Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
File: JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft (raw, json)
Hash identifier: IUE9BOu3njcDO6QMC2ZBdwVf5/jSLDkd5EP5yjVEw/g=
Subject key identifier: 78:FA:11:88:C1:EA:03:72:07:D2:E9:A1:C0:3D:1F:88:8A:54:69:09
Authority key identifier: 25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
Certificate issuer: /CN=25292652a9ecd9c6bdc8264b9948df6212207624
Certificate serial: 019918E4DE9502252EC0CEB39B2AE6F59021
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
Manifest number: 04FB
Signing time: Fri 05 Sep 2025 08:01:16 +0000
Manifest this update: Fri 05 Sep 2025 08:01:16 +0000
Manifest next update: Sat 06 Sep 2025 08:01:16 +0000
Files and hashes: 1: JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl (hash: Niw20MNV7xmTfPbhfwWXbUKydIfXfcN/h5ajGR5I4LI=)
2: gIoP5IlKCAUdNwSrZkk73xG1bak.roa (hash: L6IvKagK21CBw7cUsEmV/ioBkPrOpbbJsBKkV2YZAQM=)
3: tjlBefyTUPW2ocj52DG8SScrNVs.roa (hash: i2v8f90/aacPA+KsrniOR03Tuhb0f1sC6zK1p2LnGA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:e4:de:95:02:25:2e:c0:ce:b3:9b:2a:e6:f5:90:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25292652a9ecd9c6bdc8264b9948df6212207624
Validity
Not Before: Sep 5 08:01:16 2025 GMT
Not After : Sep 6 08:01:16 2025 GMT
Subject: CN=78fa1188c1ea037207d2e9a1c03d1f888a546909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1b:8a:05:cb:d9:95:13:82:a5:93:f6:96:1c:
26:d1:cb:fe:40:fb:60:f9:d9:8d:20:9c:a8:27:33:
6e:c9:92:26:c5:0f:ab:f0:e3:f4:eb:f1:9f:dd:39:
62:7a:ca:5f:44:8e:5f:7c:74:5b:72:41:3b:26:1b:
31:40:7d:4f:e6:41:b1:d8:0a:e2:92:53:ba:6b:99:
40:fc:c6:39:b6:05:64:d6:06:36:b2:8e:8d:8f:be:
d4:86:5e:e7:54:7a:ed:9b:fe:98:d0:c8:ff:99:69:
ab:ad:d9:d0:b0:6c:3c:88:2a:6d:28:7c:11:18:03:
92:1f:71:f4:d0:52:2e:ce:b6:8c:38:25:7a:47:76:
8f:99:bc:b3:0b:3a:5e:ec:07:f1:e4:27:72:20:75:
c2:da:33:44:02:4e:d2:87:d3:b1:96:c9:7a:8a:47:
17:e7:91:45:14:95:36:94:04:2b:6f:ab:cd:5c:22:
18:44:a8:20:e2:62:65:ab:bd:a5:12:0e:ba:91:fd:
96:d5:2d:16:d4:0d:91:88:5f:aa:9b:8c:56:7d:5e:
1c:6c:d5:0f:f7:3a:d2:97:e3:4b:a6:cb:9b:78:62:
77:32:e9:ce:b6:8a:ad:05:f5:8e:0a:4a:5d:c8:4d:
f2:a9:1e:73:2e:d2:8f:8e:b4:cb:d3:42:27:fe:e0:
bb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:FA:11:88:C1:EA:03:72:07:D2:E9:A1:C0:3D:1F:88:8A:54:69:09
X509v3 Authority Key Identifier:
keyid:25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:cb:7b:68:32:29:72:30:3f:44:e1:af:46:7a:f9:69:e3:42:
