Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
File: CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft (raw, json)
Hash identifier: 0xxKRsBGBj/rXH7mGFamRPFmb5MTALvy0AJHusozbW4=
Subject key identifier: 12:5B:21:D7:78:8F:E5:2F:B5:56:C4:F8:B9:34:55:4D:FC:5E:17:B4
Authority key identifier: 08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F
Certificate issuer: /CN=089523953939f8a5e464b1cc7719ebeb9467ca3f
Certificate serial: 019681A2720B299FB646DEFE4928A8A639C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 13:00:29 +0000
Manifest this update: Tue 29 Apr 2025 13:00:29 +0000
Manifest next update: Wed 30 Apr 2025 13:00:29 +0000
Files and hashes: 1: CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl (hash: wsuIATtqN6mSjWRbh3/PmgKKis87d3Y2XTShLgkX6Pg=)
2: PJ_-iRXGR5kveJvnaBWIwG-ft74.roa (hash: lpKsBNInX/l4lejvtga0/MnEJsq53AADQslEJzx9StQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a2:72:0b:29:9f:b6:46:de:fe:49:28:a8:a6:39:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089523953939f8a5e464b1cc7719ebeb9467ca3f
Validity
Not Before: Apr 29 13:00:29 2025 GMT
Not After : Apr 30 13:00:29 2025 GMT
Subject: CN=125b21d7788fe52fb556c4f8b934554dfc5e17b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:30:28:70:5b:91:70:f4:f1:18:25:00:19:dc:
66:3b:21:dc:43:4d:2e:05:5f:ce:0d:f3:46:6e:ac:
98:68:90:84:26:26:54:33:26:d1:4b:a7:3f:9b:23:
31:2f:44:de:11:b5:15:de:54:f5:a6:bc:c0:e9:af:
b1:26:4a:b8:38:b3:55:6c:22:3f:93:76:8e:97:45:
54:e5:66:4f:4f:1c:b1:41:ff:01:73:d4:81:b9:26:
35:ef:8a:14:e9:21:f9:ad:7c:58:90:e6:b9:89:40:
08:b8:11:83:9f:7e:bc:2c:16:a4:38:04:da:84:74:
c8:55:e6:3a:2b:e8:03:f4:44:18:fa:a3:d4:bb:6f:
da:e6:d5:93:e7:4f:42:6d:1f:59:07:e1:34:85:af:
65:49:22:ee:b8:73:de:9d:67:45:cd:57:58:cf:25:
fc:4e:34:1d:e5:98:5d:20:06:a1:54:a9:56:bb:5f:
36:4e:db:b8:2b:f8:f9:61:65:75:db:8f:e2:85:3e:
63:d0:7e:91:8a:0a:ba:26:6e:f6:ed:57:27:4a:94:
9c:85:a8:0b:b5:dd:48:4b:0d:ca:cf:51:57:3e:53:
6e:a4:33:61:7b:e2:e0:1b:07:25:78:5e:57:7b:dc:
b1:33:c0:0b:60:c0:9e:2f:a8:81:f5:af:53:c6:8c:
13:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:5B:21:D7:78:8F:E5:2F:B5:56:C4:F8:B9:34:55:4D:FC:5E:17:B4
X509v3 Authority Key Identifier:
keyid:08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:05:6c:4e:32:81:d5:a5:e5:d7:f9:9d:a2:6f:2e:f0:b3:a0:
a5:61:af:26:8b:a8:96:dd:6d:be:2b:d1:8b:43:71:7f:64:65:
