Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
File: cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft (raw, json)
Hash identifier: fjgegjusQHoYaL4VELBTlAXZUgkoXyOhUSI5rJBl7J4=
Subject key identifier: E8:7B:51:70:D5:A6:73:29:22:1D:7D:4A:97:15:E9:82:95:73:CE:87
Authority key identifier: 72:38:FB:FE:A5:76:84:79:C8:63:00:90:6E:74:EB:25:4D:CB:5C:69
Certificate issuer: /CN=7238fbfea5768479c86300906e74eb254dcb5c69
Certificate serial: 0197B820F9D97885678D12A6693F78F5E65E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
Manifest number: 0A8B
Signing time: Sat 28 Jun 2025 20:00:58 +0000
Manifest this update: Sat 28 Jun 2025 20:00:58 +0000
Manifest next update: Sun 29 Jun 2025 20:00:58 +0000
Files and hashes: 1: cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl (hash: H2CsINYhYJV9uuy0ZE1vam2lMiJYRFQmpQRSIHc2EVE=)
2: wdIm1qCd0ObJ1xyB5TPQkFaC0YA.roa (hash: oOyNKTQaCSCE6Wpivc9w4AbPACJjW6ReZk27bCRwMBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:f9:d9:78:85:67:8d:12:a6:69:3f:78:f5:e6:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7238fbfea5768479c86300906e74eb254dcb5c69
Validity
Not Before: Jun 28 20:00:58 2025 GMT
Not After : Jun 29 20:00:58 2025 GMT
Subject: CN=e87b5170d5a67329221d7d4a9715e9829573ce87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ab:b0:55:12:d5:4b:44:d5:c3:33:b1:7b:e1:
2e:5b:27:89:97:47:34:ab:eb:a0:0d:ed:56:de:2f:
1e:37:a3:74:aa:1d:d2:e9:ff:9d:34:99:bd:98:be:
2e:3a:89:b4:91:18:cf:a3:bc:fe:19:86:08:d5:8b:
56:89:50:58:22:a4:ad:4b:4f:ba:bb:ea:65:d2:32:
d0:eb:71:46:d6:61:39:cf:bc:c7:ec:8e:c6:d5:3c:
63:ed:26:8c:73:e1:14:52:df:0a:56:a2:c5:30:1b:
a6:b0:b0:9f:c0:e9:c7:6c:6b:93:16:5e:fc:6d:60:
05:ab:ac:9a:eb:75:ed:0e:29:6c:be:18:72:a9:d7:
9d:84:5c:aa:fe:76:a2:34:bf:bd:75:8c:74:95:da:
d9:8b:f0:b5:65:40:42:ce:e6:e3:e0:f6:96:a6:22:
56:f6:ab:09:43:b6:7d:18:33:97:21:7c:53:c7:02:
5a:c9:3b:8e:d0:55:58:3a:a5:f7:eb:cc:7a:4e:bd:
a5:ca:4c:f5:87:c7:5b:7d:33:21:cc:0c:9e:3d:d8:
0b:a5:81:cb:7f:3c:ea:ef:ee:f3:ae:4e:27:c9:b7:
b4:b3:d8:b3:b9:c6:38:73:34:ce:17:1c:f7:18:24:
83:7b:82:49:2a:f2:0a:06:d3:6f:ee:5b:0b:12:6b:
f4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7B:51:70:D5:A6:73:29:22:1D:7D:4A:97:15:E9:82:95:73:CE:87
X509v3 Authority Key Identifier:
keyid:72:38:FB:FE:A5:76:84:79:C8:63:00:90:6E:74:EB:25:4D:CB:5C:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:64:be:d2:69:c8:9b:3a:d2:41:4f:d3:64:b9:0e:1c:58:fa:
