Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
File: CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft (raw, json)
Hash identifier: Sh7SDRE5YmRjMKtRKsq767JZXPk4SXonn9VjJhSakAQ=
Subject key identifier: F3:93:1F:41:C1:13:86:99:81:0E:61:09:AC:60:7D:B3:C2:D0:ED:C7
Authority key identifier: 08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F
Certificate issuer: /CN=089523953939f8a5e464b1cc7719ebeb9467ca3f
Certificate serial: 0199FFC8642C7EFC4CB6C5287E2EFBEFFB74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 04:02:26 +0000
Manifest this update: Mon 20 Oct 2025 04:02:26 +0000
Manifest next update: Tue 21 Oct 2025 04:02:26 +0000
Files and hashes: 1: CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl (hash: SLnpvbq1HqZoG+4mmRVXTK12WnCVf3qMzTeVKBam2x4=)
2: PJ_-iRXGR5kveJvnaBWIwG-ft74.roa (hash: lpKsBNInX/l4lejvtga0/MnEJsq53AADQslEJzx9StQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:64:2c:7e:fc:4c:b6:c5:28:7e:2e:fb:ef:fb:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089523953939f8a5e464b1cc7719ebeb9467ca3f
Validity
Not Before: Oct 20 04:02:26 2025 GMT
Not After : Oct 21 04:02:26 2025 GMT
Subject: CN=f3931f41c1138699810e6109ac607db3c2d0edc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:33:bb:ca:87:c7:13:2a:79:03:94:b3:ba:4f:
bb:ba:22:fc:85:2c:65:b1:c1:9c:7e:81:dc:a2:35:
9d:46:68:b2:e0:27:dd:1b:ba:03:a1:9f:48:65:19:
e3:ba:3a:83:6a:c9:7a:40:74:a4:2e:de:6f:48:11:
94:1d:fa:76:94:4f:ff:a7:81:8d:78:8f:47:6c:63:
08:cf:34:fc:a2:c1:ee:bb:74:9c:c6:85:ef:ae:73:
a1:33:79:df:ca:a8:5a:a4:28:f6:71:85:ea:c1:d7:
79:67:06:1a:77:37:a8:16:86:3a:ad:e5:3a:bc:6e:
54:77:e6:10:52:c0:c2:d9:cf:6b:0b:ba:b8:94:5c:
c6:ee:1b:a4:4b:9a:38:f1:f3:b4:23:38:04:b9:b8:
e0:a3:59:02:90:0a:6a:97:fb:ad:51:05:2e:ab:2d:
84:bc:70:55:f2:85:06:c2:1e:fb:ab:de:73:45:4d:
c6:c0:b6:a2:0f:27:eb:9c:98:61:fa:e7:04:1b:f3:
70:d2:03:cd:e7:1b:fe:f0:47:63:ed:57:38:11:7f:
28:47:52:d6:69:ba:39:df:3e:ef:0d:a8:78:e5:d4:
8e:ab:21:90:f4:aa:e0:83:dc:25:4b:c5:cf:3f:49:
2b:14:5f:e1:72:ce:e4:e8:13:36:80:04:34:7d:56:
46:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:93:1F:41:C1:13:86:99:81:0E:61:09:AC:60:7D:B3:C2:D0:ED:C7
X509v3 Authority Key Identifier:
keyid:08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:88:31:c2:0d:81:a5:af:67:9c:33:09:01:ad:f8:96:eb:4c:
8a:65:5f:ab:14:c4:40:77:76:d5:60:af:cd:bf:a3:2e:03:90:
