Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
File: CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft (raw, json)
Hash identifier: DpEdyo2X0osWjNwwubB5Wv3Bbzg5eCr8E9AFjk9O+OI=
Subject key identifier: FF:B9:76:93:56:A5:74:DE:3A:12:C5:91:B2:A5:6F:77:A5:34:1C:C9
Authority key identifier: 08:D2:7F:DC:90:F8:0F:80:97:2C:12:5B:D4:1E:DB:0A:E8:33:4A:A0
Certificate issuer: /CN=08d27fdc90f80f80972c125bd41edb0ae8334aa0
Certificate serial: 0198D47379FEC90807EC96589CE00A0BD492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
Manifest number: 0AE2
Signing time: Sat 23 Aug 2025 01:03:14 +0000
Manifest this update: Sat 23 Aug 2025 01:03:14 +0000
Manifest next update: Sun 24 Aug 2025 01:03:14 +0000
Files and hashes: 1: CNJ_3JD4D4CXLBJb1B7bCugzSqA.crl (hash: O8DIW4zjjXUPSIAtWx9hy0vmOBhqUBGtRSCsLSL8uEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:79:fe:c9:08:07:ec:96:58:9c:e0:0a:0b:d4:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d27fdc90f80f80972c125bd41edb0ae8334aa0
Validity
Not Before: Aug 23 01:03:14 2025 GMT
Not After : Aug 24 01:03:14 2025 GMT
Subject: CN=ffb9769356a574de3a12c591b2a56f77a5341cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e6:aa:0b:6f:af:89:9c:60:7a:06:7e:dd:39:
b4:d0:fd:8e:50:47:42:13:bc:fa:ad:0d:66:cc:49:
79:b5:14:c1:68:31:30:e3:50:56:ba:c8:14:7b:4c:
7f:ea:52:8b:62:ee:80:fd:75:19:5a:de:b5:32:8d:
70:49:cb:90:51:93:23:76:06:8e:b9:ad:c6:03:e5:
dc:1d:2a:92:67:d4:fd:cd:ba:92:e8:d1:1a:1d:0f:
0b:3a:b3:01:db:3e:0e:fb:8c:b4:8c:2f:de:80:1b:
fe:bf:8c:cc:43:75:92:49:df:76:88:90:f9:3a:fc:
0e:88:57:1b:44:33:04:bd:72:80:f3:55:58:a7:95:
cd:be:43:cf:b0:d4:33:e0:c2:5e:18:1f:ec:36:4e:
34:db:a0:25:84:7f:31:3e:d1:7f:84:b9:fd:01:70:
0f:05:d4:8e:cd:b1:24:a8:c3:1f:4e:70:95:6c:b5:
ea:70:77:20:a0:4f:21:6d:b1:06:d6:2e:35:ad:07:
88:c1:b1:a0:b9:71:a5:be:50:eb:5e:19:55:bf:f6:
45:a4:a7:64:b6:e6:2a:1e:eb:e0:7c:12:4b:81:42:
83:39:d2:43:00:14:d0:33:4c:d5:9d:ee:18:fc:c9:
7f:64:d8:c8:1b:ce:d9:c3:76:db:0c:37:35:53:d0:
5e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B9:76:93:56:A5:74:DE:3A:12:C5:91:B2:A5:6F:77:A5:34:1C:C9
X509v3 Authority Key Identifier:
keyid:08:D2:7F:DC:90:F8:0F:80:97:2C:12:5B:D4:1E:DB:0A:E8:33:4A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:17:77:47:94:37:f8:8e:e9:14:ec:cd:da:ac:99:a9:48:c6:
8b:3b:d7:b7:0c:e4:0b:be:18:06:16:ab:03:e4:b5:19:0a:f1:
