Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
File: CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft (raw, json)
Hash identifier: GqzOKM1AKna8TOOsDsi1YBcKbOZmO47wjM8PjkFeFMk=
Subject key identifier: C9:14:5E:E5:D1:FE:8A:6F:EB:FE:35:7C:2F:0F:43:79:39:F5:E4:46
Authority key identifier: 08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F
Certificate issuer: /CN=089523953939f8a5e464b1cc7719ebeb9467ca3f
Certificate serial: 0196BB92BFF6E2303D79775292083FE284A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
Manifest number: 1534
Signing time: Sat 10 May 2025 19:01:18 +0000
Manifest this update: Sat 10 May 2025 19:01:18 +0000
Manifest next update: Sun 11 May 2025 19:01:18 +0000
Files and hashes: 1: CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl (hash: zgKQegFcsJBcgyD3uSkGbcjB9pZZPsczYkn6wry0UTk=)
2: PJ_-iRXGR5kveJvnaBWIwG-ft74.roa (hash: lpKsBNInX/l4lejvtga0/MnEJsq53AADQslEJzx9StQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:bf:f6:e2:30:3d:79:77:52:92:08:3f:e2:84:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089523953939f8a5e464b1cc7719ebeb9467ca3f
Validity
Not Before: May 10 19:01:18 2025 GMT
Not After : May 11 19:01:18 2025 GMT
Subject: CN=c9145ee5d1fe8a6febfe357c2f0f437939f5e446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f3:e1:55:3c:1d:0c:86:d8:84:f9:ee:dc:bc:
09:2e:78:03:6f:f0:0d:ad:25:d8:27:a5:33:b2:bf:
16:55:4b:11:9f:e1:eb:32:85:ae:08:8d:90:0b:34:
73:e8:62:89:c4:50:19:a1:e9:4e:86:58:6d:7c:64:
d4:33:b1:9e:68:fa:44:ed:44:a5:b2:73:15:5e:3d:
0d:07:24:ed:7e:ba:3e:46:76:d0:51:50:2a:c7:60:
9c:55:f7:fd:75:08:6f:b4:a1:4a:42:64:14:99:29:
3f:48:37:30:f9:ef:10:6d:94:9d:89:7c:c7:f2:83:
09:7f:c2:08:f8:fe:ab:3d:a3:97:06:e9:14:04:66:
85:91:0e:57:d7:1b:9a:f3:33:65:2c:81:28:a7:55:
8e:7e:a9:84:b8:a6:7e:8f:4c:52:e3:a9:cb:0a:42:
55:86:33:0b:fd:40:27:c3:a3:2d:e7:b7:9c:26:1f:
1b:f0:b7:4e:ad:0a:ac:d7:9c:73:c7:65:a6:8b:f0:
66:bc:f6:16:d7:29:15:0b:db:ee:7e:98:94:dd:77:
23:62:de:ef:7d:32:c0:7e:b9:65:c5:be:bd:43:49:
6b:a6:13:9a:a1:a0:76:00:2b:eb:b0:85:a0:0f:77:
b3:c9:9c:92:06:f8:89:a1:03:87:0c:ef:7b:3a:f9:
c9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:14:5E:E5:D1:FE:8A:6F:EB:FE:35:7C:2F:0F:43:79:39:F5:E4:46
X509v3 Authority Key Identifier:
keyid:08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:89:ce:8d:41:0b:ef:e9:e5:72:00:8d:3f:41:17:93:3b:b6:
a7:e8:2e:30:79:38:04:b7:4d:0c:07:f8:11:4c:d0:13:5c:c8:
