Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
File: JRXoeSpCT_cswXkpeOLNTNvtpNA.mft (raw, json)
Hash identifier: OaqwP9CPKrae+m01NmuIu/qIHK7EAXGNwHhEzg4mzdg=
Subject key identifier: C3:C2:21:D2:34:FE:0F:E0:23:1B:6E:B7:AA:23:4F:0B:F8:3F:66:23
Authority key identifier: 25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
Certificate issuer: /CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Certificate serial: 019A4FD06962E0B984F0FF489C35C9788C4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
Manifest number: 05B4
Signing time: Tue 04 Nov 2025 17:00:49 +0000
Manifest this update: Tue 04 Nov 2025 17:00:49 +0000
Manifest next update: Wed 05 Nov 2025 17:00:49 +0000
Files and hashes: 1: JRXoeSpCT_cswXkpeOLNTNvtpNA.crl (hash: Atvky1L7gSr277ffDNMogQkOezIC9ANXNjvUE7FTWRc=)
2: ZvBiJJYcsEKcCx0rdG5hcLS4urA.roa (hash: PGtf/dItV8nV0ht7Z+5ua8GBh0EMsKhRF6MMe1D1HlA=)
3: wj466oTxwmfvmkHt-zRaSV43cC0.roa (hash: 1ZjlfVKdCsd3URcSQeRSOCOntRVpDQKf0IcTynD3LQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:69:62:e0:b9:84:f0:ff:48:9c:35:c9:78:8c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Validity
Not Before: Nov 4 17:00:49 2025 GMT
Not After : Nov 5 17:00:49 2025 GMT
Subject: CN=c3c221d234fe0fe0231b6eb7aa234f0bf83f6623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:25:d8:fd:63:f4:cf:09:0d:19:38:d1:4d:81:
29:a1:ec:da:98:a8:7b:cb:9b:a1:7d:09:27:1e:2e:
0b:dd:cb:33:dd:93:43:28:a2:ae:cd:a9:9d:39:4e:
5f:cf:27:cb:b8:b8:28:62:85:41:0a:44:cd:7f:29:
fa:48:75:2d:ab:6c:df:56:1a:3d:cb:d8:ee:11:f9:
82:ef:30:73:c5:ee:c1:17:db:aa:ec:4f:97:3e:20:
16:c3:48:c2:ef:86:1d:06:5d:1f:eb:f8:41:a6:60:
a5:d1:58:c1:d6:bf:f7:84:e0:13:f6:21:e9:50:aa:
a6:8d:63:cc:8f:33:89:0a:65:4e:fb:f9:04:be:31:
e0:b1:6f:8f:ca:a1:86:86:be:e1:84:a2:5d:7d:f1:
31:c8:20:e7:20:c7:48:14:7c:51:16:fe:6d:cb:06:
60:cc:bb:54:c3:23:bb:16:f7:0f:17:fd:98:d3:59:
81:22:b4:a3:b1:d8:da:7b:8c:ed:ea:83:d1:01:3f:
bc:eb:45:b2:30:7b:b3:15:dc:bb:73:e0:cd:73:f6:
99:9f:cf:fd:ac:34:97:7b:00:6a:47:83:a5:c9:84:
c3:a1:6c:1c:8b:ef:5b:1a:93:09:46:b1:6e:f8:f6:
23:d0:5b:ed:56:65:09:6f:48:24:58:4f:b9:5e:19:
93:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C2:21:D2:34:FE:0F:E0:23:1B:6E:B7:AA:23:4F:0B:F8:3F:66:23
X509v3 Authority Key Identifier:
keyid:25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:d1:b0:05:84:de:eb:f7:6d:45:2e:68:49:7f:84:9b:a5:61:
63:85:06:1e:27:ee:b7:d4:8c:26:78:db:3c:fa:16:62:41:9e:
63:de:17:b6:96:d9:94:5e:38:d7:43:ad:89:5d:26:b6:f9:d8:
74:a6:b2:bb:78:6c:72:8b:0d:0e:7e:70:ae:9e:5d:e2:0f:6c:
3a:82:7a:a3:22:d9:7e:de:eb:ad:ff:12:27:e0:00:e0:44:99:
2b:d7:8e:3f:5d:54:8b:ca:30:c1:02:a8:e3:93:4b:76:6d:72:
46:1c:d6:0b:73:34:bc:9d:34:30:d3:0e:5c:c5:2a:ea:84:b7:
26:09:40:60:b2:e5:88:9d:cf:d0:ae:a3:7e:7f:d6:fe:6e:14:
dc:f9:a5:ef:5c:46:d6:9a:35:e7:f3:77:b6:1b:25:c6:cc:df:
02:68:66:bb:6c:88:a2:e4:8b:2c:b1:0f:59:db:a0:88:b7:3b:
05:27:18:e9:a4:4a:4c:ae:d7:b9:0f:7b:6a:67:4f:92:b3:90:
f3:f5:e4:ca:bb:cd:65:f9:ee:29:66:95:8d:79:25:e9:9a:34:
fb:66:e0:6f:dd:e8:e2:be:c8:b2:66:eb:cf:73:1d:f6:64:72:
08:04:00:6d:cc:85:e6:53:49:7b:a5:57:dd:0c:fe:1f:65:93:
a8:e2:3c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:39:14 2025 by rpki-client