Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
File: JRXoeSpCT_cswXkpeOLNTNvtpNA.mft (raw, json)
Hash identifier: lGtkwc1JTpy2vQe+Za2dqcrWqqToRlcuBsvATi4N5nw=
Subject key identifier: 7B:4E:B7:FD:0B:48:7E:A3:9B:24:03:0D:81:3A:B6:A9:40:A3:4C:E7
Authority key identifier: 25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
Certificate issuer: /CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Certificate serial: 01982B5AEB4DBEF2924E86EE397365645D7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
Manifest number: 0498
Signing time: Mon 21 Jul 2025 05:00:35 +0000
Manifest this update: Mon 21 Jul 2025 05:00:35 +0000
Manifest next update: Tue 22 Jul 2025 05:00:35 +0000
Files and hashes: 1: JRXoeSpCT_cswXkpeOLNTNvtpNA.crl (hash: AN8sw+uDmHWq9cTwa+g5EkyZoZDlyrOC59vTXNKYm9M=)
2: ZvBiJJYcsEKcCx0rdG5hcLS4urA.roa (hash: PGtf/dItV8nV0ht7Z+5ua8GBh0EMsKhRF6MMe1D1HlA=)
3: wj466oTxwmfvmkHt-zRaSV43cC0.roa (hash: 1ZjlfVKdCsd3URcSQeRSOCOntRVpDQKf0IcTynD3LQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2b:5a:eb:4d:be:f2:92:4e:86:ee:39:73:65:64:5d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Validity
Not Before: Jul 21 05:00:35 2025 GMT
Not After : Jul 22 05:00:35 2025 GMT
Subject: CN=7b4eb7fd0b487ea39b24030d813ab6a940a34ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:88:79:32:d9:f7:da:b2:e7:d2:ed:4e:f2:3a:
57:30:e6:67:12:07:39:65:8d:7f:0c:4a:11:28:0a:
b8:c3:53:42:8f:24:ae:3d:c2:50:d0:11:a8:d0:de:
bf:29:a3:c1:bc:8b:46:44:c7:ae:8c:d0:f8:44:6f:
7e:2d:0a:46:56:f2:25:1c:00:c9:06:f2:33:9c:fa:
bf:82:97:cb:83:b9:a9:19:b0:f1:23:f9:0f:a3:10:
9c:01:32:b1:82:77:e4:1a:a5:f9:45:c4:96:7c:3c:
68:47:31:45:f3:98:3d:77:3b:b4:95:fd:70:4f:55:
13:9a:5b:7c:3f:7c:70:c6:c9:67:02:10:68:55:f1:
cf:8b:2f:02:8d:71:92:79:48:99:ae:40:1d:67:2c:
b0:70:19:6a:4a:da:81:ab:23:80:0e:3c:ec:02:12:
0a:26:45:c6:00:a5:dc:c9:d7:2d:91:f2:7d:ff:b1:
07:f9:c6:cd:93:92:95:2a:ba:24:42:44:25:9a:81:
ae:b4:12:4a:4d:fc:66:ca:4d:ee:eb:47:9f:53:ab:
56:a0:37:d4:68:16:69:2c:39:80:15:b4:81:fc:5c:
41:8c:c8:a2:a4:30:51:6a:83:9b:e2:30:32:c2:b2:
71:27:92:04:53:81:46:b9:06:02:e6:52:1d:2e:e0:
e7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4E:B7:FD:0B:48:7E:A3:9B:24:03:0D:81:3A:B6:A9:40:A3:4C:E7
X509v3 Authority Key Identifier:
keyid:25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:31:80:59:be:4f:42:a5:89:c5:5f:4f:0f:8a:94:b2:73:8f:
