Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
File: CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft (raw, json)
Hash identifier: 2lwPhMLc9UntMV09L1mk9IuNfWmzcyrdkDP/hKoBQUw=
Subject key identifier: DF:E8:3E:9D:5D:3F:22:8E:F4:CF:B5:FB:C3:24:F7:24:08:3C:95:00
Authority key identifier: 08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F
Certificate issuer: /CN=089523953939f8a5e464b1cc7719ebeb9467ca3f
Certificate serial: 019A50E39CB0FDF9F208C3E8B25FFF68869D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 22:01:25 +0000
Manifest this update: Tue 04 Nov 2025 22:01:25 +0000
Manifest next update: Wed 05 Nov 2025 22:01:25 +0000
Files and hashes: 1: CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl (hash: /limnKdunQ78DW5o9hesQVnVX3fxXMB90CM1d6gR1KI=)
2: PJ_-iRXGR5kveJvnaBWIwG-ft74.roa (hash: lpKsBNInX/l4lejvtga0/MnEJsq53AADQslEJzx9StQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:9c:b0:fd:f9:f2:08:c3:e8:b2:5f:ff:68:86:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089523953939f8a5e464b1cc7719ebeb9467ca3f
Validity
Not Before: Nov 4 22:01:25 2025 GMT
Not After : Nov 5 22:01:25 2025 GMT
Subject: CN=dfe83e9d5d3f228ef4cfb5fbc324f724083c9500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fa:4e:06:69:d5:64:07:0c:67:ca:a7:13:c8:
22:2c:3c:e9:43:c6:02:ca:3b:62:9e:6f:23:22:e7:
79:2f:22:a2:00:61:65:9c:3d:13:46:6c:16:29:1d:
b0:5c:1a:0b:57:3d:21:57:16:a1:74:32:f2:ce:41:
1e:5f:08:73:17:c0:49:ef:5c:75:74:e1:ff:fa:c8:
10:f1:50:59:37:bb:5d:c7:0c:56:40:40:20:18:bd:
e8:b4:c6:cd:3e:56:2f:4f:b6:ea:a4:3f:fc:31:19:
c9:43:6a:16:51:03:03:e3:9e:46:a8:7b:38:2c:40:
7c:65:29:97:0f:d4:57:bb:66:7c:1d:18:01:56:e6:
55:89:d2:4f:2f:a8:b0:89:d8:ab:c4:cd:59:ee:ca:
25:9a:2b:f6:80:36:92:89:58:a3:ce:5c:f6:e4:5d:
45:08:8f:70:35:99:40:12:19:74:00:9c:0b:87:79:
bc:bd:67:6e:9a:0e:ee:99:40:ee:2b:a7:c5:cb:27:
a0:6d:0f:54:8f:04:41:95:f7:77:0f:56:d3:08:c9:
c8:4b:33:56:8e:6e:cd:cc:63:a4:ae:18:dc:b3:bd:
c9:bd:24:b0:ec:b2:e3:6a:23:61:bc:80:50:c5:9a:
ad:85:cc:dd:c9:53:80:f5:7c:c1:13:3e:b6:ab:c4:
a0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E8:3E:9D:5D:3F:22:8E:F4:CF:B5:FB:C3:24:F7:24:08:3C:95:00
X509v3 Authority Key Identifier:
keyid:08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:fb:85:29:45:2a:b2:67:c6:bb:95:f4:af:bc:73:6d:1b:52:
47:11:7b:f4:cd:9b:de:0d:89:f8:ff:ad:75:ec:47:2d:18:fa:
dd:51:7f:e6:61:ed:a6:93:ac:4e:93:5c:4b:14:0a:98:ca:fd:
33:4a:16:d1:97:0b:de:5c:ae:3f:9e:8a:3b:8d:e4:70:1f:76:
32:3d:42:ac:c5:be:5d:c2:29:f7:0a:c6:14:3c:82:4e:42:5f:
a0:ad:dc:d0:5b:7f:26:9b:cf:aa:54:19:ac:58:42:01:6a:6c:
d5:a5:c2:5c:cb:e9:17:a6:55:6b:9b:28:0f:1f:f3:bd:b3:af:
7d:40:e5:72:8d:82:c0:38:66:8f:b1:d8:fd:e8:4b:95:80:cd:
f6:c9:73:f5:39:c3:f7:3a:ad:62:63:a7:f3:6a:38:45:91:6b:
ba:ec:be:15:b4:d3:69:be:0a:ee:d6:72:57:9c:3d:76:d0:70:
61:8c:c2:73:20:31:13:c9:78:3c:41:4f:8b:bc:66:4b:d4:30:
09:02:18:a9:7f:3b:a9:4c:84:45:85:94:ac:c7:74:ab:f3:bb:
58:4c:9d:e3:82:b6:b5:bb:a6:1d:54:48:b2:fa:0b:ff:68:74:
53:af:62:a3:9c:1f:d0:ab:a2:6f:48:70:d8:aa:04:9c:48:ff:
48:59:27:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:28:47 2025 by rpki-client