Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
File: CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft (raw, json)
Hash identifier: fzqCnqngSAzPtNjq06VRLzU4AiZqbD+QCe7lPWGwTEM=
Subject key identifier: AB:35:CF:D5:13:AE:71:8B:4D:C9:2A:7B:A6:10:57:09:5C:C8:08:7E
Authority key identifier: 08:D2:7F:DC:90:F8:0F:80:97:2C:12:5B:D4:1E:DB:0A:E8:33:4A:A0
Certificate issuer: /CN=08d27fdc90f80f80972c125bd41edb0ae8334aa0
Certificate serial: 019A52D17C438E7DF2E760979A71E05CADCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
Manifest number: 0BA8
Signing time: Wed 05 Nov 2025 07:00:51 +0000
Manifest this update: Wed 05 Nov 2025 07:00:51 +0000
Manifest next update: Thu 06 Nov 2025 07:00:51 +0000
Files and hashes: 1: CNJ_3JD4D4CXLBJb1B7bCugzSqA.crl (hash: a7s3A+DyXSGmJJpj53FnxwmoPN45nhYzq3OjS26rOS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:7c:43:8e:7d:f2:e7:60:97:9a:71:e0:5c:ad:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d27fdc90f80f80972c125bd41edb0ae8334aa0
Validity
Not Before: Nov 5 07:00:51 2025 GMT
Not After : Nov 6 07:00:51 2025 GMT
Subject: CN=ab35cfd513ae718b4dc92a7ba61057095cc8087e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:30:40:a2:7e:87:63:bb:cc:52:02:f3:a3:bd:
6b:24:f8:55:b8:bd:06:40:dc:38:4e:78:11:0e:e1:
f1:58:e0:39:63:be:4a:d9:f3:ad:4e:46:52:5c:05:
09:f9:3c:47:92:99:c9:b2:40:ac:0e:94:42:26:66:
35:13:df:d0:0e:25:82:00:07:23:3a:85:58:f0:8b:
b7:8b:c4:a7:b4:59:7e:01:ba:a4:6a:95:b6:9f:09:
99:a5:e5:a6:62:10:e5:98:ec:50:a4:f3:b7:56:4c:
2f:8b:80:f9:a3:43:79:84:07:8a:c7:3b:8c:04:dc:
d0:69:9f:59:7d:9f:41:7e:be:f2:b5:4d:a6:a0:4c:
86:67:26:30:21:21:0f:11:24:fe:a3:29:f1:fa:42:
df:46:8a:53:ea:b8:b3:77:c7:ed:fe:54:b9:11:2e:
0f:25:80:80:e2:d1:e9:0b:9c:46:9e:69:e3:63:ab:
60:3c:1e:fa:e1:96:9a:97:44:cb:98:fb:ec:a1:fc:
75:47:91:f5:74:fe:3a:d5:eb:72:24:8b:e8:0b:f4:
d8:43:55:be:92:0f:e7:a2:1c:35:12:14:9c:4b:cb:
50:6e:60:65:c4:43:61:1d:5d:41:d8:06:5e:66:0c:
52:c6:78:40:e8:ef:d2:ee:06:11:54:e2:40:76:8f:
97:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:35:CF:D5:13:AE:71:8B:4D:C9:2A:7B:A6:10:57:09:5C:C8:08:7E
X509v3 Authority Key Identifier:
keyid:08:D2:7F:DC:90:F8:0F:80:97:2C:12:5B:D4:1E:DB:0A:E8:33:4A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJ_3JD4D4CXLBJb1B7bCugzSqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/662dbe-5937-46fa-8d96-910541155fef/1/CNJ_3JD4D4CXLBJb1B7bCugzSqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:87:c7:77:55:13:11:34:e0:fa:f6:9e:b3:83:7f:61:b6:bb:
ae:6e:e0:83:f7:b4:cb:da:4a:63:40:38:67:a2:03:ea:fe:8a:
45:cb:ae:35:bf:a0:de:6f:36:16:fd:08:93:08:67:49:cb:6e:
fc:3e:f4:48:17:08:d9:60:47:ff:16:2d:4e:23:2a:67:4e:b1:
4b:df:6f:64:55:7e:1e:e5:7b:17:4e:40:2e:a7:e2:e3:31:89:
49:d7:54:35:d7:7e:08:23:9f:46:d8:05:ee:66:07:48:4e:8c:
4e:5b:48:33:8f:f9:0c:a4:68:2a:f6:0b:60:c8:5c:cc:f3:55:
c3:d9:8f:f3:f1:66:11:30:a1:79:f0:e0:1d:7d:9d:84:b0:a7:
ef:3c:ee:cb:47:a5:69:b9:36:c1:af:c0:27:de:85:8e:57:3b:
8c:21:f9:ab:87:a0:0a:b3:a7:89:cf:e4:3d:cf:93:2b:c5:9c:
76:10:d9:37:ef:44:76:d2:e4:ec:96:c9:4a:63:a0:47:b5:d9:
0d:61:31:e6:1f:fc:f2:77:f2:d2:90:aa:81:d8:bd:a3:c2:78:
49:31:79:db:ec:2a:47:f5:86:22:d1:bd:cd:c4:74:d3:0c:d1:
8f:4b:a5:82:5b:0c:79:92:f0:2f:3a:ee:c6:63:27:eb:d9:82:
9c:31:24:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:05:12 2025 by rpki-client