Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
File: CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft (raw, json)
Hash identifier: xZgkG+iSN3NhVctoY+cT5e636/o6U1xgRFwbu0lyyGg=
Subject key identifier: 85:90:E7:46:44:55:1D:0A:12:40:5B:E2:69:96:80:94:0E:1D:98:7F
Authority key identifier: 08:95:3A:5F:11:A8:27:9C:DF:87:98:96:0D:E1:E2:2E:B1:22:7D:95
Certificate issuer: /CN=08953a5f11a8279cdf8798960de1e22eb1227d95
Certificate serial: 0199FD6B5DBF160FF661D693AB734BFD8BF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 17:01:35 +0000
Manifest this update: Sun 19 Oct 2025 17:01:35 +0000
Manifest next update: Mon 20 Oct 2025 17:01:35 +0000
Files and hashes: 1: CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl (hash: tPrKKr6eOUgaCPUEQM912A1zmeYnYFEMaHPsqrOFht8=)
2: UDoG0VyGiTlw2cE_bk01kxTEOgk.roa (hash: xsTPKmGopDqXIX9OmyZyFM17NRbHEv2ddzZ5w1gDheM=)
3: w7idwTdXPoOWVZlR9CoFAbQi8hM.roa (hash: ilsj5ZYvMhkJ++mzc4MatQJ2qPuYOf+lvnTyvWyEf1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:5d:bf:16:0f:f6:61:d6:93:ab:73:4b:fd:8b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08953a5f11a8279cdf8798960de1e22eb1227d95
Validity
Not Before: Oct 19 17:01:35 2025 GMT
Not After : Oct 20 17:01:35 2025 GMT
Subject: CN=8590e74644551d0a12405be2699680940e1d987f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bf:c4:2a:17:9c:48:2d:82:88:2b:f9:f9:8f:
db:60:f1:22:52:4f:93:06:d1:10:fd:37:94:c2:4e:
a9:53:0f:d3:51:18:1e:44:42:d4:bd:a1:26:29:82:
c2:58:f8:a1:11:3d:6d:fa:be:01:ff:9f:ff:7a:66:
2d:ec:af:45:e6:90:95:53:64:44:b5:f6:51:fa:79:
b5:85:55:93:2c:a2:38:63:06:bf:2c:bf:7c:da:f4:
66:2c:73:d4:e2:7a:f2:a8:2b:82:5c:45:67:91:a5:
51:e6:1f:4e:e2:3a:8e:48:05:6c:93:c1:ea:b0:b9:
bf:f8:62:d3:cb:eb:7a:c4:26:ba:0c:26:9f:9d:b4:
6f:47:c5:d4:c0:4d:9b:07:e7:3f:55:9a:8e:86:85:
f5:f0:54:9e:a5:35:da:00:f8:d7:e2:22:a2:04:8c:
54:9b:37:28:da:22:7a:f3:ba:d3:d2:55:a2:ba:01:
4b:6a:98:87:56:e3:61:6e:dc:74:a9:31:be:3a:d5:
24:1c:06:1e:cc:66:a4:ec:76:f5:9f:00:ef:de:3e:
01:db:f1:81:2e:e8:38:81:b2:85:18:2b:24:cb:1e:
64:5a:5e:4c:3a:a2:f1:96:fa:bb:a2:8e:be:b5:63:
c2:c6:36:4d:dd:93:68:92:25:df:a0:76:39:59:b9:
eb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:90:E7:46:44:55:1D:0A:12:40:5B:E2:69:96:80:94:0E:1D:98:7F
X509v3 Authority Key Identifier:
keyid:08:95:3A:5F:11:A8:27:9C:DF:87:98:96:0D:E1:E2:2E:B1:22:7D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:f8:f5:3a:30:59:66:1b:49:4b:13:68:e6:50:8e:61:4f:f1:
4a:f4:87:c9:11:53:f9:1d:f8:3f:77:84:5e:77:8b:fa:60:55:
c6:4e:5e:7f:00:a2:2b:22:df:a5:dd:fa:15:0a:ae:92:7d:51:
f9:0e:a1:51:61:9c:23:53:9a:d1:17:44:14:a3:f5:c3:8c:27:
34:48:f3:9e:23:46:2b:7b:e4:65:a2:5d:8a:66:30:9e:64:20:
7e:24:ab:29:6f:28:e6:a8:fc:c1:3c:8a:63:3d:f2:7f:dc:da:
33:28:3d:13:d7:a9:cb:13:3d:4b:d2:8b:77:97:12:56:4a:4f:
00:c2:fe:a7:9e:5b:d0:d8:76:a6:65:a9:90:e8:94:0f:f0:6b:
9d:ae:4d:d6:50:9e:7d:fb:6a:69:5a:2b:f2:1a:85:19:51:36:
45:76:d7:fb:b6:97:ae:00:87:f9:1b:82:63:8c:74:73:48:40:
1b:a2:b1:77:d9:71:2c:0c:6e:d8:08:9a:7b:8e:84:15:82:52:
bf:60:f0:fd:4f:b5:87:a9:3c:b3:d6:9a:9b:66:ea:ba:18:43:
67:46:80:4f:d7:df:d1:d8:ac:7f:6b:70:e4:be:16:7e:fb:18:
e3:2f:49:29:da:35:5d:91:24:14:53:a9:39:fb:18:13:1b:8b:
07:e6:4d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:42 2025 by rpki-client