Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
File: CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft (raw, json)
Hash identifier: peWw9m5zyFIHI6Bep0w0jjGeSWUrB/1oLz0ilJf76dU=
Subject key identifier: DF:08:4D:C7:50:A1:24:DF:6A:F0:17:0C:3E:5C:1E:AF:3C:53:AE:0C
Authority key identifier: 08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F
Certificate issuer: /CN=089523953939f8a5e464b1cc7719ebeb9467ca3f
Certificate serial: 01987F79B77F54DAC99EDABC0E28A6F50FC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 13:02:19 +0000
Manifest this update: Wed 06 Aug 2025 13:02:19 +0000
Manifest next update: Thu 07 Aug 2025 13:02:19 +0000
Files and hashes: 1: CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl (hash: hTVOB147u2TFLMX4LTY3p2PBWSBMPiCkWPOKePNgz5g=)
2: PJ_-iRXGR5kveJvnaBWIwG-ft74.roa (hash: lpKsBNInX/l4lejvtga0/MnEJsq53AADQslEJzx9StQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:79:b7:7f:54:da:c9:9e:da:bc:0e:28:a6:f5:0f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089523953939f8a5e464b1cc7719ebeb9467ca3f
Validity
Not Before: Aug 6 13:02:19 2025 GMT
Not After : Aug 7 13:02:19 2025 GMT
Subject: CN=df084dc750a124df6af0170c3e5c1eaf3c53ae0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:14:87:f3:92:52:74:0e:87:91:d0:2c:c5:80:
a9:d3:d6:52:db:5b:67:ed:08:e8:e2:4d:b7:e6:4f:
9d:0f:75:39:96:7f:b4:db:b9:b1:b3:60:2e:af:ed:
77:ac:7d:3c:cf:87:1b:49:18:64:1e:e6:6b:1f:c1:
67:9e:b3:cc:42:7e:8b:3c:9c:02:2f:e4:48:91:cd:
7e:3e:82:0e:94:8a:fe:a5:3e:62:0b:08:84:dd:59:
a6:fd:f0:a8:74:53:1b:e1:76:95:e1:5f:d6:95:d1:
4f:45:70:ed:af:fa:80:29:02:56:30:b0:0c:d0:42:
59:93:9e:26:88:d3:49:ce:69:ab:96:28:35:fc:1c:
13:a5:a6:1f:21:c1:8c:58:7c:c0:19:be:0a:59:f4:
dd:76:f5:10:2e:15:0d:63:42:f0:75:9b:54:5c:c6:
fc:9b:05:c7:b8:3a:76:98:c8:9c:65:87:ce:ac:99:
fb:f4:ec:8f:5f:87:73:db:02:19:aa:6a:3f:13:a4:
d0:f8:a5:2a:fe:a0:ba:12:ff:df:5e:7d:70:f6:51:
dc:11:ef:ab:0a:02:74:e0:ad:27:fa:3e:21:6d:dd:
0f:e7:29:89:2d:7c:a6:2a:40:7a:ba:fa:5a:a1:91:
b5:e7:c7:ba:c3:9a:89:ca:3f:85:fa:c0:5b:9c:3b:
e9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:08:4D:C7:50:A1:24:DF:6A:F0:17:0C:3E:5C:1E:AF:3C:53:AE:0C
X509v3 Authority Key Identifier:
keyid:08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b6:81:b8:15:8a:38:fa:f3:94:2a:d2:9b:00:e9:25:eb:ea:
0d:9b:02:d7:df:8b:b0:a7:25:2b:54:3c:90:fe:c1:9b:da:e9:
3e:c7:b0:fa:47:69:d1:52:03:91:ce:b3:8b:55:f5:3b:c6:c8:
06:7f:92:4b:83:40:7a:85:dc:cd:fa:9c:b4:9c:30:f3:da:87:
bd:dd:c5:a9:74:eb:0c:d2:d8:e2:92:18:e8:56:23:62:e7:a1:
71:c8:d5:da:0c:e0:87:48:7d:35:50:24:2e:f3:11:ca:99:f5:
3b:75:53:f1:34:26:de:bf:d0:61:ac:e2:d4:d4:b3:b2:c6:65:
b2:5c:38:85:21:31:cf:8e:5a:79:02:46:9a:74:75:30:51:86:
01:c6:b8:b7:a1:c9:2f:3c:40:a6:8e:0e:87:d5:ed:02:81:90:
8d:a2:4f:82:ad:22:75:c4:fb:21:4b:ad:78:49:0b:00:36:5a:
1f:67:8b:a5:ad:af:26:4e:eb:98:95:ed:fc:06:0e:79:70:de:
2f:e2:7b:52:fb:7b:c3:ee:28:6a:32:73:ef:70:58:78:15:f0:
7b:2c:07:fe:c7:af:4b:00:8c:b6:86:c9:d3:64:b2:74:30:8c:
26:b4:2e:7a:f5:7e:3d:7d:e4:8b:ed:3b:ef:63:b5:36:69:00:
21:9b:2a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:15:04 2025 by rpki-client