Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
File: JRXoeSpCT_cswXkpeOLNTNvtpNA.mft (raw, json)
Hash identifier: HZn7u5tVdC2J1otvhD5j1v8Dzsy1YBv4VVClqfqYE34=
Subject key identifier: 36:8B:7D:2C:B2:98:23:91:A6:57:2A:33:A5:C9:D7:D8:7E:17:AA:AE
Authority key identifier: 25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
Certificate issuer: /CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Certificate serial: 019A729396C57FC242186E58E6CB6CD59682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
Manifest number: 05C6
Signing time: Tue 11 Nov 2025 11:01:06 +0000
Manifest this update: Tue 11 Nov 2025 11:01:06 +0000
Manifest next update: Wed 12 Nov 2025 11:01:06 +0000
Files and hashes: 1: JRXoeSpCT_cswXkpeOLNTNvtpNA.crl (hash: JQKeJBuaNRjqbWeIHZCvQbNbxTB/1ut2HKrgZmn+3x8=)
2: ZvBiJJYcsEKcCx0rdG5hcLS4urA.roa (hash: PGtf/dItV8nV0ht7Z+5ua8GBh0EMsKhRF6MMe1D1HlA=)
3: wj466oTxwmfvmkHt-zRaSV43cC0.roa (hash: 1ZjlfVKdCsd3URcSQeRSOCOntRVpDQKf0IcTynD3LQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:96:c5:7f:c2:42:18:6e:58:e6:cb:6c:d5:96:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0
Validity
Not Before: Nov 11 11:01:06 2025 GMT
Not After : Nov 12 11:01:06 2025 GMT
Subject: CN=368b7d2cb2982391a6572a33a5c9d7d87e17aaae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7e:e3:62:4e:66:8c:d3:98:26:29:7c:1e:09:
14:fb:dc:96:e7:78:c7:70:0b:e0:b8:43:6a:f6:b9:
13:f7:48:28:86:e7:0c:50:58:00:d9:22:68:31:3e:
1c:f5:3e:8c:e4:59:54:b7:2a:22:47:51:bb:b8:71:
06:e2:35:9d:b6:77:9d:32:58:74:fd:33:17:02:60:
3b:fb:4f:8d:5b:9d:62:8b:6b:a4:2b:51:5c:bc:74:
6f:33:0b:cd:c3:da:ba:ee:1d:cf:48:c3:97:1d:d5:
c2:54:25:43:10:4a:97:c5:60:33:fa:d5:10:96:57:
43:10:96:1e:0f:8d:74:39:56:b1:26:62:1e:09:ed:
2e:3a:f4:70:1e:c9:5a:70:59:b6:d4:1f:4d:3a:55:
5d:9d:95:0e:51:6c:f2:39:75:cd:0c:d1:e6:ee:13:
d5:bc:82:62:0e:b0:dd:e4:f0:1d:0e:d6:99:46:38:
0f:2b:73:f7:e5:8f:a7:67:18:63:bb:f8:2c:a5:78:
c5:b6:93:82:70:31:8b:61:5b:a4:8c:63:b6:65:50:
e5:36:91:5e:fa:dc:b1:05:5b:1a:8b:37:c0:1a:12:
fd:7c:1a:26:c0:02:e9:0a:01:09:5d:2d:b3:75:aa:
a9:78:0a:01:6c:52:15:ca:0e:47:2f:03:65:34:88:
80:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8B:7D:2C:B2:98:23:91:A6:57:2A:33:A5:C9:D7:D8:7E:17:AA:AE
X509v3 Authority Key Identifier:
keyid:25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:84:96:d6:2e:e5:b9:b4:91:1f:9d:ec:39:68:97:9b:78:22:
a1:13:35:4b:a0:46:c3:dc:4b:7b:4d:7e:73:92:87:8b:83:9d:
b1:5f:1a:0d:18:47:83:08:c5:ac:01:65:11:55:33:39:43:74:
52:15:5e:96:13:e6:48:5b:29:d6:ae:35:bb:04:b1:b6:bd:24:
29:c7:65:2f:51:a9:90:54:23:e6:a8:97:2e:23:ef:cb:3e:db:
5a:07:30:d4:84:0d:29:dd:5e:35:4c:36:12:fc:50:c2:bc:e2:
dc:dd:87:ba:f4:91:ab:e0:6a:bf:67:9a:94:95:0e:0c:c7:94:
ec:d0:50:71:3e:c1:c4:d1:a3:1b:a2:c3:ed:07:2e:23:9e:45:
e8:e8:8a:42:cc:ae:3b:4c:41:44:0e:d5:2e:98:f3:c0:4c:47:
af:81:19:0f:c3:38:e5:81:95:bb:1d:5b:0a:1b:ca:7b:bd:a0:
93:89:df:54:2b:41:c3:78:65:11:39:63:3b:ab:00:b6:27:f0:
d8:d7:ac:16:70:cb:73:bb:ec:c3:23:24:6e:aa:4d:7e:dc:da:
58:b9:47:b8:e1:09:f2:5f:d3:e6:bf:d9:0a:6a:ce:12:37:b7:
b7:a3:11:78:af:f8:1a:e2:ab:38:ca:13:c3:8d:1e:b1:9a:c4:
18:73:5a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:55 2025 by rpki-client