Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
File: JRXoeSpCT_cswXkpeOLNTNvtpNA.mft (raw, json)
Hash identifier: JfvkzmE7vo3uCtpaLbc4WKJBa90PVtMZw/I4ngHIAdY=
Subject key identifier: 9E:0F:72:20:4D:95:62:70:9D:AC:BB:4F:58:90:FD:5F:FA:FB:4E:CB
Authority key identifier: 25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
Certificate issuer: /CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Certificate serial: 019918E4828883D5E5FD9EDBB92CC086F224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
Manifest number: 0513
Signing time: Fri 05 Sep 2025 08:00:52 +0000
Manifest this update: Fri 05 Sep 2025 08:00:52 +0000
Manifest next update: Sat 06 Sep 2025 08:00:52 +0000
Files and hashes: 1: JRXoeSpCT_cswXkpeOLNTNvtpNA.crl (hash: +YxmW4zsy3s8uxo6DC18gbmrt/R9xhnlfYXhMPEAC38=)
2: ZvBiJJYcsEKcCx0rdG5hcLS4urA.roa (hash: PGtf/dItV8nV0ht7Z+5ua8GBh0EMsKhRF6MMe1D1HlA=)
3: wj466oTxwmfvmkHt-zRaSV43cC0.roa (hash: 1ZjlfVKdCsd3URcSQeRSOCOntRVpDQKf0IcTynD3LQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:e4:82:88:83:d5:e5:fd:9e:db:b9:2c:c0:86:f2:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Validity
Not Before: Sep 5 08:00:52 2025 GMT
Not After : Sep 6 08:00:52 2025 GMT
Subject: CN=9e0f72204d9562709dacbb4f5890fd5ffafb4ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:77:1d:e9:c2:3f:26:85:97:13:f0:ee:74:bb:
ec:76:22:fe:d2:06:b2:23:9a:5d:b4:10:66:fc:4c:
68:a0:d9:f6:bb:36:f6:ce:54:44:2f:9e:98:58:cb:
22:73:25:64:f4:29:3d:b5:fb:cd:21:25:05:93:1c:
ac:ba:28:6b:c5:22:6f:d5:97:bb:70:e5:93:cf:55:
4d:25:1c:5f:2a:30:da:0b:71:5c:08:af:82:24:38:
8e:cb:de:66:f7:66:4f:f2:80:11:87:d5:e6:b3:71:
c6:b0:2a:74:ee:cd:fc:e7:cd:bf:ff:01:06:7f:ea:
26:1f:77:1c:c9:24:56:6d:52:4b:3a:f3:8f:5d:56:
d1:3e:0b:83:34:13:dd:1e:22:12:b3:48:63:9e:79:
e7:a9:3f:86:6b:2a:ec:91:b8:a8:33:cc:34:3d:a5:
4c:77:d2:c8:69:a5:2d:43:6e:d2:40:36:ba:7d:3a:
0d:46:e0:9b:7d:8f:c3:e6:74:bb:5d:37:c2:fc:81:
11:5e:2d:48:10:b2:de:fd:ec:18:22:a2:bd:9c:98:
a4:2c:24:65:17:6d:21:3a:17:89:bd:58:e1:47:c0:
11:a6:c5:14:e6:ee:ae:96:0e:6c:f6:e6:04:a8:5c:
c7:42:53:3e:79:11:cb:9a:ea:f0:a1:54:39:b5:ff:
d9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:0F:72:20:4D:95:62:70:9D:AC:BB:4F:58:90:FD:5F:FA:FB:4E:CB
X509v3 Authority Key Identifier:
keyid:25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:72:da:bd:2c:51:30:8f:4a:4c:73:1e:85:e0:ed:99:f7:7e:
