Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
File: JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft (raw, json)
Hash identifier: FBxgcCHrv5a6RfzmkRp5qfZRB1VOA1lEOT6602qvgWQ=
Subject key identifier: 63:C6:E3:61:E5:6D:6A:03:D5:B9:7A:A5:0C:48:79:E2:A7:61:D0:55
Authority key identifier: 25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
Certificate issuer: /CN=25292652a9ecd9c6bdc8264b9948df6212207624
Certificate serial: 0197B96A6046DB85897676B26B1558A04E0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
Manifest number: 0445
Signing time: Sun 29 Jun 2025 02:00:45 +0000
Manifest this update: Sun 29 Jun 2025 02:00:45 +0000
Manifest next update: Mon 30 Jun 2025 02:00:45 +0000
Files and hashes: 1: JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl (hash: r9C6L0otCOJKc5QdWsZJ2nXoUELbpGsr9Lx2PywKU2s=)
2: gIoP5IlKCAUdNwSrZkk73xG1bak.roa (hash: L6IvKagK21CBw7cUsEmV/ioBkPrOpbbJsBKkV2YZAQM=)
3: tjlBefyTUPW2ocj52DG8SScrNVs.roa (hash: i2v8f90/aacPA+KsrniOR03Tuhb0f1sC6zK1p2LnGA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:60:46:db:85:89:76:76:b2:6b:15:58:a0:4e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25292652a9ecd9c6bdc8264b9948df6212207624
Validity
Not Before: Jun 29 02:00:45 2025 GMT
Not After : Jun 30 02:00:45 2025 GMT
Subject: CN=63c6e361e56d6a03d5b97aa50c4879e2a761d055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e0:e9:52:99:b1:87:df:84:71:07:a1:a0:e7:
6e:49:32:cc:42:97:82:bc:c0:00:a0:9c:6f:7a:ff:
fa:d4:a6:87:65:b9:88:2e:2b:34:10:9e:c1:6b:17:
04:86:46:71:31:41:30:91:9b:34:43:5c:a7:16:01:
41:80:ec:10:95:89:ed:a7:c8:d9:92:c5:10:99:6d:
66:77:3a:ec:c1:94:22:67:f3:db:26:bf:ff:be:f4:
e1:0c:44:a8:d4:61:9b:20:3a:ad:8d:f7:fd:66:1d:
5a:ee:3f:ff:a6:52:59:4c:60:9a:4e:c3:9a:ca:a6:
09:5d:9f:b1:79:1e:ad:e9:35:51:9c:8e:ef:82:ee:
d1:6c:a0:c4:9c:ec:c1:14:ad:c7:f5:a2:8f:0d:10:
c7:0f:e6:df:8c:59:8e:a0:d2:7c:58:16:77:5f:7a:
0b:48:5c:25:56:28:f4:8c:dd:c6:81:d6:c8:ba:06:
df:38:13:e2:74:d7:d9:e8:61:ba:3c:29:ca:a0:77:
e9:0e:63:b7:ac:91:93:47:cd:40:d4:5d:d4:92:ef:
7e:3d:dc:f1:b4:7f:64:9e:54:99:0b:4e:d7:8b:73:
03:92:8b:32:05:1a:20:04:82:97:c7:11:a2:cd:75:
2a:5e:d9:91:86:04:85:16:99:26:1c:6d:bb:66:d8:
b0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C6:E3:61:E5:6D:6A:03:D5:B9:7A:A5:0C:48:79:E2:A7:61:D0:55
X509v3 Authority Key Identifier:
keyid:25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:96:7e:de:d0:17:b8:4c:9b:47:74:10:f0:08:6a:d7:f8:9d:
c4:27:23:c5:94:86:8c:a5:a3:c5:08:70:c6:f4:6e:d2:43:70:
38:1e:c6:99:52:0b:66:4d:a8:62:ba:d8:67:e9:6e:84:7e:96:
1c:0e:2f:b8:6b:ae:99:2a:bb:8b:d9:bb:d3:7b:37:15:e6:27:
fb:8a:58:45:e7:84:32:31:e4:5f:e5:1b:7d:23:1a:bf:40:b1:
56:6a:a3:45:40:7c:78:9c:cb:98:db:f7:b9:f3:8a:00:6c:dd:
4d:6c:f5:4f:b5:94:a1:6b:95:84:75:d3:ff:28:a3:53:57:1f:
87:e7:9c:c9:dc:9d:e5:5c:c1:73:bd:77:d6:74:a9:97:b6:98:
f4:e2:c1:1c:07:90:63:54:40:19:e3:76:1e:c2:ae:95:78:b0:
a3:dd:8b:bd:86:ab:50:2c:f4:86:2e:57:99:b4:42:32:15:b5:
c2:52:56:df:41:e7:34:2c:79:f3:53:d9:d1:a7:d9:ac:c4:59:
7c:07:39:50:6c:57:05:ab:ff:9c:14:57:92:0d:dd:9a:5a:ff:
9c:94:fa:b6:8b:ed:fe:4c:cb:ee:3c:ca:8a:d5:3d:44:8b:9c:
30:f1:08:fe:ec:8e:b9:f0:2b:31:17:46:e0:5e:39:96:be:ec:
1d:6e:bf:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:08:42 2025 by rpki-client