bc:2b:54:d5:55:b9:95:29:7a:77:59:4f:a9:34:c0:e7:1c:c5:
d2:94:aa:2a:65:86:36:0d:99:58:3f:d6:58:c3:e1:2c:e5:6c:
18:79:0d:d8:22:52:db:90:be:73:b6:4f:bd:15:8e:b4:79:24:
2a:17:9d:68:ad:ef:0c:b0:6e:60:22:d2:6a:88:89:4b:64:92:
ec:63:77:1a:23:43:86:a3:95:d4:fb:b7:23:76:a1:31:3e:4a:
ab:1a:20:bf:e9:7a:5b:f0:30:a0:2f:b6:06:f7:73:4c:3b:fc:
28:42:33:5e:3c:40:32:a1:7a:b1:c7:01:7b:6d:02:bf:86:96:
51:02:d3:05:ee:fc:45:df:39:63:f9:85:5d:09:58:99:b9:9a:
28:a3:0b:6d:f2:96:eb:23:14:b0:6d:d6:47:47:9b:fd:33:38:
86:7b:51:48:02:6d:36:37:53:5e:01:41:37:63:90:30:32:ce:
6d:a7:a4:ed:f8:ff:ab:13:98:20:f6:a0:5a:89:4a:16:fb:c0:
aa:6e:9c:13:29:ac:bc:4e:1f:05:bb:59:7a:28:22:af:d8:bc:
a7:a6:9d:74:89:7f:e3:18:7e:85:ea:6f:06:98:79:8f:60:ab:
76:5e:1c:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgrWutNvvKSTobuOXNlZF18MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1MTVlODc5MmE0MjRmZjcyY2MxNzkyOTc4ZTJjZDRjZGJl
ZGE0ZDAwHhcNMjUwNzIxMDUwMDM1WhcNMjUwNzIyMDUwMDM1WjAzMTEwLwYDVQQD
Eyg3YjRlYjdmZDBiNDg3ZWEzOWIyNDAzMGQ4MTNhYjZhOTQwYTM0Y2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYh5Mtn32rLn0u1O8jpXMOZnEgc5
ZY1/DEoRKAq4w1NCjySuPcJQ0BGo0N6/KaPBvItGRMeujND4RG9+LQpGVvIlHADJ
BvIznPq/gpfLg7mpGbDxI/kPoxCcATKxgnfkGqX5RcSWfDxoRzFF85g9dzu0lf1w
T1UTmlt8P3xwxslnAhBoVfHPiy8CjXGSeUiZrkAdZyywcBlqStqBqyOADjzsAhIK
JkXGAKXcydctkfJ9/7EH+cbNk5KVKrokQkQlmoGutBJKTfxmyk3u60efU6tWoDfU
aBZpLDmAFbSB/FxBjMiipDBRaoOb4jAywrJxJ5IEU4FGuQYC5lIdLuDnfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHtOt/0LSH6jmyQDDYE6tqlAo0znMB8GA1UdIwQY
MBaAFCUV6HkqQk/3LMF5KXjizUzb7aTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlJYb2VTcENUX2Nzd1hrcGVPTE5UTnZ0cE5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8zZDBmNDAtYTdkZC00Njg5LWJjMzIt
OWVlZDlkNzVjMGQxLzEvSlJYb2VTcENUX2Nzd1hrcGVPTE5UTnZ0cE5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8zZDBmNDAtYTdkZC00Njg5LWJjMzItOWVlZDlkNzVjMGQx
LzEvSlJYb2VTcENUX2Nzd1hrcGVPTE5UTnZ0cE5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGzGAWb5P
QqWJxV9PD4qUsnOPvCtU1VW5lSl6d1lPqTTA5xzF0pSqKmWGNg2ZWD/WWMPhLOVs
GHkN2CJS25C+c7ZPvRWOtHkkKhedaK3vDLBuYCLSaoiJS2SS7GN3GiNDhqOV1Pu3
I3ahMT5Kqxogv+l6W/AwoC+2BvdzTDv8KEIzXjxAMqF6sccBe20Cv4aWUQLTBe78
Rd85Y/mFXQlYmbmaKKMLbfKW6yMUsG3WR0eb/TM4hntRSAJtNjdTXgFBN2OQMDLO
baek7fj/qxOYIPagWolKFvvAqm6cEymsvE4fBbtZeigir9i8p6addIl/4xh+hepv
Bph5j2Crdl4cpw==
-----END CERTIFICATE-----
Generated at Mon Jul 21 07:25:03 2025 by rpki-client