Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
File: CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft (raw, json)
Hash identifier: oL2t7WmcnQlI8I2Jvch5L07IWlZa8cZ4xrZiQbDJKdk=
Subject key identifier: 3E:FD:E5:B6:AA:24:44:C3:52:E6:85:D2:82:FB:5B:D8:70:91:AA:4F
Authority key identifier: 08:9F:CF:2A:B6:E6:DB:C1:63:4E:E5:91:FC:1B:74:A4:1D:E3:EA:5F
Certificate issuer: /CN=089fcf2ab6e6dbc1634ee591fc1b74a41de3ea5f
Certificate serial: 0198D6614A199AB8BD7931F0A49E84695E3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
Manifest number: 134E
Signing time: Sat 23 Aug 2025 10:02:36 +0000
Manifest this update: Sat 23 Aug 2025 10:02:36 +0000
Manifest next update: Sun 24 Aug 2025 10:02:36 +0000
Files and hashes: 1: CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl (hash: w4VEqdrjlRGn7JA8rT56uB3hlkgXiop9FpbaL8sLJjE=)
2: b5Jj4qgundIuSAAGFCkt8JiFnho.roa (hash: 06WuFnYu9V9s1QGtR8S6F/K40CDV7ycfNQPEsDlVYUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:4a:19:9a:b8:bd:79:31:f0:a4:9e:84:69:5e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089fcf2ab6e6dbc1634ee591fc1b74a41de3ea5f
Validity
Not Before: Aug 23 10:02:36 2025 GMT
Not After : Aug 24 10:02:36 2025 GMT
Subject: CN=3efde5b6aa2444c352e685d282fb5bd87091aa4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:de:fd:5e:b1:c0:7b:6c:91:0b:63:4f:81:d4:
48:df:cb:3a:d4:02:af:c0:a1:00:58:3b:61:d1:52:
fa:90:93:8a:bc:e7:9a:e4:a2:ea:66:26:0b:47:e0:
2b:41:23:67:3f:6a:6c:9b:a8:af:16:45:49:92:50:
2c:ab:49:a4:98:d4:ca:08:19:43:88:97:4a:cc:a9:
47:39:7e:42:15:03:85:3b:d5:6a:6f:4a:2f:19:ad:
bf:89:4f:4f:14:a7:e2:21:3f:d4:d3:0e:31:2f:85:
81:cd:92:2d:79:d9:66:fc:76:2f:b5:b1:de:3f:e1:
cb:d1:af:61:1d:5f:13:70:23:d0:46:df:d1:b0:a0:
3c:15:78:2d:42:1d:a8:1a:4c:c9:6f:bc:81:b3:b9:
5f:45:fb:cd:21:16:c7:bb:5a:7d:6f:1b:b6:b9:c3:
c0:e3:e5:22:be:bb:30:6e:5f:6f:2d:c5:32:eb:fc:
4e:4b:0b:04:a6:c2:38:2b:7a:62:fd:f6:f2:f1:53:
65:17:2f:92:ec:f6:88:19:1f:2e:12:1e:6a:fe:d4:
5d:28:b8:ab:21:69:b0:54:d7:1a:4f:e7:4f:cb:a8:
0b:c2:6c:80:e7:40:62:e8:01:04:8f:ae:ec:b9:30:
d6:fa:57:14:53:48:34:3b:3a:d2:bd:44:80:d1:a5:
22:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FD:E5:B6:AA:24:44:C3:52:E6:85:D2:82:FB:5B:D8:70:91:AA:4F
X509v3 Authority Key Identifier:
keyid:08:9F:CF:2A:B6:E6:DB:C1:63:4E:E5:91:FC:1B:74:A4:1D:E3:EA:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:3e:8c:b9:91:ae:28:c8:da:29:39:01:76:cc:2f:eb:1e:73:
f4:47:09:a6:9d:00:0f:76:c7:0e:d6:f6:ab:6d:5e:34:6c:c0:
38:21:ec:c1:8b:e6:f4:6c:17:a3:9b:34:d0:59:f2:e6:60:4f:
21:a0:7e:92:c3:1d:cc:9a:17:ad:d6:8b:4f:0a:1b:e3:82:3d:
eb:3b:72:e2:e7:9e:b4:4e:33:2d:93:9f:28:79:6e:50:55:e4:
25:0d:42:7b:f4:14:4e:5a:b4:75:01:1b:3c:35:dd:d8:09:12:
23:0e:5f:2f:65:2f:f0:2a:72:01:3d:9d:52:61:5c:b0:8a:bc:
3e:a5:f3:b8:bd:85:0c:94:6f:73:1d:3a:d9:f6:3b:67:34:7c:
3f:56:9a:63:44:f5:93:23:e5:e9:b0:c5:04:03:1c:5e:25:91:
f6:bd:f5:c4:6a:6c:44:ad:cc:e7:5a:ed:c1:21:af:67:9f:e2:
29:d1:91:8c:aa:09:d0:c2:6c:95:1d:63:64:c9:fe:15:9e:d7:
fb:cb:f1:1d:c3:3b:3c:3c:1b:c3:58:b7:08:4a:39:78:68:d2:
cf:a2:e8:57:50:4c:3b:f5:15:d5:10:a8:1b:f1:40:42:4e:12:
1a:ca:74:10:cd:1b:3e:45:65:08:60:c0:bf:7e:a2:93:af:c3:
17:7e:b8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:11:04 2025 by rpki-client