Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
File: CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft (raw, json)
Hash identifier: WeVNupAceB2euGMcLeJjfCj1XJTHTAamSMCkhG5U9/E=
Subject key identifier: 4C:10:FD:0D:4E:BF:C6:F3:7D:28:DA:9D:EE:77:A4:D2:B0:9F:D5:3E
Authority key identifier: 08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F
Certificate issuer: /CN=089523953939f8a5e464b1cc7719ebeb9467ca3f
Certificate serial: 01976D3DB55B14A9FD8885F8554C65502C20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 07:00:50 +0000
Manifest this update: Sat 14 Jun 2025 07:00:50 +0000
Manifest next update: Sun 15 Jun 2025 07:00:50 +0000
Files and hashes: 1: CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl (hash: qnq3rTk7OaFp/Pm0JjpDqGWJWRYS/LgBQj+BOrcdj+U=)
2: PJ_-iRXGR5kveJvnaBWIwG-ft74.roa (hash: lpKsBNInX/l4lejvtga0/MnEJsq53AADQslEJzx9StQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:b5:5b:14:a9:fd:88:85:f8:55:4c:65:50:2c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089523953939f8a5e464b1cc7719ebeb9467ca3f
Validity
Not Before: Jun 14 07:00:50 2025 GMT
Not After : Jun 15 07:00:50 2025 GMT
Subject: CN=4c10fd0d4ebfc6f37d28da9dee77a4d2b09fd53e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4b:b7:cf:33:60:82:43:66:2a:78:0a:71:62:
ad:cb:fd:8f:26:af:fc:ee:0f:78:82:75:7b:36:f9:
b1:e1:a0:96:c6:b5:c1:cc:e5:11:52:37:03:7e:f0:
d5:28:21:2e:63:89:77:80:e0:d1:79:e6:c4:4c:2a:
d8:ce:05:24:69:d7:bd:95:5c:4a:81:50:b7:1d:5c:
5c:fd:91:52:b7:7e:00:4d:c0:75:d4:fb:3d:48:6b:
73:31:24:cc:13:fa:9f:45:96:89:a7:7a:19:3e:32:
ab:a4:7a:fb:be:3a:57:96:40:56:73:5a:72:0f:63:
26:42:58:0a:aa:1c:d0:86:14:d5:62:36:41:7a:c6:
0a:ff:2e:ae:e5:1d:af:d5:43:c8:f4:9d:11:b5:d3:
21:6c:2e:ef:45:8b:3a:ac:4b:62:ad:b4:42:8b:ea:
ea:b6:49:db:d5:2b:dc:9b:0b:a5:f6:0c:01:56:bc:
d5:7a:76:22:19:ee:90:12:69:4d:a0:57:94:3a:49:
56:70:d9:66:d8:15:7e:5c:f8:f8:d6:fb:84:b4:02:
cf:b2:48:62:e5:45:7a:7d:32:ab:be:96:b1:fb:d6:
c9:bb:d6:36:05:d9:e2:b0:b4:ce:d5:e4:6f:09:38:
91:e2:65:49:e8:60:3e:b6:a5:fc:15:55:86:93:22:
95:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:10:FD:0D:4E:BF:C6:F3:7D:28:DA:9D:EE:77:A4:D2:B0:9F:D5:3E
X509v3 Authority Key Identifier:
keyid:08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:9e:c1:dc:4f:9e:8c:b9:5a:44:dd:61:10:85:38:59:b0:5f:
3b:16:4e:ea:8b:f5:90:2d:44:87:26:43:bb:dc:4c:b3:b2:52:
8a:ec:5a:94:9d:e3:97:23:dd:f9:50:c8:c8:ec:a9:93:69:82:
1e:b4:84:3f:6d:6a:4c:a6:dd:cc:f6:fd:57:2e:bd:fe:a3:e2:
cb:4a:52:3e:39:c2:d7:bc:55:75:48:21:5c:10:77:13:39:51:
d9:5b:9f:48:fc:49:22:6e:c9:64:bc:c7:94:c9:69:b8:8d:c7:
89:d1:38:57:16:18:8b:92:5d:0f:2f:f4:b4:c8:16:99:f9:d6:
8c:fc:94:3c:6c:66:1c:b6:98:42:fd:c8:2e:dd:b0:06:96:e6:
7e:82:a1:75:4e:03:ee:06:c4:41:da:7d:89:88:df:7b:40:5f:
77:b2:87:72:03:a6:1e:68:91:6c:7a:ac:3a:31:5b:ce:60:01:
50:73:70:d2:ea:e1:1f:31:00:4c:34:87:74:1e:8b:bb:65:98:
d2:b9:0d:50:4e:da:8b:be:cc:e6:b1:b0:21:43:4f:e2:97:b8:
96:db:e1:ca:84:28:40:36:df:4e:c3:7d:eb:dc:14:2b:19:a3:
b9:e7:5b:fd:f3:7f:39:b5:7f:cb:fc:47:af:e7:9c:33:eb:63:
27:eb:f0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:16:48 2025 by rpki-client