Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
File: CNJ4u-X8LfcyAyzbI1li26vg9kE.mft (raw, json)
Hash identifier: BUzaeiATPp/qgO4in4cRjxs1NcoT1V8UcEyNrkQYUZY=
Subject key identifier: 20:13:69:38:FF:E8:79:6B:2D:78:F8:AD:2F:2A:EE:D6:5E:EE:DB:94
Authority key identifier: 08:D2:78:BB:E5:FC:2D:F7:32:03:2C:DB:23:59:62:DB:AB:E0:F6:41
Certificate issuer: /CN=08d278bbe5fc2df732032cdb235962dbabe0f641
Certificate serial: 019891B58EE4F9BDA5C74AD5876C55183006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
Manifest number: 1625
Signing time: Sun 10 Aug 2025 02:00:51 +0000
Manifest this update: Sun 10 Aug 2025 02:00:51 +0000
Manifest next update: Mon 11 Aug 2025 02:00:51 +0000
Files and hashes: 1: CNJ4u-X8LfcyAyzbI1li26vg9kE.crl (hash: yTyL63k0Wga8qDOGBm5oiQhi1I6EJ8FvDBiwo/iBJ6s=)
2: W5VtAzPYHnJg8m79kjyqgqKE878.roa (hash: Pv7+GoLFJlWTHtdGXau6mFaCy435N0A5ynkKLESZfdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:b5:8e:e4:f9:bd:a5:c7:4a:d5:87:6c:55:18:30:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d278bbe5fc2df732032cdb235962dbabe0f641
Validity
Not Before: Aug 10 02:00:51 2025 GMT
Not After : Aug 11 02:00:51 2025 GMT
Subject: CN=20136938ffe8796b2d78f8ad2f2aeed65eeedb94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:98:f4:a8:44:86:2c:b6:cd:45:1a:d5:a3:6c:
05:40:5e:83:ec:62:1a:ae:5c:e1:3d:b4:6d:e9:0f:
7a:b4:39:59:ae:06:be:b0:ca:62:d7:da:c2:47:cc:
4f:0c:24:f1:4c:b6:10:96:3c:76:53:51:76:f9:61:
55:df:a5:e5:87:ad:4f:c5:44:2f:5d:25:d9:4d:a9:
d7:04:33:fc:9b:6e:e5:99:77:95:c0:9f:6c:fb:b6:
44:91:a9:8e:51:8d:e8:9d:bf:eb:4a:3e:d0:a9:48:
51:35:be:14:aa:b2:8d:08:99:61:12:5d:33:eb:ef:
42:83:5b:a8:df:f1:87:2e:e8:71:dd:54:98:51:4f:
e5:6d:6a:fb:ad:83:fe:83:ea:a9:90:4f:5c:71:90:
10:57:2a:29:50:ee:cf:33:2b:64:29:8a:1c:96:28:
01:4d:a0:3d:6f:7d:70:f7:07:94:d9:c7:84:2d:c3:
8d:6a:00:8b:e5:e2:06:7f:a9:8d:e1:24:b8:61:7d:
9c:f2:23:ae:a2:a9:0d:55:25:50:be:76:4a:2b:d8:
79:80:7b:9c:64:bd:e9:9f:92:13:4c:9e:17:3e:1b:
40:bc:59:74:62:aa:aa:88:fc:ea:d9:dd:0f:e5:93:
6e:24:0f:42:e4:84:f2:07:a8:d1:20:75:44:63:bc:
c0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:13:69:38:FF:E8:79:6B:2D:78:F8:AD:2F:2A:EE:D6:5E:EE:DB:94
X509v3 Authority Key Identifier:
keyid:08:D2:78:BB:E5:FC:2D:F7:32:03:2C:DB:23:59:62:DB:AB:E0:F6:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:b4:51:eb:28:73:96:75:42:71:b2:03:19:dd:d3:2e:28:3a:
a9:b3:e9:d3:19:39:36:08:ad:75:c2:22:a1:8b:01:fd:f9:73:
a5:4f:0e:1c:77:f5:5c:1d:68:63:0a:15:13:e3:d1:5d:38:8a:
96:68:13:da:52:ea:bf:49:13:8e:25:03:4e:19:a8:e0:c3:68:
d1:36:f5:34:e5:8c:97:ac:09:90:63:84:58:22:18:60:00:13:
fa:2b:22:32:7f:0d:9c:81:7d:ee:d9:25:f8:8e:ef:5b:7b:b5:
94:a8:7e:1e:ce:ba:02:6f:2d:fd:2a:61:3f:13:48:a3:fe:ed:
54:cb:de:c0:1a:b2:d4:cf:ab:99:cb:a6:67:05:77:dc:93:5c:
d8:d6:69:43:f2:a3:57:77:a2:51:55:88:da:9b:b2:dd:78:36:
be:6f:60:30:1f:19:24:3b:1a:26:38:8d:ac:30:2e:5e:6f:59:
47:be:f8:e9:1f:c2:6c:c0:1e:e6:91:e5:92:ef:6c:9e:ce:a5:
28:57:7d:38:b6:74:c7:f1:58:e9:b5:40:ca:4b:74:77:c3:d7:
f9:9c:03:17:b4:10:3c:f5:da:ac:7d:93:22:18:aa:d1:dd:5c:
d0:4c:b3:db:cb:66:7f:50:4a:47:52:e0:63:6d:8a:59:d1:a7:
e4:33:ed:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:33:50 2025 by rpki-client