Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
File: CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft (raw, json)
Hash identifier: l/0zvAqGOch5sNGWSlmfY2/mpmexC6MJmgQeZ8pXYRY=
Subject key identifier: 6D:4F:86:79:4B:0D:28:FA:43:3C:EE:51:AF:3B:AE:A1:C4:E0:1C:75
Authority key identifier: 08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F
Certificate issuer: /CN=089523953939f8a5e464b1cc7719ebeb9467ca3f
Certificate serial: 01984777CD824BF8EC61E436410852E26EA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 16:01:30 +0000
Manifest this update: Sat 26 Jul 2025 16:01:30 +0000
Manifest next update: Sun 27 Jul 2025 16:01:30 +0000
Files and hashes: 1: CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl (hash: KNS4zWEtycTlhdssz2MCYRZnm+xSY2XX1Uiinba+1zQ=)
2: PJ_-iRXGR5kveJvnaBWIwG-ft74.roa (hash: lpKsBNInX/l4lejvtga0/MnEJsq53AADQslEJzx9StQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:cd:82:4b:f8:ec:61:e4:36:41:08:52:e2:6e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089523953939f8a5e464b1cc7719ebeb9467ca3f
Validity
Not Before: Jul 26 16:01:30 2025 GMT
Not After : Jul 27 16:01:30 2025 GMT
Subject: CN=6d4f86794b0d28fa433cee51af3baea1c4e01c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c3:38:4a:f0:09:c9:81:05:c7:4b:d0:b7:de:
de:77:6c:81:5a:24:32:7e:fd:cd:6e:57:67:f6:9a:
95:52:42:58:05:24:19:ed:2a:fe:a8:a7:9a:72:59:
4c:73:df:14:35:3d:82:71:66:d7:39:07:aa:14:09:
73:f0:c1:4f:d8:6a:ad:f6:89:f9:9c:89:f5:cf:b4:
0c:98:90:e4:d7:21:1a:d4:3f:74:45:39:74:0d:2a:
90:ac:c1:80:ab:e7:86:d4:d0:43:0e:ea:28:4d:18:
c7:62:1f:d8:38:04:3e:da:68:f8:c4:89:56:c4:76:
84:50:57:3c:05:7e:1d:3d:ad:90:32:ac:69:32:51:
bd:78:89:95:a1:83:d7:08:bd:c8:3d:b7:83:72:4f:
1f:c0:0c:fa:3e:00:2a:f0:53:6c:02:f8:b6:cd:69:
a6:3e:0e:27:1f:f6:62:ae:04:cb:ce:8f:b8:fe:d1:
b2:a0:ac:26:3e:ea:43:d7:ab:ff:dd:2c:aa:3a:46:
d7:69:d9:78:0a:7d:14:69:16:4d:ee:28:c6:0a:6e:
fc:db:57:3b:53:60:71:ed:d3:44:64:ec:5e:e0:30:
ba:d7:6e:91:1e:97:c2:77:88:71:fd:33:a7:b4:c3:
de:15:e3:21:14:b4:9c:43:3a:02:44:0b:7b:dd:13:
11:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:4F:86:79:4B:0D:28:FA:43:3C:EE:51:AF:3B:AE:A1:C4:E0:1C:75
X509v3 Authority Key Identifier:
keyid:08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:06:02:2c:d7:72:00:51:47:9f:ae:2a:9a:6d:31:c5:66:11:
0c:7f:6b:7f:93:2f:4b:0c:d3:26:83:a4:b3:87:e8:44:c8:37:
