Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
File: CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft (raw, json)
Hash identifier: bQf36Ag52FgMjhvN/UBwsLh/GDKpW2R2GPZTxXnKn4Y=
Subject key identifier: 3C:CA:D8:4F:13:45:C3:22:11:BB:CE:9D:AF:C8:95:5F:22:DB:21:B7
Authority key identifier: 08:9F:CF:2A:B6:E6:DB:C1:63:4E:E5:91:FC:1B:74:A4:1D:E3:EA:5F
Certificate issuer: /CN=089fcf2ab6e6dbc1634ee591fc1b74a41de3ea5f
Certificate serial: 019921B064ECB0E8053FADA9D2D02348274F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
Manifest number: 1375
Signing time: Sun 07 Sep 2025 01:00:32 +0000
Manifest this update: Sun 07 Sep 2025 01:00:32 +0000
Manifest next update: Mon 08 Sep 2025 01:00:32 +0000
Files and hashes: 1: CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl (hash: I9ihiOugtVoahCz8ZwmfoM4wrpNI7Oa7PB0fMEB2gXM=)
2: b5Jj4qgundIuSAAGFCkt8JiFnho.roa (hash: 06WuFnYu9V9s1QGtR8S6F/K40CDV7ycfNQPEsDlVYUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:64:ec:b0:e8:05:3f:ad:a9:d2:d0:23:48:27:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089fcf2ab6e6dbc1634ee591fc1b74a41de3ea5f
Validity
Not Before: Sep 7 01:00:32 2025 GMT
Not After : Sep 8 01:00:32 2025 GMT
Subject: CN=3ccad84f1345c32211bbce9dafc8955f22db21b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:08:2d:14:56:89:6f:12:30:21:31:9d:b4:fc:
a6:84:1f:38:3d:f6:15:62:0b:b0:ed:b2:7d:01:88:
74:52:f2:c4:91:84:53:ba:1b:ab:25:9f:23:dc:4b:
56:49:e1:37:4a:cd:07:56:b4:a4:ab:b8:5e:0c:1b:
11:a2:e2:d2:fc:55:a0:06:7e:8f:54:59:a1:17:56:
cd:03:36:a6:cb:4d:92:99:b4:f4:7c:08:f0:a2:1c:
96:42:1e:c5:c9:a5:af:05:08:45:14:a3:e7:ba:29:
d4:f3:eb:2c:f2:9e:e1:aa:ae:f7:fd:9e:d2:1b:67:
29:0b:c8:bb:02:cf:b4:f1:ec:18:c0:2b:4a:ed:24:
ab:33:9c:f4:40:7c:45:de:db:ed:b6:af:96:aa:d4:
f4:c6:51:fe:6c:6e:fa:90:e0:eb:b6:38:f9:63:1a:
6e:47:ab:3f:2c:e1:d2:4f:2b:b6:76:22:f7:50:f9:
c8:65:5e:90:d9:93:b0:f1:68:88:0c:94:ff:96:b0:
ab:4f:0e:cc:f8:a8:f3:75:63:aa:b3:55:48:06:98:
8d:66:91:d4:19:57:46:d5:31:ec:76:d4:97:65:71:
bd:d3:95:40:16:8d:fb:f0:21:a4:87:4f:9c:b6:39:
03:d4:8a:ab:d4:6e:e9:21:5e:df:14:a8:81:78:74:
60:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CA:D8:4F:13:45:C3:22:11:BB:CE:9D:AF:C8:95:5F:22:DB:21:B7
X509v3 Authority Key Identifier:
keyid:08:9F:CF:2A:B6:E6:DB:C1:63:4E:E5:91:FC:1B:74:A4:1D:E3:EA:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a273c-f053-41f8-8715-3c0b9254a6f8/1/CJ_PKrbm28FjTuWR_Bt0pB3j6l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:5f:b2:08:eb:e2:09:85:ed:c0:9e:c0:a5:39:59:f5:c8:6c:
30:b8:69:c1:1f:db:93:4c:dc:ba:6a:cd:63:4b:b5:fb:7a:67:
90:cf:78:8f:08:52:a4:56:7a:00:ac:24:9e:13:e9:82:41:ce:
38:52:56:6f:fd:31:4d:b7:80:e7:ae:5d:bc:fd:e7:d9:a6:71:
a2:29:18:ca:4b:cb:f9:72:3f:f6:b9:cc:fa:be:02:4d:00:a1:
1a:fb:41:4c:ba:8f:b4:cf:55:4c:80:03:79:6d:ef:78:25:c5:
7a:b0:64:e2:ac:d9:f8:42:55:16:bd:fb:87:f1:d5:18:09:fe:
4c:75:7b:d5:b7:64:59:4b:dd:ef:41:64:39:1a:04:c8:e1:80:
ef:4d:69:53:0b:f8:72:9a:44:a6:5c:2d:02:4d:28:f7:49:c1:
87:20:bc:01:fb:d2:a4:ec:38:21:79:6c:41:94:0f:96:f8:a5:
2b:bd:b4:d1:1c:2e:e9:4e:6c:90:b1:4d:ed:8a:e0:0b:a8:d1:
f2:f9:9e:e4:31:0e:1e:3b:a0:d0:a6:a9:f2:7e:9a:e7:47:91:
05:dc:71:30:16:4b:f6:03:a9:1d:bd:d1:5e:a1:aa:4a:83:c5:
68:11:4d:55:08:2d:20:a4:77:22:ff:de:a0:47:c7:ce:64:d3:
09:ee:81:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:22 2025 by rpki-client