Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
File: JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft (raw, json)
Hash identifier: 7zvN+j5tsCK5tqL0yEhGYQVO7BxxpIjgAq/1N3pnHOA=
Subject key identifier: 83:D2:D8:0A:7A:78:C5:AB:45:AD:0E:3A:79:51:A9:29:7E:10:21:EF
Authority key identifier: 25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
Certificate issuer: /CN=25292652a9ecd9c6bdc8264b9948df6212207624
Certificate serial: 019A53AD023B3C2EECF7067DACFCC8303C60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
Manifest number: 059E
Signing time: Wed 05 Nov 2025 11:00:38 +0000
Manifest this update: Wed 05 Nov 2025 11:00:38 +0000
Manifest next update: Thu 06 Nov 2025 11:00:38 +0000
Files and hashes: 1: JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl (hash: QQPGfIAVB1aNph8mWQiKC+urGG/CcEs3NDv7qwdeIjg=)
2: gIoP5IlKCAUdNwSrZkk73xG1bak.roa (hash: L6IvKagK21CBw7cUsEmV/ioBkPrOpbbJsBKkV2YZAQM=)
3: tjlBefyTUPW2ocj52DG8SScrNVs.roa (hash: i2v8f90/aacPA+KsrniOR03Tuhb0f1sC6zK1p2LnGA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ad:02:3b:3c:2e:ec:f7:06:7d:ac:fc:c8:30:3c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25292652a9ecd9c6bdc8264b9948df6212207624
Validity
Not Before: Nov 5 11:00:38 2025 GMT
Not After : Nov 6 11:00:38 2025 GMT
Subject: CN=83d2d80a7a78c5ab45ad0e3a7951a9297e1021ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6b:eb:5b:54:01:82:b7:f2:21:22:2d:60:bd:
2a:f3:94:5f:c4:b7:09:7a:c3:47:53:2b:00:75:00:
ea:25:5a:e9:68:e6:e0:74:1c:f7:6b:dd:34:33:26:
50:40:c4:48:67:f8:a6:2d:ef:14:9d:f2:44:f0:c3:
5f:a3:f3:01:e4:62:c2:7a:fc:91:a9:24:78:4a:48:
7f:67:34:73:9c:f5:f3:cd:d5:6e:29:b5:28:8a:58:
d2:5a:fa:bd:5f:c3:92:db:52:7a:c1:68:8d:84:6f:
34:78:d3:9e:79:06:66:e4:e2:09:77:f0:5f:03:97:
59:60:21:8e:ba:6e:cb:be:85:c7:b4:ac:80:67:5a:
39:b2:d6:74:a2:9e:9a:46:fc:61:ad:d9:62:65:f3:
23:66:dc:30:fc:eb:c7:12:61:df:e6:c6:27:f6:5f:
0c:2b:8c:e3:e6:19:12:96:a6:f2:13:8e:04:c9:29:
0f:67:98:aa:cc:88:c5:8d:8a:c9:9c:bf:d7:e9:93:
ca:68:d9:2e:68:87:ef:2e:0b:b2:33:e4:12:62:d0:
d9:23:1b:82:93:7d:92:fe:1b:1a:22:11:92:f5:7a:
ff:74:00:57:e7:ea:ae:73:43:d6:c5:47:98:fd:64:
84:95:95:89:94:54:73:56:e8:c4:28:60:08:54:91:
2a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D2:D8:0A:7A:78:C5:AB:45:AD:0E:3A:79:51:A9:29:7E:10:21:EF
X509v3 Authority Key Identifier:
keyid:25:29:26:52:A9:EC:D9:C6:BD:C8:26:4B:99:48:DF:62:12:20:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSkmUqns2ca9yCZLmUjfYhIgdiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/21a4fd-bd8a-4aa4-8c45-5710305439ec/1/JSkmUqns2ca9yCZLmUjfYhIgdiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:74:94:c7:8f:17:0f:6c:01:3e:c3:fc:d8:b6:68:0d:59:ea:
fa:b1:70:af:c9:98:01:e9:85:f8:c8:e6:6d:63:0a:a0:4a:28:
91:0b:96:74:f8:8b:2e:41:a0:10:25:56:7b:c8:b8:eb:13:4f:
6d:a2:fe:68:9a:4a:cb:1a:12:8d:42:ea:55:1e:de:81:26:b3:
9b:39:58:ae:a7:9c:8e:e7:a2:53:a8:75:1c:39:58:28:c1:f1:
ea:11:09:3d:fd:d3:b9:5c:2c:90:73:ba:6f:54:f5:96:0d:01:
17:2a:34:b7:9b:ff:1c:a3:0a:58:81:36:13:21:0d:01:da:bc:
9c:dd:9f:ec:a4:2e:8b:a1:97:71:3a:a3:95:66:9b:c1:65:3d:
72:4a:bb:d4:52:82:c0:c5:6e:59:a0:35:a6:09:26:b0:d4:0f:
4a:25:11:e9:89:fc:e0:35:3e:a8:3e:9f:8d:a1:53:e0:74:95:
be:1d:a3:28:15:c6:33:68:89:2d:2b:50:48:fc:09:dc:0d:3c:
be:e0:7c:b7:cf:c8:d2:78:b1:92:14:12:f7:e7:aa:58:55:cc:
e5:8d:c2:30:e0:79:c2:9b:49:62:2a:bb:e1:58:5d:28:fd:3f:
6d:fa:7c:66:05:43:04:43:aa:a6:96:5b:35:6c:6d:94:da:5a:
1b:a7:6e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:01:00 2025 by rpki-client