Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
File: CUJF7otbpMZv4s7KZL5Gb8lvce0.mft (raw, json)
Hash identifier: UqQOoARdvPxl+X8vm3EXG++HN2wFm5ZuQjse6mcT2aE=
Subject key identifier: 5A:B0:C1:57:8A:1E:D4:CA:D0:20:FD:A0:CD:A9:B0:DB:9E:94:BE:B8
Authority key identifier: 09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED
Certificate issuer: /CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed
Certificate serial: 0198D473884BA38DCFCD3CA162D15633489A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
Manifest number: 118B
Signing time: Sat 23 Aug 2025 01:03:18 +0000
Manifest this update: Sat 23 Aug 2025 01:03:18 +0000
Manifest next update: Sun 24 Aug 2025 01:03:18 +0000
Files and hashes: 1: CUJF7otbpMZv4s7KZL5Gb8lvce0.crl (hash: NvvJ60fTU2LAt+7OfH8eMsof+IEw6svZl5nvRLCIvZU=)
2: sT8i_lrT1dmgF96pIWG66J0xLDw.roa (hash: aG6mOGyX8yA6EwWHgoUdHhg4b1jzs6sii5gM4RFtUiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:88:4b:a3:8d:cf:cd:3c:a1:62:d1:56:33:48:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed
Validity
Not Before: Aug 23 01:03:18 2025 GMT
Not After : Aug 24 01:03:18 2025 GMT
Subject: CN=5ab0c1578a1ed4cad020fda0cda9b0db9e94beb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d1:af:60:fc:57:f1:82:4e:dd:8d:c1:4b:85:
cc:f0:e7:69:6a:fa:31:17:a9:27:ac:45:c2:10:de:
78:21:62:51:42:b7:f3:bd:a5:51:c6:97:f2:83:94:
1e:8a:fd:e0:be:dd:82:d0:06:5b:bb:67:95:42:a1:
25:57:c8:b2:2c:b0:3d:f2:5c:a5:cf:41:85:07:67:
2b:e7:44:ba:a0:77:7f:66:b9:a9:de:bd:f0:77:d7:
ab:80:86:75:66:a8:c0:ec:75:dd:0e:dd:73:92:78:
d4:d7:f0:3a:16:91:b0:f5:f1:81:e3:0c:04:c5:a3:
52:b3:d9:19:26:5f:8c:f9:6f:fe:2a:80:dd:b7:36:
62:4c:3a:03:dd:ee:1c:2a:72:8b:73:01:ad:4c:5e:
f0:de:0d:d0:b4:41:60:78:a3:3c:2f:93:89:cb:ea:
37:da:98:f3:f4:26:0a:11:39:c1:b2:d0:69:3b:0e:
a1:ce:ab:51:70:d7:2f:81:c5:6d:82:71:83:15:93:
4e:1b:28:1e:56:15:7e:f1:a7:01:3d:6d:70:f8:f9:
10:2a:eb:34:81:26:df:19:9f:84:60:7d:a8:7c:77:
35:70:b0:af:ad:94:fa:7d:5b:f0:2f:0e:0f:5b:79:
4d:c7:4b:cc:36:35:3e:ab:22:3e:d7:00:3b:28:36:
84:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B0:C1:57:8A:1E:D4:CA:D0:20:FD:A0:CD:A9:B0:DB:9E:94:BE:B8
X509v3 Authority Key Identifier:
keyid:09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:5e:f6:2f:ce:f3:a8:d5:02:4b:92:b3:40:81:e5:57:49:df:
f1:98:d8:f4:c3:a1:2e:2c:1a:e3:cc:eb:34:98:80:19:f8:46:
