Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
File: Cajtl6vouAFN0xwsJE-fKPX5eiE.mft (raw, json)
Hash identifier: DXzEXFq8QHyygeGFBiqE8uyvZseDlOnVJvO75bvFfNM=
Subject key identifier: A0:B0:62:CC:15:E8:D0:29:6C:51:64:67:6A:F7:66:C3:E6:BE:FB:64
Authority key identifier: 09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
Certificate issuer: /CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Certificate serial: 0198D54E282E015CCAA1E31CA32701A5D9FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
Manifest number: 0A5F
Signing time: Sat 23 Aug 2025 05:02:05 +0000
Manifest this update: Sat 23 Aug 2025 05:02:05 +0000
Manifest next update: Sun 24 Aug 2025 05:02:05 +0000
Files and hashes: 1: Cajtl6vouAFN0xwsJE-fKPX5eiE.crl (hash: b22RXfREIQ7f5VX5VLrmoeRGcO5XIVS7xSX58TAqss0=)
2: Khmhefi6kwckslHGfWvU_2oMALk.roa (hash: GCH2SF4oCWT5irU/tNDWYDBbGKrkiI0SguGZAk1/bwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:28:2e:01:5c:ca:a1:e3:1c:a3:27:01:a5:d9:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Validity
Not Before: Aug 23 05:02:05 2025 GMT
Not After : Aug 24 05:02:05 2025 GMT
Subject: CN=a0b062cc15e8d0296c5164676af766c3e6befb64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:48:04:2e:ce:58:c4:32:ec:89:79:77:91:9c:
84:43:75:15:13:89:99:31:d5:f2:8e:8d:a7:be:6c:
20:2c:c1:e5:1f:dc:84:a7:97:fb:6e:42:70:9d:e4:
60:ee:29:ea:74:8c:fe:64:35:52:48:9a:50:c6:c9:
c8:6a:37:97:6d:e6:11:71:50:ac:46:49:34:3c:57:
f9:2d:0f:a4:8f:57:c6:32:49:6f:7a:d5:e2:bb:3c:
b2:a4:ed:80:ae:d7:12:bc:bd:52:8c:7f:a3:8b:80:
c2:cf:c4:7a:67:24:04:bc:a4:82:aa:26:d6:5b:18:
36:e2:3a:b7:22:91:47:b1:00:e1:20:04:5d:e9:a5:
d3:57:5d:8d:08:bb:5d:a5:4e:08:a2:fd:bd:5d:7a:
1a:52:04:d0:70:31:7c:67:f5:db:19:41:32:68:d1:
1c:09:1e:b9:15:c6:8f:50:7d:cc:59:35:df:cf:51:
e9:75:41:58:05:74:9c:66:28:de:1a:8e:1b:66:49:
e4:24:3a:dc:ba:54:22:43:30:68:62:3d:a2:d0:09:
0a:bd:ce:93:4c:c0:5d:eb:90:6d:c2:ae:84:b9:e6:
6d:66:2a:9b:b7:0e:63:a5:e8:bb:04:bc:e6:0f:2d:
35:f0:8e:1c:c9:9f:a8:5b:ce:27:1f:4c:1e:ba:19:
d6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B0:62:CC:15:E8:D0:29:6C:51:64:67:6A:F7:66:C3:E6:BE:FB:64
X509v3 Authority Key Identifier:
keyid:09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:f1:39:bc:70:61:92:74:fe:62:11:09:60:c6:1d:05:78:c0:
f7:96:5b:c0:20:f6:09:f2:cd:14:df:bc:71:3d:55:26:7a:3b:
55:8a:89:69:0f:4c:45:3f:57:1f:44:49:6a:c4:c6:61:47:01:
fc:a7:b5:3f:b3:88:23:c4:d0:90:45:8f:c1:23:8d:c1:67:82:
a4:20:e3:aa:02:81:5e:15:0a:18:76:6e:9c:c0:f2:70:5c:1c:
13:ec:85:f7:24:04:97:69:df:78:3f:e0:59:eb:4f:ef:59:b0:
a9:4f:99:da:4d:3c:a2:98:42:40:2c:86:7e:93:4a:7d:b4:e3:
4a:21:65:56:82:55:e0:ae:66:1e:e6:60:db:f2:35:0a:51:14:
3e:3a:9e:a1:ae:94:98:b5:81:24:83:e1:cf:70:12:52:fa:89:
78:ab:97:63:bf:2b:51:9f:6d:1e:6e:8e:b7:49:a9:a8:3d:95:
70:60:9a:ac:64:35:6c:6b:e1:20:a0:6b:f8:bf:cd:2d:c9:54:
7e:9f:e9:35:4b:f0:f3:85:02:7d:7e:58:20:fd:2c:64:c8:24:
da:9d:90:4c:0a:f8:6b:d0:9f:3f:23:7e:61:94:6b:a3:ee:74:
23:69:90:dd:0a:09:9a:9b:e5:02:8b:d5:66:20:93:46:ff:22:
60:52:c9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:58 2025 by rpki-client