Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
File: CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft (raw, json)
Hash identifier: QSkI0+54YRmk2G3xXhXxDusVmid0F78pCPEETn4N770=
Subject key identifier: B2:52:D4:F6:84:EE:80:3D:D6:18:2E:50:23:40:3A:B1:E1:93:FA:E5
Authority key identifier: 08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F
Certificate issuer: /CN=089523953939f8a5e464b1cc7719ebeb9467ca3f
Certificate serial: 0198D6607F83334CBAC5390BEB528DBC3253
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 10:01:44 +0000
Manifest this update: Sat 23 Aug 2025 10:01:44 +0000
Manifest next update: Sun 24 Aug 2025 10:01:44 +0000
Files and hashes: 1: CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl (hash: 7VYjQs5bJndKeDh0IkQyWf53sl2yNcnxXuGqeD7Do64=)
2: PJ_-iRXGR5kveJvnaBWIwG-ft74.roa (hash: lpKsBNInX/l4lejvtga0/MnEJsq53AADQslEJzx9StQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:7f:83:33:4c:ba:c5:39:0b:eb:52:8d:bc:32:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089523953939f8a5e464b1cc7719ebeb9467ca3f
Validity
Not Before: Aug 23 10:01:44 2025 GMT
Not After : Aug 24 10:01:44 2025 GMT
Subject: CN=b252d4f684ee803dd6182e5023403ab1e193fae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:40:28:99:44:db:a0:5b:92:9d:01:7c:4e:0a:
3c:41:5f:68:2e:3c:ef:51:77:20:4b:d0:1e:f6:ef:
53:35:de:c8:6b:2e:d7:6a:6a:cd:cc:da:cd:ec:35:
88:c9:79:82:ba:c9:a3:79:ec:ce:3e:08:0c:0e:32:
df:e6:1a:f2:14:91:56:56:64:b4:e5:32:99:c6:a5:
4c:e5:68:1d:34:a7:77:f8:78:06:e8:e7:7a:ed:3b:
c6:2b:42:f1:c7:41:5d:22:a7:24:a2:62:86:ca:08:
ca:5c:e9:41:75:8a:14:0f:f0:c8:87:71:48:89:ec:
6d:9d:c2:18:0d:f0:05:bd:8a:57:0a:51:5e:8c:de:
ae:b9:90:85:dd:cb:30:98:71:a2:e1:c1:00:ea:1d:
a3:01:90:f5:98:c4:9d:4a:3c:b5:05:21:f1:47:a8:
cf:ef:ab:9c:74:37:0e:e5:f6:71:24:2a:8b:d3:e2:
0b:aa:db:97:4c:1c:0b:b5:7d:e9:ba:52:ba:00:af:
b5:29:d8:34:1a:4c:17:d8:5b:ad:0e:6e:b9:c2:04:
15:c8:f3:8d:72:fb:70:b0:92:3d:ad:e9:16:48:77:
af:0a:2b:ce:1d:9d:c8:42:63:ba:8c:6f:19:7a:47:
c1:10:b7:10:5f:3b:f3:f3:ba:8d:44:9c:a7:1f:cc:
7d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:52:D4:F6:84:EE:80:3D:D6:18:2E:50:23:40:3A:B1:E1:93:FA:E5
X509v3 Authority Key Identifier:
keyid:08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:9f:5a:26:49:70:12:a0:fe:34:06:b2:d4:5d:da:ee:f6:f6:
37:08:bd:72:65:2f:cc:c6:20:6b:7b:cb:67:50:b4:2e:ee:46:
