Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
File: Cj4I7z11S8avqR-mwQAg9YUFwWE.mft (raw, json)
Hash identifier: cFhkvzLlFUhEV0yGMRIu6L29UOhWj7DcjROlHZBxYZ0=
Subject key identifier: 26:9E:0D:85:29:1A:C8:BD:8C:3B:33:19:C8:8E:34:AD:3F:05:62:47
Authority key identifier: 0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61
Certificate issuer: /CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161
Certificate serial: 01984965D2C0E62325AB2565607D28EDCC51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
Manifest number: 0287
Signing time: Sun 27 Jul 2025 01:01:06 +0000
Manifest this update: Sun 27 Jul 2025 01:01:06 +0000
Manifest next update: Mon 28 Jul 2025 01:01:06 +0000
Files and hashes: 1: Cj4I7z11S8avqR-mwQAg9YUFwWE.crl (hash: DLH6CiUYRKtJVpIhXfNfRuVsp4mgNraHoZQZF1FLitM=)
2: GD1XX0gIhAQoOwhwNDnnnOJQSOc.roa (hash: Nxtxf8oqzQUGj2GQkzH5yxankBttLPUcZ16qJnjJRXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:d2:c0:e6:23:25:ab:25:65:60:7d:28:ed:cc:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a3e08ef3d754bc6afa91fa6c10020f58505c161
Validity
Not Before: Jul 27 01:01:06 2025 GMT
Not After : Jul 28 01:01:06 2025 GMT
Subject: CN=269e0d85291ac8bd8c3b3319c88e34ad3f056247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e4:75:7d:22:1a:b6:61:a6:96:99:c9:15:2f:
73:0f:0c:4e:22:94:7a:3b:fd:64:2d:ce:4c:bd:f0:
fb:8e:b4:df:ba:79:3d:26:f5:c3:14:8c:50:b6:e3:
03:21:a1:e3:bd:96:1c:30:77:c3:60:99:f0:db:6f:
b4:13:59:d7:e5:35:90:d3:d4:66:b9:eb:7a:e7:0f:
00:64:ab:cd:9f:c8:73:6a:f2:f4:d1:93:bb:dd:02:
5b:50:da:86:1a:8e:8f:f7:f4:e3:e5:56:88:42:ea:
c7:f8:12:5a:5c:1b:b2:4d:01:8e:c5:ac:88:b4:a2:
1c:05:db:19:59:83:50:3c:24:d6:fe:78:8f:42:44:
64:4f:a9:7b:2f:c2:d9:c3:2a:85:47:9c:91:0b:74:
e0:be:69:f7:16:2a:e2:60:64:85:a8:a2:6d:6f:e7:
c1:26:21:ef:8a:15:ad:27:82:5e:48:31:29:f7:b2:
4f:6f:a6:a0:c8:b3:e3:87:ab:13:59:89:c7:9d:c2:
fd:74:24:35:ef:10:db:46:76:a2:cb:27:d3:29:78:
a6:a2:9a:e2:b8:d7:80:b8:c6:1b:07:6b:48:d0:34:
91:6c:0a:b9:13:17:8d:77:6d:8c:fa:3d:ed:03:14:
65:f4:c6:12:81:ab:0f:52:f6:b0:4b:1b:b6:bc:c4:
fb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9E:0D:85:29:1A:C8:BD:8C:3B:33:19:C8:8E:34:AD:3F:05:62:47
X509v3 Authority Key Identifier:
keyid:0A:3E:08:EF:3D:75:4B:C6:AF:A9:1F:A6:C1:00:20:F5:85:05:C1:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cj4I7z11S8avqR-mwQAg9YUFwWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/397dfe-dc98-4584-8585-4d1d37dc81b4/1/Cj4I7z11S8avqR-mwQAg9YUFwWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:6a:4c:7f:ee:26:21:1a:05:3c:4c:77:6b:ae:37:68:c3:c5:
5f:1b:ae:97:18:db:19:9e:64:dd:fb:a5:de:57:e4:85:3d:fb:
7b:87:75:83:01:e5:8d:94:f8:de:f8:09:8c:bd:2f:15:d5:0d:
b6:38:13:9b:a2:54:02:fd:34:f7:66:97:14:43:e2:1d:31:d8:
2b:fc:94:9e:25:17:64:a6:aa:ad:02:a3:6a:d4:02:d0:c0:1a:
a7:f0:a5:bc:7d:75:58:d3:27:12:a6:f6:d3:eb:7f:64:2d:85:
a4:aa:e4:5e:90:98:20:aa:dc:6b:b2:98:5f:8a:57:67:42:17:
4a:15:94:47:58:be:1b:2c:02:d2:2b:f9:f7:4f:d2:ce:b7:46:
50:be:cb:9c:73:23:c4:00:2e:f3:9a:56:e7:47:4f:a9:6f:ac:
31:2d:27:bb:06:58:c5:be:97:8f:ac:84:3e:4f:b0:ab:6e:a8:
ac:05:de:2f:2d:bd:64:00:5a:28:17:a8:74:b8:47:89:28:33:
b3:17:81:2c:75:6e:3d:12:b9:f9:55:6f:f9:25:9a:17:ee:56:
d8:68:fa:93:cf:48:30:7a:17:45:fe:85:a1:da:f9:34:c5:c3:
05:ab:c5:91:39:ff:f0:6f:ae:5d:9f:fe:fb:be:c2:89:2c:50:
55:5e:90:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:50:43 2025 by rpki-client