Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
File: CJu7CaX772E1wtkgvye7YfXC4J0.mft (raw, json)
Hash identifier: 0Tt7M79WRZlwevTElxpRCjxcduUrXjQS2EOOD0OVNUQ=
Subject key identifier: 90:91:D5:6B:AC:78:99:C3:A4:87:CC:A4:67:DB:80:65:1A:56:56:A9
Authority key identifier: 08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
Certificate issuer: /CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Certificate serial: 0197B77BF7D924266A60AB68B2C59422FCC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 17:00:44 +0000
Manifest this update: Sat 28 Jun 2025 17:00:44 +0000
Manifest next update: Sun 29 Jun 2025 17:00:44 +0000
Files and hashes: 1: CJu7CaX772E1wtkgvye7YfXC4J0.crl (hash: cIPFd2p3+d+DWxoCNpyVEas9R/mWKjevpHvzmyBwZYg=)
2: y1lINwCoifyovhdAeAf2rHi3ZHU.roa (hash: wdFrAh4YUjbnThTYrymA+tW+SWC0S+T+ZCRyXfvs7nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7b:f7:d9:24:26:6a:60:ab:68:b2:c5:94:22:fc:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Validity
Not Before: Jun 28 17:00:44 2025 GMT
Not After : Jun 29 17:00:44 2025 GMT
Subject: CN=9091d56bac7899c3a487cca467db80651a5656a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f7:3a:4d:d2:da:14:53:d8:02:35:73:b0:58:
06:14:c0:a6:a0:da:92:24:3a:70:19:ea:d3:c0:ec:
11:2c:00:1e:65:44:12:e7:8b:cb:81:88:00:55:06:
fe:42:14:eb:74:d4:98:92:3e:58:fe:a2:7c:7c:0b:
a4:cb:9d:ed:8b:19:4b:c6:08:99:fa:36:08:c4:bd:
92:2b:92:85:5b:dc:9b:85:27:52:22:1c:33:be:d6:
7c:d7:91:06:05:4f:b4:4b:3e:4e:2d:63:e4:dc:9b:
f7:e5:6e:36:96:0b:ab:1e:21:e5:e2:14:76:2c:3e:
3d:22:56:28:43:59:c2:41:dc:3f:2a:7d:9c:69:8f:
a6:83:1e:e1:ae:f4:10:5b:97:47:e3:4c:45:b8:f7:
be:61:ca:8a:0c:b4:6d:85:5c:a8:66:7f:0b:88:9c:
10:35:86:47:cb:bc:a9:5a:9c:9e:fc:3b:7d:37:41:
9a:af:91:33:82:68:c3:2c:70:e9:f6:69:aa:92:59:
f2:86:75:59:53:e4:58:4e:1d:64:98:ee:43:9b:6a:
3d:d6:1c:e2:16:ae:75:a9:2e:83:be:e7:69:3c:02:
09:2d:e1:df:98:e3:63:a3:92:17:bb:7c:f5:6c:21:
42:1d:00:f9:ac:ce:b3:91:8c:9a:3a:36:01:0c:75:
ef:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:91:D5:6B:AC:78:99:C3:A4:87:CC:A4:67:DB:80:65:1A:56:56:A9
X509v3 Authority Key Identifier:
keyid:08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:83:7a:20:a3:cc:80:86:65:bc:35:12:0c:6d:5e:7a:98:8e:
19:7f:d4:23:8c:b2:e3:2b:a7:b1:2d:7d:7c:dd:c4:2d:38:ae:
81:81:50:37:b1:ea:fd:01:5e:f4:1a:30:b0:89:4b:d1:db:aa:
41:b9:82:6b:9b:20:11:ff:e8:d1:e9:be:7c:27:21:52:b9:8e:
26:5c:a2:92:2f:83:9f:6d:d6:2c:05:f4:94:a6:a9:4a:60:81:
0a:56:25:55:6d:30:4a:43:ba:76:0c:a4:98:b9:0e:3b:51:6c:
24:f3:98:95:60:ba:f3:6a:df:18:da:7d:8d:b3:78:54:84:e8:
1e:08:d9:fa:b3:ce:5c:9f:36:be:42:b2:4c:5b:90:57:f9:41:
57:0c:b1:b8:19:88:b1:b4:9a:56:c9:d5:9f:27:88:40:96:a9:
68:aa:b7:0b:2a:e9:b3:9a:54:ef:b0:8a:08:47:32:00:df:1a:
0a:3f:7d:3b:ba:50:8d:19:db:f9:9c:5f:59:7d:c8:04:25:5f:
84:55:eb:da:23:e0:e0:9d:66:5e:46:6f:d4:2b:17:6e:c4:b0:
f5:a5:81:4b:2c:ea:57:5c:a6:37:3a:c9:ce:bf:dd:0d:d5:9e:
c8:43:23:61:1c:1d:1e:cc:57:25:f0:91:32:e8:14:0b:aa:9e:
a2:62:b6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:55:48 2025 by rpki-client