Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
File: Cajtl6vouAFN0xwsJE-fKPX5eiE.mft (raw, json)
Hash identifier: OFYI2CSp9U5zpyRsMpuSGKuUGfXIrcnyihX3nZj1xiM=
Subject key identifier: 01:A7:62:3F:AF:98:B7:41:2E:93:DF:AF:DD:19:CE:12:47:F3:7A:81
Authority key identifier: 09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
Certificate issuer: /CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Certificate serial: 019747799C0FD4EFEC75494BCD05B26DC38A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
Manifest number: 0991
Signing time: Fri 06 Jun 2025 23:00:41 +0000
Manifest this update: Fri 06 Jun 2025 23:00:41 +0000
Manifest next update: Sat 07 Jun 2025 23:00:41 +0000
Files and hashes: 1: Cajtl6vouAFN0xwsJE-fKPX5eiE.crl (hash: RNNFqeHB4SKD6RCMy6agHuu4umMQ52fsDrq4WCHVuio=)
2: Khmhefi6kwckslHGfWvU_2oMALk.roa (hash: GCH2SF4oCWT5irU/tNDWYDBbGKrkiI0SguGZAk1/bwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 23:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:9c:0f:d4:ef:ec:75:49:4b:cd:05:b2:6d:c3:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a8ed97abe8b8014dd31c2c244f9f28f5f97a21
Validity
Not Before: Jun 6 23:00:41 2025 GMT
Not After : Jun 7 23:00:41 2025 GMT
Subject: CN=01a7623faf98b7412e93dfafdd19ce1247f37a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:94:ea:5a:a2:b9:15:5d:1d:1d:ce:55:01:7b:
29:bf:0f:1a:c2:45:04:fd:06:c5:d5:39:99:e8:16:
7b:16:45:8b:98:36:c3:3f:1b:7e:1f:51:52:ac:4b:
2d:c7:74:41:a6:1e:54:df:c2:67:e1:1b:d7:b6:5e:
6d:ea:f0:1d:e5:5b:85:e8:b7:49:02:0e:f8:a3:5d:
27:0a:07:ac:07:df:48:6b:7e:2b:cf:4b:05:6a:99:
5f:92:2c:95:d3:ff:60:c7:76:65:e5:cc:a3:25:16:
f9:c2:f7:5b:67:d7:58:27:e8:66:cd:36:60:8e:a1:
2d:14:b5:9c:a1:dc:3a:9b:a2:37:03:3d:91:3c:cf:
4f:4f:32:7c:6d:37:c4:1b:cb:e7:23:4a:d2:45:82:
48:68:04:72:29:44:93:84:e2:71:c6:55:49:ae:71:
41:43:aa:44:3d:09:7b:7d:63:8a:34:27:79:5d:ba:
52:9f:44:36:f3:97:34:89:9a:b4:50:e2:6e:56:71:
20:dd:e9:b0:5a:40:f7:b9:c2:18:6a:47:27:e4:88:
b0:0c:8b:92:68:6c:25:bc:11:9b:3f:3b:31:08:2c:
6e:8a:ed:aa:93:0d:40:8b:7a:9f:b4:d1:75:af:bf:
3a:e7:57:5e:e4:fd:17:79:bb:b0:ad:ff:9f:dc:fd:
71:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A7:62:3F:AF:98:B7:41:2E:93:DF:AF:DD:19:CE:12:47:F3:7A:81
X509v3 Authority Key Identifier:
keyid:09:A8:ED:97:AB:E8:B8:01:4D:D3:1C:2C:24:4F:9F:28:F5:F9:7A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cajtl6vouAFN0xwsJE-fKPX5eiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9a7dda-0f68-4088-a075-e7fdf7741a65/1/Cajtl6vouAFN0xwsJE-fKPX5eiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a3:7c:4a:32:7a:21:f1:b6:ab:de:17:78:0b:a6:b0:0b:89:
5b:8a:28:59:54:fc:de:93:81:74:72:2c:1a:74:fe:40:e6:ef:
49:65:98:6f:0b:41:ed:93:51:87:97:f8:bd:aa:b0:a6:07:86:
11:84:3f:75:96:44:87:51:68:fd:e2:ba:73:ea:7f:f1:81:cc:
82:a3:a9:d8:e4:68:5f:d1:30:cc:49:94:b7:2e:01:ad:ea:42:
6a:b6:2d:3a:b6:c6:d9:b0:b1:4a:dc:a2:7e:0c:e0:10:23:56:
55:d7:66:4e:8f:17:63:95:27:9d:a1:19:26:f6:bf:ab:82:dd:
19:6c:ae:a6:01:98:b4:97:07:f5:e4:1e:1f:8a:0d:d3:d7:82:
08:5b:2b:ca:22:60:0c:54:e6:1b:57:e3:49:97:4a:b1:37:c3:
a1:61:8c:72:30:ce:c0:eb:cc:c2:22:27:c0:46:2d:88:03:95:
69:2f:7d:d6:c6:db:09:d3:02:68:f6:1b:2f:86:e0:e3:ed:08:
28:5a:ef:cf:cd:de:28:aa:f2:eb:77:6f:2c:6d:ca:44:c7:2a:
d4:23:f2:42:5f:6c:42:53:6f:b2:0f:7f:ae:99:d9:a0:b5:92:
95:b0:26:28:58:2e:ed:35:4c:b7:ac:8d:38:bf:f6:ee:e6:e8:
8e:ce:ec:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:24:49 2025 by rpki-client