Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft
File: JCH_to6rl-JKkGJtkEmL5-1wZvA.mft (raw, json)
Hash identifier: pWVeIjLXUWZotlYHRI1mCDkqkFvYs8bzsQkhtGJQ3rI=
Subject key identifier: 3A:90:94:95:F4:9B:43:7E:A6:A2:2B:C6:BD:76:10:5F:3D:E8:3D:E7
Authority key identifier: 24:21:FF:B6:8E:AB:97:E2:4A:90:62:6D:90:49:8B:E7:ED:70:66:F0
Certificate issuer: /CN=2421ffb68eab97e24a90626d90498be7ed7066f0
Certificate serial: 0199FB7C6CC6A59B633D410540642FE56710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JCH_to6rl-JKkGJtkEmL5-1wZvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 08:00:59 +0000
Manifest this update: Sun 19 Oct 2025 08:00:59 +0000
Manifest next update: Mon 20 Oct 2025 08:00:59 +0000
Files and hashes: 1: JCH_to6rl-JKkGJtkEmL5-1wZvA.crl (hash: MX6rWKgaW/Fak5kPTo8NpDvFDcIwFOC/8rOBWZ6qlb0=)
2: N0X6xiVzqXxKq1FAQhtD_X-LptY.roa (hash: /exbdfoldwGhZ8sHg6pfpGAkHOc1ALsLXny1F95l6KY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JCH_to6rl-JKkGJtkEmL5-1wZvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:6c:c6:a5:9b:63:3d:41:05:40:64:2f:e5:67:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2421ffb68eab97e24a90626d90498be7ed7066f0
Validity
Not Before: Oct 19 08:00:59 2025 GMT
Not After : Oct 20 08:00:59 2025 GMT
Subject: CN=3a909495f49b437ea6a22bc6bd76105f3de83de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:10:4d:c9:87:27:5a:b1:0b:41:a9:19:1b:57:
1e:92:e0:44:95:ed:fe:72:ae:08:dd:76:ca:a1:10:
f4:4e:30:30:44:32:0a:6f:59:86:43:9c:bb:6d:d2:
77:34:41:e4:8a:ec:3f:21:5e:87:00:b2:8a:70:47:
d4:10:55:fc:18:73:0d:d9:1b:8b:f4:9e:49:a4:e5:
0d:a8:3c:0b:20:54:4d:2e:01:85:0b:6b:75:f8:98:
de:fc:6c:8e:e8:15:0c:97:7a:f2:74:60:a4:9f:98:
fd:a6:f8:bf:f1:27:64:3f:f5:bd:83:13:47:84:be:
48:2f:54:a6:40:49:39:af:a2:e8:16:96:7c:04:74:
58:8c:8f:51:e2:4a:67:60:fe:a3:50:d2:00:bc:bb:
76:eb:01:0f:56:8b:a3:bc:d9:31:0a:3a:ab:1c:ae:
90:01:1e:ab:1a:74:3c:68:d5:0b:84:4f:db:10:f8:
87:85:fa:2d:87:93:22:5b:4f:c6:37:33:4e:eb:88:
29:8a:a0:ba:60:c1:7c:38:fa:f7:ce:09:d2:52:63:
a9:6b:54:18:7c:44:68:1b:58:c6:3b:63:d7:eb:a0:
a0:33:2f:c4:61:e2:9c:a7:69:53:66:b0:95:b5:17:
cd:3e:8b:06:0c:5e:cc:14:6f:2b:93:c7:5a:dd:f3:
60:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:90:94:95:F4:9B:43:7E:A6:A2:2B:C6:BD:76:10:5F:3D:E8:3D:E7
X509v3 Authority Key Identifier:
keyid:24:21:FF:B6:8E:AB:97:E2:4A:90:62:6D:90:49:8B:E7:ED:70:66:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JCH_to6rl-JKkGJtkEmL5-1wZvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:fa:45:24:b5:66:a2:dc:36:c4:10:5a:64:85:c5:02:e0:0b:
6b:e8:bd:d3:8b:55:c8:36:2c:90:1f:77:4f:c9:31:78:db:4b:
e1:ed:04:41:dc:a8:96:92:07:d9:10:0d:a4:4c:97:25:8a:0a:
c3:a6:e3:f4:1c:3e:0a:b4:85:b7:83:cd:70:bc:b9:d2:73:bf:
43:38:72:17:b8:99:a1:61:20:45:4d:55:81:25:d1:36:6b:a2:
50:ea:45:54:87:30:10:69:2d:ee:53:bf:7c:97:d0:ea:8f:1a:
ff:17:b8:92:e1:f8:36:a4:9e:d8:23:68:cd:fc:b6:02:fc:cc:
41:7a:e6:a3:28:bd:6d:48:f1:40:44:0e:7e:0e:bf:3f:88:b9:
d4:5b:b2:7e:b6:ee:55:c9:29:45:34:35:b6:02:55:19:7e:90:
89:5e:ff:e8:64:21:bc:6f:3c:ad:90:7e:02:68:b8:72:dc:2d:
d8:43:15:2f:05:b9:cd:05:76:41:31:a5:51:6d:0d:99:ef:c5:
17:36:9a:76:b3:79:e8:d1:db:b8:12:12:1e:c1:fb:e4:5b:52:
65:ce:b6:25:8e:b9:2b:10:dc:1e:83:93:82:b9:29:ef:9d:6c:
23:7c:98:96:84:00:79:58:e1:0f:56:92:cc:2a:07:3f:e5:c8:
b3:fa:aa:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:01 2025 by rpki-client