Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
File: CUJF7otbpMZv4s7KZL5Gb8lvce0.mft (raw, json)
Hash identifier: hBTsBDfKSfLystlwu2+iw782ijwW8/XE/zpSR0XPX1s=
Subject key identifier: F2:1C:80:67:B8:9C:C0:FA:C8:F8:E9:2E:75:4E:E8:28:BA:01:C5:CE
Authority key identifier: 09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED
Certificate issuer: /CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed
Certificate serial: 01977AC1EE4098A6DEEBFB476D18EFA0EFB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
Manifest number: 10D8
Signing time: Mon 16 Jun 2025 22:00:18 +0000
Manifest this update: Mon 16 Jun 2025 22:00:18 +0000
Manifest next update: Tue 17 Jun 2025 22:00:18 +0000
Files and hashes: 1: CUJF7otbpMZv4s7KZL5Gb8lvce0.crl (hash: oH/BKUd7RvqJUTjy2zDkIo2lM7buSbM5mE9xjhV4ubw=)
2: sT8i_lrT1dmgF96pIWG66J0xLDw.roa (hash: aG6mOGyX8yA6EwWHgoUdHhg4b1jzs6sii5gM4RFtUiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:c1:ee:40:98:a6:de:eb:fb:47:6d:18:ef:a0:ef:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed
Validity
Not Before: Jun 16 22:00:18 2025 GMT
Not After : Jun 17 22:00:18 2025 GMT
Subject: CN=f21c8067b89cc0fac8f8e92e754ee828ba01c5ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:43:80:de:68:f7:80:26:89:d9:d1:a5:58:22:
88:7d:c3:3d:e0:62:1b:df:52:e5:23:35:fa:75:54:
59:d7:b4:dc:09:e2:6b:f5:0c:d2:87:cb:8b:eb:9b:
d5:29:af:d6:78:b5:1e:e9:4d:b4:08:50:a5:00:9e:
cc:4b:38:3b:0e:ac:25:8a:58:25:49:e7:bc:7c:b2:
af:bd:e3:6d:13:be:b1:d5:50:8a:50:dc:23:27:03:
63:fc:67:61:6a:cf:74:5f:48:8d:c5:0e:49:f1:23:
bd:22:91:ac:bd:22:b5:7f:1f:37:b5:ca:d9:61:56:
ba:f2:f9:70:1c:0c:8c:64:ee:ac:70:2c:a1:c5:49:
3c:9b:72:9b:86:7c:e4:7e:fe:32:2b:15:56:99:02:
70:ab:43:5b:e7:ce:08:a2:cf:34:46:d6:c4:ef:ee:
48:48:44:72:73:05:5f:71:87:3d:67:28:84:9b:24:
e9:1b:dd:f6:32:7a:b0:d1:8d:c0:af:4b:ec:1d:f1:
62:2d:40:d3:40:fc:65:d3:a0:4d:fe:7f:b3:49:6d:
a7:7b:a0:68:f6:64:2c:53:65:c9:9f:6b:c2:2f:82:
61:f5:eb:06:be:9a:1f:fc:7e:c9:39:21:60:71:3f:
a0:ab:9c:6c:ba:c1:f6:93:32:0b:04:c8:b6:b9:b0:
7f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1C:80:67:B8:9C:C0:FA:C8:F8:E9:2E:75:4E:E8:28:BA:01:C5:CE
X509v3 Authority Key Identifier:
keyid:09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:17:81:69:bf:f0:60:11:b7:67:64:90:ff:ef:6e:6a:33:2d:
f2:2e:be:5b:58:27:d2:7e:d9:46:12:57:40:35:2b:a0:ce:b0:
d2:56:3d:1c:a4:e0:c7:77:b4:78:36:4d:17:3f:64:6f:27:83:
0e:2a:f9:b6:0b:77:f9:bf:a8:50:4a:31:1e:03:7c:15:cb:f1:
35:28:b9:96:4c:86:12:97:15:73:76:06:e1:09:ff:97:63:17:
f6:34:a9:92:87:f4:b6:7a:58:00:f8:13:e1:3d:76:d0:f9:43:
6a:ea:e9:08:02:27:04:f9:e3:29:ba:5c:e8:6c:87:e0:10:9e:
28:de:75:9c:ca:41:3a:74:fb:51:85:e2:b6:93:0f:d8:04:71:
a9:29:54:de:3d:55:14:19:18:d5:28:12:fe:d8:e2:6e:28:54:
f1:b6:27:8a:31:fe:61:27:7c:64:02:03:1f:cb:26:75:df:8c:
19:31:63:96:71:84:ea:11:4f:76:47:a0:62:f6:1a:61:29:32:
f9:bd:45:0f:70:e9:1f:f6:c6:ed:0a:87:38:99:d4:5c:4d:6a:
13:ee:65:a3:2e:e4:73:3d:cf:7a:6c:37:78:78:20:86:90:45:
1d:dc:2f:24:2f:2c:c7:7b:72:5c:55:e0:cb:11:c5:f5:de:6e:
45:94:a7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 03:26:29 2025 by rpki-client