Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
File: CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft (raw, json)
Hash identifier: +l3qDXmjlGpWVIRB3Ayy/hAsQCBe87kHAGPR418meYE=
Subject key identifier: 7A:DB:13:95:86:D1:55:42:A9:33:BE:D6:7D:2E:0D:1B:8E:87:74:65
Authority key identifier: 08:95:3A:5F:11:A8:27:9C:DF:87:98:96:0D:E1:E2:2E:B1:22:7D:95
Certificate issuer: /CN=08953a5f11a8279cdf8798960de1e22eb1227d95
Certificate serial: 0196526D6C8D994D0485DC1FAE767BFC28F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
Manifest number: 14FF
Signing time: Sun 20 Apr 2025 09:00:24 +0000
Manifest this update: Sun 20 Apr 2025 09:00:24 +0000
Manifest next update: Mon 21 Apr 2025 09:00:24 +0000
Files and hashes: 1: CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl (hash: 1aV9JnDUglY7rtdIucTpFagDV5RxZaMT9hYtriJsHZI=)
2: uqzFgf-8B62Y8mrkcQQAzXl65Xw.roa (hash: kCZVPY38TjsnXAkZkosAsOr4uT14uV5XbG2BhNU/FCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 09:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:6c:8d:99:4d:04:85:dc:1f:ae:76:7b:fc:28:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08953a5f11a8279cdf8798960de1e22eb1227d95
Validity
Not Before: Apr 20 09:00:24 2025 GMT
Not After : Apr 21 09:00:24 2025 GMT
Subject: CN=7adb139586d15542a933bed67d2e0d1b8e877465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3c:5a:8e:01:bf:2f:b6:5e:af:71:cd:80:41:
4d:c3:6b:00:c8:48:ce:c7:61:e7:a2:74:f1:93:23:
85:20:d1:b9:b3:c6:8e:5d:58:ed:f6:b9:23:0d:4b:
4c:5d:7f:ab:10:3f:d3:85:f0:57:a4:e1:cd:6b:24:
79:4f:ac:3d:82:cd:b2:e9:62:9c:65:86:f0:01:21:
0c:3f:77:f2:f2:c0:70:b3:85:f1:ef:31:db:82:47:
5a:10:7e:06:ac:a6:9c:e5:50:9e:04:9f:00:8f:45:
e0:d9:4c:7d:68:8a:33:13:96:ae:60:22:2a:16:ba:
0a:f1:c0:44:82:f5:f2:02:ed:29:4a:4b:35:a7:e0:
ce:57:fd:5c:ce:b7:d7:45:6d:33:d5:00:46:da:27:
21:49:54:71:e4:ec:29:29:80:10:41:ec:77:ef:95:
e9:5c:10:bd:66:f7:9e:b7:e1:cf:1b:44:3d:30:95:
ab:26:21:06:8a:4b:df:e7:5a:fa:4a:1e:34:82:d4:
95:f0:76:bb:02:1d:f5:58:b1:76:df:02:e2:3b:56:
55:af:f8:a0:27:2e:e4:03:ad:7e:09:a7:dc:83:81:
4b:6a:e0:cb:39:61:c3:d0:46:29:fe:9c:af:c4:7a:
c9:a5:99:3c:95:70:4e:6c:21:c1:40:2c:50:9b:2f:
44:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DB:13:95:86:D1:55:42:A9:33:BE:D6:7D:2E:0D:1B:8E:87:74:65
X509v3 Authority Key Identifier:
keyid:08:95:3A:5F:11:A8:27:9C:DF:87:98:96:0D:E1:E2:2E:B1:22:7D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:24:96:fd:4c:5a:bf:a2:fc:6a:80:62:59:1a:f0:e6:dc:f6:
