Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
File: CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft (raw, json)
Hash identifier: wtH9vFV/kW3o3gcgDGB9vZd+iN9wlg28c9T0s6TAOsY=
Subject key identifier: C0:41:E7:70:D4:F8:28:EF:7A:7F:6A:76:55:9F:0D:8A:F0:8E:E2:BB
Authority key identifier: 08:D2:7F:DC:90:F8:0F:80:97:2C:12:5B:D4:1E:DB:0A:E8:33:4A:A0
Certificate issuer: /CN=08d27fdc90f80f80972c125bd41edb0ae8334aa0
Certificate serial: 01988B0FE2F10F3A4B26627231910E9CF155
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
Manifest number: 0ABC
Signing time: Fri 08 Aug 2025 19:02:10 +0000
Manifest this update: Fri 08 Aug 2025 19:02:10 +0000
Manifest next update: Sat 09 Aug 2025 19:02:10 +0000
Files and hashes: 1: CNJ_3JD4D4CXLBJb1B7bCugzSqA.crl (hash: /Qp5nq41lFhjkAFHG/Wh0AWYOi65ijXD7IRjaMKVXP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0f:e2:f1:0f:3a:4b:26:62:72:31:91:0e:9c:f1:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d27fdc90f80f80972c125bd41edb0ae8334aa0
Validity
Not Before: Aug 8 19:02:10 2025 GMT
Not After : Aug 9 19:02:10 2025 GMT
Subject: CN=c041e770d4f828ef7a7f6a76559f0d8af08ee2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:de:d8:ac:a9:ee:a7:08:e9:b7:34:f8:b7:f1:
5f:29:e1:75:33:bb:69:5a:2b:44:be:3c:f8:7c:64:
ea:3c:16:ae:21:17:08:ff:a9:10:7f:bd:69:b8:f0:
09:78:92:35:e6:c8:6a:b0:fc:72:bd:96:27:b0:2a:
32:9b:3c:e3:a9:3d:3e:60:9b:db:ae:09:11:30:26:
22:65:7a:ae:b4:69:28:82:f5:e6:d8:cf:a3:8f:f9:
55:e3:2a:4c:b1:12:e5:35:fa:0d:a5:f0:30:06:84:
ab:89:71:16:3d:64:33:93:8e:58:82:8f:93:8e:d7:
0e:68:61:fe:11:60:0e:9c:79:f9:28:07:71:ed:44:
da:e8:44:43:df:1d:0b:ba:cf:ed:43:79:97:9c:14:
e3:fd:be:ec:b7:a1:9d:2a:e0:6c:56:dc:16:49:f4:
83:5b:f3:9e:5d:23:ee:6a:75:72:8d:96:54:aa:d6:
40:b2:4c:b2:58:9b:cb:8f:a7:1d:1e:9e:ae:c9:1f:
40:ab:b1:bc:3c:c7:42:78:9d:76:63:f8:59:e2:f3:
ab:e1:32:de:9a:09:a3:3d:f7:4b:4f:35:51:ca:41:
ac:fa:0d:48:61:c4:f5:50:c7:0e:85:61:b7:6a:6c:
68:e7:fd:b4:ac:07:5d:f3:71:b1:2d:25:47:5f:96:
3c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:41:E7:70:D4:F8:28:EF:7A:7F:6A:76:55:9F:0D:8A:F0:8E:E2:BB
X509v3 Authority Key Identifier:
keyid:08:D2:7F:DC:90:F8:0F:80:97:2C:12:5B:D4:1E:DB:0A:E8:33:4A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:3c:7b:56:71:6a:5c:80:40:d8:ae:1f:10:16:72:24:2d:00:
2c:a0:65:33:44:4e:60:cc:67:3e:43:77:54:c4:7d:e7:24:2e:
35:a0:b8:b1:70:9e:2c:bc:e8:e5:0e:7e:d5:1a:19:f3:25:bc:
bc:b1:b6:3a:d1:d5:22:3c:54:e1:22:32:c8:57:98:61:44:89:
f9:cc:a5:32:14:f2:0d:0f:0e:76:2b:68:40:04:f2:1a:c2:46:
52:e3:6c:f6:16:2d:81:9e:65:31:5b:d5:34:33:5c:56:ae:81:
fd:f6:5e:01:b6:8a:2f:df:29:ce:b5:6b:76:b7:83:f0:ab:2f:
6e:63:19:9b:7e:9c:1c:78:12:ad:6f:d5:52:b5:a4:89:d5:73:
2c:9e:63:67:8c:f9:18:27:9a:e5:36:e4:ed:6c:9d:06:52:69:
27:32:32:0e:24:6e:b6:2b:25:d9:c0:fe:a5:a2:f9:82:f3:54:
80:3c:e2:6c:f6:55:d4:be:54:6b:09:dc:99:08:bd:e0:cc:aa:
e0:9c:fa:b3:8f:78:e3:a8:25:ce:88:26:fe:51:c9:05:96:10:
c2:0e:9e:b3:25:75:b4:27:24:03:a3:79:09:74:91:4a:2c:11:
69:9c:5a:76:30:76:e9:04:9c:9f:28:16:57:98:01:2b:47:de:
25:8b:6d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:43:03 2025 by rpki-client