Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
File: jckcUL_5ygWebjiy4MfrhSpjC7o.mft (raw, json)
Hash identifier: b09QUNs8fOTrtmzdbnPF4V053SRy6PoZlSeTbSs6oXk=
Subject key identifier: 65:2D:56:4C:8A:FF:0E:C3:F7:65:7B:1F:9C:9B:51:31:D5:C7:18:0C
Authority key identifier: 8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA
Certificate issuer: /CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
Certificate serial: 019A50076CDEADBEDD47D96E90A0A48A3161
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
Manifest number: 165F
Signing time: Tue 04 Nov 2025 18:00:55 +0000
Manifest this update: Tue 04 Nov 2025 18:00:55 +0000
Manifest next update: Wed 05 Nov 2025 18:00:55 +0000
Files and hashes: 1: jckcUL_5ygWebjiy4MfrhSpjC7o.crl (hash: pFXf5PymGGypU+X9ynC5pEuzDN3zBcYEvkzcJsKW6rk=)
2: kPouSigkCfrRHoMg7De2TJT88UA.roa (hash: t8cgJtzKMebDlU5SK4Js6mv7oMUSZDhw9bql1pMcUmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:6c:de:ad:be:dd:47:d9:6e:90:a0:a4:8a:31:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
Validity
Not Before: Nov 4 18:00:55 2025 GMT
Not After : Nov 5 18:00:55 2025 GMT
Subject: CN=652d564c8aff0ec3f7657b1f9c9b5131d5c7180c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1f:f5:57:4c:15:ae:d1:42:9f:f0:1e:15:25:
3e:23:c9:00:68:01:5c:6a:42:16:62:49:c1:00:e8:
d5:55:40:35:5c:8d:9b:26:2b:f7:d8:f9:81:5b:f9:
c8:1f:d7:75:fc:7c:b4:4f:9d:02:94:64:8e:77:f5:
86:17:46:29:4e:c9:ec:11:48:10:8a:b1:b0:2c:0d:
57:39:5e:fc:50:f3:94:69:5b:52:fa:57:b8:ef:0e:
28:51:06:82:b8:73:04:7e:3b:31:97:15:ef:77:c4:
64:d6:1d:5e:62:5f:3e:2f:62:53:8a:7c:2c:6d:58:
f4:0c:82:55:6c:6d:74:aa:ec:4b:f0:7a:8a:54:dd:
a5:74:9b:a7:ee:87:8a:b3:f2:f5:71:fe:f9:60:1b:
c3:8c:e9:d4:0c:8e:84:63:22:be:8b:3e:95:10:38:
e8:b6:08:d1:f2:a5:a9:38:a0:4f:e4:90:bd:69:ac:
c2:e8:75:cc:96:00:c1:8d:7a:5f:25:65:1f:8e:45:
7e:1f:84:5d:c1:bf:4e:2b:27:6a:fd:1e:5c:a5:ae:
39:e4:9c:76:51:66:6e:4c:0d:f0:a1:1d:96:27:25:
8d:c3:98:27:f9:44:ee:e8:45:83:92:1c:5d:b0:5f:
97:30:06:95:14:48:a1:aa:cc:3a:c4:bd:a0:1f:42:
44:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2D:56:4C:8A:FF:0E:C3:F7:65:7B:1F:9C:9B:51:31:D5:C7:18:0C
X509v3 Authority Key Identifier:
keyid:8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:3f:75:ef:00:a6:e6:5e:e3:8e:59:04:d0:2a:2e:fe:3b:9e:
7d:3a:05:c3:80:3d:01:7c:21:a0:3a:d5:1c:82:92:60:7e:b4:
4e:94:07:a1:99:e2:76:c1:77:51:4f:7e:ee:e4:1b:b4:fc:74:
0c:02:2b:6c:47:7b:5a:46:3a:bb:68:5d:2a:2b:f3:79:36:61:
a4:23:78:6f:df:8b:64:49:43:5c:cd:f4:69:7f:1b:0f:f7:4f:
7a:4a:51:19:98:4f:d9:28:1d:25:4e:82:7f:0e:d8:e5:82:79:
80:37:4f:e6:11:44:3f:b5:17:a0:32:9d:d6:13:c5:25:d5:19:
73:8f:51:6d:2a:20:83:67:b5:66:f2:fb:e4:63:db:20:8f:99:
86:52:04:82:6f:4a:da:36:c3:12:89:2f:93:b1:09:bc:ca:bf:
43:59:5b:49:0f:02:c9:07:59:ef:36:fc:10:82:78:48:b7:e9:
71:ef:b2:9d:e1:ff:8e:63:95:9a:57:92:d7:2a:11:b5:ec:61:
1f:c3:fa:6d:87:57:3b:d4:40:78:eb:c9:77:96:6d:e9:8e:26:
ca:ec:ee:c5:da:df:f7:f5:2f:25:ef:98:be:d1:4a:e6:81:c4:
93:84:58:a6:bc:16:eb:e3:ad:36:e2:da:0f:39:da:d8:27:54:
1f:52:92:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:33:47 2025 by rpki-client