Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
File: CMuJoREU774OHiVQ7Nozb9eS7F8.mft (raw, json)
Hash identifier: k4kzv1dvzzGZeYk2nP3O+xoqX58kPvXHihuQd3lj7Ww=
Subject key identifier: 7F:30:D5:21:3F:B5:6E:B4:F4:37:61:5C:31:A9:E2:05:05:7A:CD:14
Authority key identifier: 08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F
Certificate issuer: /CN=08cb89a11114efbe0e1e2550ecda336fd792ec5f
Certificate serial: 0197C538268AAA5F013E7BD5DE80D5EB7838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
Manifest number: 124F
Signing time: Tue 01 Jul 2025 09:01:20 +0000
Manifest this update: Tue 01 Jul 2025 09:01:20 +0000
Manifest next update: Wed 02 Jul 2025 09:01:20 +0000
Files and hashes: 1: CMuJoREU774OHiVQ7Nozb9eS7F8.crl (hash: RQOCp+n9ryO9JogHA5+56dadWGzcotowNRO/QKEcdyk=)
2: QEhnuw8ud1j9n62qQluLx43WHjQ.roa (hash: 1M0hr4yzSJjpoSUF2lAkNTs362XypkDSGbasmLEH2gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:38:26:8a:aa:5f:01:3e:7b:d5:de:80:d5:eb:78:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08cb89a11114efbe0e1e2550ecda336fd792ec5f
Validity
Not Before: Jul 1 09:01:20 2025 GMT
Not After : Jul 2 09:01:20 2025 GMT
Subject: CN=7f30d5213fb56eb4f437615c31a9e205057acd14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:78:86:fb:f0:1b:9a:22:cd:d2:0b:36:09:91:
df:4b:92:b1:0f:5e:bd:8d:c2:8e:6a:c4:7f:e8:ae:
8f:6e:a0:4c:d9:81:c6:0e:49:b2:6b:6e:16:6d:89:
04:57:55:6d:b8:fe:a9:06:68:f6:0d:4e:8e:5b:ca:
09:9e:be:77:20:d9:82:06:aa:cd:e3:88:72:f5:99:
95:8c:ea:3e:e9:c3:4b:51:f3:c7:f0:c8:d8:a2:49:
40:03:80:43:f4:02:37:a3:6c:55:b8:8f:b1:92:da:
b1:d2:79:23:cb:40:22:b4:fd:45:c3:2e:62:35:28:
c5:02:ff:8e:f8:77:fa:d4:01:01:41:c8:1a:78:1f:
68:11:2c:a2:b1:75:38:63:54:86:f6:7d:7e:38:0d:
59:f3:70:a8:19:76:09:0a:35:85:d6:5c:25:5e:c2:
c9:1a:f6:54:a6:36:7a:94:aa:cf:66:e2:6c:4c:d6:
4e:68:5c:20:e7:40:46:ea:c0:c8:7e:9d:a1:c2:48:
04:8a:db:55:1a:86:a7:9d:c1:7c:53:18:02:a6:e3:
08:f9:ae:3c:67:4b:90:30:7c:de:04:c6:6f:ba:7a:
dc:db:74:e4:90:0a:fe:0e:bb:02:f7:e5:e3:1e:6a:
1f:95:bb:72:4d:be:c6:db:cd:b0:2d:d1:4f:e2:49:
3b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:30:D5:21:3F:B5:6E:B4:F4:37:61:5C:31:A9:E2:05:05:7A:CD:14
X509v3 Authority Key Identifier:
keyid:08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:b6:f7:4a:68:13:96:43:d0:73:a4:6a:b1:5b:99:fc:4a:28:
ee:55:5e:7c:be:59:8b:96:5d:e6:12:5d:fe:1f:3b:12:d3:af:
c6:d2:fa:8e:e3:41:ef:58:a0:19:84:d0:a2:d4:e9:1a:39:92:
56:f2:39:89:00:90:0c:b2:a1:2e:da:c1:e7:ce:7c:0f:42:97:
12:46:4c:ee:88:ba:dc:0a:fe:27:45:87:90:13:9c:c1:ca:f5:
9b:02:b0:e4:5e:78:c8:30:43:fd:e7:4e:ff:86:8a:8f:8b:f9:
5f:27:8e:e4:a5:bb:e1:d4:b8:11:07:07:6b:6e:59:26:51:1d:
89:c9:9a:9d:12:81:aa:26:55:c4:45:2f:c1:19:f9:a1:e5:5b:
d2:86:8d:5d:77:dc:42:c0:8f:5a:d9:83:8a:7e:70:c9:c4:3a:
16:38:e7:51:c1:cb:52:16:98:26:06:c0:3c:85:ce:c1:30:48:
c9:cc:47:90:4a:b2:3d:70:31:1c:e3:7b:fb:98:32:e2:f1:cb:
39:63:1c:bf:55:13:b0:4d:43:db:da:dc:d2:d6:5c:5f:41:e1:
e1:e0:f9:fd:8f:29:76:6d:dd:1a:be:47:cc:96:47:2c:51:96:
76:57:bb:7d:21:3e:e3:b7:75:bc:cf:28:0c:95:d6:7d:6f:8f:
36:6b:18:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:58:54 2025 by rpki-client