89:cd:c3:59:86:5f:18:35:51:11:28:ef:6e:37:bf:94:98:cc:
4f:8e:0f:fb:a2:3d:10:c5:51:8e:32:4c:67:08:11:f2:7f:5f:
1b:b5:5e:91:a1:52:18:9e:ad:b0:12:02:cf:be:d1:16:64:4d:
f5:a2:8f:da:1a:09:a6:ef:a2:b7:c8:cc:0d:30:47:a5:06:a7:
63:79:13:a5:28:a2:42:d7:57:ca:b7:39:20:da:7f:d8:e2:bb:
98:de:9a:a8:28:73:51:b9:f2:0f:d1:92:a5:fb:5c:9c:95:65:
c7:55:2e:bb:8d:db:7c:1b:9e:eb:f0:84:ef:9e:48:98:59:ed:
e3:80:82:3e:d7:74:79:13:f9:35:0c:20:05:89:0f:32:f6:04:
07:90:9f:46:f2:2a:33:19:35:6b:50:74:c4:db:94:41:b0:b4:
07:9e:1f:0e:c1:5e:80:73:27:f8:56:76:1c:72:1e:26:12:f7:
3f:a7:35:35:bb:cc:20:d7:de:2f:14:09:be:47:a6:90:e8:00:
ba:78:c7:4a:09:73:92:e1:04:1e:c6:16:6d:e3:e3:f4:a7:20:
58:ce:57:c1:02:7b:52:dd:87:e6:2b:8c:1d:1b:05:6c:b7:5f:
82:e2:07:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IPnZeIVnjRKmaT949eZeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMzhmYmZlYTU3Njg0NzljODYzMDA5MDZlNzRlYjI1NGRj
YjVjNjkwHhcNMjUwNjI4MjAwMDU4WhcNMjUwNjI5MjAwMDU4WjAzMTEwLwYDVQQD
EyhlODdiNTE3MGQ1YTY3MzI5MjIxZDdkNGE5NzE1ZTk4Mjk1NzNjZTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKuwVRLVS0TVwzOxe+EuWyeJl0c0
q+ugDe1W3i8eN6N0qh3S6f+dNJm9mL4uOom0kRjPo7z+GYYI1YtWiVBYIqStS0+6
u+pl0jLQ63FG1mE5z7zH7I7G1Txj7SaMc+EUUt8KVqLFMBumsLCfwOnHbGuTFl78
bWAFq6ya63XtDilsvhhyqdedhFyq/naiNL+9dYx0ldrZi/C1ZUBCzubj4PaWpiJW
9qsJQ7Z9GDOXIXxTxwJayTuO0FVYOqX368x6Tr2lykz1h8dbfTMhzAyePdgLpYHL
fzzq7+7zrk4nybe0s9izucY4czTOFxz3GCSDe4JJKvIKBtNv7lsLEmv0+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOh7UXDVpnMpIh19SpcV6YKVc86HMB8GA1UdIwQY
MBaAFHI4+/6ldoR5yGMAkG506yVNy1xpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2pqN19xVjJoSG5JWXdDUWJuVHJKVTNMWEdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9mYjIyYWItYjU0Ni00MDcxLWJlYjEt
YmUxMGU4YjRhMDBlLzEvY2pqN19xVjJoSG5JWXdDUWJuVHJKVTNMWEdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9mYjIyYWItYjU0Ni00MDcxLWJlYjEtYmUxMGU4YjRhMDBl
LzEvY2pqN19xVjJoSG5JWXdDUWJuVHJKVTNMWEdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYWS+0mnI
mzrSQU/TZLkOHFj6ic3DWYZfGDVRESjvbje/lJjMT44P+6I9EMVRjjJMZwgR8n9f
G7VekaFSGJ6tsBICz77RFmRN9aKP2hoJpu+it8jMDTBHpQanY3kTpSiiQtdXyrc5
INp/2OK7mN6aqChzUbnyD9GSpftcnJVlx1Uuu43bfBue6/CE755ImFnt44CCPtd0
eRP5NQwgBYkPMvYEB5CfRvIqMxk1a1B0xNuUQbC0B54fDsFegHMn+FZ2HHIeJhL3
P6c1NbvMINfeLxQJvkemkOgAunjHSglzkuEEHsYWbePj9KcgWM5XwQJ7Ut2H5iuM
HRsFbLdfguIHCQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:23 2025 by rpki-client