20:5d:a8:0a:ce:b2:0a:ea:9c:bb:c0:0c:a7:58:c0:03:27:a5:
7f:7b:dd:1f:f5:24:fa:3b:0a:9a:54:3e:2c:15:f1:85:cd:a4:
c8:11:30:f4:06:c4:89:7d:32:ed:9c:bb:f4:73:be:34:b9:6c:
92:8a:bd:cd:d5:a8:21:9a:60:79:5e:d6:3b:7b:92:e0:7c:35:
35:cb:57:2d:73:a6:93:ce:c0:d3:78:8c:6b:4a:af:32:42:76:
e6:78:87:bb:b9:36:0a:eb:31:4f:51:59:52:68:aa:ec:84:39:
32:c0:ee:95:48:a4:5d:75:d9:c9:27:a0:24:17:14:88:b2:c1:
a3:f2:a1:fb:90:98:f6:8b:ac:21:df:e9:ee:f4:dd:c7:7a:d7:
e7:f1:55:e7:dd:26:e6:06:52:d6:70:ba:94:ca:c6:8f:69:04:
81:b7:47:82:d7:6e:fa:f6:14:1d:fb:41:ec:72:c4:55:3b:0f:
f3:df:ba:63:c1:e7:e2:0b:ec:25:ec:60:7e:ae:0f:84:e2:4a:
32:c9:fe:c3:09:3b:ac:e8:b9:62:a5:42:7c:e7:e8:6c:58:95:
b7:a7:9b:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaBonILKZ+2Rt7+SSiopjnFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4OTUyMzk1MzkzOWY4YTVlNDY0YjFjYzc3MTllYmViOTQ2
N2NhM2YwHhcNMjUwNDI5MTMwMDI5WhcNMjUwNDMwMTMwMDI5WjAzMTEwLwYDVQQD
EygxMjViMjFkNzc4OGZlNTJmYjU1NmM0ZjhiOTM0NTU0ZGZjNWUxN2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTAocFuRcPTxGCUAGdxmOyHcQ00u
BV/ODfNGbqyYaJCEJiZUMybRS6c/myMxL0TeEbUV3lT1przA6a+xJkq4OLNVbCI/
k3aOl0VU5WZPTxyxQf8Bc9SBuSY174oU6SH5rXxYkOa5iUAIuBGDn368LBakOATa
hHTIVeY6K+gD9EQY+qPUu2/a5tWT509CbR9ZB+E0ha9lSSLuuHPenWdFzVdYzyX8
TjQd5ZhdIAahVKlWu182Ttu4K/j5YWV124/ihT5j0H6Rigq6Jm727VcnSpSchagL
td1ISw3Kz1FXPlNupDNhe+LgGwcleF5Xe9yxM8ALYMCeL6iB9a9TxowTGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJbIdd4j+UvtVbE+Lk0VU38Xhe0MB8GA1UdIwQY
MBaAFAiVI5U5Ofil5GSxzHcZ6+uUZ8o/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0pVamxUazUtS1hrWkxITWR4bnI2NVJueWo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84NTM5OTYtNmNiYi00ZDQyLTg3Nzgt
YjFkN2FjOWVhMzIxLzEvQ0pVamxUazUtS1hrWkxITWR4bnI2NVJueWo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi84NTM5OTYtNmNiYi00ZDQyLTg3NzgtYjFkN2FjOWVhMzIx
LzEvQ0pVamxUazUtS1hrWkxITWR4bnI2NVJueWo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfAVsTjKB
1aXl1/mdom8u8LOgpWGvJouolt1tvivRi0Nxf2RlIF2oCs6yCuqcu8AMp1jAAyel
f3vdH/Uk+jsKmlQ+LBXxhc2kyBEw9AbEiX0y7Zy79HO+NLlskoq9zdWoIZpgeV7W
O3uS4Hw1NctXLXOmk87A03iMa0qvMkJ25niHu7k2CusxT1FZUmiq7IQ5MsDulUik
XXXZySegJBcUiLLBo/Kh+5CY9ousId/p7vTdx3rX5/FV590m5gZS1nC6lMrGj2kE
gbdHgtdu+vYUHftB7HLEVTsP89+6Y8Hn4gvsJexgfq4PhOJKMsn+wwk7rOi5YqVC
fOfobFiVt6ebSg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 18:46:16 2025 by rpki-client