
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
File: jckcUL_5ygWebjiy4MfrhSpjC7o.mft (raw, json)
Hash identifier: fcqV0SsdX3IrV393iBCH0dk4hrXkG7Wg5TcDzyGMZs8=
Subject key identifier: 4C:5E:53:11:A7:3A:8A:6C:01:68:71:AD:63:90:42:94:51:B4:45:6B
Authority key identifier: 8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA
Certificate issuer: /CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
Certificate serial: 019A0A81363B555A8F82BCB2CBED5C9D67D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
Manifest number: 163B
Signing time: Wed 22 Oct 2025 06:00:31 +0000
Manifest this update: Wed 22 Oct 2025 06:00:31 +0000
Manifest next update: Thu 23 Oct 2025 06:00:31 +0000
Files and hashes: 1: jckcUL_5ygWebjiy4MfrhSpjC7o.crl (hash: 7GyEMUP1Ngu3a2XU5imB6MTiKhW6BvGVyTmBs/Q9n+E=)
2: kPouSigkCfrRHoMg7De2TJT88UA.roa (hash: t8cgJtzKMebDlU5SK4Js6mv7oMUSZDhw9bql1pMcUmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:81:36:3b:55:5a:8f:82:bc:b2:cb:ed:5c:9d:67:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
Validity
Not Before: Oct 22 06:00:31 2025 GMT
Not After : Oct 23 06:00:31 2025 GMT
Subject: CN=4c5e5311a73a8a6c016871ad6390429451b4456b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:90:ee:8f:e3:4c:a4:a2:ef:7b:54:7e:f8:d0:
29:0d:65:1f:08:0b:f8:e1:0d:6f:85:79:32:3b:4f:
54:c8:a9:e6:db:23:f6:8c:2f:fe:0f:4b:01:5c:ce:
62:69:5b:88:d2:37:fd:74:84:7e:2c:21:ed:ef:9a:
31:ee:47:45:18:69:cb:1f:95:4e:73:d8:42:9b:0d:
5b:ab:a5:b5:d2:6c:28:24:bc:71:a9:7d:bd:fe:3f:
4b:8b:a3:6d:a3:d7:64:5c:d5:2e:35:88:21:63:3e:
dc:f8:4d:48:f3:15:6b:49:7b:2d:9a:13:49:b6:6b:
50:87:83:00:57:80:43:53:45:6c:34:eb:2f:4a:77:
8a:74:18:c2:db:ab:71:4d:63:0c:4c:a2:8e:c3:94:
c6:df:6b:ee:af:4c:fe:43:09:88:06:d4:f3:cd:43:
a2:cb:ea:da:44:62:77:e0:f7:c6:af:06:11:00:1c:
d7:2d:aa:9e:80:02:8e:ab:d0:a2:e1:e2:38:ad:fc:
95:33:9c:4d:9c:66:bf:f0:a2:ba:44:50:cd:ae:32:
2f:5d:7d:62:51:5b:ca:93:be:32:6f:2a:6e:f4:05:
bb:97:f7:58:fc:47:62:13:70:b1:36:e5:1a:67:b9:
7a:b6:d2:62:9e:95:6a:e9:91:7c:7e:75:20:23:31:
1f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:5E:53:11:A7:3A:8A:6C:01:68:71:AD:63:90:42:94:51:B4:45:6B
X509v3 Authority Key Identifier:
keyid:8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:1d:7b:05:bd:cd:06:43:2c:d8:d6:4f:0c:e2:92:c4:74:e2:
8f:47:19:94:03:bc:f3:09:68:19:24:d2:2f:2e:df:8a:d4:ec:
df:71:b1:30:fe:48:2b:d8:26:e6:f3:70:f5:43:47:38:63:3d:
2b:a8:2d:0a:af:17:15:89:29:fc:71:94:3b:8d:24:aa:5a:7c:
53:f4:27:bc:b3:f4:32:9f:24:e9:04:17:65:94:73:c6:93:8b:
07:61:e0:3a:09:cb:df:ad:04:cd:62:9c:e0:b0:10:90:d4:5a:
62:93:93:a6:b0:68:bf:45:12:97:20:a0:ef:5e:fc:02:7f:9c:
23:cd:32:eb:4f:91:84:52:43:43:0a:31:13:c5:9d:4d:5e:0f:
a4:9f:ff:66:ab:ab:27:8c:18:80:32:70:ec:ef:7d:03:6b:20:
90:91:8e:fe:02:a2:76:1a:85:18:37:11:5c:56:24:98:8d:05:
f6:36:4e:b4:66:34:c4:3c:05:67:a1:42:6d:43:50:5c:16:03:
e4:fd:d7:f1:14:13:e4:5d:78:9f:ef:48:cc:a1:50:a4:88:93:
b6:a7:68:3a:ce:f1:c4:ea:96:a4:bc:b8:84:db:59:d6:d4:c5:
84:2e:dc:3b:62:7a:ec:b5:d7:61:bf:fe:ac:c7:af:25:e7:5c:
21:ba:d2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 12:07:02 2025 by rpki-client