63:62:3b:b2:66:d8:b3:e3:df:ca:29:81:b8:51:9a:a8:db:f2:
3a:9c:0c:5b:eb:78:9a:49:b4:11:9b:ba:72:ee:b2:b8:e5:a7:
38:ab:71:d0:cc:74:34:a4:e3:40:d2:90:69:db:2d:7c:c3:07:
14:9f:ad:db:5b:c0:91:c3:1d:dc:c1:58:62:8f:1e:50:b1:8b:
3d:89:36:63:78:bb:52:83:af:83:7a:44:34:3b:c3:bb:be:52:
0b:7a:ac:d2:98:7e:af:02:f4:1f:f7:c2:92:6f:5b:a9:ec:bd:
bc:05:6e:e2:86:a3:93:9a:b7:c7:c2:8c:0a:92:3b:02:89:5a:
40:74:41:86:bd:84:02:34:4d:2a:ff:57:d1:d1:01:52:7d:6f:
38:e5:ff:5e:9c:d5:f2:94:1c:34:e6:b6:e9:62:d5:5d:4b:af:
3a:09:8a:63:e1:8a:a4:7e:be:1d:9f:4e:ff:f9:73:47:16:29:
54:43:ff:9d:ee:6f:4c:53:4a:b6:5e:f1:4a:93:e6:61:bc:7b:
03:28:e6:b1:cd:10:7a:e0:37:27:2b:02:9c:c2:de:18:22:1d:
5d:2f:c3:32:4c:1d:30:9a:2a:30:33:ee:27:2d:91:a7:66:9b:
9b:0d:f3:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkY5N6VAiUuwM6zmyrm9ZAhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1MjkyNjUyYTllY2Q5YzZiZGM4MjY0Yjk5NDhkZjYyMTIy
MDc2MjQwHhcNMjUwOTA1MDgwMTE2WhcNMjUwOTA2MDgwMTE2WjAzMTEwLwYDVQQD
Eyg3OGZhMTE4OGMxZWEwMzcyMDdkMmU5YTFjMDNkMWY4ODhhNTQ2OTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBuKBcvZlROCpZP2lhwm0cv+QPtg
+dmNIJyoJzNuyZImxQ+r8OP06/Gf3TliespfRI5ffHRbckE7JhsxQH1P5kGx2Ari
klO6a5lA/MY5tgVk1gY2so6Nj77Uhl7nVHrtm/6Y0Mj/mWmrrdnQsGw8iCptKHwR
GAOSH3H00FIuzraMOCV6R3aPmbyzCzpe7Afx5CdyIHXC2jNEAk7Sh9Oxlsl6ikcX
55FFFJU2lAQrb6vNXCIYRKgg4mJlq72lEg66kf2W1S0W1A2RiF+qm4xWfV4cbNUP
9zrSl+NLpsubeGJ3MunOtoqtBfWOCkpdyE3yqR5zLtKPjrTL00In/uC7NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHj6EYjB6gNyB9LpocA9H4iKVGkJMB8GA1UdIwQY
MBaAFCUpJlKp7NnGvcgmS5lI32ISIHYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlNrbVVxbnMyY2E5eUNaTG1VamZZaElnZGlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yMWE0ZmQtYmQ4YS00YWE0LThjNDUt
NTcxMDMwNTQzOWVjLzEvSlNrbVVxbnMyY2E5eUNaTG1VamZZaElnZGlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8yMWE0ZmQtYmQ4YS00YWE0LThjNDUtNTcxMDMwNTQzOWVj
LzEvSlNrbVVxbnMyY2E5eUNaTG1VamZZaElnZGlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlct7aDIp
cjA/ROGvRnr5aeNCY2I7smbYs+PfyimBuFGaqNvyOpwMW+t4mkm0EZu6cu6yuOWn
OKtx0Mx0NKTjQNKQadstfMMHFJ+t21vAkcMd3MFYYo8eULGLPYk2Y3i7UoOvg3pE
NDvDu75SC3qs0ph+rwL0H/fCkm9bqey9vAVu4oajk5q3x8KMCpI7AolaQHRBhr2E
AjRNKv9X0dEBUn1vOOX/XpzV8pQcNOa26WLVXUuvOgmKY+GKpH6+HZ9O//lzRxYp
VEP/ne5vTFNKtl7xSpPmYbx7Ayjmsc0QeuA3JysCnMLeGCIdXS/DMkwdMJoqMDPu
Jy2Rp2abmw3z+Q==
-----END CERTIFICATE-----
Generated at Fri Sep 5 11:27:21 2025 by rpki-client