Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
File: CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft (raw, json)
Hash identifier: oNuWQiGRYE3W5BNeMOASmgjM8IV0Eaw/AFWvUiUp7Qs=
Subject key identifier: 85:78:CC:DF:A2:E7:2B:C4:B3:D6:B5:18:74:AD:E2:63:46:8A:3D:3C
Authority key identifier: 08:9F:CF:2A:B6:E6:DB:C1:63:4E:E5:91:FC:1B:74:A4:1D:E3:EA:5F
Certificate issuer: /CN=089fcf2ab6e6dbc1634ee591fc1b74a41de3ea5f
Certificate serial: 0199FBEC4DEFC10A3133C52DFDC9BC2E1DF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
Manifest number: 13E6
Signing time: Sun 19 Oct 2025 10:03:11 +0000
Manifest this update: Sun 19 Oct 2025 10:03:11 +0000
Manifest next update: Mon 20 Oct 2025 10:03:11 +0000
Files and hashes: 1: CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl (hash: zIdMrXNt1lt21X/FhOV0YabOI6eVqLlhmz6guwHhRrE=)
2: b5Jj4qgundIuSAAGFCkt8JiFnho.roa (hash: 06WuFnYu9V9s1QGtR8S6F/K40CDV7ycfNQPEsDlVYUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:03:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:4d:ef:c1:0a:31:33:c5:2d:fd:c9:bc:2e:1d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089fcf2ab6e6dbc1634ee591fc1b74a41de3ea5f
Validity
Not Before: Oct 19 10:03:11 2025 GMT
Not After : Oct 20 10:03:11 2025 GMT
Subject: CN=8578ccdfa2e72bc4b3d6b51874ade263468a3d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:47:13:00:03:6d:35:27:24:a4:c7:42:1f:d1:
25:ad:bb:02:4b:82:33:5c:6e:0b:e8:50:85:47:5f:
41:d4:33:ca:3a:09:db:ba:01:ef:a0:af:8c:f3:59:
ec:2a:c0:91:97:d1:40:2b:0f:f6:34:74:e6:17:f2:
8b:88:6e:7a:c2:2a:dc:57:50:b0:6a:4b:73:50:fa:
d3:76:d0:e0:45:7d:90:20:e9:61:91:6a:f8:88:b5:
d8:3f:5d:0a:7b:b1:2e:ae:42:9b:12:87:cf:bc:85:
ab:a3:0f:39:57:53:0a:3b:f6:9d:f2:c9:78:11:9d:
b5:ba:8d:d6:78:54:bc:54:3c:37:da:07:4b:9b:8a:
be:ae:44:a3:34:52:7d:48:60:ae:c1:11:b2:80:4f:
80:33:8e:c3:c4:ba:e3:97:b0:dd:b9:ea:63:61:2c:
aa:e5:49:8c:3a:53:8a:24:0f:d5:6e:bb:ca:d6:87:
9c:56:8d:2a:8d:cc:38:95:b8:75:3d:41:13:6c:ff:
95:a0:87:f3:6a:90:ac:3d:02:d6:85:d8:5e:30:99:
a9:a2:8f:13:1c:8d:63:41:b0:c6:28:6f:bb:a2:3c:
52:8e:e8:8d:00:5a:98:84:48:62:53:68:c7:75:57:
90:c5:45:c3:aa:64:c7:86:c0:82:c0:1e:b9:8c:d1:
4f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:78:CC:DF:A2:E7:2B:C4:B3:D6:B5:18:74:AD:E2:63:46:8A:3D:3C
X509v3 Authority Key Identifier:
keyid:08:9F:CF:2A:B6:E6:DB:C1:63:4E:E5:91:FC:1B:74:A4:1D:E3:EA:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:8c:c6:a5:f0:a1:dd:87:b9:49:5e:55:2d:e0:94:2b:c8:5a:
e6:17:79:43:16:6e:c1:c3:29:a9:46:ac:3b:f1:af:26:0d:30:
2a:c7:30:51:ea:ea:8a:f8:63:77:1e:6d:36:91:47:e5:ae:e6:
ad:e9:fc:9d:6c:08:57:47:e5:49:18:04:98:d2:6f:2c:fb:16:
9d:57:4b:ae:fa:69:42:c0:33:b3:c6:15:77:c2:04:9d:31:69:
8d:65:f6:d9:ad:34:3e:e3:41:6d:17:ff:92:72:a6:23:0b:67:
c7:d8:78:89:44:2e:9b:fc:57:ed:17:53:a0:b3:18:a5:84:dd:
0f:55:99:0b:71:27:6d:fa:e6:7c:29:bd:59:13:d5:f5:6c:73:
78:31:97:f0:7c:e7:6c:4e:2b:eb:18:b7:25:d1:84:7b:2b:6c:
7d:9f:1d:ac:43:37:bf:3b:cd:47:64:5a:94:3c:fe:ea:21:16:
7b:b3:61:75:2f:7b:7d:08:ac:06:a0:d3:68:76:3d:c7:49:50:
31:b0:7d:35:6c:24:7f:31:64:d4:a5:8e:f7:34:61:d3:74:d9:
5e:e7:d5:27:73:da:17:a1:84:79:bb:e3:a3:ad:36:c2:98:84:
c0:fe:ac:18:32:20:3c:92:79:6f:9c:a5:2f:98:45:8e:50:f6:
66:3c:65:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:20:22 2025 by rpki-client