53:f7:d0:36:88:9c:98:37:15:90:8a:41:fb:78:34:40:54:5b:
32:7a:28:1b:c5:c5:97:2a:c2:5b:76:10:1c:72:de:30:71:cf:
ad:33:fa:d7:6e:5b:46:ce:15:a0:0f:c1:85:94:65:1e:5b:45:
be:7e:9d:b6:cc:29:bb:33:7a:b1:40:d5:36:45:83:92:da:63:
3f:39:9e:d2:31:bd:fe:93:31:fd:11:1c:3a:b2:2d:00:20:8f:
a3:0b:cd:94:49:70:dc:52:4c:b0:c8:94:c8:7b:97:63:3d:b2:
53:43:30:2d:27:bc:8a:df:aa:7a:0e:f0:65:95:0b:11:37:bc:
4e:57:65:e2:f3:4b:7c:3b:34:27:78:5a:73:9f:87:29:2a:49:
76:63:35:27:49:72:42:e6:e2:4e:ba:c8:65:46:e9:ec:41:5d:
c1:4f:7d:94:5f:ba:e2:52:55:01:dd:9f:63:7f:11:13:a3:f6:
0e:4e:a9:20:bb:cc:ac:b8:a1:04:03:97:7a:a7:8b:4f:a1:78:
76:bf:b9:bd:d0:30:7b:01:b8:03:54:5b:ec:2b:87:7c:c1:b5:
af:d6:da:10:95:6b:68:80:68:cb:af:54:66:28:93:c8:2b:9a:
00:79:63:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZSbWyNmU0EhdwfrnZ7/Cj1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4OTUzYTVmMTFhODI3OWNkZjg3OTg5NjBkZTFlMjJlYjEy
MjdkOTUwHhcNMjUwNDIwMDkwMDI0WhcNMjUwNDIxMDkwMDI0WjAzMTEwLwYDVQQD
Eyg3YWRiMTM5NTg2ZDE1NTQyYTkzM2JlZDY3ZDJlMGQxYjhlODc3NDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjxajgG/L7Zer3HNgEFNw2sAyEjO
x2HnonTxkyOFING5s8aOXVjt9rkjDUtMXX+rED/ThfBXpOHNayR5T6w9gs2y6WKc
ZYbwASEMP3fy8sBws4Xx7zHbgkdaEH4GrKac5VCeBJ8Aj0Xg2Ux9aIozE5auYCIq
FroK8cBEgvXyAu0pSks1p+DOV/1czrfXRW0z1QBG2ichSVRx5OwpKYAQQex375Xp
XBC9Zveet+HPG0Q9MJWrJiEGikvf51r6Sh40gtSV8Ha7Ah31WLF23wLiO1ZVr/ig
Jy7kA61+Cafcg4FLauDLOWHD0EYp/pyvxHrJpZk8lXBObCHBQCxQmy9E6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHrbE5WG0VVCqTO+1n0uDRuOh3RlMB8GA1UdIwQY
MBaAFAiVOl8RqCec34eYlg3h4i6xIn2VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0pVNlh4R29KNXpmaDVpV0RlSGlMckVpZlpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9jYzk0YzgtNzJlNC00Mzk4LWIzN2It
NzExNjk1NjdlMzljLzEvQ0pVNlh4R29KNXpmaDVpV0RlSGlMckVpZlpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9jYzk0YzgtNzJlNC00Mzk4LWIzN2ItNzExNjk1NjdlMzlj
LzEvQ0pVNlh4R29KNXpmaDVpV0RlSGlMckVpZlpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAACSW/Uxa
v6L8aoBiWRrw5tz2U/fQNoicmDcVkIpB+3g0QFRbMnooG8XFlyrCW3YQHHLeMHHP
rTP6125bRs4VoA/BhZRlHltFvn6dtswpuzN6sUDVNkWDktpjPzme0jG9/pMx/REc
OrItACCPowvNlElw3FJMsMiUyHuXYz2yU0MwLSe8it+qeg7wZZULETe8Tldl4vNL
fDs0J3hac5+HKSpJdmM1J0lyQubiTrrIZUbp7EFdwU99lF+64lJVAd2fY38RE6P2
Dk6pILvMrLihBAOXeqeLT6F4dr+5vdAwewG4A1Rb7CuHfMG1r9baEJVraIBoy69U
ZiiTyCuaAHlj2g==
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:56:57 2025 by rpki-client