Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
File: CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft (raw, json)
Hash identifier: zSYXpbV144O5WyuLH0dLHJSnCsXCj801zmekumqgpgs=
Subject key identifier: 7E:66:6D:D1:0E:B0:1C:57:B9:82:58:DB:56:A1:50:AA:DB:67:71:DA
Authority key identifier: 08:95:3A:5F:11:A8:27:9C:DF:87:98:96:0D:E1:E2:2E:B1:22:7D:95
Certificate issuer: /CN=08953a5f11a8279cdf8798960de1e22eb1227d95
Certificate serial: 0198D583BEE92A17963E0581C84A5888982C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 06:00:37 +0000
Manifest this update: Sat 23 Aug 2025 06:00:37 +0000
Manifest next update: Sun 24 Aug 2025 06:00:37 +0000
Files and hashes: 1: CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl (hash: zj/bZdEUaiVk0uVMEiHrVizjWvhyF8/M+wNv5ciPpys=)
2: uqzFgf-8B62Y8mrkcQQAzXl65Xw.roa (hash: kCZVPY38TjsnXAkZkosAsOr4uT14uV5XbG2BhNU/FCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:be:e9:2a:17:96:3e:05:81:c8:4a:58:88:98:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08953a5f11a8279cdf8798960de1e22eb1227d95
Validity
Not Before: Aug 23 06:00:37 2025 GMT
Not After : Aug 24 06:00:37 2025 GMT
Subject: CN=7e666dd10eb01c57b98258db56a150aadb6771da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:58:dc:d1:46:bb:45:d5:68:02:cf:44:82:06:
52:3a:e7:89:ae:f2:1b:4a:59:c8:b4:58:12:c9:6d:
76:25:f7:e8:38:df:db:d2:8c:66:e8:72:b5:94:c9:
a8:93:30:60:c1:de:aa:c5:c0:d9:08:c1:63:12:08:
af:f1:f5:7a:d9:41:a5:81:22:d0:92:6e:8f:21:f1:
d9:8f:f1:81:6f:e8:3a:b5:fe:25:26:fe:d4:47:32:
bc:53:da:b7:08:c6:2b:69:61:d1:96:3c:81:ee:b9:
ae:bc:9c:c4:34:8f:2a:fc:45:2c:5a:30:1f:8f:87:
16:89:57:5f:b4:81:e8:de:3d:0c:ba:d8:43:23:26:
82:b4:7d:64:1a:78:cd:fc:7c:c5:47:1e:13:4e:9e:
cc:9d:d7:75:5f:5f:0b:87:86:86:61:55:83:8c:7d:
8b:f3:bc:0e:57:4e:38:d6:5f:ec:13:b1:f7:d3:9d:
16:41:f1:87:63:9f:9e:75:a1:4e:7d:fe:1e:5a:d6:
ce:2a:26:15:84:01:1c:fb:39:cf:16:eb:16:d0:a0:
b8:bf:b9:01:59:94:eb:1e:2d:75:bc:31:99:8c:47:
b6:3b:dc:14:74:82:38:95:17:5b:c3:a7:df:c4:e5:
9f:31:a5:04:69:34:85:01:73:7e:21:3f:5d:69:5c:
bc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:66:6D:D1:0E:B0:1C:57:B9:82:58:DB:56:A1:50:AA:DB:67:71:DA
X509v3 Authority Key Identifier:
keyid:08:95:3A:5F:11:A8:27:9C:DF:87:98:96:0D:E1:E2:2E:B1:22:7D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:fd:90:08:94:9e:27:bf:ba:fc:b4:bb:84:42:e0:11:5b:37:
88:aa:41:4e:d4:ab:29:3c:9b:84:d2:38:ac:06:1e:7b:87:90:
c7:2e:e5:de:9c:24:03:8a:07:72:e3:f7:3f:57:b0:db:64:03:
8f:7e:60:5e:35:75:b6:47:8e:c8:ed:54:ee:d8:4f:ae:55:35:
18:01:23:55:0a:60:09:c7:d9:82:d0:bf:bb:7a:1e:ed:15:4a:
f8:cc:f9:d2:65:e8:fa:75:a1:14:12:fb:b4:10:2f:03:8d:f8:
70:fa:e1:58:af:60:1d:1b:67:18:7d:4e:9a:71:9e:96:6e:50:
09:ec:e3:fe:11:7f:e5:36:ba:be:b0:de:fd:37:ad:71:29:15:
9e:67:28:fe:d5:cb:a6:a3:18:be:02:be:d6:c4:2f:2c:73:ee:
c2:ca:cd:ce:92:b3:da:39:8e:66:ad:8c:3d:ff:8f:7f:6f:46:
5a:e5:25:e1:46:7c:0e:fc:9e:d5:3d:b7:61:bf:3f:8c:c6:18:
b0:90:15:a7:ea:45:12:f6:77:d6:d0:e0:d5:67:37:26:f4:43:
21:b7:33:ce:77:f7:3b:30:25:4f:21:d8:f0:d9:d0:b8:51:a8:
cb:53:87:fe:09:d0:ae:bd:4c:dd:a0:3a:f4:3d:ec:e4:d0:a5:
1e:da:70:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:40 2025 by rpki-client