Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
File: CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft (raw, json)
Hash identifier: TbdoARhHDVUrN0uulpQbgtlqYZ8oSzX9A6UKYuJVdcw=
Subject key identifier: B1:D4:CD:FD:2B:F1:0E:08:FA:8C:8F:F0:57:A3:87:B3:54:03:8E:90
Authority key identifier: 08:95:3A:5F:11:A8:27:9C:DF:87:98:96:0D:E1:E2:2E:B1:22:7D:95
Certificate issuer: /CN=08953a5f11a8279cdf8798960de1e22eb1227d95
Certificate serial: 0197B9A1DF3C470EFA2FDE44A73AD3545893
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
Manifest number: 15B9
Signing time: Sun 29 Jun 2025 03:01:22 +0000
Manifest this update: Sun 29 Jun 2025 03:01:22 +0000
Manifest next update: Mon 30 Jun 2025 03:01:22 +0000
Files and hashes: 1: CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl (hash: sMw2BSzMT4Dm5VwO+zgEStg0cv7qomkTNj8b0ZDaAV0=)
2: uqzFgf-8B62Y8mrkcQQAzXl65Xw.roa (hash: kCZVPY38TjsnXAkZkosAsOr4uT14uV5XbG2BhNU/FCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:df:3c:47:0e:fa:2f:de:44:a7:3a:d3:54:58:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08953a5f11a8279cdf8798960de1e22eb1227d95
Validity
Not Before: Jun 29 03:01:22 2025 GMT
Not After : Jun 30 03:01:22 2025 GMT
Subject: CN=b1d4cdfd2bf10e08fa8c8ff057a387b354038e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:85:66:2e:d8:a1:ca:78:8d:83:e9:fb:7f:41:
2d:4c:6c:d5:f9:33:b9:74:c8:be:24:8e:be:79:85:
5c:74:34:40:fe:bf:77:e7:aa:33:8a:c6:b3:9f:60:
e0:a4:a3:ea:4f:1a:d4:cd:28:f9:f1:95:e8:18:14:
b5:2a:e5:05:c0:a9:c9:54:53:b3:4b:9e:bb:38:7f:
44:17:d6:46:1b:7e:8a:17:23:a5:2c:9b:02:23:ad:
b8:8b:59:97:58:a9:ab:31:cb:10:74:35:13:79:aa:
f1:d3:b4:69:d7:04:84:9d:72:ee:06:0f:0c:be:d3:
a9:f6:ac:f5:69:4f:bc:cd:f3:b8:da:8d:5d:c9:ce:
20:e8:32:99:57:8c:68:30:c0:e5:b0:f3:a0:ab:64:
09:b5:a4:1c:a7:4c:63:65:ab:e1:6b:c3:1b:61:67:
b7:05:bc:f4:de:8f:cc:a9:4f:01:d4:68:ee:c0:54:
dc:db:83:30:29:f4:03:5c:c7:6d:f9:22:2a:ad:8a:
b1:66:4b:e5:73:b7:48:29:f4:80:9d:be:39:cc:26:
fd:eb:fd:0c:28:66:43:60:db:77:eb:4f:e5:05:54:
40:57:4e:fd:0a:ad:8e:b1:bb:f6:cd:19:82:e1:b0:
8b:58:7c:40:34:19:06:40:8b:fc:75:1e:c2:67:83:
cf:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D4:CD:FD:2B:F1:0E:08:FA:8C:8F:F0:57:A3:87:B3:54:03:8E:90
X509v3 Authority Key Identifier:
keyid:08:95:3A:5F:11:A8:27:9C:DF:87:98:96:0D:E1:E2:2E:B1:22:7D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:83:b9:c2:53:38:d2:02:42:80:66:f6:8d:80:34:a5:dd:22:
ba:0f:7f:89:ea:09:d0:25:0d:b4:6f:97:7b:32:aa:07:51:0e:
0d:70:b4:4e:01:ad:d0:b0:06:c6:89:d5:c3:4a:50:8d:e3:a1:
ea:53:b7:70:3d:0a:a9:51:bf:9d:0b:f7:7a:d7:01:98:3d:0f:
19:e4:eb:7f:4f:f8:9c:df:6e:81:e5:ac:9e:4e:02:48:c2:b0:
32:56:c5:b7:14:a2:a3:30:82:12:de:58:1b:b1:75:a2:46:48:
cc:f7:74:a5:77:87:3e:9a:75:48:9c:f8:f8:af:28:62:39:51:
18:d0:06:8f:b9:98:6e:c9:f6:ff:fe:07:67:c9:04:a6:19:16:
aa:ed:66:94:0d:9f:9a:ab:43:0b:c5:48:23:dd:33:a8:37:22:
c7:91:c0:18:68:4d:71:92:14:00:8f:0c:c3:e9:b5:4c:94:64:
9c:31:11:ae:01:32:7f:8a:a5:45:f9:74:1a:9c:3b:71:20:34:
5a:d9:e5:a9:04:72:df:de:98:c4:79:da:b0:4f:75:f9:b0:be:
79:3a:a8:ed:42:80:4e:ee:b5:35:da:ee:c3:88:7d:85:ca:b6:
77:53:30:8b:ed:5b:b8:a4:ab:3f:fb:57:2f:a9:53:fb:b6:09:
e9:02:ac:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:40:23 2025 by rpki-client