Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
File: jckcUL_5ygWebjiy4MfrhSpjC7o.mft (raw, json)
Hash identifier: 94+/ueQq9J/1YYvxYczDADxHcLdenihvRMb5663q9K0=
Subject key identifier: 66:DB:87:3C:2B:DA:1E:B0:3F:EF:9B:99:A2:EC:B4:AA:72:B9:89:3D
Authority key identifier: 8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA
Certificate issuer: /CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
Certificate serial: 0197B7B311502DF8E00AA28643962894F487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
Manifest number: 1507
Signing time: Sat 28 Jun 2025 18:00:55 +0000
Manifest this update: Sat 28 Jun 2025 18:00:55 +0000
Manifest next update: Sun 29 Jun 2025 18:00:55 +0000
Files and hashes: 1: jckcUL_5ygWebjiy4MfrhSpjC7o.crl (hash: WQT4+6wxdJ90MdxIOEFjAeBq3dkB/AnQTXfKktMSf2M=)
2: kPouSigkCfrRHoMg7De2TJT88UA.roa (hash: t8cgJtzKMebDlU5SK4Js6mv7oMUSZDhw9bql1pMcUmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:11:50:2d:f8:e0:0a:a2:86:43:96:28:94:f4:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
Validity
Not Before: Jun 28 18:00:55 2025 GMT
Not After : Jun 29 18:00:55 2025 GMT
Subject: CN=66db873c2bda1eb03fef9b99a2ecb4aa72b9893d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3b:b8:2b:54:70:02:94:44:8f:74:ff:f9:e7:
45:53:8e:52:bb:ce:39:b2:f2:43:94:2c:f1:a7:42:
f5:4d:c1:46:a5:6e:49:cb:76:14:64:cd:1b:e2:ec:
aa:03:9b:88:0b:2f:e3:eb:a2:39:af:42:07:34:e2:
4e:cd:f5:0a:93:6f:39:0b:0c:43:c2:8b:56:f7:e6:
2f:17:ca:fc:e7:cb:ea:6a:2b:5e:3b:e9:cd:d8:a8:
0e:97:77:ad:6a:1d:bb:7a:7c:ff:3d:bd:a3:c5:03:
c4:7d:04:4a:ec:a2:ef:81:89:88:05:02:66:e1:6c:
df:53:17:fd:29:c6:ee:33:b9:6e:ed:41:cd:64:7b:
1e:23:c1:c1:2c:c4:f0:68:8b:50:72:3d:07:a8:9e:
14:11:16:81:8c:3f:0a:11:93:be:75:5d:1f:8e:83:
8a:9f:9d:05:b6:04:40:5a:3d:c0:5d:ef:16:8c:5f:
76:c5:e8:52:78:30:c9:35:1d:2a:1d:f9:da:54:2d:
ad:1e:0c:0f:17:76:57:09:2a:35:97:cb:37:20:2d:
47:13:c6:84:bb:ce:d3:23:72:fc:42:ec:6b:9c:33:
f2:fc:df:dc:54:e8:0e:b2:0f:94:1b:46:9c:fa:61:
f9:29:08:87:12:46:0a:86:9f:0f:8c:97:1a:36:28:
dc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:DB:87:3C:2B:DA:1E:B0:3F:EF:9B:99:A2:EC:B4:AA:72:B9:89:3D
X509v3 Authority Key Identifier:
keyid:8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:2c:81:7d:57:df:a6:82:75:3b:b5:38:b0:b3:41:71:d8:56:
68:28:d8:8e:46:7c:66:a2:c5:2a:67:a2:3d:52:78:e6:73:3b:
