Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
File: CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft (raw, json)
Hash identifier: 52qoDA1Vi61KaTtH1AbKyVfSPq6O1GzmmelEaW1MS8g=
Subject key identifier: 98:BE:37:AB:1F:A6:59:2A:1C:CF:72:85:58:21:71:BB:E3:10:54:9F
Authority key identifier: 08:9C:8C:7F:33:40:53:C8:A9:0A:34:08:00:9E:F3:D3:B7:A8:2E:3D
Certificate issuer: /CN=089c8c7f334053c8a90a3408009ef3d3b7a82e3d
Certificate serial: 0197B70F31BAB7F14289BB4782C02AF87536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
Manifest number: 0914
Signing time: Sat 28 Jun 2025 15:01:55 +0000
Manifest this update: Sat 28 Jun 2025 15:01:55 +0000
Manifest next update: Sun 29 Jun 2025 15:01:55 +0000
Files and hashes: 1: 4bMtkdss6ipZLuaULzydMUpyiaQ.roa (hash: ftsUwXeTU/zCajSXbJ3x6QJLG4thVRnSbA76L16HZhs=)
2: CJyMfzNAU8ipCjQIAJ7z07eoLj0.crl (hash: 1eVIaKlkmMY7pjdk+a2pkQyTmg5dgp8rLHN+QFFfUrE=)
3: k6IT53wky2OyxFkQBPrbNFj6TNQ.roa (hash: brdxpAD59FYZoJp1BAGf2U6f2BoN13pBWQRPGF1mMCg=)
4: wTQDqjXgoUhzhSugRLMIDWXZVNA.roa (hash: sP07Xq5SBcl1K6LagQUnTqXSUPfJF0A6TBK/LGuxJ5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:31:ba:b7:f1:42:89:bb:47:82:c0:2a:f8:75:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089c8c7f334053c8a90a3408009ef3d3b7a82e3d
Validity
Not Before: Jun 28 15:01:55 2025 GMT
Not After : Jun 29 15:01:55 2025 GMT
Subject: CN=98be37ab1fa6592a1ccf7285582171bbe310549f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f2:98:04:1f:a0:3d:4c:21:d7:c1:fa:49:f9:
22:68:7d:3f:d0:d8:f7:5d:48:46:ba:8d:d6:19:dd:
1c:cc:97:23:2b:2a:fa:7f:26:84:d5:d2:69:e3:eb:
08:fa:e9:0e:7c:99:12:af:8a:2a:8b:91:f6:96:bf:
51:cd:c5:4a:a0:d3:ce:5a:c1:fe:0f:f4:bd:ca:29:
b1:84:c9:db:d0:9d:35:03:7b:22:94:30:1d:76:f0:
f6:b2:73:b5:ca:7d:a3:11:17:db:94:78:ac:b7:99:
04:58:14:df:b1:5a:aa:6d:45:f5:5f:f8:9f:71:36:
9d:ff:d1:bc:ea:33:c2:50:29:c3:07:8b:ed:ef:29:
9a:26:9f:a7:1a:f5:61:d0:b6:a6:f0:b7:c2:17:5a:
53:e6:08:9d:c1:f2:ae:e3:c7:df:04:ab:f0:ad:ac:
a0:a8:04:11:5b:cf:26:71:28:73:39:86:cf:44:7a:
16:41:ee:ef:aa:f6:35:df:43:ae:36:54:11:44:fc:
88:f1:8f:37:c4:07:58:10:82:ce:c0:cd:7a:b6:20:
6b:0e:c8:28:ff:fa:80:3c:6b:52:95:c0:e8:00:77:
9d:79:a6:8b:21:d3:86:bb:b6:69:80:03:2f:15:e0:
41:fa:c7:47:45:93:a2:70:e6:b1:c5:b4:68:f0:7e:
fd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BE:37:AB:1F:A6:59:2A:1C:CF:72:85:58:21:71:BB:E3:10:54:9F
X509v3 Authority Key Identifier:
keyid:08:9C:8C:7F:33:40:53:C8:A9:0A:34:08:00:9E:F3:D3:B7:A8:2E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:e1:52:48:a3:e9:31:74:9b:9a:63:c2:55:38:84:12:fa:53:
34:54:e7:43:97:72:36:4f:bf:ce:dc:74:19:e7:ce:30:fe:02:
f6:44:ca:73:0f:eb:70:09:c4:de:25:6d:56:56:dc:86:b4:03:
62:5b:9b:f2:cb:03:95:d5:c8:4d:d5:4d:8d:a2:ec:ed:19:ad:
4d:55:49:9e:1e:aa:59:a4:4e:d4:55:f0:46:09:5d:5a:da:67:
e8:02:af:e9:43:ef:be:3d:c5:80:ce:27:3e:1b:e5:4a:43:89:
44:02:41:ef:0b:e6:b7:16:88:70:3d:a2:2b:19:6e:82:59:34:
9f:ef:1e:87:bd:73:41:b4:d2:53:52:25:b6:dc:24:8d:0f:8b:
6f:d5:c9:f8:da:3c:f8:b3:0c:bc:af:d7:cc:06:a8:1c:c9:7c:
a8:c3:35:70:35:be:60:ea:14:27:ad:6d:1d:fa:73:a2:49:54:
05:2b:e3:f0:77:41:c4:36:42:4e:eb:4a:cc:19:d2:c7:6c:ca:
a9:f0:9f:96:b7:70:f0:b6:84:34:3f:fc:cd:a0:56:5a:95:a7:
af:0a:90:e2:50:73:dc:08:ec:65:46:fb:7a:db:e8:f4:19:ac:
0f:e5:1f:97:bf:0d:20:26:16:af:97:14:63:56:8c:eb:c5:07:
89:71:c0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:39 2025 by rpki-client