Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
File: jckcUL_5ygWebjiy4MfrhSpjC7o.mft (raw, json)
Hash identifier: 2cAyPvIdMhzhOMnrcbkw4+tDHHywJ0BUteg0dFsiWgc=
Subject key identifier: 2C:9A:72:97:D7:E1:C0:56:6D:7F:63:F4:14:23:9B:0D:83:83:4F:34
Authority key identifier: 8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA
Certificate issuer: /CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
Certificate serial: 0199FB0EBE28EF7381EAF3A5E244B36FBC34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
Manifest number: 1633
Signing time: Sun 19 Oct 2025 06:01:11 +0000
Manifest this update: Sun 19 Oct 2025 06:01:11 +0000
Manifest next update: Mon 20 Oct 2025 06:01:11 +0000
Files and hashes: 1: jckcUL_5ygWebjiy4MfrhSpjC7o.crl (hash: YgvMWzoN3IxARUczHHbPRjC8YYnb4JmmOYbgjUopbyQ=)
2: kPouSigkCfrRHoMg7De2TJT88UA.roa (hash: t8cgJtzKMebDlU5SK4Js6mv7oMUSZDhw9bql1pMcUmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:be:28:ef:73:81:ea:f3:a5:e2:44:b3:6f:bc:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
Validity
Not Before: Oct 19 06:01:11 2025 GMT
Not After : Oct 20 06:01:11 2025 GMT
Subject: CN=2c9a7297d7e1c0566d7f63f414239b0d83834f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:cb:08:8f:30:33:ec:5b:28:06:28:9a:41:10:
43:92:74:55:55:dd:af:2f:35:1c:a5:ed:a2:65:98:
b0:e7:e1:c9:dc:fc:b2:65:48:c6:86:61:0d:bf:8c:
2a:46:c7:47:2f:74:51:a2:b9:dc:4e:c3:a9:13:dd:
0b:82:e5:98:2e:ac:7a:bd:48:10:62:bc:09:b0:12:
65:c7:da:7c:3f:bc:7d:cb:cf:dd:cb:34:a4:85:c4:
b4:50:65:7b:2a:8d:66:fd:56:ac:ee:d7:04:1f:d2:
13:1f:e0:ba:2c:18:9f:fa:50:88:7b:00:65:af:c6:
22:63:15:c7:62:7c:75:70:20:9b:a4:16:3d:6a:31:
7e:d3:d3:73:4c:a5:27:58:51:b1:80:3d:f0:e2:c3:
e5:51:b9:4e:a9:1d:45:fa:e8:72:df:6a:66:9d:01:
0b:25:c9:e9:67:60:99:f8:e9:4b:7e:b0:7a:b2:1e:
fd:67:1d:a4:12:9b:23:68:36:1d:e7:c7:65:fb:2e:
36:94:0d:56:58:6f:8b:b4:ef:30:5c:f2:38:31:1e:
13:bb:69:2f:cf:4c:7a:b5:4d:93:ea:78:1a:57:11:
79:5a:0f:da:58:c9:ec:af:59:83:c8:b3:95:26:72:
44:50:6e:ba:d1:77:b8:19:e3:87:b9:99:88:e3:9e:
70:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9A:72:97:D7:E1:C0:56:6D:7F:63:F4:14:23:9B:0D:83:83:4F:34
X509v3 Authority Key Identifier:
keyid:8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:7e:37:e4:08:4a:c7:75:cc:a1:e8:7a:8e:d1:84:02:3d:e6:
38:11:48:75:0e:2a:14:50:0a:d0:a2:f2:67:2d:0e:e6:f2:cf:
cd:2b:80:d8:f9:44:b8:f6:65:97:9c:9a:11:bc:0e:e1:73:36:
52:38:60:97:b2:03:fe:77:67:e8:9d:90:9a:63:f9:3d:ff:ad:
0c:19:8e:74:8e:57:72:54:fd:34:eb:ca:60:bc:26:03:1f:9d:
1a:bd:b8:af:cf:4e:63:9b:c2:25:f3:2f:d2:66:eb:74:30:78:
a3:45:d3:12:8e:de:fd:e3:8a:cf:ad:e0:e5:a2:d7:8d:b8:15:
f1:ba:80:a7:13:44:b1:0b:05:78:e3:e1:66:82:93:89:ac:8c:
b3:51:cd:69:58:c1:65:18:5f:48:84:e4:7c:da:c3:6a:7b:06:
8d:51:ca:80:16:3f:8b:87:10:a5:e6:0e:3e:36:81:8c:ab:a3:
98:88:56:4e:c3:56:8c:03:b5:15:86:73:4f:68:45:cf:c9:6a:
6b:e0:c7:6d:7c:8e:bb:37:57:bb:c8:1d:65:11:86:61:72:38:
b4:7e:03:88:55:9c:67:b7:44:06:b0:8f:f5:a1:6c:44:46:22:
a9:4f:a3:50:69:f9:86:a5:66:10:eb:ff:8a:0e:6d:5f:a8:0c:
8f:3d:63:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:40 2025 by rpki-client