Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
File: CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft (raw, json)
Hash identifier: 56NxX9obxhK66DE2IGJ0D0D2quZYSi4dU1pg+FsVqoU=
Subject key identifier: 34:8A:20:33:9D:C2:B2:A4:D8:30:11:A1:69:98:EE:31:A7:8C:AA:0E
Authority key identifier: 08:95:3A:5F:11:A8:27:9C:DF:87:98:96:0D:E1:E2:2E:B1:22:7D:95
Certificate issuer: /CN=08953a5f11a8279cdf8798960de1e22eb1227d95
Certificate serial: 019844AC9C70F47655AD3CD3235967C9297C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 03:00:19 +0000
Manifest this update: Sat 26 Jul 2025 03:00:19 +0000
Manifest next update: Sun 27 Jul 2025 03:00:19 +0000
Files and hashes: 1: CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl (hash: DCfrhqj0vvMvnRxmimrevB+rCvD1wlnWvk+Np5v/utE=)
2: uqzFgf-8B62Y8mrkcQQAzXl65Xw.roa (hash: kCZVPY38TjsnXAkZkosAsOr4uT14uV5XbG2BhNU/FCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:ac:9c:70:f4:76:55:ad:3c:d3:23:59:67:c9:29:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08953a5f11a8279cdf8798960de1e22eb1227d95
Validity
Not Before: Jul 26 03:00:19 2025 GMT
Not After : Jul 27 03:00:19 2025 GMT
Subject: CN=348a20339dc2b2a4d83011a16998ee31a78caa0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d9:19:85:4e:70:ca:7f:8b:7c:88:b9:f5:db:
9c:5c:2b:aa:2b:15:f0:52:74:2b:8c:a9:bd:7d:b8:
2a:98:a7:bd:f4:34:28:69:78:81:f3:71:e9:c5:a1:
64:af:af:e5:05:9f:aa:89:4b:8a:99:19:16:90:81:
2e:fa:ca:58:88:f9:c6:bb:13:26:df:a8:0e:b2:b0:
6f:d3:9c:7f:84:05:cd:6a:a1:20:d3:6b:b8:ef:83:
8d:7b:76:22:69:4d:a0:4d:69:e3:67:ca:af:81:a6:
24:13:50:12:20:e6:56:29:0e:27:c3:00:b7:6c:b5:
af:bb:a6:e2:d2:31:99:4f:5d:3e:57:68:29:50:3a:
fc:f1:16:eb:75:e1:e6:bd:c8:2b:64:0d:85:00:89:
3f:c4:1a:78:07:1a:04:9b:c4:e2:a3:41:78:df:bd:
0f:62:7d:45:ef:6c:18:22:17:a2:86:ce:02:42:b6:
6d:ad:f7:83:55:50:04:f7:b1:9c:80:88:b9:e2:24:
63:c2:81:95:47:f0:e7:1a:21:86:19:01:35:4d:d3:
ba:43:c6:2e:c8:82:36:d5:c8:23:34:7e:d9:d3:19:
88:dd:5d:d8:73:b8:7f:ba:7c:c1:ab:36:87:1e:f8:
0e:64:0d:b2:43:53:ec:4f:77:42:33:5a:2e:a9:cd:
73:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:8A:20:33:9D:C2:B2:A4:D8:30:11:A1:69:98:EE:31:A7:8C:AA:0E
X509v3 Authority Key Identifier:
keyid:08:95:3A:5F:11:A8:27:9C:DF:87:98:96:0D:E1:E2:2E:B1:22:7D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:69:6a:db:be:0d:9a:52:26:09:5c:ac:b8:8e:95:35:c3:66:
