Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
File: CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft (raw, json)
Hash identifier: nvhl6ces6ORSzFdboMEfwlieMe7v090MFQoBV3AoPek=
Subject key identifier: 4E:1B:04:DC:17:4D:03:9E:02:0D:74:67:99:41:F8:65:06:15:84:AE
Authority key identifier: 08:95:3A:5F:11:A8:27:9C:DF:87:98:96:0D:E1:E2:2E:B1:22:7D:95
Certificate issuer: /CN=08953a5f11a8279cdf8798960de1e22eb1227d95
Certificate serial: 01974B8DA9F627DC1B3799E450511CA3F9FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 18:01:04 +0000
Manifest this update: Sat 07 Jun 2025 18:01:04 +0000
Manifest next update: Sun 08 Jun 2025 18:01:04 +0000
Files and hashes: 1: CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl (hash: 5HNwNdOjii+VIfuAYtF926gqUB+PmNEKcLj4+qtmJLU=)
2: uqzFgf-8B62Y8mrkcQQAzXl65Xw.roa (hash: kCZVPY38TjsnXAkZkosAsOr4uT14uV5XbG2BhNU/FCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:a9:f6:27:dc:1b:37:99:e4:50:51:1c:a3:f9:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08953a5f11a8279cdf8798960de1e22eb1227d95
Validity
Not Before: Jun 7 18:01:04 2025 GMT
Not After : Jun 8 18:01:04 2025 GMT
Subject: CN=4e1b04dc174d039e020d74679941f865061584ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fd:1b:37:89:40:8c:1a:d6:46:49:fa:a5:d5:
7a:4a:44:d8:78:6e:c9:79:ad:a7:f0:1e:2c:80:c9:
1d:2f:16:64:41:58:f5:db:04:4d:d0:73:d3:13:98:
a1:6c:01:3d:c3:64:0d:26:ab:9a:e1:e1:63:7a:46:
52:6e:82:fe:28:79:da:36:0e:56:ef:ff:4b:30:cf:
d8:eb:b5:f5:f6:9a:f2:3f:af:df:c5:90:41:25:07:
56:01:17:27:51:dd:76:d4:94:b2:0a:fa:b9:b1:e0:
38:78:76:c6:9e:ff:8f:aa:16:a8:9a:fa:bb:84:8c:
f6:50:e4:91:45:ad:31:d9:bc:70:38:48:e1:ac:aa:
63:cb:10:80:33:f6:55:cb:2b:3c:53:70:f7:f2:21:
9a:c2:ca:78:ce:83:90:92:ca:b1:be:d4:d0:a0:13:
52:10:8f:4d:a5:24:fd:cb:58:9e:08:c3:da:1c:87:
3a:52:fe:61:f1:2d:ce:35:64:d0:36:0d:87:6c:9e:
6f:5a:09:b3:f8:c3:ba:45:8c:a3:ab:bf:c5:79:df:
e7:52:c6:16:c9:4a:95:96:4a:86:56:ca:da:bc:b2:
44:31:00:da:93:2b:7a:7c:88:31:fb:5d:11:03:7b:
84:06:a3:1c:3e:df:7b:bb:be:b6:9e:08:60:0d:db:
83:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:1B:04:DC:17:4D:03:9E:02:0D:74:67:99:41:F8:65:06:15:84:AE
X509v3 Authority Key Identifier:
keyid:08:95:3A:5F:11:A8:27:9C:DF:87:98:96:0D:E1:E2:2E:B1:22:7D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJU6XxGoJ5zfh5iWDeHiLrEifZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/cc94c8-72e4-4398-b37b-71169567e39c/1/CJU6XxGoJ5zfh5iWDeHiLrEifZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:dc:e8:ba:25:81:5f:96:b8:f7:6d:f4:1f:3a:e3:09:07:d5:
04:e9:fa:0a:bb:b7:5d:03:82:ef:c5:85:c8:a1:12:15:d7:5b:
3a:16:32:52:09:5d:c1:8a:b4:4a:30:be:c8:1f:2e:ac:dc:d1:
21:a0:5b:c8:d3:04:51:09:b6:34:16:4a:86:2a:8a:c9:9d:94:
b2:2b:c9:b2:7c:e4:0d:a0:04:de:4c:14:a8:94:00:4f:61:86:
e0:70:ca:1d:34:23:34:53:7b:85:23:b5:cd:c0:38:9c:54:ab:
e2:b5:0a:6e:f0:11:83:88:f8:7e:4b:f8:a6:34:a8:bc:b9:69:
4e:c8:df:e9:4c:b2:80:ae:34:19:40:c4:f6:48:02:fc:94:e0:
64:7a:09:e9:51:c7:f4:00:15:39:9b:ad:66:de:ad:a1:14:b7:
bc:e9:52:34:a5:16:09:40:7a:5e:d9:8e:56:f2:fc:c3:ed:d6:
dd:dd:9e:2c:11:52:43:81:7e:d1:71:d2:9b:df:1a:d1:62:20:
f5:d6:f4:ea:de:62:f4:e0:8d:bf:8a:a5:b5:ae:1f:50:e5:66:
22:ca:6f:37:20:d0:5c:69:b8:a5:d9:9c:a2:61:bf:bb:4b:ff:
3c:7e:88:8f:19:47:60:45:d8:47:ce:81:1a:27:7d:02:29:0a:
52:d8:98:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:12:33 2025 by rpki-client