Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
File: CNJ4u-X8LfcyAyzbI1li26vg9kE.mft (raw, json)
Hash identifier: Zc5lkBPsLbvg/YM55UzOiSL+J3mfJm2a5b26yD8ol6s=
Subject key identifier: 7C:75:F2:0E:90:34:F5:61:CC:47:F5:5A:E3:4A:59:A1:93:2B:E9:F1
Authority key identifier: 08:D2:78:BB:E5:FC:2D:F7:32:03:2C:DB:23:59:62:DB:AB:E0:F6:41
Certificate issuer: /CN=08d278bbe5fc2df732032cdb235962dbabe0f641
Certificate serial: 01977F7AE585ABA4D51D603410CC7143A296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
Manifest number: 1597
Signing time: Tue 17 Jun 2025 20:00:49 +0000
Manifest this update: Tue 17 Jun 2025 20:00:49 +0000
Manifest next update: Wed 18 Jun 2025 20:00:49 +0000
Files and hashes: 1: CNJ4u-X8LfcyAyzbI1li26vg9kE.crl (hash: ov0MvJFkFU/0I5GBnSEAe+Y7l8M8Q3v1DElBcxl+FZk=)
2: W5VtAzPYHnJg8m79kjyqgqKE878.roa (hash: Pv7+GoLFJlWTHtdGXau6mFaCy435N0A5ynkKLESZfdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:7a:e5:85:ab:a4:d5:1d:60:34:10:cc:71:43:a2:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d278bbe5fc2df732032cdb235962dbabe0f641
Validity
Not Before: Jun 17 20:00:49 2025 GMT
Not After : Jun 18 20:00:49 2025 GMT
Subject: CN=7c75f20e9034f561cc47f55ae34a59a1932be9f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0f:91:a0:37:d1:9e:50:1a:5c:48:b9:72:0a:
1c:8d:d5:c2:4f:fb:96:e3:fc:1c:a4:c1:ab:3e:dd:
9b:62:5a:b5:e8:a4:79:2d:81:a4:e6:55:c8:6f:c0:
c1:b6:af:54:e3:44:45:17:a4:f1:9e:b5:d5:78:c0:
9a:9e:31:19:2b:54:68:96:bc:6e:06:68:a9:67:e7:
42:62:57:27:7d:5f:67:f1:be:85:29:26:4a:5f:bc:
3e:b1:29:b0:a6:44:3c:e7:12:61:04:df:80:ff:9a:
09:f9:5e:f3:33:cc:0b:a6:08:c4:32:c9:a7:30:33:
ce:9f:55:8f:15:64:44:44:7a:1d:a6:56:48:cd:2b:
2b:a1:f6:43:b6:f0:d6:63:67:11:90:1c:3d:8b:20:
35:af:36:49:24:a5:f2:8c:0b:92:7b:65:92:79:59:
f4:d7:34:e7:ef:e6:78:45:58:0d:5f:12:68:10:4a:
ca:37:b9:22:65:63:1d:b1:39:88:9a:be:aa:1e:a6:
2a:55:03:cf:e4:99:2a:da:94:48:59:b3:ed:a5:4a:
3c:a5:8e:00:06:b7:52:ef:16:1d:bf:58:16:a6:42:
60:3b:cc:56:ca:3b:9c:49:3b:04:fc:29:ca:92:d8:
04:3f:26:e9:2e:ab:f2:90:cf:47:ba:db:63:54:b1:
19:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:75:F2:0E:90:34:F5:61:CC:47:F5:5A:E3:4A:59:A1:93:2B:E9:F1
X509v3 Authority Key Identifier:
keyid:08:D2:78:BB:E5:FC:2D:F7:32:03:2C:DB:23:59:62:DB:AB:E0:F6:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:56:5c:8e:01:72:35:18:c2:79:03:7f:ab:d3:4f:e5:cd:8c:
35:01:30:b6:39:b7:69:d8:c3:b4:fc:56:ce:7b:36:9d:f1:eb:
38:1b:8c:95:cc:fe:a7:de:68:d3:14:40:da:bd:5b:4c:46:73:
e1:13:4a:4a:48:58:93:d4:e3:dd:81:3b:54:8e:86:70:7d:4f:
e4:52:d0:5b:79:9e:e0:1a:4f:c9:80:2c:3c:67:55:b0:76:50:
4f:02:19:c0:65:43:88:5b:ac:43:84:16:5a:29:cf:f7:ff:a0:
c3:e8:63:cd:9f:23:31:34:90:c0:98:3d:62:5e:35:c6:ff:da:
f7:bf:4d:46:e0:e0:13:99:01:1e:4e:5f:a4:94:da:64:d4:5d:
92:24:e9:df:77:df:64:61:31:24:9c:72:24:34:4b:cb:a9:fc:
e5:96:b7:09:34:51:76:05:c4:bb:64:96:cc:da:95:32:76:8a:
b5:d1:61:c9:7a:ff:7f:55:55:6d:7a:be:89:0b:fd:de:6e:23:
b3:8d:5b:57:14:6a:87:59:a5:1c:7d:83:15:0e:5e:25:4d:50:
fa:48:f8:b5:c2:aa:c8:26:4c:50:da:16:ca:15:02:9e:33:db:
10:75:96:f9:77:98:62:ed:38:59:ad:09:4f:d2:ed:ef:fb:95:
83:f8:d2:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 05:44:28 2025 by rpki-client