Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
File: jckcUL_5ygWebjiy4MfrhSpjC7o.mft (raw, json)
Hash identifier: u1MG46XtVAomSCYYW+OGnloIhMZs5OSc1FbfHcL8dfo=
Subject key identifier: 76:54:11:2A:33:C2:68:00:EB:F8:CB:54:76:75:69:80:D0:AA:0B:CF
Authority key identifier: 8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA
Certificate issuer: /CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
Certificate serial: 019768855653A013623C8278E64D25D29566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
Manifest number: 14DE
Signing time: Fri 13 Jun 2025 09:00:58 +0000
Manifest this update: Fri 13 Jun 2025 09:00:58 +0000
Manifest next update: Sat 14 Jun 2025 09:00:58 +0000
Files and hashes: 1: jckcUL_5ygWebjiy4MfrhSpjC7o.crl (hash: 655lJSIMGR7FPLZaEUjx07eGg8Bwt29XCT0cVJy+E+E=)
2: kPouSigkCfrRHoMg7De2TJT88UA.roa (hash: t8cgJtzKMebDlU5SK4Js6mv7oMUSZDhw9bql1pMcUmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:85:56:53:a0:13:62:3c:82:78:e6:4d:25:d2:95:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
Validity
Not Before: Jun 13 09:00:58 2025 GMT
Not After : Jun 14 09:00:58 2025 GMT
Subject: CN=7654112a33c26800ebf8cb5476756980d0aa0bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:68:af:34:42:8b:a5:f5:9b:bf:a8:3a:32:e4:
2c:26:d7:34:96:e1:3c:72:74:8f:ef:ec:d3:b5:99:
95:54:95:81:96:77:6f:38:f4:4f:38:19:63:27:94:
22:af:7c:10:75:d7:10:a3:8e:d5:4e:6b:30:65:d5:
e2:a0:20:33:d5:70:8f:95:cf:36:3a:df:8a:b6:85:
44:71:f6:10:b9:d8:7e:c2:aa:ba:b3:b1:0c:6b:27:
d1:f9:68:33:1e:76:26:b5:c5:de:a4:34:36:c3:a6:
9e:1f:94:98:9e:fa:da:fd:db:61:1d:e7:c6:41:ec:
50:e0:f4:d2:de:60:c0:c5:c5:37:da:ab:95:fb:72:
31:29:ed:df:69:8e:4a:9f:af:de:8f:48:63:e5:43:
fc:a3:b7:d9:ba:20:ba:87:b7:8b:a4:a6:ca:7f:ab:
c2:02:7e:ab:cb:3e:61:de:80:cb:83:a4:9d:b4:50:
ac:ff:36:d0:a7:7a:f4:48:8f:f4:4f:52:2b:0d:8c:
42:33:24:73:2e:17:64:24:cb:b9:fc:0a:72:e4:3b:
4e:02:71:2b:8d:ce:31:c5:37:19:05:78:ef:91:19:
6b:3d:aa:fd:0d:65:99:41:45:b1:fa:2f:ef:69:11:
80:17:8d:c9:ec:cf:3d:ee:a9:47:2a:7d:36:7e:84:
d7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:54:11:2A:33:C2:68:00:EB:F8:CB:54:76:75:69:80:D0:AA:0B:CF
X509v3 Authority Key Identifier:
keyid:8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:f7:27:81:5e:78:0e:6b:87:2e:80:2a:01:67:f7:cd:38:e9:
50:93:0f:36:f3:f2:51:19:20:99:47:f9:81:d1:d2:b1:14:52:
1d:66:ea:4a:bd:ea:d7:b5:6d:1e:be:fc:f8:29:4f:2a:c0:36:
4c:3d:da:2b:d2:8e:78:54:5a:45:17:06:7c:71:b4:5f:60:0b:
af:04:01:c8:c1:02:a5:83:e1:6b:9b:7f:08:21:43:24:aa:54:
9a:7f:be:4e:41:82:6d:f9:3e:dd:2c:ad:29:b3:84:65:f8:95:
5b:d7:13:75:84:0a:28:6f:44:11:bf:90:21:40:7e:64:aa:84:
d0:22:5f:03:e5:dd:aa:60:b7:c6:70:db:47:32:ec:2e:b3:55:
59:d0:7d:aa:c7:4e:46:87:23:52:0a:73:ae:a8:d2:c2:90:f1:
58:db:49:ba:bb:59:5e:98:cc:9d:18:3e:ce:59:5a:d6:80:ae:
99:dc:31:b5:84:d0:73:7a:0e:57:b5:0b:ec:c3:4a:82:eb:8f:
a1:b3:8f:a7:55:b5:30:22:e1:e8:82:f2:3d:64:a3:f0:f6:63:
00:52:d5:da:05:1b:ee:8f:b3:d1:22:81:57:8f:74:92:b8:84:
4b:df:ef:bc:39:84:e0:c8:68:18:a5:fe:6b:83:c9:7d:f9:ca:
37:84:e1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:08:24 2025 by rpki-client