Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
File: cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft (raw, json)
Hash identifier: sd3RVVLNLzsanFzg1ZaWSzYLu+IuCmR3vnUo/ujnEWQ=
Subject key identifier: 70:6B:83:EA:5C:33:E5:12:4C:AA:5F:C0:20:BA:CE:FA:0A:F8:54:19
Authority key identifier: 72:38:FB:FE:A5:76:84:79:C8:63:00:90:6E:74:EB:25:4D:CB:5C:69
Certificate issuer: /CN=7238fbfea5768479c86300906e74eb254dcb5c69
Certificate serial: 01984709005239AA14D719EDADEE8B1B873E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
Manifest number: 0AD5
Signing time: Sat 26 Jul 2025 14:00:28 +0000
Manifest this update: Sat 26 Jul 2025 14:00:28 +0000
Manifest next update: Sun 27 Jul 2025 14:00:28 +0000
Files and hashes: 1: cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl (hash: RNnqSGdBWPtF5ukAB7+GCWK9R5NlpbdHjJT+eK75HhE=)
2: wdIm1qCd0ObJ1xyB5TPQkFaC0YA.roa (hash: oOyNKTQaCSCE6Wpivc9w4AbPACJjW6ReZk27bCRwMBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:09:00:52:39:aa:14:d7:19:ed:ad:ee:8b:1b:87:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7238fbfea5768479c86300906e74eb254dcb5c69
Validity
Not Before: Jul 26 14:00:28 2025 GMT
Not After : Jul 27 14:00:28 2025 GMT
Subject: CN=706b83ea5c33e5124caa5fc020bacefa0af85419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:05:6c:c9:50:04:d7:85:d6:1c:b5:d1:d8:4e:
00:ab:68:df:f4:29:d1:8e:d2:ee:bf:6d:cd:b0:3a:
56:49:97:a6:68:5f:71:ca:81:54:6d:03:b4:01:8a:
b3:da:a6:45:b3:00:fa:fd:9e:bd:a0:4e:9d:8f:63:
8c:d5:70:06:ca:16:10:a0:e9:ec:8f:be:7e:35:1a:
1f:0e:74:93:34:a5:61:5c:e5:71:3f:aa:5d:74:2f:
7c:20:48:97:3d:ac:94:3f:b6:5a:79:51:a5:63:76:
56:7d:c3:f8:78:32:9f:e4:8f:90:e5:05:f4:15:68:
43:69:1f:d4:3e:8b:42:1d:a9:f9:1f:fd:c0:1f:d4:
70:0f:af:e3:62:9c:8e:46:a6:b4:61:db:dc:5f:bc:
5f:68:f8:a7:e5:74:c7:65:6a:55:d6:33:dc:f4:d7:
d1:bc:68:ac:7a:31:84:29:5f:60:ed:f7:ec:02:0c:
60:ba:17:10:a3:d6:58:a1:22:44:4a:2f:ae:1c:4f:
60:d3:0a:46:32:84:b4:a0:04:51:41:ad:1a:6c:1a:
66:78:94:c6:86:92:49:3f:b9:82:30:17:93:8f:68:
1a:b7:9f:6b:e6:04:30:67:d0:0c:95:e3:b0:eb:fc:
68:cb:b3:15:b8:ee:ec:c6:87:cb:49:a7:41:5e:d6:
dd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6B:83:EA:5C:33:E5:12:4C:AA:5F:C0:20:BA:CE:FA:0A:F8:54:19
X509v3 Authority Key Identifier:
keyid:72:38:FB:FE:A5:76:84:79:C8:63:00:90:6E:74:EB:25:4D:CB:5C:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ee:6f:c9:e8:5a:a5:bf:89:3d:f2:2c:71:29:e3:80:52:e6:
