Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
File: JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft (raw, json)
Hash identifier: 9+d3TWTF9h8xCwPEDQmuWp/Q/UM/h1PGqQ2N8gwQVvk=
Subject key identifier: A3:55:80:D3:EB:55:74:68:E7:E3:83:1A:E3:D1:20:3F:4B:A0:1D:29
Authority key identifier: 25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
Certificate issuer: /CN=25292652a9ecd9c6bdc8264b9948df6212207624
Certificate serial: 019A00A2D1CFC47E9BDDACF1EBC168D44DDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
Manifest number: 0573
Signing time: Mon 20 Oct 2025 08:01:01 +0000
Manifest this update: Mon 20 Oct 2025 08:01:01 +0000
Manifest next update: Tue 21 Oct 2025 08:01:01 +0000
Files and hashes: 1: JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl (hash: GyjJl9SYNFV3p1Ktf4Jd5BBA/YQhxJyqoC3J+/IsCx8=)
2: gIoP5IlKCAUdNwSrZkk73xG1bak.roa (hash: L6IvKagK21CBw7cUsEmV/ioBkPrOpbbJsBKkV2YZAQM=)
3: tjlBefyTUPW2ocj52DG8SScrNVs.roa (hash: i2v8f90/aacPA+KsrniOR03Tuhb0f1sC6zK1p2LnGA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a2:d1:cf:c4:7e:9b:dd:ac:f1:eb:c1:68:d4:4d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25292652a9ecd9c6bdc8264b9948df6212207624
Validity
Not Before: Oct 20 08:01:01 2025 GMT
Not After : Oct 21 08:01:01 2025 GMT
Subject: CN=a35580d3eb557468e7e3831ae3d1203f4ba01d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7e:16:5a:05:a4:00:e3:84:26:a9:32:99:72:
26:15:cd:1f:20:72:e0:27:bc:b0:d7:3d:bf:7b:90:
42:c4:fe:e1:12:dc:d1:9c:41:db:4b:94:8c:0f:49:
42:6c:a6:38:ae:fa:a2:e5:00:6a:05:c5:91:7e:6e:
2b:e7:46:6c:34:c0:50:c1:88:f2:bc:f7:8c:07:e8:
95:6c:e4:4b:45:f7:ce:9b:60:e7:71:0f:6a:0a:75:
3d:88:d5:76:24:8a:55:55:09:d1:47:54:5e:5c:d2:
90:85:2a:4d:7c:67:f9:3e:d8:9a:85:a6:d2:1f:af:
44:58:42:46:87:2e:3d:64:0c:98:70:a0:8d:ee:9b:
aa:ba:54:00:c4:dd:38:b8:98:46:32:65:80:79:ee:
50:66:e2:79:f7:56:4b:15:e0:79:c5:1f:f8:51:96:
83:3e:bf:28:69:f7:73:76:10:4e:c2:d4:b7:d5:a5:
f1:84:38:39:5b:3c:fd:1a:3c:fe:7a:02:1a:bf:cc:
0d:1c:c1:b1:ee:49:40:0d:50:77:7d:e7:e5:32:4b:
4d:b1:cb:17:5e:d3:ca:ca:ea:25:e7:26:72:ae:91:
48:f8:82:0f:cf:cd:fc:fb:b7:e1:78:14:c4:7a:4f:
3a:af:33:e5:16:86:7e:6e:37:14:30:c9:a4:c1:9a:
9c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:55:80:D3:EB:55:74:68:E7:E3:83:1A:E3:D1:20:3F:4B:A0:1D:29
X509v3 Authority Key Identifier:
keyid:25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:8f:5c:ab:ba:40:6c:40:0e:0c:89:fe:8b:7e:51:c0:eb:74:
60:b5:17:74:47:17:60:a1:64:41:42:3c:fb:c0:c0:56:c4:b6:
f4:1c:03:b1:ba:b7:a7:83:0e:93:f9:76:a5:0e:61:d1:f4:e4:
1b:cc:1e:8a:6b:c5:aa:6e:c4:f6:1b:94:83:3d:7c:47:3f:2d:
c8:c2:61:6f:9f:8f:7c:e5:d5:07:61:ba:c9:35:62:06:7c:ba:
a3:ec:03:16:6b:34:84:36:40:15:df:8b:d9:47:92:9a:95:1c:
70:16:1c:42:74:5e:7d:29:2c:f3:7d:8d:d3:82:df:88:e7:b7:
d0:5d:b8:f9:05:0c:93:b2:67:94:6d:33:93:d3:7d:0a:33:20:
fb:5c:c4:c9:84:3c:f5:b3:d3:18:8d:2e:98:d5:21:19:9a:72:
4a:2f:ad:93:d1:3d:47:05:14:9f:0d:69:d2:61:9a:e8:84:a0:
e1:c1:6c:aa:58:d2:58:eb:34:ce:db:26:25:6e:53:b9:47:8c:
7b:0c:a0:3a:fb:d5:30:f9:5c:42:26:de:38:da:8a:d7:84:2c:
1b:a9:22:ad:d4:0c:ad:81:aa:ea:c5:e0:6c:5a:b5:2c:e5:d4:
fd:70:b8:2c:6d:48:e9:ad:b1:72:26:6e:23:70:f0:a1:42:2b:
fc:e3:7d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:59:46 2025 by rpki-client