b0:49:5d:71:1b:04:cd:ea:85:11:c8:34:8e:26:4f:74:40:e0:
b5:f4:9c:ca:79:21:54:07:cb:8c:8d:70:79:bf:bc:f8:c8:db:
0a:7f:3a:68:66:7d:d2:b3:64:dd:f3:45:8e:1b:82:f8:f0:a8:
d1:12:b7:47:3a:cf:93:d0:7a:5c:8e:68:95:65:13:60:5e:75:
2a:df:5c:25:ac:37:e8:c2:da:18:dc:f5:84:f0:71:06:d0:09:
a7:a2:d5:87:87:61:8f:76:59:9d:0d:3b:38:aa:ab:09:d0:5a:
0e:f0:60:1d:91:54:26:32:20:e4:96:d6:b4:86:f7:42:ea:70:
e6:52:14:59:15:66:02:43:cf:14:bb:2d:f2:52:4f:cf:e4:73:
70:bd:37:89:81:4b:f6:23:b9:88:bc:fe:d7:c0:68:4f:2f:fe:
5b:61:5c:ca:1c:ad:1f:e6:f2:7f:93:32:e1:e4:1b:6f:b2:cf:
fd:9d:b6:3f:80:7c:7c:2a:c6:6b:7c:87:e0:bb:41:27:ce:61:
d3:b4:64:a8:42:53:44:58:92:e3:50:8f:52:89:91:a7:90:43:
b4:81:48:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc3n+yQgH7JZYnOAKC9SSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZDI3ZmRjOTBmODBmODA5NzJjMTI1YmQ0MWVkYjBhZTgz
MzRhYTAwHhcNMjUwODIzMDEwMzE0WhcNMjUwODI0MDEwMzE0WjAzMTEwLwYDVQQD
EyhmZmI5NzY5MzU2YTU3NGRlM2ExMmM1OTFiMmE1NmY3N2E1MzQxY2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuaqC2+viZxgegZ+3Tm00P2OUEdC
E7z6rQ1mzEl5tRTBaDEw41BWusgUe0x/6lKLYu6A/XUZWt61Mo1wScuQUZMjdgaO
ua3GA+XcHSqSZ9T9zbqS6NEaHQ8LOrMB2z4O+4y0jC/egBv+v4zMQ3WSSd92iJD5
OvwOiFcbRDMEvXKA81VYp5XNvkPPsNQz4MJeGB/sNk4026AlhH8xPtF/hLn9AXAP
BdSOzbEkqMMfTnCVbLXqcHcgoE8hbbEG1i41rQeIwbGguXGlvlDrXhlVv/ZFpKdk
tuYqHuvgfBJLgUKDOdJDABTQM0zVne4Y/Ml/ZNjIG87Zw3bbDDc1U9BedwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+5dpNWpXTeOhLFkbKlb3elNBzJMB8GA1UdIwQY
MBaAFAjSf9yQ+A+AlywSW9Qe2wroM0qgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ05KXzNKRDRENENYTEJKYjFCN2JDdWd6U3FBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC82NjJkYmUtNTkzNy00NmZhLThkOTYt
OTEwNTQxMTU1ZmVmLzEvQ05KXzNKRDRENENYTEJKYjFCN2JDdWd6U3FBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC82NjJkYmUtNTkzNy00NmZhLThkOTYtOTEwNTQxMTU1ZmVm
LzEvQ05KXzNKRDRENENYTEJKYjFCN2JDdWd6U3FBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMRd3R5Q3
+I7pFOzN2qyZqUjGizvXtwzkC74YBharA+S1GQrxsEldcRsEzeqFEcg0jiZPdEDg
tfScynkhVAfLjI1web+8+MjbCn86aGZ90rNk3fNFjhuC+PCo0RK3RzrPk9B6XI5o
lWUTYF51Kt9cJaw36MLaGNz1hPBxBtAJp6LVh4dhj3ZZnQ07OKqrCdBaDvBgHZFU
JjIg5JbWtIb3Qupw5lIUWRVmAkPPFLst8lJPz+RzcL03iYFL9iO5iLz+18BoTy/+
W2FcyhytH+byf5My4eQbb7LP/Z22P4B8fCrGa3yH4LtBJ85h07RkqEJTRFiS41CP
UomRp5BDtIFIjA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:09:55 2025 by rpki-client