e6:70:7e:bd:37:6e:98:66:72:c3:a8:bd:3b:44:41:a3:85:aa:
4b:d4:b5:e8:90:bc:5e:5b:e1:74:4a:16:3a:52:f1:63:83:ca:
8a:49:94:c9:97:e2:b1:a7:9e:d0:02:56:72:e6:18:e6:f3:ba:
04:8b:b3:0d:18:f0:53:31:91:7e:4d:bc:49:09:13:b8:6b:5c:
88:7b:ba:d9:bd:9d:c3:16:40:31:fc:31:f8:32:da:ff:b2:1f:
60:af:e3:5b:af:b9:c1:7b:d3:15:2c:e7:b6:7c:fc:ec:d4:15:
43:36:59:d8:4d:60:84:17:5c:bb:49:bc:7f:8c:79:7a:62:09:
a2:02:40:67:5a:0d:4d:55:ee:45:c8:ca:2b:cf:f6:4f:1a:6b:
32:5f:a7:8a:d3:52:43:01:92:0d:9a:42:05:a5:d3:19:1b:52:
16:6f:01:9f:c3:53:b6:fe:de:d3:61:18:ea:94:de:8c:83:4f:
6c:a2:3c:cc:c3:d5:34:0c:f7:02:43:bb:ef:be:f2:e4:2d:fa:
fe:bf:91:59:e6:a4:be:15:51:bb:03:f4:64:28:4f:87:2d:aa:
78:38:8c:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7kr/24jA9eXdSkgg/4oSmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4OTUyMzk1MzkzOWY4YTVlNDY0YjFjYzc3MTllYmViOTQ2
N2NhM2YwHhcNMjUwNTEwMTkwMTE4WhcNMjUwNTExMTkwMTE4WjAzMTEwLwYDVQQD
EyhjOTE0NWVlNWQxZmU4YTZmZWJmZTM1N2MyZjBmNDM3OTM5ZjVlNDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufPhVTwdDIbYhPnu3LwJLngDb/AN
rSXYJ6Uzsr8WVUsRn+HrMoWuCI2QCzRz6GKJxFAZoelOhlhtfGTUM7GeaPpE7USl
snMVXj0NByTtfro+RnbQUVAqx2CcVff9dQhvtKFKQmQUmSk/SDcw+e8QbZSdiXzH
8oMJf8II+P6rPaOXBukUBGaFkQ5X1xua8zNlLIEop1WOfqmEuKZ+j0xS46nLCkJV
hjML/UAnw6Mt57ecJh8b8LdOrQqs15xzx2Wmi/BmvPYW1ykVC9vufpiU3XcjYt7v
fTLAfrllxb69Q0lrphOaoaB2ACvrsIWgD3ezyZySBviJoQOHDO97OvnJ6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMkUXuXR/opv6/41fC8PQ3k59eRGMB8GA1UdIwQY
MBaAFAiVI5U5Ofil5GSxzHcZ6+uUZ8o/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0pVamxUazUtS1hrWkxITWR4bnI2NVJueWo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84NTM5OTYtNmNiYi00ZDQyLTg3Nzgt
YjFkN2FjOWVhMzIxLzEvQ0pVamxUazUtS1hrWkxITWR4bnI2NVJueWo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi84NTM5OTYtNmNiYi00ZDQyLTg3NzgtYjFkN2FjOWVhMzIx
LzEvQ0pVamxUazUtS1hrWkxITWR4bnI2NVJueWo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuYnOjUEL
7+nlcgCNP0EXkzu2p+guMHk4BLdNDAf4EUzQE1zI5nB+vTdumGZyw6i9O0RBo4Wq
S9S16JC8XlvhdEoWOlLxY4PKikmUyZfisaee0AJWcuYY5vO6BIuzDRjwUzGRfk28
SQkTuGtciHu62b2dwxZAMfwx+DLa/7IfYK/jW6+5wXvTFSzntnz87NQVQzZZ2E1g
hBdcu0m8f4x5emIJogJAZ1oNTVXuRcjKK8/2TxprMl+nitNSQwGSDZpCBaXTGRtS
Fm8Bn8NTtv7e02EY6pTejINPbKI8zMPVNAz3AkO7777y5C36/r+RWeakvhVRuwP0
ZChPhy2qeDiMuw==
-----END CERTIFICATE-----
Generated at Sat May 10 22:18:48 2025 by rpki-client