a8:27:92:f3:7c:0c:51:33:
f3:19:e1:75:3c:1a:3b:8f:13:c2:2b:0f:ad:9f:e3:
e8:03:60:b9:83:fb:fa:7b:34:d4:a9:cf:60:bd:8e:
95:a1:d4:fd:d6:ca:01:7a:41:b7:0a:3d:c8:42:e3:
70:b3:3d:cf:be:e8:2b:cd:2b:76:9e:c3:e6:b3:50:
dc:c9:6d:58:41:3d:85:7e:79:8e:58:d1:7c:8b:e1:
cf:f1:a4:d5:d1:9f:95:07:0f:4a:5e:b5:5f:ad:a2:
de:98:26:f2:dd:2c:3b:48:bb:61:5c:69:81:3d:cc:
57:48:d7:85:d7:8a:f6:90:00:56:0d:d4:04:e5:6b:
48:88:e3:3c:97:e8:c4:98:ec:b6:ec:10:d8:7c:d1:
de:5a:12:09:0f:bb:e4:9e:fb:17:be:c9:0b:05:03:
41:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:3B:A2:1E:A9:FC:FD:F4:A4:CC:A0:A3:24:97:DF:64:9F:1D:50:12
X509v3 Authority Key Identifier:
keyid:24:21:FF:B6:8E:AB:97:E2:4A:90:62:6D:90:49:8B:E7:ED:70:66:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JCH_to6rl-JKkGJtkEmL5-1wZvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f0:12:ce:59:18:0e:31:b9:8b:be:cf:94:dd:c1:30:cb:9f:
89:d9:4d:c0:d9:f7:6e:58:1d:63:bf:ec:d2:90:01:f8:46:43:
67:68:72:fb:27:ac:06:62:6e:f1:2e:02:55:44:e1:63:71:49:
af:90:1b:06:92:4b:94:3e:8c:06:e7:05:42:b7:5e:06:97:58:
7c:b9:b9:93:28:dc:5a:1f:02:4f:e5:6e:d0:ba:6b:bc:c6:31:
06:3c:c3:fc:85:cf:a1:c7:3b:28:0b:7f:cf:b1:ec:1e:6c:29:
79:c4:cf:44:d6:98:96:41:e5:74:c5:7a:20:86:fd:c5:99:ee:
59:80:b3:81:56:69:63:5d:ed:56:03:f7:3b:24:f7:08:3b:4d:
35:c2:1b:87:c5:37:1d:55:ce:42:42:14:3c:ce:54:47:1a:34:
6d:3d:81:08:da:45:56:ce:48:cd:a7:02:d9:02:bd:8b:40:b8:
de:17:61:f5:80:ba:68:e8:94:64:d5:37:d3:41:92:89:13:4b:
98:85:6e:a6:ab:14:9a:90:32:1c:f0:09:55:84:89:0a:72:fa:
9d:8e:11:68:0a:11:90:9f:94:7e:b2:f2:2b:57:c1:6b:46:a1:
a1:80:5e:0b:6b:a3:73:24:bd:de:c9:00:46:a0:3e:a4:12:58:
c9:b7:e3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:59 2025 by rpki-client