Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
File: JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft (raw, json)
Hash identifier: dawMLJOj87m/rq+AIe2vjlC9BYo9uJmGymqoSw5xQ5E=
Subject key identifier: AA:D2:01:A9:EB:B1:62:3C:F7:0C:FE:79:16:E3:F4:28:B1:0A:EA:B0
Authority key identifier: 25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
Certificate issuer: /CN=25292652a9ecd9c6bdc8264b9948df6212207624
Certificate serial: 0199FEB50E14E52CA8A053E8EDA9575441BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
Manifest number: 0572
Signing time: Sun 19 Oct 2025 23:01:42 +0000
Manifest this update: Sun 19 Oct 2025 23:01:42 +0000
Manifest next update: Mon 20 Oct 2025 23:01:42 +0000
Files and hashes: 1: JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl (hash: vZeOMedFmt/5w8hadW7yBg4RgYnfFo1ZAW6MEOueVkI=)
2: gIoP5IlKCAUdNwSrZkk73xG1bak.roa (hash: L6IvKagK21CBw7cUsEmV/ioBkPrOpbbJsBKkV2YZAQM=)
3: tjlBefyTUPW2ocj52DG8SScrNVs.roa (hash: i2v8f90/aacPA+KsrniOR03Tuhb0f1sC6zK1p2LnGA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:0e:14:e5:2c:a8:a0:53:e8:ed:a9:57:54:41:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25292652a9ecd9c6bdc8264b9948df6212207624
Validity
Not Before: Oct 19 23:01:42 2025 GMT
Not After : Oct 20 23:01:42 2025 GMT
Subject: CN=aad201a9ebb1623cf70cfe7916e3f428b10aeab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:58:5b:04:77:1f:8d:c1:ce:8f:11:d4:1b:d7:
0c:c2:2d:82:eb:68:b2:81:f3:84:f6:0c:9a:f2:7f:
95:74:ac:96:75:19:5f:ff:77:fb:78:4c:85:36:13:
98:42:75:e4:70:3c:34:e9:17:10:f7:78:5b:92:81:
15:49:ed:17:e0:47:00:22:66:73:e2:12:23:fa:70:
30:0c:31:37:04:3a:d4:22:79:aa:8f:8a:46:8f:93:
e1:9b:95:a2:04:1b:93:72:00:67:e8:f5:2c:41:77:
84:81:87:0f:1e:96:51:e7:8d:3b:b4:e4:bc:f8:74:
03:1d:85:45:13:ee:2d:e6:7c:68:e2:ff:9c:bc:82:
81:38:2e:f9:89:fb:91:a5:5a:6d:32:c5:5b:a6:26:
f8:b1:57:a2:a3:45:00:45:ca:6f:85:82:ac:e9:63:
22:97:af:75:9b:0e:a8:e6:61:bc:c2:10:41:ad:4c:
93:0b:48:49:7c:d8:12:a5:f7:03:38:7b:97:97:80:
02:9e:34:19:1a:a9:5a:be:23:34:6f:16:29:eb:70:
d6:44:45:4b:2c:a6:6a:a9:02:0c:38:33:48:07:3a:
f5:f0:c5:33:44:05:a2:17:f1:12:06:19:34:d1:ba:
6c:fa:07:d2:a9:51:32:ea:a2:7f:01:29:0c:3a:f7:
9f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D2:01:A9:EB:B1:62:3C:F7:0C:FE:79:16:E3:F4:28:B1:0A:EA:B0
X509v3 Authority Key Identifier:
keyid:25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:7e:20:05:6f:eb:fa:9b:5f:d8:9c:ab:38:5a:be:be:8b:67:
d7:79:7b:9b:5f:a6:63:65:55:65:54:70:69:eb:66:25:ff:f5:
93:b9:c3:6c:0e:68:3c:6b:bf:62:b7:f4:af:ab:ee:e6:50:e6:
90:2d:cb:51:bd:85:a2:d0:4d:6f:2f:3b:64:13:75:1b:8e:0f:
9c:95:02:65:7f:74:ca:22:63:1b:6c:1a:e4:50:48:84:00:e3:
c9:c3:2c:cb:f2:97:d2:e1:06:1f:c1:44:b8:cb:1b:3a:e2:97:
5a:4a:78:d3:0a:28:bd:53:8c:77:cb:74:19:68:a7:c3:22:11:
a0:97:90:98:66:e0:cd:83:68:7e:40:e6:ae:92:e4:f6:fd:ec:
53:8b:56:82:1e:4d:2c:e0:04:43:e2:bc:ae:ee:11:df:83:63:
49:9d:94:e0:8f:fe:c8:36:58:20:32:1e:66:22:6f:4a:97:37:
eb:65:4b:6c:5a:96:38:83:7b:76:f8:09:c1:2d:90:9a:fb:af:
a7:5d:f6:a0:80:95:fc:67:b8:88:34:a3:87:d8:bc:6b:0e:a4:
1b:31:5a:62:91:46:21:83:29:6d:36:f5:b3:ea:6c:21:da:23:
55:5f:f4:ed:7c:f3:66:15:a3:c8:e4:62:14:c5:63:c0:53:46:
0e:da:e3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:07:29 2025 by rpki-client