Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
File: JRXoeSpCT_cswXkpeOLNTNvtpNA.mft (raw, json)
Hash identifier: RyHf+LOIkQTkGYLasS7fHd4g8KBd0L0BuX63qr+AmGc=
Subject key identifier: 20:EE:85:3B:AA:5C:BF:37:99:52:0C:D0:66:E1:97:DF:E4:A6:91:65
Authority key identifier: 25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
Certificate issuer: /CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Certificate serial: 019A00A30C44651FA8A8BBBB620C9D7B187E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
Manifest number: 058B
Signing time: Mon 20 Oct 2025 08:01:16 +0000
Manifest this update: Mon 20 Oct 2025 08:01:16 +0000
Manifest next update: Tue 21 Oct 2025 08:01:16 +0000
Files and hashes: 1: JRXoeSpCT_cswXkpeOLNTNvtpNA.crl (hash: 1MBdj6V71KUr/SyFCfj9rJZo/bvCrrCetlF3Pxts6Ks=)
2: ZvBiJJYcsEKcCx0rdG5hcLS4urA.roa (hash: PGtf/dItV8nV0ht7Z+5ua8GBh0EMsKhRF6MMe1D1HlA=)
3: wj466oTxwmfvmkHt-zRaSV43cC0.roa (hash: 1ZjlfVKdCsd3URcSQeRSOCOntRVpDQKf0IcTynD3LQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:0c:44:65:1f:a8:a8:bb:bb:62:0c:9d:7b:18:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Validity
Not Before: Oct 20 08:01:16 2025 GMT
Not After : Oct 21 08:01:16 2025 GMT
Subject: CN=20ee853baa5cbf3799520cd066e197dfe4a69165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6f:e4:75:dd:2b:12:ae:f4:f2:c3:d6:b8:12:
0e:27:6e:f8:07:71:9b:6f:d3:cb:81:90:7d:0d:a2:
ee:31:4e:9e:36:ba:d8:71:d0:2c:3d:b6:7b:5e:9a:
1b:16:da:2b:e0:98:9d:14:cf:75:ee:b0:d5:c0:ac:
ce:57:63:a4:bc:bd:b8:c4:b2:db:97:70:87:24:a6:
6d:ac:f0:54:72:e7:8f:5c:ee:80:f6:2a:6f:b7:b4:
68:43:6c:28:b8:6f:6f:a7:a3:46:7b:d3:53:90:bf:
2c:fd:d0:b8:ed:3f:ef:de:61:2c:e9:ff:63:4c:bc:
c5:0b:66:da:e3:a1:da:67:78:6d:d7:e9:af:81:94:
5a:9d:e6:b7:7e:59:5a:f1:6a:0e:62:0e:ec:00:59:
c2:00:c7:6e:bb:15:fc:53:ad:e6:87:6a:41:17:4f:
42:7f:61:7b:ed:b6:c0:9a:2e:28:df:b1:e0:97:6f:
2d:b7:3a:27:45:77:e1:d8:40:5f:58:8b:a7:07:42:
c6:7e:0c:32:b0:b7:af:0f:91:57:f6:2b:02:d7:49:
66:a0:dd:1d:31:f6:f9:81:99:35:58:7c:9b:8a:ec:
09:b6:7f:8b:6b:ed:5f:a2:74:41:01:bc:6d:bc:b6:
c5:d0:cb:7c:a5:7a:b5:01:c5:f1:01:69:0e:1f:ab:
48:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:EE:85:3B:AA:5C:BF:37:99:52:0C:D0:66:E1:97:DF:E4:A6:91:65
X509v3 Authority Key Identifier:
keyid:25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:51:39:c5:9c:53:68:e2:37:6b:49:67:e6:fc:be:25:4e:cf:
0f:3d:38:3c:12:98:42:da:7d:5e:fc:c3:ae:da:07:a5:38:bc:
98:b4:2f:0b:15:20:5b:3d:4c:7a:8c:c5:62:9d:dc:49:bc:8a:
f0:16:14:c1:b1:60:f6:11:16:fc:d6:fe:0f:e7:6f:08:8a:b5:
45:f5:54:63:30:6f:2f:14:a9:71:9c:24:a5:22:0d:c0:02:f0:
9c:34:a0:66:bc:c8:fc:ef:49:8a:07:a7:87:93:d1:6e:0f:71:
ae:d7:c6:0a:2d:5c:45:61:7b:55:9f:bf:4b:62:4c:93:35:41:
de:9b:52:2f:4e:b6:fa:65:bf:89:03:c4:67:c8:2b:4e:10:f7:
c8:ca:49:57:8c:de:48:ad:e0:d0:37:2a:f7:97:12:a3:2b:9b:
b5:c1:89:b6:cb:e7:62:2c:63:54:77:84:c1:60:ec:c4:2a:76:
bb:0e:5d:cd:48:81:90:e3:50:2c:99:3c:9a:04:f6:53:fc:3c:
d3:5f:cb:cc:79:43:37:f1:83:92:43:67:6f:94:e2:52:5d:2c:
4d:6d:3b:1d:ab:74:59:da:cc:cc:10:80:ea:43:fb:c8:4d:bc:
ec:25:6e:27:44:22:3d:31:8e:e2:9d:eb:30:4c:cf:bc:95:15:
77:c9:95:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:27:06 2025 by rpki-client