Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
File: Cajtl6vouAFN0xwsJE-fKPX5eiE.mft (raw, json)
Hash identifier: YyoNS70HMVcxS1SgDIBEiJvc6a7yoWLvIRBTQVBmYuE=
Subject key identifier: 21:7B:B3:1C:10:31:C8:AD:70:11:C1:D7:C0:B0:FC:BF:55:70:94:C5
Authority key identifier: 09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
Certificate issuer: /CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Certificate serial: 0197B77C4FBDAFC5187A5C425BDBCD337932
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
Manifest number: 09CB
Signing time: Sat 28 Jun 2025 17:01:06 +0000
Manifest this update: Sat 28 Jun 2025 17:01:06 +0000
Manifest next update: Sun 29 Jun 2025 17:01:06 +0000
Files and hashes: 1: Cajtl6vouAFN0xwsJE-fKPX5eiE.crl (hash: QqL197tyuXOK+iuJGzglk3rGrLBDdUlFOicyApeq0us=)
2: Khmhefi6kwckslHGfWvU_2oMALk.roa (hash: GCH2SF4oCWT5irU/tNDWYDBbGKrkiI0SguGZAk1/bwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:4f:bd:af:c5:18:7a:5c:42:5b:db:cd:33:79:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Validity
Not Before: Jun 28 17:01:06 2025 GMT
Not After : Jun 29 17:01:06 2025 GMT
Subject: CN=217bb31c1031c8ad7011c1d7c0b0fcbf557094c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1d:83:e4:fd:6e:0c:e3:16:8e:19:56:65:b9:
73:5e:2c:28:b3:41:6e:4e:3d:21:e1:b7:62:17:a5:
55:b6:e5:69:13:72:5a:0f:e4:bb:49:cc:02:00:eb:
24:b6:f7:f1:8c:65:49:9c:1d:c6:37:a0:f0:a6:76:
87:ce:50:7b:d1:97:dc:59:34:81:79:d0:be:43:7e:
fe:7f:ec:c6:d1:8f:a0:7b:28:db:b5:1b:27:d8:fe:
22:be:f6:22:7c:21:ea:25:5c:31:ac:e5:75:ba:7f:
f9:e2:f8:5b:ba:75:c6:eb:4b:b3:7d:94:8f:61:1e:
78:bb:97:df:fe:c9:b5:b8:f4:f9:28:a7:1b:d3:88:
66:d0:7e:db:67:a4:e7:9f:9a:06:b0:43:90:1e:2a:
b8:94:f0:ff:12:08:ed:9a:15:dc:a5:45:e7:c7:f3:
03:8e:c9:e3:01:f5:cb:93:e1:a9:5e:af:97:5e:f3:
16:70:c7:b4:ac:97:63:2e:42:ca:91:a6:9e:8c:2c:
88:66:d0:fc:46:83:9a:95:a0:3d:b0:e2:ba:db:b6:
f7:9c:47:83:b5:a6:0a:7b:f5:ad:cb:82:c5:ff:c4:
fc:00:68:2b:07:07:fb:27:2a:b4:25:bf:60:80:d7:
61:02:50:89:ed:73:80:91:09:a4:2c:96:58:f2:4e:
7c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7B:B3:1C:10:31:C8:AD:70:11:C1:D7:C0:B0:FC:BF:55:70:94:C5
X509v3 Authority Key Identifier:
keyid:09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:24:2a:d5:04:0a:10:64:3a:fe:0b:bf:10:7a:58:b0:0d:42:
b3:31:e9:09:3f:4d:18:5a:a0:b5:28:90:11:0f:55:31:62:7c:
9e:8e:90:b0:43:63:f0:fc:71:c5:5e:b0:26:a6:8f:03:8d:08:
4c:b6:e2:d4:48:89:80:63:21:69:b7:33:a5:26:d5:9c:18:b9:
e5:21:b3:d7:c0:7b:6e:9c:9c:3e:ea:a8:3f:1c:ed:aa:eb:8c:
3b:5c:be:56:ad:da:8a:db:8b:18:7d:a0:3c:72:ad:05:28:66:
e3:2b:57:95:ba:4a:9d:2c:03:97:f9:d4:8c:1d:15:a0:6a:ff:
55:d8:e4:8a:94:fc:5f:fc:2c:d6:d8:10:8e:89:1b:91:5e:93:
1a:01:fc:a5:b5:99:c2:28:d9:18:53:e5:ce:ea:44:47:cf:cd:
1b:b8:bb:34:17:2b:87:34:be:78:8f:5f:c8:e9:e2:08:0b:25:
eb:0f:29:bd:37:d8:67:23:51:d0:25:43:9e:83:09:60:6d:54:
6b:f8:62:af:8f:47:6e:7a:f6:ad:5a:d8:04:c8:d4:ff:2d:c2:
fc:20:1d:c0:8d:92:70:51:d3:8a:df:4f:94:94:e6:f2:0a:07:
6c:27:9d:7d:a9:eb:dd:13:48:c9:b0:9e:7f:0d:5e:65:e0:c3:
61:17:4a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:33:11 2025 by rpki-client