Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
File: CUJF7otbpMZv4s7KZL5Gb8lvce0.mft (raw, json)
Hash identifier: 1kHZbavw7UnLhY9UeTj18s9zXoDerg2LVLYdJBSXXg8=
Subject key identifier: 3F:85:9A:C9:0A:CE:09:21:04:F7:2E:3B:DC:88:8E:ED:9E:2E:C5:7A
Authority key identifier: 09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED
Certificate issuer: /CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed
Certificate serial: 0197B6A0F68CE6B52DFED2DE83EFBB0D8C52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
Manifest number: 10F7
Signing time: Sat 28 Jun 2025 13:01:31 +0000
Manifest this update: Sat 28 Jun 2025 13:01:31 +0000
Manifest next update: Sun 29 Jun 2025 13:01:31 +0000
Files and hashes: 1: CUJF7otbpMZv4s7KZL5Gb8lvce0.crl (hash: sy3CN1e9HaUC8A57N/3HrTwIya1j30UweJee96OMDh4=)
2: sT8i_lrT1dmgF96pIWG66J0xLDw.roa (hash: aG6mOGyX8yA6EwWHgoUdHhg4b1jzs6sii5gM4RFtUiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:f6:8c:e6:b5:2d:fe:d2:de:83:ef:bb:0d:8c:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed
Validity
Not Before: Jun 28 13:01:31 2025 GMT
Not After : Jun 29 13:01:31 2025 GMT
Subject: CN=3f859ac90ace092104f72e3bdc888eed9e2ec57a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:dc:fb:b3:04:7a:25:f7:a8:e5:5d:ee:3b:eb:
b6:9f:b4:00:c9:8e:bb:c3:ee:96:58:82:8e:50:8d:
30:2d:36:42:26:0f:af:8b:ff:fe:c1:04:5c:f7:13:
eb:54:06:27:b9:67:19:a7:b8:23:a0:23:31:3c:37:
bd:bc:8d:a7:be:33:4a:f3:b2:25:5c:27:50:e3:65:
c1:cf:40:f8:c0:50:6b:f8:34:1c:d9:75:d2:0e:1b:
96:0a:6d:07:9a:4b:d5:36:9e:26:75:9d:ac:a8:da:
b7:85:64:56:36:8c:7b:00:c6:1e:74:ff:27:6f:16:
d0:4e:63:74:9c:e8:2b:35:1e:6b:2e:95:c4:b7:de:
4b:d4:1d:96:fe:15:41:38:af:2f:27:32:03:e8:5c:
56:f7:e2:66:d4:3f:d9:e1:1a:57:c5:d0:6b:8b:ea:
1e:08:bd:1b:bd:fc:6d:79:c4:b3:f8:ba:09:93:db:
97:af:36:df:fb:4f:b2:f4:48:7c:d8:c1:44:2b:1f:
6c:0f:52:e0:f2:35:fd:df:a0:82:e9:e0:b2:32:fb:
1e:23:a3:99:28:de:b8:24:c7:a7:83:1f:23:83:13:
07:a2:ad:f2:0f:01:9b:1e:e3:fb:32:c7:30:f3:7b:
20:10:eb:55:c3:f9:7e:f2:df:e5:39:93:76:6e:1e:
d7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:85:9A:C9:0A:CE:09:21:04:F7:2E:3B:DC:88:8E:ED:9E:2E:C5:7A
X509v3 Authority Key Identifier:
keyid:09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:a8:7b:f3:90:38:c4:51:4a:fd:97:00:03:ee:e6:d6:4b:8f:
7c:dd:c0:0a:f2:d7:5d:6a:ce:de:ee:6d:44:c5:2f:6b:42:e3:
94:99:65:7b:87:c9:21:54:2f:20:a6:78:f1:37:bd:3c:0f:dc:
b2:88:99:3e:81:af:12:53:99:54:99:99:07:82:ed:a3:46:cc:
72:46:f2:66:58:67:d2:f4:9a:f6:81:88:e8:84:e3:86:55:1b:
2d:64:cd:da:ef:7f:c3:7f:fb:6f:88:00:9b:e8:f9:eb:88:f2:
9f:ca:90:9e:cd:a9:8e:e7:7a:6e:58:81:2e:c0:c9:a8:22:0b:
a4:39:f0:2a:46:14:2b:75:73:e8:94:13:51:63:33:f9:3d:78:
53:51:ec:4f:9a:dd:6e:2f:51:53:9a:eb:c3:fe:4c:e6:5d:35:
9c:71:e0:36:a2:d0:b2:f9:48:4f:7d:e6:c0:6a:2c:5d:d9:b5:
e0:7e:1a:3a:06:44:df:dc:d7:26:e1:16:f8:72:f7:c5:91:75:
b3:ac:bd:0e:35:4a:2f:6a:6e:f0:00:88:64:59:46:05:2c:6e:
6c:9f:1e:be:8e:6d:b6:3f:37:4e:0b:13:0f:58:eb:c5:6e:8a:
ab:f9:08:80:d3:d1:9a:40:6a:f6:ea:a2:c8:a5:aa:a8:43:e5:
67:f6:8b:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oPaM5rUt/tLeg++7DYxSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NDI0NWVlOGI1YmE0YzY2ZmUyY2VjYTY0YmU0NjZmYzk2
ZjcxZWQwHhcNMjUwNjI4MTMwMTMxWhcNMjUwNjI5MTMwMTMxWjAzMTEwLwYDVQQD
EygzZjg1OWFjOTBhY2UwOTIxMDRmNzJlM2JkYzg4OGVlZDllMmVjNTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9z7swR6Jfeo5V3uO+u2n7QAyY67
w+6WWIKOUI0wLTZCJg+vi//+wQRc9xPrVAYnuWcZp7gjoCMxPDe9vI2nvjNK87Il
XCdQ42XBz0D4wFBr+DQc2XXSDhuWCm0HmkvVNp4mdZ2sqNq3hWRWNox7AMYedP8n
bxbQTmN0nOgrNR5rLpXEt95L1B2W/hVBOK8vJzID6FxW9+Jm1D/Z4RpXxdBri+oe
CL0bvfxtecSz+LoJk9uXrzbf+0+y9Eh82MFEKx9sD1Lg8jX936CC6eCyMvseI6OZ
KN64JMengx8jgxMHoq3yDwGbHuP7Mscw83sgEOtVw/l+8t/lOZN2bh7XaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+FmskKzgkhBPcuO9yIju2eLsV6MB8GA1UdIwQY
MBaAFAlCRe6LW6TGb+LOymS+Rm/Jb3HtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1VKRjdvdGJwTVp2NHM3S1pMNUdiOGx2Y2UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9iZGQ0M2YtNDUyOC00YzkyLTg4YmEt
NTZlN2Y5M2RjZGJmLzEvQ1VKRjdvdGJwTVp2NHM3S1pMNUdiOGx2Y2UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9iZGQ0M2YtNDUyOC00YzkyLTg4YmEtNTZlN2Y5M2RjZGJm
LzEvQ1VKRjdvdGJwTVp2NHM3S1pMNUdiOGx2Y2UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgqh785A4
xFFK/ZcAA+7m1kuPfN3ACvLXXWrO3u5tRMUva0LjlJlle4fJIVQvIKZ48Te9PA/c
soiZPoGvElOZVJmZB4Lto0bMckbyZlhn0vSa9oGI6ITjhlUbLWTN2u9/w3/7b4gA
m+j564jyn8qQns2pjud6bliBLsDJqCILpDnwKkYUK3Vz6JQTUWMz+T14U1HsT5rd
bi9RU5rrw/5M5l01nHHgNqLQsvlIT33mwGosXdm14H4aOgZE39zXJuEW+HL3xZF1
s6y9DjVKL2pu8ACIZFlGBSxubJ8evo5ttj83TgsTD1jrxW6Kq/kIgNPRmkBq9uqi
yKWqqEPlZ/aL+Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:20:15 2025 by rpki-client