25:a1:34:b5:b5:e3:d2:b7:cc:00:07:d1:98:04:91:a8:da:9e:
39:c4:00:a0:a1:68:c6:3f:26:e1:39:e5:dd:df:0f:ae:88:90:
f9:71:34:18:e7:7e:c8:03:8c:2b:6f:57:fd:4b:6a:fe:45:df:
aa:82:57:a8:cb:ae:79:0d:28:a7:cf:6d:73:d1:c2:e0:b1:0e:
11:18:26:b5:e3:1e:a3:7a:de:40:bc:c0:b9:80:e6:4e:e7:17:
cd:7f:a5:a8:52:0c:cd:85:e5:1f:16:af:6f:87:d0:7d:8f:56:
ac:2b:49:fc:e5:f5:dd:fd:6f:14:2c:26:0c:e9:68:b3:bb:6b:
26:04:e1:9a:e0:37:14:69:91:f9:24:6d:16:38:10:4f:ea:bb:
84:25:84:b3:bc:03:ce:cb:c9:f5:39:03:42:2a:ba:ee:4d:95:
24:dd:f8:14:bb:a4:2a:55:9f:66:c2:4b:9a:c1:a7:b6:32:1a:
15:3c:c6:5d:2d:f7:99:5b:e8:d6:80:1c:20:95:75:ae:49:78:
b8:bd:12:80:2f:6d:04:e3:90:fe:e0:ae:94:97:da:47:81:17:
bd:d6:16:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc4hLo43PzTyhYtFWM0iaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NDI0NWVlOGI1YmE0YzY2ZmUyY2VjYTY0YmU0NjZmYzk2
ZjcxZWQwHhcNMjUwODIzMDEwMzE4WhcNMjUwODI0MDEwMzE4WjAzMTEwLwYDVQQD
Eyg1YWIwYzE1NzhhMWVkNGNhZDAyMGZkYTBjZGE5YjBkYjllOTRiZWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9GvYPxX8YJO3Y3BS4XM8Odpavox
F6knrEXCEN54IWJRQrfzvaVRxpfyg5Qeiv3gvt2C0AZbu2eVQqElV8iyLLA98lyl
z0GFB2cr50S6oHd/Zrmp3r3wd9ergIZ1ZqjA7HXdDt1zknjU1/A6FpGw9fGB4wwE
xaNSs9kZJl+M+W/+KoDdtzZiTDoD3e4cKnKLcwGtTF7w3g3QtEFgeKM8L5OJy+o3
2pjz9CYKETnBstBpOw6hzqtRcNcvgcVtgnGDFZNOGygeVhV+8acBPW1w+PkQKus0
gSbfGZ+EYH2ofHc1cLCvrZT6fVvwLw4PW3lNx0vMNjU+qyI+1wA7KDaE3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqwwVeKHtTK0CD9oM2psNuelL64MB8GA1UdIwQY
MBaAFAlCRe6LW6TGb+LOymS+Rm/Jb3HtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1VKRjdvdGJwTVp2NHM3S1pMNUdiOGx2Y2UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9iZGQ0M2YtNDUyOC00YzkyLTg4YmEt
NTZlN2Y5M2RjZGJmLzEvQ1VKRjdvdGJwTVp2NHM3S1pMNUdiOGx2Y2UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9iZGQ0M2YtNDUyOC00YzkyLTg4YmEtNTZlN2Y5M2RjZGJm
LzEvQ1VKRjdvdGJwTVp2NHM3S1pMNUdiOGx2Y2UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgF72L87z
qNUCS5KzQIHlV0nf8ZjY9MOhLiwa48zrNJiAGfhGJaE0tbXj0rfMAAfRmASRqNqe
OcQAoKFoxj8m4Tnl3d8ProiQ+XE0GOd+yAOMK29X/Utq/kXfqoJXqMuueQ0op89t
c9HC4LEOERgmteMeo3reQLzAuYDmTucXzX+lqFIMzYXlHxavb4fQfY9WrCtJ/OX1
3f1vFCwmDOlos7trJgThmuA3FGmR+SRtFjgQT+q7hCWEs7wDzsvJ9TkDQiq67k2V
JN34FLukKlWfZsJLmsGntjIaFTzGXS33mVvo1oAcIJV1rkl4uL0SgC9tBOOQ/uCu
lJfaR4EXvdYWjQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:44:31 2025 by rpki-client