Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
File: jckcUL_5ygWebjiy4MfrhSpjC7o.mft (raw, json)
Hash identifier: IKfwID/4++KxI0TSIhaf7E9/bg7kQIYQcXKYZ5MU7qU=
Subject key identifier: 5F:D8:78:4C:BC:7B:C8:E0:FB:FC:69:E6:E1:6E:3E:E3:88:67:CB:04
Authority key identifier: 8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA
Certificate issuer: /CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
Certificate serial: 0198469AF73BD4CEDD6B6C0E3DCEE639DBCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
Manifest number: 1551
Signing time: Sat 26 Jul 2025 12:00:17 +0000
Manifest this update: Sat 26 Jul 2025 12:00:17 +0000
Manifest next update: Sun 27 Jul 2025 12:00:17 +0000
Files and hashes: 1: jckcUL_5ygWebjiy4MfrhSpjC7o.crl (hash: y6xCgDY1S/5JxyCKXro0mHH6uoa+9F8BR54pTIWFUNg=)
2: kPouSigkCfrRHoMg7De2TJT88UA.roa (hash: t8cgJtzKMebDlU5SK4Js6mv7oMUSZDhw9bql1pMcUmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9a:f7:3b:d4:ce:dd:6b:6c:0e:3d:ce:e6:39:db:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
Validity
Not Before: Jul 26 12:00:17 2025 GMT
Not After : Jul 27 12:00:17 2025 GMT
Subject: CN=5fd8784cbc7bc8e0fbfc69e6e16e3ee38867cb04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0d:b7:86:c3:da:cd:d6:6a:26:3a:8a:98:10:
a3:c9:45:f3:1c:e7:89:d1:e4:c1:23:35:81:00:79:
04:52:86:3d:17:a9:90:b4:db:df:de:21:23:b0:c1:
6a:5f:eb:51:f9:b2:3e:b6:83:94:00:ec:46:e2:e2:
ed:8d:d6:dd:0f:70:f1:37:cc:f2:57:e6:97:22:8b:
bb:99:d2:34:92:ee:cc:a5:05:50:19:a8:c9:1d:89:
24:47:e5:50:e3:22:38:4f:bb:a2:18:3e:7b:57:dc:
87:bb:90:05:65:e8:3e:ef:47:75:6d:ee:a2:09:dc:
8d:da:01:18:2d:cc:fe:b6:11:bc:9d:bf:c7:fe:6b:
5a:0f:86:bd:44:5c:9c:9b:e6:78:e2:6c:ea:88:eb:
6a:12:b9:6a:a4:93:14:8c:d3:2a:08:79:d5:15:59:
56:54:c0:2a:e3:8d:0d:1c:d9:f5:b7:fa:65:0c:42:
ba:de:50:3f:86:43:2b:57:aa:04:fe:6b:ad:02:2d:
c7:e8:54:c9:52:2f:c9:71:f8:f0:b9:8b:e9:26:ae:
ea:f6:68:22:b4:25:0f:83:f5:e9:51:f7:44:67:d7:
4f:24:97:66:7a:e8:72:a8:39:00:10:59:96:ce:d8:
30:2a:f3:11:f0:37:68:0f:43:92:1f:ef:14:4e:d1:
72:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D8:78:4C:BC:7B:C8:E0:FB:FC:69:E6:E1:6E:3E:E3:88:67:CB:04
X509v3 Authority Key Identifier:
keyid:8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:65:9a:fa:31:99:49:ec:50:12:57:6c:88:d6:de:38:d6:55:
ea:c8:f1:5e:fc:d0:93:27:ca:89:30:19:f6:ca:e8:4c:da:6a:
d9:8d:96:f5:8f:03:b0:80:92:64:80:ef:cd:74:7c:d7:56:ea:
45:25:df:80:02:47:bb:2b:94:22:74:03:b1:4d:52:f9:78:4a:
0d:33:41:a3:d1:41:3c:71:54:18:93:16:54:45:eb:d1:e6:38:
9d:d0:91:e1:e1:4a:82:5c:83:9a:f0:65:2a:cc:2e:90:59:c3:
ee:a0:d8:54:06:43:26:b9:ea:40:44:32:f5:e4:1f:cb:6f:d1:
41:98:c9:40:0f:54:3a:e1:63:9f:70:3b:fa:13:15:1c:04:f3:
d5:81:24:b4:57:cb:f6:f1:01:26:bd:09:4b:ed:d8:84:c0:2b:
b7:cb:46:89:87:fd:ee:01:d1:a1:a1:d1:23:51:35:72:d3:29:
19:9d:5b:62:0c:8d:fe:04:0a:30:b3:df:6b:67:79:b7:bf:b5:
fa:83:2b:13:20:d0:a9:01:2e:a5:34:ad:1b:ec:49:70:48:8b:
e6:cc:7f:d0:26:96:df:6c:99:b2:f4:16:98:d8:64:fb:99:c0:
cc:01:f1:29:1e:9d:52:3a:f5:d2:56:ac:9c:39:62:fe:db:eb:
4f:c6:88:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:25:22 2025 by rpki-client