Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft
File: JCH_to6rl-JKkGJtkEmL5-1wZvA.mft (raw, json)
Hash identifier: VUL7se6QA6wj5PDS6e98YhavG+lw3cLDJdCjsOcRq34=
Subject key identifier: 78:36:0B:B4:25:D1:AF:A1:E0:17:4B:7C:34:14:CD:35:27:04:65:FE
Authority key identifier: 24:21:FF:B6:8E:AB:97:E2:4A:90:62:6D:90:49:8B:E7:ED:70:66:F0
Certificate issuer: /CN=2421ffb68eab97e24a90626d90498be7ed7066f0
Certificate serial: 01987373E4574D73CD87165403C64A5EA164
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JCH_to6rl-JKkGJtkEmL5-1wZvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 05:00:31 +0000
Manifest this update: Mon 04 Aug 2025 05:00:31 +0000
Manifest next update: Tue 05 Aug 2025 05:00:31 +0000
Files and hashes: 1: JCH_to6rl-JKkGJtkEmL5-1wZvA.crl (hash: jgOX6bycYUAHj1bWdXjXyaFgDCrEhWcbbf5fJZrQXDQ=)
2: N0X6xiVzqXxKq1FAQhtD_X-LptY.roa (hash: /exbdfoldwGhZ8sHg6pfpGAkHOc1ALsLXny1F95l6KY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JCH_to6rl-JKkGJtkEmL5-1wZvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:73:e4:57:4d:73:cd:87:16:54:03:c6:4a:5e:a1:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2421ffb68eab97e24a90626d90498be7ed7066f0
Validity
Not Before: Aug 4 05:00:31 2025 GMT
Not After : Aug 5 05:00:31 2025 GMT
Subject: CN=78360bb425d1afa1e0174b7c3414cd35270465fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0e:01:19:17:61:0d:bb:8b:3b:2a:cf:56:68:
41:68:f4:83:c4:ed:07:40:bd:cc:5f:cf:9e:a3:43:
8e:97:75:da:92:ca:47:f7:1d:cd:fd:af:6e:c3:69:
c3:e5:39:01:bf:73:43:8f:be:89:88:0e:42:df:cf:
09:b6:10:8e:5a:21:50:4e:ff:9b:94:aa:11:e0:f7:
c9:e8:2f:96:fe:f5:89:c3:36:de:2a:87:31:37:a6:
8f:97:ab:de:35:e9:d0:5b:ce:38:da:55:a0:4f:1d:
e9:33:74:b5:54:0f:84:42:a9:9d:37:40:56:29:45:
31:15:20:eb:71:50:f3:d7:b9:a3:2e:50:a4:1d:2a:
cf:7d:cb:84:3a:2e:90:83:c8:8a:3c:dc:36:b3:96:
21:3c:c9:7a:a6:7c:72:fe:eb:ff:8a:f7:26:7b:38:
d9:8b:1b:3f:24:fe:f8:71:a5:67:55:d2:8d:ea:a3:
a9:35:94:33:a5:72:3c:75:e3:02:91:50:07:c5:8c:
25:90:2f:01:20:23:61:1a:8b:99:cc:90:35:30:05:
6f:f9:8a:87:80:d3:79:62:f0:e0:4c:03:16:3f:6f:
43:60:cc:53:1c:d2:cb:f3:32:0a:8e:87:b3:b7:bb:
45:c2:da:b1:ce:66:a3:8b:08:c3:90:11:d7:e7:b0:
ca:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:36:0B:B4:25:D1:AF:A1:E0:17:4B:7C:34:14:CD:35:27:04:65:FE
X509v3 Authority Key Identifier:
keyid:24:21:FF:B6:8E:AB:97:E2:4A:90:62:6D:90:49:8B:E7:ED:70:66:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JCH_to6rl-JKkGJtkEmL5-1wZvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:84:d1:36:83:d1:d8:1c:e7:ff:d2:09:1c:b7:7e:08:aa:a2:
09:5d:c8:b0:e3:c2:b7:a9:1e:99:da:e2:d8:22:e6:31:07:0b:
bf:74:85:41:ed:bb:02:d1:b7:e6:1e:29:75:78:2d:6c:d9:5f:
de:17:71:17:fd:7f:4d:d7:28:3b:9d:33:89:b1:3e:ad:46:0d:
35:2b:25:26:b5:91:1f:d9:da:63:8a:98:e1:e8:0b:fb:30:9d:
8f:11:d1:ae:d7:a9:1e:30:8d:79:0e:af:d8:ba:02:0c:e8:0b:
52:68:70:53:12:32:cd:50:bf:c7:bd:65:e1:35:4b:d3:21:94:
e9:44:dd:f0:d4:42:f3:32:6a:9b:10:68:40:32:6f:bf:d4:4d:
f2:cd:5d:44:a6:ec:4b:26:89:43:ec:47:b1:a8:22:0f:ba:25:
3f:8f:f0:24:85:ad:61:b2:3c:5d:85:a0:c4:1a:d7:e5:29:e7:
19:da:45:69:19:df:da:47:5b:2f:ee:63:50:60:52:da:a9:a3:
c1:9f:01:91:63:39:d3:7e:34:a7:af:65:5e:65:dc:33:67:0d:
49:d2:05:03:c2:87:09:b9:97:6b:19:81:c2:31:b1:50:6f:e3:
43:08:4b:9c:e6:18:2a:34:43:24:f4:26:d7:ac:af:a2:8c:58:
b5:7d:cc:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:35 2025 by rpki-client