2a:30:99:2f:1f:05:92:39:c6:b6:7e:e3:4e:99:18:87:c2:52:
0f:a9:2d:71:43:eb:3c:fe:17:05:25:53:26:9f:b5:ad:ff:59:
4c:07:0a:7d:d0:6d:d5:47:32:fd:91:81:a2:3c:72:6c:8a:bc:
aa:81:90:6d:eb:f4:fe:99:c2:4e:c5:aa:86:16:03:cf:80:98:
45:3a:87:2b:ac:74:60:f1:0b:f0:08:5d:cc:25:cd:c1:20:e7:
e4:62:f9:69:43:be:d1:0e:2d:4e:f5:30:f3:23:1e:0f:88:4e:
ab:5d:d9:91:8b:13:f3:50:15:cd:a9:56:07:56:e9:56:04:59:
48:ce:03:b3:5f:91:c5:6b:a4:76:c5:77:ec:9a:5b:92:a7:cd:
57:79:ef:a8:99:7a:f5:0c:29:fa:d3:75:5a:b7:80:18:2d:cd:
be:e2:f8:cc:0e:b0:7e:c0:83:41:c4:33:d7:6c:02:24:8b:18:
f5:f6:bb:04:a9:30:38:a5:57:88:9c:8b:7b:7d:e5:c4:d3:64:
04:05:f4:6f:9b:50:f9:ca:e9:80:b0:ed:6b:1e:c0:0b:1c:96:
4a:5f:bc:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYH+DM0y6xTkL61KNvDJTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4OTUyMzk1MzkzOWY4YTVlNDY0YjFjYzc3MTllYmViOTQ2
N2NhM2YwHhcNMjUwODIzMTAwMTQ0WhcNMjUwODI0MTAwMTQ0WjAzMTEwLwYDVQQD
EyhiMjUyZDRmNjg0ZWU4MDNkZDYxODJlNTAyMzQwM2FiMWUxOTNmYWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8EAomUTboFuSnQF8Tgo8QV9oLjzv
UXcgS9Ae9u9TNd7Iay7XamrNzNrN7DWIyXmCusmjeezOPggMDjLf5hryFJFWVmS0
5TKZxqVM5WgdNKd3+HgG6Od67TvGK0Lxx0FdIqckomKGygjKXOlBdYoUD/DIh3FI
iextncIYDfAFvYpXClFejN6uuZCF3cswmHGi4cEA6h2jAZD1mMSdSjy1BSHxR6jP
76ucdDcO5fZxJCqL0+ILqtuXTBwLtX3pulK6AK+1Kdg0GkwX2FutDm65wgQVyPON
cvtwsJI9rekWSHevCivOHZ3IQmO6jG8ZekfBELcQXzvz87qNRJynH8x9awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJS1PaE7oA91hguUCNAOrHhk/rlMB8GA1UdIwQY
MBaAFAiVI5U5Ofil5GSxzHcZ6+uUZ8o/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0pVamxUazUtS1hrWkxITWR4bnI2NVJueWo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84NTM5OTYtNmNiYi00ZDQyLTg3Nzgt
YjFkN2FjOWVhMzIxLzEvQ0pVamxUazUtS1hrWkxITWR4bnI2NVJueWo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi84NTM5OTYtNmNiYi00ZDQyLTg3NzgtYjFkN2FjOWVhMzIx
LzEvQ0pVamxUazUtS1hrWkxITWR4bnI2NVJueWo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU59aJklw
EqD+NAay1F3a7vb2Nwi9cmUvzMYga3vLZ1C0Lu5GKjCZLx8FkjnGtn7jTpkYh8JS
D6ktcUPrPP4XBSVTJp+1rf9ZTAcKfdBt1Ucy/ZGBojxybIq8qoGQbev0/pnCTsWq
hhYDz4CYRTqHK6x0YPEL8AhdzCXNwSDn5GL5aUO+0Q4tTvUw8yMeD4hOq13ZkYsT
81AVzalWB1bpVgRZSM4Ds1+RxWukdsV37JpbkqfNV3nvqJl69Qwp+tN1WreAGC3N
vuL4zA6wfsCDQcQz12wCJIsY9fa7BKkwOKVXiJyLe33lxNNkBAX0b5tQ+crpgLDt
ax7ACxyWSl+8Nw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:16:35 2025 by rpki-client