Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
File: CJu7CaX772E1wtkgvye7YfXC4J0.mft (raw, json)
Hash identifier: cE3jRGOGvGSXFCbFYVXWGGqa7YP7fNW9oYK55gyZrzQ=
Subject key identifier: AF:1C:A9:A9:6B:B5:91:63:1D:9F:9E:71:5B:D4:23:39:B6:7C:20:38
Authority key identifier: 08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
Certificate issuer: /CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Certificate serial: 0198D54DCDDC98619A9FA0E15DE956D92F9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 05:01:42 +0000
Manifest this update: Sat 23 Aug 2025 05:01:42 +0000
Manifest next update: Sun 24 Aug 2025 05:01:42 +0000
Files and hashes: 1: CJu7CaX772E1wtkgvye7YfXC4J0.crl (hash: 3vacB03QgriArWUezjvgsB0IFmQBzfj8foHanm22lVI=)
2: y1lINwCoifyovhdAeAf2rHi3ZHU.roa (hash: wdFrAh4YUjbnThTYrymA+tW+SWC0S+T+ZCRyXfvs7nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:cd:dc:98:61:9a:9f:a0:e1:5d:e9:56:d9:2f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Validity
Not Before: Aug 23 05:01:42 2025 GMT
Not After : Aug 24 05:01:42 2025 GMT
Subject: CN=af1ca9a96bb591631d9f9e715bd42339b67c2038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4c:08:6c:ae:df:f6:a5:02:bf:67:f4:c3:d1:
41:12:9b:fa:1a:49:3b:4f:bf:33:de:ff:46:4a:44:
f0:3c:f0:29:fe:f4:84:0b:a1:75:9e:73:41:ed:b1:
54:37:ac:27:b3:b9:7a:8d:13:a9:e1:24:55:aa:b8:
92:39:58:4a:cd:73:9c:1d:d3:09:1d:0c:55:e5:08:
f7:3e:7a:d4:c8:17:ec:82:ea:16:37:92:4e:f5:35:
25:a4:a4:06:51:94:a5:e4:80:58:42:8b:36:df:68:
c5:dd:ea:92:a8:a7:2c:5a:86:d3:ab:ab:3e:d4:33:
8d:c2:e3:4a:93:0e:a3:32:c5:61:32:5f:3b:8e:49:
28:24:ea:3f:db:1d:57:9f:a0:e8:79:9b:0a:81:79:
3b:32:e7:bb:e1:6f:11:e3:f2:7f:ec:0e:4c:c0:cd:
e1:9d:9f:59:98:f6:2b:d4:7b:38:cd:7c:be:f6:63:
2a:bf:f1:07:81:0d:67:64:c7:f2:91:e3:ab:69:b7:
65:29:3e:d9:16:86:c6:0d:25:9e:7e:2b:75:8c:5a:
5a:8b:4f:e5:2a:82:b7:bc:e0:b7:1e:aa:f4:97:b3:
4a:65:df:78:2f:ba:61:41:34:6d:90:27:2b:c8:53:
54:d4:da:a1:cf:7e:0e:c5:5b:67:85:66:4e:e6:6a:
05:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:1C:A9:A9:6B:B5:91:63:1D:9F:9E:71:5B:D4:23:39:B6:7C:20:38
X509v3 Authority Key Identifier:
keyid:08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f9:68:93:83:63:a2:8e:20:ca:07:3b:5a:0a:3e:83:da:8f:
90:08:3e:2c:9c:ad:e8:c8:17:50:9f:f5:a0:32:4a:07:ff:32:
ca:65:25:02:93:9f:92:80:58:a6:9a:19:1a:df:f2:b4:1b:7b:
bf:d0:b6:ec:46:0e:89:ad:da:68:b8:4b:77:45:5f:28:6c:72:
02:b0:b7:de:1f:0c:c3:b7:ac:06:8f:fa:64:50:44:28:ea:ac:
e6:d8:19:ba:1f:6a:d7:e2:a1:eb:ff:1a:c4:62:cc:c5:69:fd:
57:98:82:1c:d3:92:19:8a:bd:f5:e3:eb:8a:ae:57:a0:8f:54:
51:49:24:28:c9:6d:85:3e:e0:57:35:db:d7:e9:ed:31:42:ce:
78:25:ee:15:c5:ab:5b:6b:7f:24:9c:b6:f3:f1:d4:c3:97:3d:
8b:26:8e:15:80:b3:39:96:98:74:a0:77:cb:55:07:3c:06:bb:
24:44:22:c7:b3:24:f6:bc:77:b1:49:13:6b:98:fd:18:b6:39:
6a:a4:8c:78:67:b0:26:6c:5b:f1:f6:2e:dc:e8:a0:a5:e7:b2:
ba:76:ee:e2:de:d8:0c:e6:c4:93:c6:17:a6:b8:18:8a:47:42:
c0:12:0f:4f:70:4f:09:c7:da:29:34:9c:08:87:54:89:96:19:
16:9a:1c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:20 2025 by rpki-client