Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
File: JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft (raw, json)
Hash identifier: +1qHdc6AvZ4NzDrXgGnzRz0C6DiLPBoOzl88zdLXfTQ=
Subject key identifier: 33:9C:87:CA:D6:C4:DD:43:A9:AE:88:5A:AB:55:4D:08:AA:00:24:13
Authority key identifier: 25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
Certificate issuer: /CN=25292652a9ecd9c6bdc8264b9948df6212207624
Certificate serial: 01974968112A01E52150A3749897BF29EFA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
Manifest number: 040B
Signing time: Sat 07 Jun 2025 08:00:46 +0000
Manifest this update: Sat 07 Jun 2025 08:00:46 +0000
Manifest next update: Sun 08 Jun 2025 08:00:46 +0000
Files and hashes: 1: JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl (hash: 0W11NJHt9OUdKI4bu/OrtZSoeEbB6jn46KjKvURqaE4=)
2: gIoP5IlKCAUdNwSrZkk73xG1bak.roa (hash: L6IvKagK21CBw7cUsEmV/ioBkPrOpbbJsBKkV2YZAQM=)
3: tjlBefyTUPW2ocj52DG8SScrNVs.roa (hash: i2v8f90/aacPA+KsrniOR03Tuhb0f1sC6zK1p2LnGA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:11:2a:01:e5:21:50:a3:74:98:97:bf:29:ef:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25292652a9ecd9c6bdc8264b9948df6212207624
Validity
Not Before: Jun 7 08:00:46 2025 GMT
Not After : Jun 8 08:00:46 2025 GMT
Subject: CN=339c87cad6c4dd43a9ae885aab554d08aa002413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ff:ae:f2:4c:d1:33:27:a6:2c:ba:44:95:5e:
03:f2:4c:cb:6d:97:69:9d:cb:92:17:39:38:1f:ac:
f9:f0:48:77:7a:76:5a:32:49:68:14:62:a2:70:88:
35:d2:95:6e:1c:37:52:f7:22:5c:d1:1d:aa:04:be:
73:41:d4:95:f0:e7:9d:04:cd:10:44:a6:3b:3b:4c:
1c:48:32:47:ba:bb:7d:59:36:a7:bb:77:f1:37:b7:
33:07:3c:86:06:1d:3b:f8:1a:a3:41:f0:83:09:af:
8d:d0:fa:0e:10:33:a1:7f:f4:c9:63:92:ae:09:9f:
07:e1:af:09:a6:04:f8:35:d3:f9:12:e9:31:b1:9c:
0d:bd:64:d6:b5:fe:e4:49:5c:f4:98:d6:1b:57:06:
4f:01:32:3b:ab:f3:2d:8a:c3:90:04:da:ab:b8:d7:
c1:d3:74:db:f1:2d:ef:2f:0f:e8:25:6b:9e:4a:a5:
82:44:e1:96:78:95:67:20:8c:7c:d6:7c:a0:80:59:
0f:71:73:c7:33:44:76:15:7d:73:32:63:19:2f:b5:
3a:10:aa:a3:13:4c:49:9c:97:c0:f2:14:0b:99:a2:
98:00:aa:50:f6:2b:a1:5b:a9:c7:cd:7b:0d:33:8d:
ee:1c:50:c3:34:b6:53:02:49:9f:28:ca:91:54:b6:
ab:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9C:87:CA:D6:C4:DD:43:A9:AE:88:5A:AB:55:4D:08:AA:00:24:13
X509v3 Authority Key Identifier:
keyid:25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:64:5c:4a:af:69:99:9b:cb:bb:73:42:8c:09:bc:14:8c:e4:
b8:50:9a:e6:26:68:27:ca:3f:d7:fa:4a:fc:0d:51:72:1d:8c:
37:29:2b:66:57:cc:e5:a2:45:18:52:26:76:3e:1e:af:1a:4a:
cd:67:6d:78:5b:25:4b:7c:e5:b1:9e:09:ff:9e:34:54:0f:42:
6b:13:fd:db:62:96:c5:93:f0:38:ff:fe:9c:ee:3b:e6:1f:d7:
f0:bb:25:07:31:e0:e5:1e:69:27:47:f8:cd:a5:fd:30:92:b8:
a7:32:28:e3:db:c2:b7:62:33:48:ad:7a:34:1e:8f:4b:6e:9e:
83:f0:e0:a7:1c:0c:ad:8e:08:9f:a4:c6:c5:d7:85:dc:6f:6e:
24:cb:1c:6a:b9:d8:a3:b8:36:7b:54:31:76:9b:e6:a2:d6:73:
d1:b8:05:33:9a:28:c1:ae:8d:ef:fe:9a:ff:3d:71:46:0b:cb:
49:2e:aa:b5:f1:80:24:5d:ed:2a:5a:98:c9:c4:f1:b5:67:f1:
7c:bf:50:c2:68:8a:90:18:c9:28:d3:0f:f6:5b:4d:02:1c:23:
14:25:b9:50:1c:73:cd:f4:7d:0e:42:fe:96:56:6a:e5:e5:35:
8a:eb:c9:cf:be:fb:4d:60:81:1a:8d:19:d2:72:e4:ed:da:0c:
ec:9a:b4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:35:34 2025 by rpki-client