Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
File: CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft (raw, json)
Hash identifier: DI0cJwJHDBt4gjWDF7D3NxvgzIBg14ve9IN1sdkv8n0=
Subject key identifier: 83:62:20:66:9E:CB:28:61:20:AA:1D:EC:44:21:E1:42:E2:51:5C:B0
Authority key identifier: 08:9C:8C:7F:33:40:53:C8:A9:0A:34:08:00:9E:F3:D3:B7:A8:2E:3D
Certificate issuer: /CN=089c8c7f334053c8a90a3408009ef3d3b7a82e3d
Certificate serial: 01984407E3C5E4204A98AFBA34E4691DC90D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
Manifest number: 095D
Signing time: Sat 26 Jul 2025 00:00:24 +0000
Manifest this update: Sat 26 Jul 2025 00:00:24 +0000
Manifest next update: Sun 27 Jul 2025 00:00:24 +0000
Files and hashes: 1: 4bMtkdss6ipZLuaULzydMUpyiaQ.roa (hash: ftsUwXeTU/zCajSXbJ3x6QJLG4thVRnSbA76L16HZhs=)
2: CJyMfzNAU8ipCjQIAJ7z07eoLj0.crl (hash: aN4mqCKZFTo8MTf57WiZC43n301QbWnYOlATbmn8E1w=)
3: k6IT53wky2OyxFkQBPrbNFj6TNQ.roa (hash: brdxpAD59FYZoJp1BAGf2U6f2BoN13pBWQRPGF1mMCg=)
4: wTQDqjXgoUhzhSugRLMIDWXZVNA.roa (hash: sP07Xq5SBcl1K6LagQUnTqXSUPfJF0A6TBK/LGuxJ5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 00:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:07:e3:c5:e4:20:4a:98:af:ba:34:e4:69:1d:c9:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089c8c7f334053c8a90a3408009ef3d3b7a82e3d
Validity
Not Before: Jul 26 00:00:24 2025 GMT
Not After : Jul 27 00:00:24 2025 GMT
Subject: CN=836220669ecb286120aa1dec4421e142e2515cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:d0:86:7e:54:80:5e:cb:67:ae:8e:c5:15:2f:
f9:e9:a8:3c:f6:4c:b9:ca:b8:8c:af:bd:aa:b6:4c:
c2:7b:45:f0:32:3d:73:0b:f6:3d:7f:2b:67:b4:2a:
4c:53:f0:4b:b1:f4:e1:c1:99:0c:48:d8:a7:a2:79:
27:9a:f8:48:fe:61:8c:56:3d:49:b6:02:0e:63:e7:
f7:8c:4c:4c:7d:e3:bb:52:9d:59:38:ea:82:88:5d:
f0:b7:dc:18:54:09:e2:42:44:0f:74:f1:98:76:26:
58:2e:43:69:c7:b1:bd:3a:c5:9c:aa:c8:0b:bc:37:
78:b6:19:4a:ea:6c:5c:6c:ef:b8:c4:0b:a2:d4:55:
aa:51:8b:65:40:a6:a0:a6:07:7a:19:ec:7e:3a:f2:
4a:e5:27:8a:f2:41:5d:f2:90:4b:83:65:fb:fc:8f:
db:ef:16:f8:43:52:f3:a1:06:17:5f:4d:4d:cf:ea:
68:99:a7:58:58:df:8c:91:12:94:9a:58:dd:08:85:
21:2f:a6:34:50:27:18:4e:46:df:0f:98:a1:7f:36:
3b:00:0c:5c:b0:1e:24:16:1b:32:bb:c5:37:05:7d:
2f:be:bb:1b:f4:87:15:2a:44:9d:33:ff:18:de:8d:
ef:6c:3b:ea:d9:8b:e9:56:10:f6:a7:8e:1d:e1:1a:
dc:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:62:20:66:9E:CB:28:61:20:AA:1D:EC:44:21:E1:42:E2:51:5C:B0
X509v3 Authority Key Identifier:
keyid:08:9C:8C:7F:33:40:53:C8:A9:0A:34:08:00:9E:F3:D3:B7:A8:2E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJyMfzNAU8ipCjQIAJ7z07eoLj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f4e03e-27b2-494b-8c0f-6f7009bee915/1/CJyMfzNAU8ipCjQIAJ7z07eoLj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:57:f0:47:52:f7:91:44:c2:6a:e1:95:2d:fe:dc:7b:e1:ca:
cc:1d:70:e2:13:31:b1:1c:8a:08:b6:00:40:15:ad:97:bb:f2:
ca:ae:f5:89:43:6d:36:f1:1a:ef:10:10:3c:94:c5:f3:5e:07:
dd:f8:6e:a4:c9:62:65:10:48:a2:6a:ae:49:35:eb:80:2d:08:
c7:12:81:21:5f:cb:c6:13:3b:10:a6:11:80:8a:4c:65:02:35:
d0:9b:da:62:fb:17:f3:24:04:a5:4d:d8:4f:88:9e:7e:e8:00:
38:b3:97:a7:c1:5d:bf:57:03:48:23:37:41:26:27:e0:23:db:
13:9a:1a:ff:98:08:8c:0e:92:ac:f0:56:14:e2:f5:86:fe:d6:
75:44:f2:f1:ac:3f:16:c9:1a:cd:4b:8c:96:fe:92:4a:93:4e:
e2:ed:77:73:2e:03:35:e6:ee:c0:cb:ed:91:51:33:13:3d:e8:
54:7c:5d:db:47:6c:18:ac:b8:9c:f5:43:5c:d4:fe:d1:03:1f:
79:07:cc:ad:d4:eb:a4:5a:82:27:ce:88:59:7a:c1:23:33:f4:
57:1b:c4:c9:d4:43:dd:ac:49:45:c7:db:20:85:35:41:08:9d:
69:be:64:2d:3d:41:36:fc:31:44:be:e8:8c:97:6a:c7:66:d0:
50:15:b9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:25:01 2025 by rpki-client