d1:14:26:49:de:6d:b7:c6:5d:db:5a:c2:f6:1d:d4:8c:ee:67:
aa:56:66:7f:04:ba:16:98:c6:11:41:11:86:cc:94:ea:d5:c0:
f3:53:e5:50:da:9e:70:6d:52:96:a4:46:b2:72:a5:f0:45:d3:
7c:53:b1:ed:04:4f:1c:4a:8d:91:1f:5e:eb:fe:fc:60:c0:bc:
c9:00:64:1e:4a:69:6d:4b:72:6e:05:2f:04:2f:d0:54:8b:d6:
8e:f9:e4:b4:77:18:84:9b:26:e1:69:d6:85:ee:9a:a2:bb:f6:
c2:40:c6:d4:ad:35:27:e0:fb:9f:c5:51:9b:95:e1:96:2d:5d:
5a:2d:e3:cd:e2:6b:9e:34:ef:7d:b6:49:94:33:a2:73:64:8c:
0c:bf:44:2e:61:20:31:e2:d6:17:60:14:28:0e:2f:52:c9:70:
b2:e5:d0:12:59:3b:c8:f7:a9:73:5e:11:85:59:0f:3f:b0:d8:
69:2a:12:14:4a:50:64:48:d3:32:68:eb:59:a2:bd:d0:cc:bc:
92:17:91:86:f2:94:38:27:8a:35:74:8b:c0:01:3a:ad:76:e4:
5a:5b:d1:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3sxFQLfjgCqKGQ5YolPSHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkYzkxYzUwYmZmOWNhMDU5ZTZlMzhiMmUwYzdlYjg1MmE2
MzBiYmEwHhcNMjUwNjI4MTgwMDU1WhcNMjUwNjI5MTgwMDU1WjAzMTEwLwYDVQQD
Eyg2NmRiODczYzJiZGExZWIwM2ZlZjliOTlhMmVjYjRhYTcyYjk4OTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsju4K1RwApREj3T/+edFU45Su845
svJDlCzxp0L1TcFGpW5Jy3YUZM0b4uyqA5uICy/j66I5r0IHNOJOzfUKk285CwxD
wotW9+YvF8r858vqaiteO+nN2KgOl3etah27enz/Pb2jxQPEfQRK7KLvgYmIBQJm
4WzfUxf9KcbuM7lu7UHNZHseI8HBLMTwaItQcj0HqJ4UERaBjD8KEZO+dV0fjoOK
n50FtgRAWj3AXe8WjF92xehSeDDJNR0qHfnaVC2tHgwPF3ZXCSo1l8s3IC1HE8aE
u87TI3L8QuxrnDPy/N/cVOgOsg+UG0ac+mH5KQiHEkYKhp8PjJcaNijcmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGbbhzwr2h6wP++bmaLstKpyuYk9MB8GA1UdIwQY
MBaAFI3JHFC/+coFnm44suDH64UqYwu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamNrY1VMXzV5Z1dlYmppeTRNZnJoU3BqQzdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9jNjhkNGQtOGI2NC00ZTc1LTllNTQt
NTczMDlkZjY5NjQyLzEvamNrY1VMXzV5Z1dlYmppeTRNZnJoU3BqQzdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9jNjhkNGQtOGI2NC00ZTc1LTllNTQtNTczMDlkZjY5NjQy
LzEvamNrY1VMXzV5Z1dlYmppeTRNZnJoU3BqQzdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKSyBfVff
poJ1O7U4sLNBcdhWaCjYjkZ8ZqLFKmeiPVJ45nM70RQmSd5tt8Zd21rC9h3UjO5n
qlZmfwS6FpjGEUERhsyU6tXA81PlUNqecG1SlqRGsnKl8EXTfFOx7QRPHEqNkR9e
6/78YMC8yQBkHkppbUtybgUvBC/QVIvWjvnktHcYhJsm4WnWhe6aorv2wkDG1K01
J+D7n8VRm5Xhli1dWi3jzeJrnjTvfbZJlDOic2SMDL9ELmEgMeLWF2AUKA4vUslw
suXQElk7yPepc14RhVkPP7DYaSoSFEpQZEjTMmjrWaK90My8kheRhvKUOCeKNXSL
wAE6rXbkWlvRwg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:00:34 2025 by rpki-client