Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
File: CNJ4u-X8LfcyAyzbI1li26vg9kE.mft (raw, json)
Hash identifier: 2qXagnL2MjSOSHJ3rF2CgRVr1HMKnjXZk+wfbWORIqk=
Subject key identifier: C9:97:81:98:0F:AA:77:1B:70:22:34:97:96:73:51:FA:D0:3C:6C:4A
Authority key identifier: 08:D2:78:BB:E5:FC:2D:F7:32:03:2C:DB:23:59:62:DB:AB:E0:F6:41
Certificate issuer: /CN=08d278bbe5fc2df732032cdb235962dbabe0f641
Certificate serial: 0197496872FD1E7CE738A4F191B8CD0AE950
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 08:01:11 +0000
Manifest this update: Sat 07 Jun 2025 08:01:11 +0000
Manifest next update: Sun 08 Jun 2025 08:01:11 +0000
Files and hashes: 1: CNJ4u-X8LfcyAyzbI1li26vg9kE.crl (hash: 6gSg9smbcYAazrO0OUnm+X/FOCcsuacZKnastL6+xl8=)
2: W5VtAzPYHnJg8m79kjyqgqKE878.roa (hash: Pv7+GoLFJlWTHtdGXau6mFaCy435N0A5ynkKLESZfdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:72:fd:1e:7c:e7:38:a4:f1:91:b8:cd:0a:e9:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d278bbe5fc2df732032cdb235962dbabe0f641
Validity
Not Before: Jun 7 08:01:11 2025 GMT
Not After : Jun 8 08:01:11 2025 GMT
Subject: CN=c99781980faa771b70223497967351fad03c6c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4f:a8:83:e2:88:61:b4:cb:aa:b8:c3:18:bd:
ae:13:11:ee:3c:0f:d3:bc:b9:7c:fb:e5:84:b2:62:
da:ae:bb:b9:03:a4:76:cf:8c:a8:b7:c0:14:5b:94:
d0:16:a0:a6:5d:10:8a:a8:10:4d:9b:3e:e4:47:e2:
66:43:b1:3f:22:bc:b2:70:d5:fa:5b:32:97:a1:b3:
e0:24:a2:03:82:59:44:55:30:f0:a9:88:98:bc:6b:
b1:7a:cb:28:d0:44:c2:09:45:5c:9b:2e:21:81:81:
e9:7e:88:ec:92:d6:8a:a4:a4:14:14:4b:d7:f3:88:
b4:88:eb:b1:36:18:ec:ed:93:44:37:33:e0:5d:95:
97:23:df:0a:0f:4f:33:2d:d9:d4:97:bc:fd:13:39:
50:9e:7c:4e:6b:a5:a9:89:47:0b:ba:aa:75:82:ed:
1d:ef:fc:cb:6e:eb:97:0a:b0:10:78:23:cc:88:40:
df:e5:59:0a:2b:49:3d:44:53:09:78:bf:8b:33:da:
66:a5:fc:a1:70:08:24:8f:77:41:f6:7d:0f:6d:5a:
0f:08:02:15:23:69:05:5b:c2:ab:b0:02:9f:e1:8c:
78:bd:43:3d:36:f6:21:14:ae:ca:c3:17:c8:62:8a:
06:bd:5a:ce:a1:87:07:a3:2d:9a:2f:87:12:e2:2b:
5b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:97:81:98:0F:AA:77:1B:70:22:34:97:96:73:51:FA:D0:3C:6C:4A
X509v3 Authority Key Identifier:
keyid:08:D2:78:BB:E5:FC:2D:F7:32:03:2C:DB:23:59:62:DB:AB:E0:F6:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNJ4u-X8LfcyAyzbI1li26vg9kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/703fc5-406c-4121-ab9e-ef46ddeeabf4/1/CNJ4u-X8LfcyAyzbI1li26vg9kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:cd:25:a2:79:86:69:cf:a6:11:d4:f9:50:07:80:98:5c:66:
68:64:ab:19:0d:41:74:13:29:cc:0e:59:dc:4c:1f:42:42:80:
38:e5:68:ac:34:5c:f0:38:ce:0a:43:c5:9b:19:92:2c:50:ce:
4c:fc:7b:8c:61:8c:3f:6e:68:49:0a:66:bb:0c:83:43:34:3b:
32:2d:03:dd:bc:7a:40:8c:ef:03:cb:a7:e7:ce:a0:82:6d:44:
60:3c:97:12:dc:40:b9:8b:7c:c4:b1:0f:d5:85:d1:48:54:82:
c2:b8:32:93:34:42:6a:29:e4:1c:9d:2b:c5:88:a9:3e:84:f1:
c4:c0:78:ed:df:39:68:26:1f:3c:3c:21:00:97:99:86:b3:8f:
5a:66:12:02:ff:e6:7c:e6:fa:14:02:61:0b:75:fd:63:37:5c:
50:22:05:1a:e8:fd:88:24:de:b3:57:11:e9:bc:3d:4d:bf:3d:
5f:d2:92:9f:2d:b9:62:6f:97:94:9e:6c:c7:86:70:fc:25:be:
cc:2a:c3:21:bf:4a:5e:50:a9:8a:05:d2:fc:44:92:ad:40:b5:
8d:3f:d7:1a:e4:d1:22:90:85:5c:1f:66:4e:91:29:b7:9b:76:
7e:d3:58:47:d0:76:70:0f:b5:a9:9b:ca:8c:f3:cc:e7:8c:e1:
6a:11:d9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:58:46 2025 by rpki-client