Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft
File: Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft (raw, json)
Hash identifier: CvpxNh4GArYKytRIt2Jy12xNypSbYr7dRR7qoOVF0s0=
Subject key identifier: EF:30:DC:F3:EB:8E:3F:F7:28:46:94:26:EC:40:79:4B:0E:AF:66:84
Authority key identifier: 0A:39:F9:A0:02:78:E6:9D:1B:3D:DD:AA:0B:F0:CD:17:D2:E6:67:08
Certificate issuer: /CN=0a39f9a00278e69d1b3dddaa0bf0cd17d2e66708
Certificate serial: 0198469AF525C4BCA88C3A12650D18BD8CDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft
Manifest number: 0A7B
Signing time: Sat 26 Jul 2025 12:00:17 +0000
Manifest this update: Sat 26 Jul 2025 12:00:17 +0000
Manifest next update: Sun 27 Jul 2025 12:00:17 +0000
Files and hashes: 1: CjdcUk3MOW8Rqup07x2jVDEldW4.roa (hash: UaK7I7Eqw7jf6XsvMkrSjnKfCYZKST8b3TEli5jiSHk=)
2: Cjn5oAJ45p0bPd2qC_DNF9LmZwg.crl (hash: KJQ5ssOxQ3BDz082Emg1lPcVmKzs7iyuVSenR4qy57Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9a:f5:25:c4:bc:a8:8c:3a:12:65:0d:18:bd:8c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a39f9a00278e69d1b3dddaa0bf0cd17d2e66708
Validity
Not Before: Jul 26 12:00:17 2025 GMT
Not After : Jul 27 12:00:17 2025 GMT
Subject: CN=ef30dcf3eb8e3ff728469426ec40794b0eaf6684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8f:6a:ad:c6:f3:0b:f1:99:bc:8e:66:f8:e2:
eb:20:67:a8:80:f3:a0:c1:d1:d1:a6:a9:28:3d:63:
78:b5:eb:ac:aa:c6:b4:aa:a7:d8:c4:c5:14:95:e9:
34:bd:81:8f:75:6a:33:3d:98:19:6c:b7:d1:18:b0:
6e:1b:b4:f4:b4:1b:11:3b:fd:7d:5b:00:39:d9:9c:
4a:46:a3:a7:c3:4e:77:6c:9d:7c:4d:59:fa:10:7e:
d2:26:b2:79:37:66:84:74:b3:44:df:f7:e3:bb:79:
51:6a:34:d7:54:b8:1c:3e:de:21:c0:c5:91:1e:db:
8f:1f:b5:6c:7a:d6:a2:d3:87:50:03:08:23:db:30:
a5:62:03:39:81:4c:3d:32:e1:12:cb:0b:0c:b3:24:
96:2d:48:a0:e6:1d:f4:3c:87:df:34:a5:56:d0:c4:
de:5d:7b:f9:f6:d0:91:98:ef:56:04:cc:69:bb:cd:
05:85:1c:7f:b8:dd:58:70:41:7e:0b:75:84:52:c4:
b3:fd:e0:e7:eb:7e:6e:16:0d:48:f5:ee:38:87:7f:
45:e5:9d:9a:bf:73:61:47:de:be:7d:84:34:6d:15:
84:84:23:1e:93:5b:e1:34:82:d7:f7:09:10:82:f3:
1e:71:3a:8a:1e:2d:49:bc:85:37:96:b4:2b:f7:bc:
67:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:30:DC:F3:EB:8E:3F:F7:28:46:94:26:EC:40:79:4B:0E:AF:66:84
X509v3 Authority Key Identifier:
keyid:0A:39:F9:A0:02:78:E6:9D:1B:3D:DD:AA:0B:F0:CD:17:D2:E6:67:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/a9af0e-e91a-4f1c-b72c-1e2b1c87d317/1/Cjn5oAJ45p0bPd2qC_DNF9LmZwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ee:04:b5:e7:60:ae:b3:fb:26:13:23:88:9f:55:cf:c7:a9:
7e:3e:79:f4:15:d5:bc:73:b7:36:53:c4:55:47:b3:15:a2:5e:
16:c0:6e:9b:7e:8e:b8:93:53:4a:a6:17:84:84:a0:81:72:4b:
e6:56:c2:fc:45:b3:4d:14:27:15:4d:bf:47:63:21:96:1b:41:
0c:28:16:ab:6e:75:44:b2:f9:98:94:6c:b9:28:42:ed:e9:d1:
fe:7b:60:14:f1:a2:0c:b0:a5:be:a0:cb:34:bb:b6:4e:d6:8c:
98:1f:90:c5:4b:ae:f7:9a:36:44:cd:d3:6f:d4:24:8c:b1:75:
6c:bd:b1:1c:51:ac:45:02:56:62:77:4a:86:96:80:77:89:69:
39:43:d5:cf:37:33:0c:95:07:e1:a9:fe:89:56:dc:3b:08:5d:
a9:5d:6e:fb:b1:46:35:6f:21:5c:c0:69:17:76:1d:54:39:c9:
64:10:41:30:0c:a9:81:90:ff:6c:a9:41:5b:ec:67:f1:b7:52:
06:e8:01:17:39:8a:d3:de:a9:fd:a8:b0:21:d5:6c:bd:d1:8b:
a4:a0:0a:de:18:89:b4:40:ee:fb:c6:c0:a8:1c:46:fc:c3:7d:
6c:ac:b8:8c:82:cc:02:fa:91:7a:cd:4b:8b:4b:31:e8:91:8a:
b8:6d:7b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:55:59 2025 by rpki-client