Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
File: jckcUL_5ygWebjiy4MfrhSpjC7o.mft (raw, json)
Hash identifier: Th2C6b/5PwlMWKLmgwEwPhhnSyVTjuWh0tGeNkX1B2Q=
Subject key identifier: 06:CE:E8:55:CA:49:BC:BE:1A:3A:AD:2C:A8:14:9D:CE:1B:B4:B9:C1
Authority key identifier: 8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA
Certificate issuer: /CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
Certificate serial: 019873068FD1210A81153B31C1B2D62B959E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
Manifest number: 1568
Signing time: Mon 04 Aug 2025 03:01:06 +0000
Manifest this update: Mon 04 Aug 2025 03:01:06 +0000
Manifest next update: Tue 05 Aug 2025 03:01:06 +0000
Files and hashes: 1: jckcUL_5ygWebjiy4MfrhSpjC7o.crl (hash: hjl0CdmYKegbcxQcsDRUqHgyRhNv0rkq08hjZ/d0R1o=)
2: kPouSigkCfrRHoMg7De2TJT88UA.roa (hash: t8cgJtzKMebDlU5SK4Js6mv7oMUSZDhw9bql1pMcUmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:8f:d1:21:0a:81:15:3b:31:c1:b2:d6:2b:95:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
Validity
Not Before: Aug 4 03:01:06 2025 GMT
Not After : Aug 5 03:01:06 2025 GMT
Subject: CN=06cee855ca49bcbe1a3aad2ca8149dce1bb4b9c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7e:7a:85:e8:63:43:be:06:ff:e5:e5:3d:a3:
c0:70:4c:9a:e4:ce:8b:06:6a:dc:4f:f2:d1:d6:69:
91:07:39:05:47:5c:ad:a4:ca:19:fb:e3:14:74:c8:
89:53:c9:a2:8e:d2:ef:89:1e:18:92:13:d5:d5:c5:
29:2d:56:9e:e1:69:5a:90:bb:d1:fe:84:bf:53:ef:
70:70:49:7c:19:43:33:4d:c9:4d:be:97:47:8a:56:
c3:3d:c8:01:22:d8:8b:7f:c7:3e:25:92:a5:ef:90:
ee:7d:eb:52:63:a9:62:b5:53:10:fa:fa:0e:14:f1:
00:05:59:e0:27:d3:69:c1:4a:4b:56:91:62:4e:68:
ad:58:4a:f7:4e:5e:2f:bc:02:8f:87:c1:60:ef:9c:
78:46:8c:4b:22:b2:ab:3e:30:c3:7d:ff:32:93:6e:
77:17:65:6c:fd:e2:01:c4:ec:aa:d8:89:7c:c2:1c:
bb:f3:b9:25:9f:b7:70:ba:f6:93:b9:0c:d5:82:1f:
85:6d:6a:4a:df:e9:17:ae:40:d4:ab:92:03:78:c2:
f0:fa:24:b5:7b:73:fb:58:bd:80:c0:e3:f5:f3:5a:
33:d3:08:6e:64:45:46:2c:0e:45:ce:b7:d7:71:41:
12:90:93:79:10:03:df:e7:4e:b6:1f:dd:61:7c:9c:
72:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CE:E8:55:CA:49:BC:BE:1A:3A:AD:2C:A8:14:9D:CE:1B:B4:B9:C1
X509v3 Authority Key Identifier:
keyid:8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:97:31:cb:a2:66:de:35:af:2c:a5:71:97:83:c5:21:5d:ba:
09:c5:f6:0c:42:f7:7f:e6:7c:3b:2b:5d:eb:6e:68:43:ef:da:
3c:ba:94:de:83:5f:a6:27:79:f2:1f:32:b3:5e:35:bd:10:23:
d9:ed:0f:d9:82:4b:07:bc:33:f8:33:9b:19:50:7a:33:25:72:
64:32:59:3f:8d:d4:2a:d5:58:df:f5:84:b5:b3:65:75:66:33:
26:bb:3b:9a:6b:80:03:d4:d7:91:7d:dd:97:40:94:50:81:85:
52:02:12:c9:53:ed:db:bf:9f:29:af:66:d9:9d:63:00:bd:e9:
46:c4:eb:04:44:23:86:6c:6a:38:d6:cf:40:4f:5a:b3:11:f6:
6c:99:b3:aa:66:8f:92:f5:0b:aa:46:7d:30:07:ee:09:ef:05:
77:10:b7:f5:4b:bd:e0:50:3f:ea:a6:41:57:8a:d6:7f:61:18:
e4:9a:4f:14:87:51:e1:d0:07:68:c0:3a:b1:5b:bc:f2:e8:68:
8e:e2:29:22:a6:39:63:75:7c:6b:fc:9d:39:87:78:bc:93:f1:
e1:4d:d3:d4:d0:be:f0:6e:5e:0e:ee:f4:2f:71:2c:15:49:4b:
a8:34:1d:ec:9b:4d:f1:eb:60:02:fb:81:8a:c4:d3:ec:3c:bc:
16:99:a8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:37 2025 by rpki-client