d8:e6:25:02:6c:1c:2e:01:84:e4:64:ed:4b:70:d2:15:b0:29:
1a:5a:23:de:ba:04:b0:44:32:a2:d9:b9:d3:9d:95:32:4a:4d:
00:74:63:c7:4f:cb:58:60:56:9f:43:b0:e0:82:c2:01:d3:12:
88:ab:ce:1a:cd:0c:74:05:83:22:43:81:d9:31:b4:12:6a:b2:
a5:0d:66:d5:1e:cb:0b:1a:d8:93:e0:32:8e:fe:af:1f:9d:25:
5c:f9:56:9e:ba:1b:88:d7:5f:94:0e:22:cd:52:39:18:70:ec:
82:e7:d1:9f:d7:46:1e:f0:17:7f:11:64:13:dc:84:67:ca:96:
97:69:70:4a:1f:1e:b1:7c:36:4d:a8:e4:c0:a3:fb:b6:91:e4:
59:cf:e2:40:0c:60:5d:f9:7b:4e:89:35:75:81:71:a6:58:93:
a1:07:7e:e3:34:d7:65:7d:86:26:53:00:3f:b6:6a:c2:22:5d:
f1:9f:af:11:ec:7c:7d:59:5a:8e:0b:ec:2f:a4:3b:3c:b3:46:
7a:13:ff:23:66:9b:0a:a3:a6:6a:28:d1:41:ed:6c:37:e5:c5:
87:6d:18:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/yGQsfvxMtsUofi777/t0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4OTUyMzk1MzkzOWY4YTVlNDY0YjFjYzc3MTllYmViOTQ2
N2NhM2YwHhcNMjUxMDIwMDQwMjI2WhcNMjUxMDIxMDQwMjI2WjAzMTEwLwYDVQQD
EyhmMzkzMWY0MWMxMTM4Njk5ODEwZTYxMDlhYzYwN2RiM2MyZDBlZGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DO7yofHEyp5A5Szuk+7uiL8hSxl
scGcfoHcojWdRmiy4CfdG7oDoZ9IZRnjujqDasl6QHSkLt5vSBGUHfp2lE//p4GN
eI9HbGMIzzT8osHuu3ScxoXvrnOhM3nfyqhapCj2cYXqwdd5ZwYadzeoFoY6reU6
vG5Ud+YQUsDC2c9rC7q4lFzG7hukS5o48fO0IzgEubjgo1kCkApql/utUQUuqy2E
vHBV8oUGwh77q95zRU3GwLaiDyfrnJhh+ucEG/Nw0gPN5xv+8Edj7Vc4EX8oR1LW
abo53z7vDah45dSOqyGQ9Krgg9wlS8XPP0krFF/hcs7k6BM2gAQ0fVZGvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPOTH0HBE4aZgQ5hCaxgfbPC0O3HMB8GA1UdIwQY
MBaAFAiVI5U5Ofil5GSxzHcZ6+uUZ8o/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0pVamxUazUtS1hrWkxITWR4bnI2NVJueWo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84NTM5OTYtNmNiYi00ZDQyLTg3Nzgt
YjFkN2FjOWVhMzIxLzEvQ0pVamxUazUtS1hrWkxITWR4bnI2NVJueWo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi84NTM5OTYtNmNiYi00ZDQyLTg3NzgtYjFkN2FjOWVhMzIx
LzEvQ0pVamxUazUtS1hrWkxITWR4bnI2NVJueWo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT4gxwg2B
pa9nnDMJAa34lutMimVfqxTEQHd21WCvzb+jLgOQ2OYlAmwcLgGE5GTtS3DSFbAp
Gloj3roEsEQyotm5052VMkpNAHRjx0/LWGBWn0Ow4ILCAdMSiKvOGs0MdAWDIkOB
2TG0EmqypQ1m1R7LCxrYk+Ayjv6vH50lXPlWnrobiNdflA4izVI5GHDsgufRn9dG
HvAXfxFkE9yEZ8qWl2lwSh8esXw2TajkwKP7tpHkWc/iQAxgXfl7Tok1dYFxpliT
oQd+4zTXZX2GJlMAP7ZqwiJd8Z+vEex8fVlajgvsL6Q7PLNGehP/I2abCqOmaijR
Qe1sN+XFh20Ygg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:17:29 2025 by rpki-client