Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
File: CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft (raw, json)
Hash identifier: GEGCPHEWJt6qLUkjwcpqd8n/Wtdeb/6WRbeRDxVI7jo=
Subject key identifier: 32:7D:79:34:A6:40:4E:E9:CB:0E:94:51:D9:6C:B6:9A:0D:54:6B:79
Authority key identifier: 08:D2:7F:DC:90:F8:0F:80:97:2C:12:5B:D4:1E:DB:0A:E8:33:4A:A0
Certificate issuer: /CN=08d27fdc90f80f80972c125bd41edb0ae8334aa0
Certificate serial: 0199FDD8D19483034BC7E50FFBB3F64DD81D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
Manifest number: 0B7C
Signing time: Sun 19 Oct 2025 19:01:08 +0000
Manifest this update: Sun 19 Oct 2025 19:01:08 +0000
Manifest next update: Mon 20 Oct 2025 19:01:08 +0000
Files and hashes: 1: CNJ_3JD4D4CXLBJb1B7bCugzSqA.crl (hash: sDWvP3UFHmHvAbxGuPXuXEV76bBvpo9mpa8HPJyQjcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:d1:94:83:03:4b:c7:e5:0f:fb:b3:f6:4d:d8:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d27fdc90f80f80972c125bd41edb0ae8334aa0
Validity
Not Before: Oct 19 19:01:08 2025 GMT
Not After : Oct 20 19:01:08 2025 GMT
Subject: CN=327d7934a6404ee9cb0e9451d96cb69a0d546b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:97:5a:0b:e4:bf:c9:ee:76:e0:90:60:aa:76:
80:4b:d5:5a:05:17:2d:6e:2d:c0:aa:b4:e4:d8:31:
3c:f8:af:70:8a:9e:09:88:a9:97:4b:08:2d:43:3f:
12:4a:dc:8b:67:fa:7a:e2:e1:a8:cc:d4:23:99:3a:
14:50:06:47:79:18:3a:83:e1:de:c4:d9:cb:1b:65:
48:08:f3:5e:63:41:38:a2:a0:cf:0d:dd:63:1a:52:
7b:1e:3b:ce:39:7d:ba:7c:69:f8:9e:5d:cc:ca:80:
a1:b9:76:9f:10:04:e3:01:b8:3d:f3:89:90:da:44:
ef:ee:76:9b:bd:19:d0:71:d0:cf:ef:85:48:0d:42:
43:24:68:89:ca:68:c5:65:85:2c:f6:ea:44:ae:93:
b5:ef:9b:33:5e:87:4d:ea:0e:11:6f:f8:88:0a:3a:
f6:52:f4:9f:95:ad:d0:41:6a:d2:46:a5:12:bf:f8:
0b:61:20:cf:6d:d1:20:07:0a:09:7c:f0:c7:9e:90:
09:78:87:9f:ca:d2:a7:78:d7:0d:e6:7d:b9:fa:a9:
97:7e:9f:c7:e1:a2:a1:fc:cf:69:95:34:4b:2c:e9:
f6:33:17:6a:c7:81:0c:80:a9:ea:ea:d7:ec:94:d2:
94:8c:22:07:e7:54:b4:66:c9:11:2b:fc:c9:66:d8:
79:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7D:79:34:A6:40:4E:E9:CB:0E:94:51:D9:6C:B6:9A:0D:54:6B:79
X509v3 Authority Key Identifier:
keyid:08:D2:7F:DC:90:F8:0F:80:97:2C:12:5B:D4:1E:DB:0A:E8:33:4A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:31:0a:71:dd:e2:a0:77:83:bd:f7:ca:51:c2:cd:64:f5:e8:
52:22:79:26:9f:68:4b:15:cf:5d:e4:91:ed:c7:fd:94:91:4e:
18:26:00:dd:42:f9:0e:6e:7e:c1:c9:ec:26:6e:6b:31:0e:22:
ae:8c:5c:e1:7c:ca:fd:cd:dc:16:b9:b7:cd:d2:91:a1:c0:e6:
29:65:28:7b:bf:58:77:da:e8:dc:96:dd:16:ae:ed:7c:3e:4f:
5d:af:ab:f1:82:71:26:17:dd:68:f3:31:6d:68:9d:3c:0d:5a:
ab:8b:fe:1b:0e:1e:b2:9c:6b:04:52:ed:9b:1d:bc:ee:66:5e:
3a:ba:b2:95:53:82:62:a2:27:90:00:66:3d:eb:17:62:f4:63:
52:2b:d3:bb:25:aa:9b:23:34:fd:c7:09:76:9f:f9:10:36:5d:
bc:8a:8b:c9:81:97:92:83:4a:0d:31:37:ea:e6:59:58:36:33:
08:85:28:51:e0:66:15:d9:1d:e1:ad:b5:56:08:c5:c1:8f:78:
65:66:f1:a7:69:8d:57:09:ee:d4:e6:f5:37:05:a7:e5:a2:1a:
58:f6:7a:7e:17:9d:b8:9a:e2:b1:9b:0b:1e:25:5b:91:26:af:
20:ce:a6:a2:0f:f5:20:50:61:1e:b5:2e:25:e3:08:7d:c5:d6:
73:56:20:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:24:23 2025 by rpki-client