Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
File: JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft (raw, json)
Hash identifier: T1OTxcFNdtwG2Z/cKnD++suM5z0lfbst09Qa0lN9/OE=
Subject key identifier: E8:88:D5:1D:59:03:FB:1C:C2:1C:BE:11:2B:83:E6:F1:20:07:33:62
Authority key identifier: 25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
Certificate issuer: /CN=25292652a9ecd9c6bdc8264b9948df6212207624
Certificate serial: 0198D54E033A9CC87841D50764ABA77161CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
Manifest number: 04D8
Signing time: Sat 23 Aug 2025 05:01:56 +0000
Manifest this update: Sat 23 Aug 2025 05:01:56 +0000
Manifest next update: Sun 24 Aug 2025 05:01:56 +0000
Files and hashes: 1: JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl (hash: IKJD2RttD5BMYWJ2UbzcpFFm/NclYnlCb22zbnfm8i0=)
2: gIoP5IlKCAUdNwSrZkk73xG1bak.roa (hash: L6IvKagK21CBw7cUsEmV/ioBkPrOpbbJsBKkV2YZAQM=)
3: tjlBefyTUPW2ocj52DG8SScrNVs.roa (hash: i2v8f90/aacPA+KsrniOR03Tuhb0f1sC6zK1p2LnGA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:03:3a:9c:c8:78:41:d5:07:64:ab:a7:71:61:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25292652a9ecd9c6bdc8264b9948df6212207624
Validity
Not Before: Aug 23 05:01:56 2025 GMT
Not After : Aug 24 05:01:56 2025 GMT
Subject: CN=e888d51d5903fb1cc21cbe112b83e6f120073362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a1:be:54:1f:e5:cb:a7:d4:f1:13:83:a3:3c:
ee:25:16:aa:1e:51:e8:aa:bf:87:ce:2e:dd:ec:42:
fb:a4:08:cb:4f:b0:9c:c1:cf:64:b3:e3:fc:77:5d:
6d:e6:b6:29:35:e3:98:ec:f2:61:46:70:79:44:c9:
e1:b9:88:5a:c9:1e:40:71:33:06:b0:50:15:bc:86:
5f:e1:28:b9:a1:13:1a:ff:0a:2b:9a:60:fb:ce:eb:
bd:69:d5:de:3b:5e:f1:e8:f4:de:47:2e:74:cf:87:
f6:a6:45:39:ca:e4:31:02:0d:6f:80:f6:2d:96:2e:
d2:21:f5:7b:6b:11:19:9e:e6:6e:6a:83:27:ec:51:
d5:5d:8a:86:2d:7d:41:f0:c5:c0:e1:64:6a:2e:20:
fb:f2:68:49:21:98:5a:5e:c8:3f:b2:2f:0a:a8:28:
93:85:32:e6:c1:6a:6b:70:94:e7:7b:3b:80:03:25:
62:fa:1c:52:91:86:05:bf:bd:4f:65:16:f1:16:23:
ec:5d:39:30:5b:4a:e8:18:9f:64:e0:4d:b1:36:52:
05:dc:ea:29:87:74:8a:34:a6:f0:ac:2e:22:8c:be:
fc:19:52:1a:77:34:52:28:ae:cd:3f:ee:79:7c:30:
74:80:4e:b5:56:9f:aa:fa:ab:90:b4:eb:f8:1b:c0:
c5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:88:D5:1D:59:03:FB:1C:C2:1C:BE:11:2B:83:E6:F1:20:07:33:62
X509v3 Authority Key Identifier:
keyid:25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:84:85:25:fd:75:ca:ce:af:48:4c:ab:8c:50:fe:e4:76:70:
33:a2:95:56:c7:9a:81:9b:93:b2:8d:89:36:7a:aa:ab:34:cb:
66:3c:cd:d2:34:32:76:2b:8b:ce:76:80:b7:40:bc:2f:10:0c:
af:1f:26:fa:fe:25:b2:a6:73:4e:fe:5a:32:dd:a3:a5:66:91:
3f:20:86:49:7b:b3:1b:76:a9:4a:a0:98:9e:fc:b8:0a:c8:66:
52:ed:fc:94:18:de:8e:f1:3f:f8:5d:9b:c6:55:d8:91:1e:dc:
c0:24:9e:00:17:b0:7b:9d:f5:79:ae:87:a2:c3:c4:9a:8b:13:
e2:a0:a3:d0:22:92:b9:c5:68:79:97:c6:e4:a4:61:37:31:47:
43:fb:0d:39:c6:bb:d9:5d:d4:14:90:82:e8:56:42:71:a3:56:
b3:d4:f2:9c:0c:b9:84:8f:2c:d2:d5:e2:e4:a5:42:1a:7b:ca:
a3:60:d4:9e:a6:f9:62:36:7f:9e:bb:e1:81:6d:39:26:f7:dc:
3a:3f:99:80:60:22:35:12:88:2c:da:ab:80:62:7a:23:29:de:
42:4f:48:0d:e6:3f:53:5a:45:b5:b8:7a:fe:9f:d2:f1:8a:20:
2a:7e:19:ab:f0:14:f0:da:8d:c4:dc:00:d2:8a:53:b5:0f:61:
e4:8a:86:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:51:36 2025 by rpki-client