Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
File: CJu7CaX772E1wtkgvye7YfXC4J0.mft (raw, json)
Hash identifier: IxGDS0AjPS9SOV/TgtpX7Z/w0LA1XAfy96CwndNNFwE=
Subject key identifier: 86:E3:23:C2:6F:0C:ED:BE:57:6D:39:33:CA:1A:9D:E3:9D:24:53:34
Authority key identifier: 08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
Certificate issuer: /CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Certificate serial: 0197530FA5CC5DDA5C69E0771457F8D4D56A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
Manifest number: 1580
Signing time: Mon 09 Jun 2025 05:00:23 +0000
Manifest this update: Mon 09 Jun 2025 05:00:23 +0000
Manifest next update: Tue 10 Jun 2025 05:00:23 +0000
Files and hashes: 1: CJu7CaX772E1wtkgvye7YfXC4J0.crl (hash: zwqcqY6x63Ar9Daw6JafK6g+tIkzIRT6ODSJ7cKAyiU=)
2: y1lINwCoifyovhdAeAf2rHi3ZHU.roa (hash: wdFrAh4YUjbnThTYrymA+tW+SWC0S+T+ZCRyXfvs7nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:0f:a5:cc:5d:da:5c:69:e0:77:14:57:f8:d4:d5:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Validity
Not Before: Jun 9 05:00:23 2025 GMT
Not After : Jun 10 05:00:23 2025 GMT
Subject: CN=86e323c26f0cedbe576d3933ca1a9de39d245334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cd:e6:93:14:dc:89:26:bb:10:8a:10:40:a9:
20:0b:be:fd:45:23:fd:01:64:81:6d:f5:4f:b1:3e:
ec:4f:06:8b:1b:da:74:50:9f:c7:2d:32:cf:78:1e:
dc:0c:e4:cc:b4:5b:96:87:8a:92:4a:9e:34:97:fa:
14:ab:10:dc:59:ea:6a:6a:19:29:04:22:0b:db:4d:
f5:e7:0c:a0:8d:da:59:ee:81:47:a1:c9:86:c8:c3:
91:ec:b4:31:7d:c5:23:2e:49:d1:41:ca:a7:49:e7:
66:e0:24:0c:6c:7b:39:7b:38:fe:28:c1:b6:40:01:
e3:54:b5:e0:a1:d9:54:44:2e:60:ae:2d:94:79:ea:
f6:ee:7e:15:0d:c7:19:88:88:d2:af:92:63:ba:99:
22:52:2a:38:ce:d3:99:09:c5:19:7b:0b:13:d3:72:
86:1e:08:1e:22:c5:f3:1f:96:0e:a5:b8:69:ab:ea:
f9:de:8e:e3:d5:50:0a:fe:11:c2:0b:a5:14:29:45:
29:18:28:00:27:2a:d4:71:4d:6e:4c:f9:8a:5b:99:
72:f0:05:6a:c1:12:34:eb:5f:8d:06:73:dc:57:e9:
a0:69:c4:da:17:6b:c0:88:ab:d7:c8:e4:ea:12:fa:
49:f2:15:9b:4f:33:84:2a:9a:8d:18:91:68:1e:33:
3e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E3:23:C2:6F:0C:ED:BE:57:6D:39:33:CA:1A:9D:E3:9D:24:53:34
X509v3 Authority Key Identifier:
keyid:08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:1a:3a:3b:cd:75:3c:35:b4:80:c1:0b:f4:98:13:57:28:37:
7b:e7:ca:2e:91:30:1d:cd:b3:ed:0b:21:6b:21:6f:36:d5:95:
0b:fd:28:3f:5b:29:16:b0:c1:96:37:6e:5c:d7:a0:02:15:7f:
53:00:f5:a0:2e:67:5a:d4:be:fd:05:f8:15:40:d8:1f:1f:e2:
bc:fd:fd:8e:bb:db:75:5d:a7:e6:5f:3f:f7:35:1b:95:9e:55:
ba:b4:3a:95:ea:25:28:97:01:c2:6f:59:57:33:0c:10:e3:dc:
bc:b4:73:de:fb:ed:a9:c0:67:64:1e:84:6f:2e:be:2d:0d:c9:
15:b6:3e:24:c4:00:94:3a:6d:c3:7e:6e:91:cf:a6:6f:f9:3c:
11:bf:bb:69:8a:3d:e5:72:69:31:03:5b:8c:5c:8e:09:14:57:
3f:84:e0:8a:74:0a:53:cb:ea:1e:0b:31:96:0c:b1:3e:18:80:
e2:fa:6d:cc:44:34:0f:e9:78:97:c1:03:e0:e2:b1:7f:e4:57:
f3:ce:5a:6f:5a:76:93:2f:f6:51:ff:32:dc:91:07:77:88:79:
22:37:cc:94:71:c4:2d:79:2f:3e:3e:95:42:32:ed:a1:1e:56:
0a:e9:09:f6:58:a5:71:48:67:62:ba:ee:ce:2d:14:58:25:82:
83:d0:4e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:29:04 2025 by rpki-client