Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
File: CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft (raw, json)
Hash identifier: 3/l18j5R8jRt2e0yPfR5FYkzj6/8gDogPOrhp34im3k=
Subject key identifier: ED:F2:C2:7B:E6:AA:C2:26:A2:21:C6:A1:08:5E:BF:76:31:CB:57:D2
Authority key identifier: 08:95:3A:5F:11:A8:27:9C:DF:87:98:96:0D:E1:E2:2E:B1:22:7D:95
Certificate issuer: /CN=08953a5f11a8279cdf8798960de1e22eb1227d95
Certificate serial: 01987CAE25B65AAD7F2A6F0A15B50FC1ACE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 00:00:44 +0000
Manifest this update: Wed 06 Aug 2025 00:00:44 +0000
Manifest next update: Thu 07 Aug 2025 00:00:44 +0000
Files and hashes: 1: CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl (hash: n3XYnufM1GfhhzRAu1LEW4bdxTyI2mHCifCunjA2ii0=)
2: uqzFgf-8B62Y8mrkcQQAzXl65Xw.roa (hash: kCZVPY38TjsnXAkZkosAsOr4uT14uV5XbG2BhNU/FCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:25:b6:5a:ad:7f:2a:6f:0a:15:b5:0f:c1:ac:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08953a5f11a8279cdf8798960de1e22eb1227d95
Validity
Not Before: Aug 6 00:00:44 2025 GMT
Not After : Aug 7 00:00:44 2025 GMT
Subject: CN=edf2c27be6aac226a221c6a1085ebf7631cb57d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6f:f1:6b:c1:7e:28:4e:5c:aa:dc:c3:c8:cb:
2c:45:52:a1:53:18:fb:27:99:47:a9:78:6f:92:f9:
69:e8:e4:2b:5b:c1:04:67:e0:32:6c:1e:09:f5:c2:
c9:17:d9:51:90:b1:82:a6:5b:0f:a7:99:55:9d:77:
73:db:39:dc:6d:e4:72:eb:85:59:83:e8:b0:d8:81:
03:a0:7a:0a:31:37:04:f8:7f:89:95:17:28:a1:8e:
89:c2:8d:1c:60:bd:6a:66:23:a0:be:c4:14:ff:71:
ad:48:c2:50:a6:23:da:21:3e:db:fa:b2:37:83:8e:
1e:ef:d1:16:0e:13:0c:12:49:d7:ba:65:f3:07:d1:
5c:76:5b:44:2f:df:e5:88:ec:da:9b:00:ce:81:93:
50:97:0d:51:ef:20:82:a5:ec:53:f4:48:29:ac:87:
b0:7b:71:fe:36:3d:97:55:e9:fb:e7:75:d3:5f:38:
5f:95:ac:aa:3b:ea:91:47:e1:53:c5:17:8a:49:5a:
99:c3:47:6f:d9:45:2e:f8:ea:c2:90:e4:95:ba:8b:
a5:c6:de:74:a5:54:16:01:66:df:3d:4d:13:1c:df:
01:91:d8:de:ae:10:f6:b5:b5:7f:e2:9c:09:30:4a:
f7:7f:a4:c6:83:a0:44:b6:a0:64:5c:37:c2:52:e5:
f6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F2:C2:7B:E6:AA:C2:26:A2:21:C6:A1:08:5E:BF:76:31:CB:57:D2
X509v3 Authority Key Identifier:
keyid:08:95:3A:5F:11:A8:27:9C:DF:87:98:96:0D:E1:E2:2E:B1:22:7D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:6e:aa:a9:a5:da:87:3d:ab:8f:2f:8d:0b:f5:50:f9:22:57:
1c:42:e1:ac:15:df:60:a0:c8:1e:8d:f0:38:88:41:7d:13:5a:
a9:91:a9:1a:f8:da:67:4a:bd:a1:21:67:31:a5:2c:f7:af:4e:
5c:e8:e3:02:e7:59:95:ae:04:0b:c1:6e:6e:75:38:be:d4:eb:
fe:15:a8:06:4f:c1:75:f7:2f:37:18:f2:14:d3:16:d7:e1:0f:
fd:78:b5:e2:1a:92:fd:a3:80:5b:54:d3:50:e4:8e:e2:e7:f0:
c4:b7:65:ee:ea:95:28:c4:77:07:bb:6f:9b:8f:22:ad:e1:25:
5c:ab:9c:fa:76:68:95:06:66:be:46:56:ba:93:3f:75:91:36:
4e:06:7d:6c:fe:dd:d9:bf:7c:68:bd:fc:48:b6:7f:13:f2:22:
16:77:ca:12:c4:77:e7:68:e2:fe:10:ba:db:c3:93:25:3a:65:
51:b2:f8:b2:4f:1e:23:fb:44:d4:6f:0c:c8:b2:a5:31:01:59:
a7:2b:13:f6:fd:31:56:6c:6b:64:a5:15:fb:ba:18:20:08:3b:
7f:76:67:92:ad:ae:96:ef:d9:01:88:38:fd:6e:3d:72:42:53:
8b:26:a3:ff:fc:8a:00:03:e0:bc:8e:04:84:dc:bc:86:35:1e:
de:62:ae:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:59:19 2025 by rpki-client