5c:13:a6:15:c6:41:d3:d0:17:53:ce:ce:32:f9:7a:3a:3d:9d:
7a:13:57:8f:70:64:62:4a:cf:03:44:67:ae:81:6e:30:3f:0f:
85:76:70:b8:d9:50:76:5f:17:20:d8:5a:81:16:8a:c5:d9:b8:
f2:bb:87:30:86:5a:61:43:30:dc:72:64:79:1b:73:77:19:26:
a6:26:8d:fa:de:85:8d:20:41:ee:b9:cf:dd:0b:22:af:09:73:
ba:e3:6a:15:da:c2:20:37:80:fd:74:b1:22:4d:4f:f8:1e:58:
a2:ff:10:1f:2e:9f:ae:5a:f1:0a:8f:2a:46:c1:ee:80:a4:bf:
d3:b6:3d:c4:15:b3:14:65:d1:61:6a:55:9f:c2:a2:01:c3:ca:
8e:ad:d3:c6:41:00:5c:50:21:d0:83:83:a9:0b:05:6d:4e:48:
bc:4f:9d:37:7d:b0:90:91:cb:3e:90:11:df:8b:62:2c:d9:80:
7b:a4:c4:ad:24:b2:07:54:47:4c:96:85:17:2c:4f:dc:15:7d:
91:68:42:11:3a:c4:ac:57:4b:c5:55:4b:f6:45:61:06:3d:48:
9f:bb:18:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHd82CS/jsYeQ2QQhS4m6hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4OTUyMzk1MzkzOWY4YTVlNDY0YjFjYzc3MTllYmViOTQ2
N2NhM2YwHhcNMjUwNzI2MTYwMTMwWhcNMjUwNzI3MTYwMTMwWjAzMTEwLwYDVQQD
Eyg2ZDRmODY3OTRiMGQyOGZhNDMzY2VlNTFhZjNiYWVhMWM0ZTAxYzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsM4SvAJyYEFx0vQt97ed2yBWiQy
fv3Nbldn9pqVUkJYBSQZ7Sr+qKeacllMc98UNT2CcWbXOQeqFAlz8MFP2Gqt9on5
nIn1z7QMmJDk1yEa1D90RTl0DSqQrMGAq+eG1NBDDuooTRjHYh/YOAQ+2mj4xIlW
xHaEUFc8BX4dPa2QMqxpMlG9eImVoYPXCL3IPbeDck8fwAz6PgAq8FNsAvi2zWmm
Pg4nH/ZirgTLzo+4/tGyoKwmPupD16v/3SyqOkbXadl4Cn0UaRZN7ijGCm7821c7
U2Bx7dNEZOxe4DC6126RHpfCd4hx/TOntMPeFeMhFLScQzoCRAt73RMRdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1PhnlLDSj6QzzuUa87rqHE4Bx1MB8GA1UdIwQY
MBaAFAiVI5U5Ofil5GSxzHcZ6+uUZ8o/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0pVamxUazUtS1hrWkxITWR4bnI2NVJueWo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84NTM5OTYtNmNiYi00ZDQyLTg3Nzgt
YjFkN2FjOWVhMzIxLzEvQ0pVamxUazUtS1hrWkxITWR4bnI2NVJueWo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi84NTM5OTYtNmNiYi00ZDQyLTg3NzgtYjFkN2FjOWVhMzIx
LzEvQ0pVamxUazUtS1hrWkxITWR4bnI2NVJueWo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGQYCLNdy
AFFHn64qmm0xxWYRDH9rf5MvSwzTJoOks4foRMg3XBOmFcZB09AXU87OMvl6Oj2d
ehNXj3BkYkrPA0RnroFuMD8PhXZwuNlQdl8XINhagRaKxdm48ruHMIZaYUMw3HJk
eRtzdxkmpiaN+t6FjSBB7rnP3QsirwlzuuNqFdrCIDeA/XSxIk1P+B5Yov8QHy6f
rlrxCo8qRsHugKS/07Y9xBWzFGXRYWpVn8KiAcPKjq3TxkEAXFAh0IODqQsFbU5I
vE+dN32wkJHLPpAR34tiLNmAe6TErSSyB1RHTJaFFyxP3BV9kWhCETrErFdLxVVL
9kVhBj1In7sYNQ==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:55:19 2025 by rpki-client