Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
File: CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft (raw, json)
Hash identifier: cIS1/8s9mbA1qYqbDopYOQZSDbYoTstmtSUjokcctJ8=
Subject key identifier: 22:C1:0F:60:48:04:F3:3C:7D:B5:FB:86:52:AB:13:F6:A9:58:B9:B1
Authority key identifier: 08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F
Certificate issuer: /CN=089523953939f8a5e464b1cc7719ebeb9467ca3f
Certificate serial: 0197B6A1548407CC0304C0F06A94F24773C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:01:55 +0000
Manifest this update: Sat 28 Jun 2025 13:01:55 +0000
Manifest next update: Sun 29 Jun 2025 13:01:55 +0000
Files and hashes: 1: CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl (hash: aWA6wmPCqTtn76jRTOtBhi99i0XRwhneziMhbQGBMXA=)
2: PJ_-iRXGR5kveJvnaBWIwG-ft74.roa (hash: lpKsBNInX/l4lejvtga0/MnEJsq53AADQslEJzx9StQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:54:84:07:cc:03:04:c0:f0:6a:94:f2:47:73:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089523953939f8a5e464b1cc7719ebeb9467ca3f
Validity
Not Before: Jun 28 13:01:55 2025 GMT
Not After : Jun 29 13:01:55 2025 GMT
Subject: CN=22c10f604804f33c7db5fb8652ab13f6a958b9b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:30:18:60:0f:46:d6:bb:22:69:93:34:ff:36:
0b:86:52:bd:fb:63:55:be:4e:4c:1c:ec:ac:e2:cd:
b1:4f:99:66:53:db:d7:92:c2:97:fd:23:bb:30:ff:
85:1b:05:73:a8:5d:e4:d4:d2:6c:e3:bf:cf:54:f0:
1e:a8:56:0f:10:d8:75:2a:39:35:5c:8d:43:0c:08:
08:71:57:3e:8c:d5:fa:34:f2:87:7c:b2:eb:13:4a:
b1:a1:e5:fc:cf:f7:93:08:f3:79:81:2e:be:72:bc:
8f:bf:b2:a5:18:5f:0d:4b:fa:38:05:2b:b6:6a:f5:
34:2f:95:2b:94:d3:26:5d:6b:b6:fe:b3:77:6d:a7:
1e:fe:ff:f4:f5:64:48:d0:1f:89:67:13:96:e0:e3:
c8:fc:ef:3b:ba:27:8c:60:e3:36:0f:f1:c1:0b:4c:
3f:29:c8:e8:8a:fc:7c:b8:f9:46:ba:d5:42:6f:de:
f2:66:63:72:6c:9d:a3:1c:6d:98:8d:89:cb:7a:c1:
ed:ce:68:e6:ac:03:38:56:f5:99:ff:a8:63:13:7f:
55:67:b8:16:2b:86:b9:01:b6:86:92:d4:ac:0b:97:
17:78:80:27:8d:8d:da:16:95:6d:2c:2a:9d:d3:7d:
65:a3:20:eb:6d:4b:4b:88:d0:2e:3c:cb:9a:ec:38:
8e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C1:0F:60:48:04:F3:3C:7D:B5:FB:86:52:AB:13:F6:A9:58:B9:B1
X509v3 Authority Key Identifier:
keyid:08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:18:bb:e6:6e:7a:fb:25:b3:f6:82:9a:18:3e:6f:a1:e2:0d:
ae:a2:24:aa:49:c9:b0:a3:ca:07:a7:fb:e3:05:2b:61:71:1e:
29:52:e5:b3:aa:d3:23:1b:33:5e:c8:f2:64:13:6b:5c:85:9b:
56:d3:5c:e1:a7:a6:f1:ae:12:40:16:5c:41:84:1f:62:59:e0:
59:5e:ad:45:5c:dc:55:ef:33:74:f8:46:b8:10:22:92:f2:fe:
f7:c4:e1:42:a8:05:d1:1f:f0:49:06:ee:12:41:c7:aa:0c:a5:
71:a0:d6:da:d8:e2:91:40:8f:74:95:ce:55:23:83:c2:80:c2:
65:de:da:0d:be:9b:2c:cf:94:83:9f:7e:ab:10:2a:5e:e6:4a:
78:d3:80:3e:cb:da:9e:91:e1:46:9b:18:03:54:be:c6:17:9a:
14:28:5f:0b:18:e3:e4:40:18:ba:77:9c:ea:37:2e:d7:af:0d:
a3:84:ff:4b:a3:ef:1c:b5:52:ec:2f:51:2c:54:68:fa:f8:cd:
56:e9:ee:55:f8:c7:47:28:97:03:13:8b:60:8a:d6:21:ee:c0:
86:3b:a7:35:42:dc:64:76:00:86:2d:4a:61:4d:99:49:07:d7:
01:91:f4:7d:16:18:29:fb:46:e6:70:28:23:47:25:72:77:d3:
0e:ee:c3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:44:34 2025 by rpki-client