Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
File: CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft (raw, json)
Hash identifier: 2oVwtzoN13CujNweTPUjUTVVZRWiG8AsXasp9ge8j8s=
Subject key identifier: F2:F9:76:63:8C:22:DD:5D:F3:2A:F0:1B:D9:EE:73:23:7A:DC:C6:79
Authority key identifier: 09:35:09:E7:EC:68:FE:2D:94:34:07:D5:DD:12:6A:0F:59:6F:2A:B5
Certificate issuer: /CN=093509e7ec68fe2d943407d5dd126a0f596f2ab5
Certificate serial: 01976F99A1865E01E6AF9D56413FB79144B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
Manifest number: 10C1
Signing time: Sat 14 Jun 2025 18:00:28 +0000
Manifest this update: Sat 14 Jun 2025 18:00:28 +0000
Manifest next update: Sun 15 Jun 2025 18:00:28 +0000
Files and hashes: 1: CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl (hash: qLiD9ypcRZ+Dl4U2OIR47Yo3SU9vya67VqkMyaDSN54=)
2: x-sFc0XuZWyC8mb5YkUAH-GfdII.roa (hash: SLT0QNLc8vBCO5UeVhbutYzbWFamBQrhqoa9wxuI2Us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:a1:86:5e:01:e6:af:9d:56:41:3f:b7:91:44:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093509e7ec68fe2d943407d5dd126a0f596f2ab5
Validity
Not Before: Jun 14 18:00:28 2025 GMT
Not After : Jun 15 18:00:28 2025 GMT
Subject: CN=f2f976638c22dd5df32af01bd9ee73237adcc679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:93:4e:f4:a8:e9:53:05:9e:88:e6:94:2c:43:
8d:9b:f8:25:3b:2d:88:51:6b:f6:09:18:36:93:8e:
a7:3c:7a:f3:e7:cf:d2:22:7b:c1:30:a0:95:38:0d:
44:60:97:90:30:72:5e:98:d7:7d:13:24:ba:51:96:
05:4c:cb:f0:f5:6f:b0:98:35:bf:36:4c:da:29:89:
29:9d:20:70:9d:f3:ce:d2:28:70:f4:cd:95:d1:81:
cc:89:78:0e:4f:91:22:ce:fd:bb:0a:2a:84:5e:d8:
8b:b8:5e:9a:d9:92:46:49:27:22:d8:6c:8f:4d:a5:
06:7c:99:18:fc:27:6c:c9:de:d3:86:80:dd:d3:e6:
f3:75:38:12:8d:8d:c9:28:27:4f:41:a5:f9:78:cd:
0e:62:72:86:be:2a:5b:76:9c:da:05:8f:bc:03:fa:
5e:ac:56:75:db:64:96:6f:7a:54:a1:46:8b:c8:eb:
85:e4:c4:8c:03:82:d1:c1:be:33:03:f8:d0:b9:ed:
44:ee:d5:be:08:c6:fe:a2:31:f0:f7:59:b8:ca:9f:
f4:04:c3:16:3d:a2:a3:e5:a3:68:e0:fa:19:ef:5c:
15:5f:65:36:e2:98:dd:70:12:49:15:d4:11:11:c4:
dd:9b:50:0e:3e:b7:51:c6:6f:73:84:ca:16:9b:f1:
d6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F9:76:63:8C:22:DD:5D:F3:2A:F0:1B:D9:EE:73:23:7A:DC:C6:79
X509v3 Authority Key Identifier:
keyid:09:35:09:E7:EC:68:FE:2D:94:34:07:D5:DD:12:6A:0F:59:6F:2A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:59:51:bd:b9:62:20:ba:23:a4:33:eb:1b:1f:d8:71:f2:94:
6e:86:ff:45:0e:bb:90:27:4c:72:ad:2a:10:5e:7f:47:c4:34:
dc:2f:6d:5f:24:d7:c1:8c:f3:3f:59:59:3d:8d:48:c5:b5:29:
30:a0:9d:a9:d0:f9:53:6d:2a:c8:6d:ce:a8:6b:5a:d0:c4:46:
b5:cf:78:8e:a3:0e:2d:cc:41:f0:1a:85:f2:90:b4:f9:0e:ad:
23:d2:25:5a:61:44:50:73:26:f9:e5:74:24:a1:4a:1a:eb:2d:
98:ab:e1:d3:69:9b:9a:bd:f7:f5:25:ee:de:5e:ca:c7:f4:3a:
ba:f9:a4:06:28:3a:59:1a:d9:59:4a:27:eb:31:a5:d2:28:da:
93:16:ec:b7:1e:24:c3:e2:33:81:f0:f4:b8:0f:a4:9c:d6:46:
ab:47:38:ea:0b:d4:0d:0d:63:d6:c5:3f:66:89:8b:82:6e:58:
41:2a:7a:3f:a0:6d:42:93:d0:fd:fa:cd:22:d8:02:4c:b6:75:
41:90:bf:bc:ce:bd:b0:26:07:1b:a7:0e:98:29:d7:02:ce:1c:
54:f8:5f:8c:99:e5:5d:73:1a:da:81:97:e1:ef:85:47:58:8c:
e0:f4:50:e5:e8:0b:a7:bc:b4:10:60:67:90:7c:08:ff:fa:eb:
62:df:df:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:00:18 2025 by rpki-client