Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
File: CJu7CaX772E1wtkgvye7YfXC4J0.mft (raw, json)
Hash identifier: /s9+md1spZLByv+K1MySGbnkvN1c2zy5AbUAvXTuLi4=
Subject key identifier: FA:BF:AD:02:33:B8:5F:0D:D6:F3:83:37:B9:F3:35:B5:8D:B9:DB:63
Authority key identifier: 08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
Certificate issuer: /CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Certificate serial: 01984852689ECAE013AE64278F673486E089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 20:00:16 +0000
Manifest this update: Sat 26 Jul 2025 20:00:16 +0000
Manifest next update: Sun 27 Jul 2025 20:00:16 +0000
Files and hashes: 1: CJu7CaX772E1wtkgvye7YfXC4J0.crl (hash: 93gzaNWFTsVgSZVVzlXHBb4uKj3RnYZdNosrS36UnWo=)
2: y1lINwCoifyovhdAeAf2rHi3ZHU.roa (hash: wdFrAh4YUjbnThTYrymA+tW+SWC0S+T+ZCRyXfvs7nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:68:9e:ca:e0:13:ae:64:27:8f:67:34:86:e0:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Validity
Not Before: Jul 26 20:00:16 2025 GMT
Not After : Jul 27 20:00:16 2025 GMT
Subject: CN=fabfad0233b85f0dd6f38337b9f335b58db9db63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:77:25:05:16:bc:99:7f:89:e1:85:f4:5c:22:
e8:59:fd:a8:cc:4d:5a:4e:4e:e7:59:ac:d4:54:5b:
05:7b:72:93:85:0e:1b:52:ea:cf:e6:46:31:d3:42:
f6:22:43:51:c5:44:ac:cc:7c:c4:9d:29:42:7d:76:
57:df:dd:78:c2:c2:ea:26:70:d9:b9:d8:5d:0a:d4:
b6:5a:61:e5:ad:c2:07:b8:55:60:39:a0:0a:0e:fd:
8a:bf:a1:e6:dc:7e:9e:8b:3f:9c:58:8a:28:9e:98:
01:e5:ca:36:c0:80:dc:55:87:fa:42:7e:d7:44:a6:
7e:cd:1b:37:03:00:77:52:66:94:a0:a4:83:de:0d:
e9:85:ab:c1:b2:73:70:c8:08:7e:d4:80:cd:28:b5:
9c:34:b3:db:ba:bd:6b:87:dd:15:9c:d8:0b:33:49:
e5:7a:fa:f4:67:18:af:7f:7c:a9:00:3b:ce:d0:83:
da:13:19:f9:8e:c1:82:55:89:45:59:3e:ad:2b:6f:
07:13:57:20:d2:36:bd:87:f5:0a:e1:64:db:36:40:
85:85:68:ca:25:ec:74:4d:24:99:35:56:77:f8:98:
17:82:e5:47:6e:15:d6:9f:82:a4:bf:91:88:70:b5:
09:ec:fb:ce:a7:b9:41:74:87:ec:06:05:d8:3d:c7:
01:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:BF:AD:02:33:B8:5F:0D:D6:F3:83:37:B9:F3:35:B5:8D:B9:DB:63
X509v3 Authority Key Identifier:
keyid:08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:71:c4:12:9e:90:48:c1:49:88:78:77:88:5e:5b:d0:ea:19:
65:5e:3f:d3:50:5f:40:72:a5:e0:73:8f:34:77:db:f0:2c:e2:
3f:64:c3:f7:84:4e:d0:6e:f7:46:62:84:c4:1b:5f:14:70:47:
fe:a9:d4:a4:5e:f7:5e:54:fd:a5:c7:0e:79:39:77:61:66:51:
03:56:b4:34:2f:f2:91:75:71:70:bf:23:0a:05:5e:80:20:be:
ce:e5:63:df:39:b9:82:18:85:42:bd:7c:b0:e4:20:57:c7:54:
3e:f2:db:f0:6c:6f:29:d7:ad:ef:43:50:1a:65:6f:39:26:61:
42:4e:42:a7:1b:a2:82:0f:4e:81:d7:47:19:55:06:a7:e1:c2:
02:a9:ac:e6:b8:f4:d9:10:fa:8f:94:cb:fb:2f:c0:ca:a1:34:
86:33:27:ad:73:34:50:25:19:81:25:d5:71:c3:45:3e:0d:2b:
f5:38:d6:0f:98:23:6b:83:81:80:91:39:05:45:4c:c4:59:b3:
9d:14:e7:3f:87:36:8f:00:1f:ee:a8:5b:9d:87:aa:fd:d8:58:
5c:20:9d:74:98:d0:60:b2:44:cd:ff:91:f9:82:4e:14:7d:c1:
eb:b1:94:32:4d:cf:ad:50:33:f8:79:a6:09:6b:bc:5e:53:4e:
a5:8e:30:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:30:56 2025 by rpki-client