25:aa:df:8e:e3:f0:67:ad:e0:5c:88:7b:ec:f9:94:9e:36:5b:
7e:da:ef:9e:08:0c:ed:49:c3:5a:8a:e8:f4:9e:8e:f6:3c:c7:
99:34:36:99:8b:a1:65:69:7d:00:5e:fd:f5:ea:c5:85:3f:43:
8b:06:1c:a4:96:e6:89:ae:e4:1c:69:5c:63:f0:1a:69:16:dd:
37:43:a5:91:32:af:42:b3:c3:26:35:4f:86:80:f2:60:ce:f6:
c2:59:29:39:45:19:88:a5:ec:55:f6:6c:48:35:18:f3:d4:68:
73:19:35:b3:a4:21:2f:ca:cd:26:a3:e4:b4:c0:dc:70:b9:2e:
66:d3:57:71:67:f0:6d:3c:93:4c:c2:51:91:c8:aa:b3:dc:2d:
ca:42:6a:af:57:78:12:93:76:fe:ea:13:62:ee:ba:99:38:74:
c1:c4:5a:25:8f:18:76:3b:07:df:d7:09:6e:4c:f4:6f:51:e2:
f2:c8:13:69:44:53:d9:4b:09:8b:b9:75:61:42:1e:68:95:f9:
f3:89:c9:2a:00:57:fe:b7:f3:d6:40:7d:4d:8d:d9:73:c1:df:
b9:a5:2c:5d:68:dd:6a:52:66:79:4c:5f:80:6f:81:39:e8:52:
35:53:27:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhErJxw9HZVrTzTI1lnySl8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4OTUzYTVmMTFhODI3OWNkZjg3OTg5NjBkZTFlMjJlYjEy
MjdkOTUwHhcNMjUwNzI2MDMwMDE5WhcNMjUwNzI3MDMwMDE5WjAzMTEwLwYDVQQD
EygzNDhhMjAzMzlkYzJiMmE0ZDgzMDExYTE2OTk4ZWUzMWE3OGNhYTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtkZhU5wyn+LfIi59ducXCuqKxXw
UnQrjKm9fbgqmKe99DQoaXiB83HpxaFkr6/lBZ+qiUuKmRkWkIEu+spYiPnGuxMm
36gOsrBv05x/hAXNaqEg02u474ONe3YiaU2gTWnjZ8qvgaYkE1ASIOZWKQ4nwwC3
bLWvu6bi0jGZT10+V2gpUDr88RbrdeHmvcgrZA2FAIk/xBp4BxoEm8Tio0F4370P
Yn1F72wYIheihs4CQrZtrfeDVVAE97GcgIi54iRjwoGVR/DnGiGGGQE1TdO6Q8Yu
yII21cgjNH7Z0xmI3V3Yc7h/unzBqzaHHvgOZA2yQ1PsT3dCM1ouqc1zbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDSKIDOdwrKk2DARoWmY7jGnjKoOMB8GA1UdIwQY
MBaAFAiVOl8RqCec34eYlg3h4i6xIn2VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0pVNlh4R29KNXpmaDVpV0RlSGlMckVpZlpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9jYzk0YzgtNzJlNC00Mzk4LWIzN2It
NzExNjk1NjdlMzljLzEvQ0pVNlh4R29KNXpmaDVpV0RlSGlMckVpZlpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9jYzk0YzgtNzJlNC00Mzk4LWIzN2ItNzExNjk1NjdlMzlj
LzEvQ0pVNlh4R29KNXpmaDVpV0RlSGlMckVpZlpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO2lq274N
mlImCVysuI6VNcNmJarfjuPwZ63gXIh77PmUnjZbftrvnggM7UnDWoro9J6O9jzH
mTQ2mYuhZWl9AF799erFhT9DiwYcpJbmia7kHGlcY/AaaRbdN0OlkTKvQrPDJjVP
hoDyYM72wlkpOUUZiKXsVfZsSDUY89Rocxk1s6QhL8rNJqPktMDccLkuZtNXcWfw
bTyTTMJRkciqs9wtykJqr1d4EpN2/uoTYu66mTh0wcRaJY8YdjsH39cJbkz0b1Hi
8sgTaURT2UsJi7l1YUIeaJX584nJKgBX/rfz1kB9TY3Zc8HfuaUsXWjdalJmeUxf
gG+BOehSNVMndg==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:31:19 2025 by rpki-client