Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
File: CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft (raw, json)
Hash identifier: q1hAC+BwDve2ggD7lX+plMjjaLymZ+ePEoFiC0ytUNk=
Subject key identifier: 2C:01:F3:13:8A:B1:F8:F7:81:DA:71:C7:A1:DC:71:0E:F2:EC:09:BB
Authority key identifier: 08:9F:CF:2A:B6:E6:DB:C1:63:4E:E5:91:FC:1B:74:A4:1D:E3:EA:5F
Certificate issuer: /CN=089fcf2ab6e6dbc1634ee591fc1b74a41de3ea5f
Certificate serial: 019896A50E2FBDA62DA90AB69E4937C903CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
Manifest number: 132D
Signing time: Mon 11 Aug 2025 01:00:56 +0000
Manifest this update: Mon 11 Aug 2025 01:00:56 +0000
Manifest next update: Tue 12 Aug 2025 01:00:56 +0000
Files and hashes: 1: CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl (hash: U+qxMaFn4rzrs1lEiHjKJFqRyaepm9msaTa6zdlJ7hY=)
2: b5Jj4qgundIuSAAGFCkt8JiFnho.roa (hash: 06WuFnYu9V9s1QGtR8S6F/K40CDV7ycfNQPEsDlVYUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a5:0e:2f:bd:a6:2d:a9:0a:b6:9e:49:37:c9:03:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089fcf2ab6e6dbc1634ee591fc1b74a41de3ea5f
Validity
Not Before: Aug 11 01:00:56 2025 GMT
Not After : Aug 12 01:00:56 2025 GMT
Subject: CN=2c01f3138ab1f8f781da71c7a1dc710ef2ec09bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:43:6b:62:6d:ce:21:8d:39:ba:8f:89:80:4f:
fb:db:e1:91:63:cf:6e:f2:35:96:3e:63:86:8b:71:
27:a6:b3:be:05:03:40:14:34:4b:c7:1f:cc:f2:e9:
c6:32:c9:d5:63:ad:55:ea:47:c7:ba:47:d6:40:fd:
56:5b:9b:d7:c3:0d:83:14:a3:d1:ba:e0:49:8b:c1:
8c:8b:68:09:ec:72:7b:7c:df:a7:2c:50:df:27:3b:
29:62:bf:a7:ff:13:94:f7:3c:16:6a:00:06:0c:b0:
cd:c7:de:fb:e5:dc:85:c8:09:6e:36:f6:b4:20:d1:
d9:02:ec:79:6a:fa:21:37:f0:a9:39:ec:70:6d:a1:
d0:7b:3c:11:29:3d:64:e9:44:82:ae:f2:61:1c:31:
2d:d6:8c:53:b4:d7:3c:d1:b4:24:6a:83:45:d8:7c:
32:ce:6b:2a:3e:3c:bd:9a:2c:3f:d8:fd:39:cf:30:
92:3f:9a:6e:93:9e:97:53:13:f1:a3:80:24:16:98:
5b:14:28:a6:f5:19:dc:62:a0:9b:83:61:97:8a:3c:
c5:01:bb:2f:59:92:bb:81:da:e1:f1:34:92:4e:94:
6e:60:5b:55:a4:7e:f3:db:06:58:4d:6c:cf:7b:f2:
a2:ef:6f:ba:e0:ce:a9:9d:1e:65:a0:e6:48:3d:67:
f0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:01:F3:13:8A:B1:F8:F7:81:DA:71:C7:A1:DC:71:0E:F2:EC:09:BB
X509v3 Authority Key Identifier:
keyid:08:9F:CF:2A:B6:E6:DB:C1:63:4E:E5:91:FC:1B:74:A4:1D:E3:EA:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:c3:18:38:52:f7:f5:4d:bf:ad:c9:03:1b:9a:e5:1b:02:c5:
53:92:c9:00:2c:5e:19:55:f9:de:f5:02:0b:14:f6:ef:92:a7:
bb:2c:13:35:c1:3c:8a:92:45:92:d6:f8:18:10:6d:0d:cf:44:
a6:55:46:a3:e4:bb:f8:3f:18:c4:24:ed:46:33:c0:7a:08:ac:
b3:61:06:f3:47:38:70:50:ac:20:3f:a2:8f:0a:6f:99:8d:19:
50:b5:27:bf:9f:27:f8:f3:c6:7c:5a:87:7b:ae:a5:74:1e:69:
dd:4e:f0:50:29:14:fd:43:13:e4:e6:a2:ff:43:d6:2c:da:25:
78:ca:a3:2a:74:09:b3:6d:44:c3:7c:57:43:c1:cd:34:12:eb:
c2:06:e8:96:a3:ea:ae:d9:54:03:2c:15:fe:b4:66:67:43:54:
0d:29:42:ce:a8:4b:b8:d1:0b:7e:b3:f1:69:5d:f4:87:e0:50:
5b:16:89:2e:f9:52:57:77:5d:80:85:5c:77:73:96:36:f0:bd:
ca:8a:31:36:12:f2:8d:ac:62:0c:bb:61:5f:69:58:2c:48:f4:
95:c7:5a:7b:7d:e6:65:92:d1:9c:2e:0d:36:3a:51:56:60:ae:
65:f0:d1:dc:74:6e:ad:b3:55:33:b9:e8:ff:a2:32:09:00:f2:
7d:f2:ca:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:53:43 2025 by rpki-client