f4:8d:8b:7f:0e:d8:19:3a:b1:04:12:ba:02:79:19:34:62:7c:
ba:60:3a:33:c4:3a:f4:6f:d7:ef:18:5d:eb:59:1e:a2:ec:2f:
03:ef:c7:e9:c3:89:36:54:1f:eb:00:1d:db:c0:ec:29:8e:77:
c9:b3:dc:f4:36:85:9b:fb:b5:40:89:6b:f7:76:f5:cd:c2:45:
25:c6:af:f7:c8:56:e5:84:eb:2b:56:86:67:99:22:e7:e7:4b:
0c:62:d0:3f:32:c7:b7:e3:3b:22:07:88:ef:c9:25:5d:dd:11:
93:7d:b4:5e:8d:7b:49:d7:9b:ec:31:66:e4:0e:e8:ed:ce:0d:
00:86:a2:3d:66:83:e4:c9:1d:f7:38:a9:f4:5b:c0:eb:b4:42:
3e:71:f4:22:c1:15:84:cc:06:34:86:71:db:45:9a:2a:24:42:
28:a3:bd:b1:e4:4f:66:c8:35:1d:3a:c1:60:8f:0c:34:33:4e:
05:bf:24:a0:41:d5:2d:2a:6e:bb:4c:b8:38:d3:9f:29:e7:50:
e1:c8:06:a3:ad:d2:25:69:a0:cc:42:7d:ef:84:32:e5:83:a2:
b0:4b:be:2e:12:f2:76:42:49:ca:3e:dc:b5:aa:33:9c:a5:a6:
da:f8:36:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHCQBSOaoU1xntre6LG4c+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMzhmYmZlYTU3Njg0NzljODYzMDA5MDZlNzRlYjI1NGRj
YjVjNjkwHhcNMjUwNzI2MTQwMDI4WhcNMjUwNzI3MTQwMDI4WjAzMTEwLwYDVQQD
Eyg3MDZiODNlYTVjMzNlNTEyNGNhYTVmYzAyMGJhY2VmYTBhZjg1NDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgVsyVAE14XWHLXR2E4Aq2jf9CnR
jtLuv23NsDpWSZemaF9xyoFUbQO0AYqz2qZFswD6/Z69oE6dj2OM1XAGyhYQoOns
j75+NRofDnSTNKVhXOVxP6pddC98IEiXPayUP7ZaeVGlY3ZWfcP4eDKf5I+Q5QX0
FWhDaR/UPotCHan5H/3AH9RwD6/jYpyORqa0YdvcX7xfaPin5XTHZWpV1jPc9NfR
vGisejGEKV9g7ffsAgxguhcQo9ZYoSJESi+uHE9g0wpGMoS0oARRQa0abBpmeJTG
hpJJP7mCMBeTj2gat59r5gQwZ9AMleOw6/xoy7MVuO7sxofLSadBXtbdHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHBrg+pcM+USTKpfwCC6zvoK+FQZMB8GA1UdIwQY
MBaAFHI4+/6ldoR5yGMAkG506yVNy1xpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2pqN19xVjJoSG5JWXdDUWJuVHJKVTNMWEdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9mYjIyYWItYjU0Ni00MDcxLWJlYjEt
YmUxMGU4YjRhMDBlLzEvY2pqN19xVjJoSG5JWXdDUWJuVHJKVTNMWEdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9mYjIyYWItYjU0Ni00MDcxLWJlYjEtYmUxMGU4YjRhMDBl
LzEvY2pqN19xVjJoSG5JWXdDUWJuVHJKVTNMWEdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANO5vyeha
pb+JPfIscSnjgFLm9I2Lfw7YGTqxBBK6AnkZNGJ8umA6M8Q69G/X7xhd61keouwv
A+/H6cOJNlQf6wAd28DsKY53ybPc9DaFm/u1QIlr93b1zcJFJcav98hW5YTrK1aG
Z5ki5+dLDGLQPzLHt+M7IgeI78klXd0Rk320Xo17Sdeb7DFm5A7o7c4NAIaiPWaD
5Mkd9zip9FvA67RCPnH0IsEVhMwGNIZx20WaKiRCKKO9seRPZsg1HTrBYI8MNDNO
Bb8koEHVLSpuu0y4ONOfKedQ4cgGo63SJWmgzEJ974Qy5YOisEu+LhLydkJJyj7c
taoznKWm2vg2vQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:30:55 2025 by rpki-client