c6:c4:94:86:17:5a:01:50:6e:6c:9a:04:5e:7a:86:00:8b:70:
58:35:2a:29:c1:ed:f6:8a:5d:b3:88:b0:3c:81:77:3d:5a:69:
8e:df:b9:9e:a7:0d:74:ad:28:8a:5d:24:7e:26:9d:de:ab:a7:
c0:09:6d:30:be:45:3c:56:05:7d:9a:9b:fd:7a:1c:9d:df:7f:
c0:b1:b0:ff:2f:62:c8:ef:62:af:a5:42:71:f5:84:c9:d5:14:
26:c1:73:40:c8:04:93:66:09:76:39:f0:6a:b9:43:8b:23:fc:
55:49:84:ea:0c:31:68:ec:14:12:da:97:24:cd:22:a5:cf:e3:
8e:45:f2:3c:83:3d:87:4c:ce:e3:ad:33:d7:df:a0:4c:73:e3:
00:71:bf:a2:e4:6a:06:47:81:c4:a4:92:f0:2b:e7:3c:70:7f:
19:2f:68:56:b0:c8:4e:7a:40:27:09:b0:ca:16:ba:ae:63:61:
5e:99:6b:d9:44:73:ae:88:44:dc:9e:28:a1:13:07:da:1c:76:
1e:02:39:eb:0f:52:20:16:6a:e3:8a:24:42:0a:71:38:4d:d7:
ee:f9:33:fa:e1:5b:4b:6e:79:01:b6:ec:dd:b8:e8:ff:5f:c6:
7c:b6:a3:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkY5IKIg9Xl/Z7buSzAhvIkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1MTVlODc5MmE0MjRmZjcyY2MxNzkyOTc4ZTJjZDRjZGJl
ZGE0ZDAwHhcNMjUwOTA1MDgwMDUyWhcNMjUwOTA2MDgwMDUyWjAzMTEwLwYDVQQD
Eyg5ZTBmNzIyMDRkOTU2MjcwOWRhY2JiNGY1ODkwZmQ1ZmZhZmI0ZWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3cd6cI/JoWXE/DudLvsdiL+0gay
I5pdtBBm/ExooNn2uzb2zlREL56YWMsicyVk9Ck9tfvNISUFkxysuihrxSJv1Ze7
cOWTz1VNJRxfKjDaC3FcCK+CJDiOy95m92ZP8oARh9Xms3HGsCp07s38582//wEG
f+omH3ccySRWbVJLOvOPXVbRPguDNBPdHiISs0hjnnnnqT+GayrskbioM8w0PaVM
d9LIaaUtQ27SQDa6fToNRuCbfY/D5nS7XTfC/IERXi1IELLe/ewYIqK9nJikLCRl
F20hOheJvVjhR8ARpsUU5u6ulg5s9uYEqFzHQlM+eRHLmurwoVQ5tf/ZLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ4PciBNlWJwnay7T1iQ/V/6+07LMB8GA1UdIwQY
MBaAFCUV6HkqQk/3LMF5KXjizUzb7aTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlJYb2VTcENUX2Nzd1hrcGVPTE5UTnZ0cE5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8zZDBmNDAtYTdkZC00Njg5LWJjMzIt
OWVlZDlkNzVjMGQxLzEvSlJYb2VTcENUX2Nzd1hrcGVPTE5UTnZ0cE5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8zZDBmNDAtYTdkZC00Njg5LWJjMzItOWVlZDlkNzVjMGQx
LzEvSlJYb2VTcENUX2Nzd1hrcGVPTE5UTnZ0cE5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc3LavSxR
MI9KTHMeheDtmfd+xsSUhhdaAVBubJoEXnqGAItwWDUqKcHt9opds4iwPIF3PVpp
jt+5nqcNdK0oil0kfiad3qunwAltML5FPFYFfZqb/Xocnd9/wLGw/y9iyO9ir6VC
cfWEydUUJsFzQMgEk2YJdjnwarlDiyP8VUmE6gwxaOwUEtqXJM0ipc/jjkXyPIM9
h0zO460z19+gTHPjAHG/ouRqBkeBxKSS8CvnPHB/GS9oVrDITnpAJwmwyha6rmNh
Xplr2URzrohE3J4ooRMH2hx2HgI56w9SIBZq44okQgpxOE3X7vkz+uFbS255Abbs
3bjo/1/GfLajCA==
-----END CERTIFICATE-----
Generated at Fri Sep 5 09:50:42 2025 by rpki-client