Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
File: CUJF7otbpMZv4s7KZL5Gb8lvce0.mft (raw, json)
Hash identifier: XjmAqOJ3IwhLgEdRdltFOYvBa0LWyEU197cGyQ5uqdo=
Subject key identifier: 6A:32:C7:BA:AF:D9:09:0A:DB:14:E2:1D:4E:EA:50:FC:F9:BC:14:39
Authority key identifier: 09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED
Certificate issuer: /CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed
Certificate serial: 01984B54862472F37B493D33713728BAA581
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
Manifest number: 1144
Signing time: Sun 27 Jul 2025 10:01:26 +0000
Manifest this update: Sun 27 Jul 2025 10:01:26 +0000
Manifest next update: Mon 28 Jul 2025 10:01:26 +0000
Files and hashes: 1: CUJF7otbpMZv4s7KZL5Gb8lvce0.crl (hash: 8OpPeVdDgNNnwwipGL4W3NxeghvojkfOU+19/OhWtd4=)
2: sT8i_lrT1dmgF96pIWG66J0xLDw.roa (hash: aG6mOGyX8yA6EwWHgoUdHhg4b1jzs6sii5gM4RFtUiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:86:24:72:f3:7b:49:3d:33:71:37:28:ba:a5:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=094245ee8b5ba4c66fe2ceca64be466fc96f71ed
Validity
Not Before: Jul 27 10:01:26 2025 GMT
Not After : Jul 28 10:01:26 2025 GMT
Subject: CN=6a32c7baafd9090adb14e21d4eea50fcf9bc1439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:39:2f:e0:17:8b:a2:c9:7b:ee:0e:d5:e1:76:
7d:12:42:15:53:21:a5:fc:03:78:75:f4:7b:58:e4:
1f:f9:22:5f:a5:c2:83:dc:d0:d7:58:00:62:3c:5a:
9e:fc:8d:d6:cb:de:96:62:ec:57:33:8d:09:9b:85:
0f:7e:36:a4:d2:62:c8:c7:29:87:97:3d:f5:f1:fd:
98:fb:24:91:f5:22:b9:de:49:d1:58:54:53:ff:c9:
c2:fe:11:8e:fd:c6:a0:97:5b:be:c4:a8:d9:fe:32:
4e:c9:db:fe:5f:b3:89:92:ab:d9:61:a2:bc:e5:d1:
54:d2:10:1f:6a:e1:cd:c4:1f:43:ce:02:2d:34:1e:
24:46:d2:ac:2c:2e:59:e9:7d:3f:64:2e:2e:2a:f5:
84:2a:89:c7:64:bd:ef:b9:48:92:b4:31:68:ec:11:
a9:de:b4:c1:e3:81:26:39:d7:51:6c:66:ff:81:57:
7a:2f:e1:ca:c2:90:2b:2b:7d:d1:b9:86:0b:5e:e5:
12:a9:08:4b:08:10:16:00:fd:d7:b3:b7:dd:8c:c3:
73:db:27:00:c7:12:a3:5c:21:bd:5f:38:5a:8b:33:
5e:f7:d8:5e:5a:d5:0c:37:6d:5c:b6:17:b0:08:5e:
69:77:4d:4c:cb:9a:9a:13:f4:45:9d:f3:4e:01:55:
ee:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:32:C7:BA:AF:D9:09:0A:DB:14:E2:1D:4E:EA:50:FC:F9:BC:14:39
X509v3 Authority Key Identifier:
keyid:09:42:45:EE:8B:5B:A4:C6:6F:E2:CE:CA:64:BE:46:6F:C9:6F:71:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUJF7otbpMZv4s7KZL5Gb8lvce0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/bdd43f-4528-4c92-88ba-56e7f93dcdbf/1/CUJF7otbpMZv4s7KZL5Gb8lvce0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:2c:25:be:fc:d2:28:b1:c8:c7:48:b5:5f:48:cb:db:02:85:
c3:f1:71:9a:c2:df:43:c2:1c:86:9c:ae:22:fd:1d:05:49:4f:
7a:93:e4:a1:9c:f0:d9:cb:97:7b:53:ae:0e:a6:4f:35:24:43:
25:d2:9c:7c:c3:97:51:8c:eb:36:71:de:77:f3:7e:6f:ef:57:
7c:68:17:c3:84:00:79:75:17:a6:ec:e3:bb:ab:21:3e:5a:9b:
e5:e8:39:f6:c3:9d:82:f6:95:d8:96:b1:71:61:89:a0:4f:2c:
70:da:22:74:26:81:fb:4b:fd:79:ea:1a:b3:e2:e6:61:41:bd:
80:95:48:55:f4:59:38:0d:8f:bc:25:3b:96:18:2b:8c:68:ee:
f0:1d:88:dc:fd:3a:38:ae:18:21:45:66:4e:d3:da:2e:1f:92:
a2:fe:e4:16:93:f4:b3:ce:5e:3a:44:4c:81:2f:f0:32:27:ad:
0e:c0:61:a2:86:9d:ac:b0:a7:a9:91:a7:55:a5:1c:00:6c:ec:
f1:5e:44:5e:9e:93:51:7a:86:fa:db:a3:58:a3:bb:61:54:ba:
a7:6c:16:48:ac:8f:29:0c:9e:60:32:12:47:9d:2d:9c:37:4f:
a1:cd:08:d6:9f:02:fd:5b:66:94:7f:fe:1b:f0:86:c7:ea:f1:
8b:b2:61:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:54:44 2025 by rpki-client