
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft
File: JCH_to6rl-JKkGJtkEmL5-1wZvA.mft (raw, json)
Hash identifier: p7qznlgVdaahWP0IYgK9BqxUaAvyCRQZVGK+JyLDHdw=
Subject key identifier: E4:A7:6A:0B:DE:37:C7:1F:54:13:68:6E:19:0F:39:A7:D1:99:35:25
Authority key identifier: 24:21:FF:B6:8E:AB:97:E2:4A:90:62:6D:90:49:8B:E7:ED:70:66:F0
Certificate issuer: /CN=2421ffb68eab97e24a90626d90498be7ed7066f0
Certificate serial: 0198548DA773371C0F1FF2069F0258DC95B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JCH_to6rl-JKkGJtkEmL5-1wZvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft
Manifest number: 1605
Signing time: Tue 29 Jul 2025 05:00:26 +0000
Manifest this update: Tue 29 Jul 2025 05:00:26 +0000
Manifest next update: Wed 30 Jul 2025 05:00:26 +0000
Files and hashes: 1: JCH_to6rl-JKkGJtkEmL5-1wZvA.crl (hash: t9kRuKcuVWTxzsE1atN1UBZtZFjz9UXdVcULEJ6Xr9s=)
2: N0X6xiVzqXxKq1FAQhtD_X-LptY.roa (hash: /exbdfoldwGhZ8sHg6pfpGAkHOc1ALsLXny1F95l6KY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JCH_to6rl-JKkGJtkEmL5-1wZvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:8d:a7:73:37:1c:0f:1f:f2:06:9f:02:58:dc:95:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2421ffb68eab97e24a90626d90498be7ed7066f0
Validity
Not Before: Jul 29 05:00:26 2025 GMT
Not After : Jul 30 05:00:26 2025 GMT
Subject: CN=e4a76a0bde37c71f5413686e190f39a7d1993525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:03:86:37:21:9a:fa:53:0f:b4:54:c2:9b:aa:
49:6c:86:b1:ad:fc:8e:b4:c8:29:4a:76:a0:14:60:
2d:49:a2:70:8f:de:ae:b3:69:f5:73:54:cb:ea:a1:
84:62:79:be:17:d3:f4:37:fe:71:85:c5:b0:75:37:
59:8b:2e:09:e4:2e:02:eb:d1:65:39:e5:a7:1c:5a:
2a:b2:d5:e0:ab:1a:76:7a:b4:14:66:cc:24:b3:2f:
3b:4a:1d:c1:8a:31:07:ca:40:0e:23:43:37:cf:1d:
99:3c:ff:37:e9:92:b8:32:0f:41:c4:17:47:d2:1d:
54:dd:c2:e4:c8:4e:e4:1f:31:4d:da:76:75:66:f8:
61:0a:dc:41:b9:5e:0d:ac:5f:06:70:c1:07:68:e3:
8d:6c:59:b1:3d:1b:15:fb:1f:33:eb:18:f9:f6:b6:
b4:23:f8:dc:b3:a1:67:d0:6f:fa:d0:d4:23:71:5e:
9e:d4:05:dc:7d:4c:6f:87:a6:67:4e:bf:3a:2a:f3:
b1:fa:fa:ab:9b:9a:d1:27:e6:d5:0d:68:43:1f:9f:
2d:39:25:24:52:af:5b:1c:9a:d8:7b:3b:f7:8a:24:
45:3e:f1:d3:e0:d8:75:99:bf:3f:97:9f:3f:10:ec:
82:36:88:28:33:5c:5c:f9:21:2c:0a:0b:40:62:a5:
3d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A7:6A:0B:DE:37:C7:1F:54:13:68:6E:19:0F:39:A7:D1:99:35:25
X509v3 Authority Key Identifier:
keyid:24:21:FF:B6:8E:AB:97:E2:4A:90:62:6D:90:49:8B:E7:ED:70:66:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JCH_to6rl-JKkGJtkEmL5-1wZvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ae020b-e0d7-451d-bb05-d908faf34ef8/1/JCH_to6rl-JKkGJtkEmL5-1wZvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:60:d7:17:0b:39:06:ba:11:70:ac:90:d4:72:19:1a:9a:d6:
55:8a:65:3d:5d:11:20:6e:bd:05:78:d3:cb:f4:03:50:e7:a9:
7f:d8:f1:cf:9e:44:f1:95:ee:48:62:1b:a2:ee:15:7e:03:95:
53:aa:de:c5:8d:b5:b7:f3:38:9b:4d:af:af:d0:c6:ba:46:63:
72:bb:3e:35:95:46:3b:6d:b6:7f:8b:78:62:19:b4:e8:fc:3f:
3e:f2:22:d2:4d:58:10:25:fd:ce:54:6e:02:d8:32:da:b9:87:
9a:c9:84:2f:90:fe:ae:81:df:80:e5:e4:88:42:90:cb:22:f6:
34:2b:9b:2f:cd:ca:49:b0:ae:c4:ef:37:25:dd:8c:1f:df:8b:
f5:ef:bc:db:a0:81:58:39:59:dc:21:9f:6e:de:7b:5b:f0:d6:
60:aa:3a:4c:27:62:e4:13:80:88:e7:b6:91:76:99:8b:a0:74:
c1:6f:16:3d:0b:44:53:01:a2:44:9f:25:60:1c:83:e9:73:f0:
d5:78:3c:5e:6a:b3:45:35:f3:96:00:4e:bb:d0:d9:a3:ac:0d:
e8:cc:9a:a7:73:07:a5:05:99:3d:26:32:f7:49:5b:06:d8:ab:
44:6a:05:66:35:b1:98:e3:1c:ab:b8:ac:54:f4:2a:49:97:a2:
f4:3a:71:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:30:20 2025 by rpki-client