Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
File: Cajtl6vouAFN0xwsJE-fKPX5eiE.mft (raw, json)
Hash identifier: LnGJ0zVxMODRkh+0+26EtMhzZt+z4hfCmYhn6WtLg/w=
Subject key identifier: 33:81:D7:9D:32:19:4F:02:E4:A7:F1:04:3D:01:A4:EE:1C:C7:46:BA
Authority key identifier: 09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
Certificate issuer: /CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Certificate serial: 0197684E27492BCACCD282F443DCB49F8FEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
Manifest number: 09A2
Signing time: Fri 13 Jun 2025 08:00:41 +0000
Manifest this update: Fri 13 Jun 2025 08:00:41 +0000
Manifest next update: Sat 14 Jun 2025 08:00:41 +0000
Files and hashes: 1: Cajtl6vouAFN0xwsJE-fKPX5eiE.crl (hash: uvJm5y4vyQ409/68o6+AcDwAcmjuwNVvIwpNuHzZ/mM=)
2: Khmhefi6kwckslHGfWvU_2oMALk.roa (hash: GCH2SF4oCWT5irU/tNDWYDBbGKrkiI0SguGZAk1/bwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:27:49:2b:ca:cc:d2:82:f4:43:dc:b4:9f:8f:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Validity
Not Before: Jun 13 08:00:41 2025 GMT
Not After : Jun 14 08:00:41 2025 GMT
Subject: CN=3381d79d32194f02e4a7f1043d01a4ee1cc746ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e0:de:68:1b:77:97:3e:45:ba:d8:cc:d8:3a:
ef:f2:a1:b2:1b:b2:28:03:d6:78:0a:5c:31:1d:c6:
c2:e8:a4:9c:86:cf:92:87:fc:42:e9:e0:f7:5e:b6:
c6:c9:3b:fb:b8:62:bd:29:22:e5:7e:5a:bd:dc:f3:
95:bc:32:39:5e:c1:b4:d8:73:fe:10:5d:1a:69:d2:
f6:24:ee:b7:a4:bf:8a:56:62:67:4c:e9:7e:40:f6:
95:09:17:77:e5:da:9d:fc:f5:34:1e:5f:2c:4e:ef:
95:51:76:b5:e9:a6:8d:83:40:2a:14:c2:bf:aa:13:
1b:fc:5b:0c:24:ac:4a:28:6e:b3:87:72:82:cd:3c:
2d:bd:ce:36:d7:14:3f:8b:5b:e6:82:68:7b:91:7f:
6d:10:27:4f:41:71:04:b1:44:e6:7c:03:23:fa:9b:
f3:5e:9e:39:cc:99:b3:59:d9:ad:87:51:47:d3:77:
f0:9f:06:0e:d4:61:eb:41:1d:ed:b1:8a:ac:d5:a4:
d3:f5:4e:43:ef:5e:de:5c:71:fc:f4:0c:09:ee:91:
d8:48:bc:67:b6:fc:f6:c5:86:c6:26:74:61:56:3a:
69:60:09:1c:28:73:51:7a:67:ee:5b:52:2d:ba:88:
5a:55:fb:81:4e:71:73:80:81:82:30:24:e9:51:9b:
ff:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:81:D7:9D:32:19:4F:02:E4:A7:F1:04:3D:01:A4:EE:1C:C7:46:BA
X509v3 Authority Key Identifier:
keyid:09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:d5:c2:a9:8d:be:4d:1c:d6:c0:32:87:2c:7c:71:ed:f0:be:
bb:8c:0f:7c:fd:f7:88:a1:d7:4f:c2:e7:2e:e6:2b:84:64:38:
75:d5:03:59:99:95:ae:4f:ef:14:fd:3b:c3:01:da:af:19:1c:
6f:ec:0b:ee:0d:fb:f3:f4:71:3b:d6:d8:24:6e:a7:6f:9c:8a:
1d:d0:87:ef:9a:77:42:0a:c6:14:42:10:8c:05:30:e5:3e:dc:
f9:7d:da:66:9a:6c:d7:1f:f7:c4:76:01:0a:e1:37:a3:32:02:
68:0a:c1:84:43:20:41:fd:b2:70:29:65:3b:35:1c:69:b3:64:
54:94:65:54:30:90:07:80:a9:65:4b:f7:96:4d:40:f7:40:ca:
7e:31:b8:1d:bb:c6:41:c1:9a:4f:ad:f4:38:af:e3:4b:02:73:
82:2f:24:93:4f:20:fc:57:2b:f3:29:29:e3:eb:fa:f8:07:c3:
59:4b:70:30:80:b0:a7:95:fa:11:7c:5e:be:ef:49:f3:51:6d:
bc:38:5e:51:ab:23:06:27:6c:72:a4:03:cd:0a:3b:16:4a:2e:
3c:a6:ff:fb:eb:4a:ad:8b:9c:7a:b7:58:2b:09:af:91:ef:27:
09:7a:cc:98:21:e7:38:37:a4:2b:82:60:23:41:29:7d:82:96:
95:55:27:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:29:47 2025 by rpki-client