Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
File: JRXoeSpCT_cswXkpeOLNTNvtpNA.mft (raw, json)
Hash identifier: wBJ+sG+uSLq+LFbDSiL8LkJBVc3VNjB0a2I7XlflSNY=
Subject key identifier: 0A:F4:D1:D3:86:F2:5B:F0:7F:5C:69:7E:FD:C7:D1:31:A1:A3:44:A8
Authority key identifier: 25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
Certificate issuer: /CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Certificate serial: 019872CF513CFD746D38804E3D006B52EBA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
Manifest number: 04BD
Signing time: Mon 04 Aug 2025 02:00:45 +0000
Manifest this update: Mon 04 Aug 2025 02:00:45 +0000
Manifest next update: Tue 05 Aug 2025 02:00:45 +0000
Files and hashes: 1: JRXoeSpCT_cswXkpeOLNTNvtpNA.crl (hash: XooaU53p4y3DDeA0dmgcmVOytYr/PC+eUpGbfnFPj8M=)
2: ZvBiJJYcsEKcCx0rdG5hcLS4urA.roa (hash: PGtf/dItV8nV0ht7Z+5ua8GBh0EMsKhRF6MMe1D1HlA=)
3: wj466oTxwmfvmkHt-zRaSV43cC0.roa (hash: 1ZjlfVKdCsd3URcSQeRSOCOntRVpDQKf0IcTynD3LQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:51:3c:fd:74:6d:38:80:4e:3d:00:6b:52:eb:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Validity
Not Before: Aug 4 02:00:45 2025 GMT
Not After : Aug 5 02:00:45 2025 GMT
Subject: CN=0af4d1d386f25bf07f5c697efdc7d131a1a344a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:52:f2:b7:a1:b8:3f:25:61:3c:34:be:37:0c:
4f:a5:99:4b:6b:df:a7:97:4d:3f:bf:e7:01:c7:a2:
87:58:9e:e5:09:dc:0b:e8:6d:da:97:65:5c:b7:31:
61:d4:d6:92:17:e6:88:1b:ce:2a:4a:b4:77:55:fe:
84:a6:13:5b:ad:16:a7:90:9f:c4:11:13:61:70:68:
73:b9:81:a1:57:a0:e5:e1:49:82:d5:2c:2b:c9:8c:
b6:fe:fe:bc:4e:7f:a7:98:bd:2f:36:73:47:71:35:
64:8a:9d:0c:03:5c:74:ab:29:f4:c2:65:70:93:85:
f3:20:6d:8a:39:cc:52:2e:f3:53:c6:17:63:5f:7f:
9e:d2:05:a9:6d:02:87:8d:ed:d7:67:23:64:58:64:
16:2d:a3:0f:06:65:13:42:b9:af:d0:19:08:6e:6b:
ec:a1:32:0e:44:c7:46:71:2f:ea:ea:8b:de:a1:9d:
83:85:a6:43:99:a9:53:49:ef:97:2c:ef:f6:cc:d5:
f7:09:f0:6e:09:78:d3:3a:db:25:14:61:85:ab:c1:
b8:9c:dd:13:98:87:02:0e:e2:5d:91:22:eb:b0:2e:
65:27:a1:55:85:98:ba:2c:3c:e5:64:64:f5:a9:5a:
d3:e5:07:d3:52:55:07:bd:a2:f9:e9:66:fd:5d:de:
82:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F4:D1:D3:86:F2:5B:F0:7F:5C:69:7E:FD:C7:D1:31:A1:A3:44:A8
X509v3 Authority Key Identifier:
keyid:25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:33:0e:78:bb:79:37:32:54:dc:3e:fa:d2:b3:dc:88:d2:ff:
cd:a2:48:45:70:a3:b3:5f:14:f1:c2:9a:c4:5b:32:1f:00:1a:
34:49:82:ae:ef:1f:7f:b0:5c:cb:a2:4c:2e:b0:5a:f6:a5:04:
51:1a:80:b1:a5:dd:db:ea:5b:35:fb:8b:71:7f:33:e9:cc:2e:
aa:92:bd:27:cb:b7:52:89:c5:d1:30:07:e3:7d:14:a7:96:2d:
5e:22:03:2e:b2:33:f1:4c:62:85:b3:23:0b:9c:a9:c0:35:47:
ad:23:60:60:38:53:7a:0a:5d:d9:4b:37:cb:02:9e:36:0b:14:
86:e9:cd:83:5c:f7:5a:26:ae:9a:8c:f4:fa:de:de:07:f0:42:
24:f0:ab:85:3a:f9:16:09:ac:ab:34:60:c2:5e:9b:e1:68:d5:
3d:4a:1b:bb:66:57:90:da:28:63:ec:38:31:09:8a:02:f5:fa:
bc:68:3a:e1:22:4b:9f:be:48:4f:1c:2c:fd:5e:7c:d7:c5:1a:
a1:a6:96:c1:1c:5e:c0:b7:81:c1:42:48:d1:53:42:32:c9:9e:
8d:a5:de:7f:b4:1d:4b:40:6c:7f:68:57:dc:8a:cb:5d:3d:a4:
4e:c2:1a:99:5c:dc:7c:4b:4d:04:32:90:41:14:86:a8:05:6a:
01:87:61:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:41 2025 by rpki-client