Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
File: cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft (raw, json)
Hash identifier: TOvvrpcV5c5UYMANsIYClOh2fmW8qslTzaBy4+hLJ3Y=
Subject key identifier: 26:7F:20:D6:F1:17:F4:B3:B0:EB:6E:20:6E:D3:7E:0C:A3:12:0B:87
Authority key identifier: 72:38:FB:FE:A5:76:84:79:C8:63:00:90:6E:74:EB:25:4D:CB:5C:69
Certificate issuer: /CN=7238fbfea5768479c86300906e74eb254dcb5c69
Certificate serial: 019A7149C5413C61004122054BB1C726BFB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
Manifest number: 0BF4
Signing time: Tue 11 Nov 2025 05:00:51 +0000
Manifest this update: Tue 11 Nov 2025 05:00:51 +0000
Manifest next update: Wed 12 Nov 2025 05:00:51 +0000
Files and hashes: 1: cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl (hash: 6qtb9Yd1xyi/hjXdLTzCyjJYvaTS6KX+39mvV+37WVA=)
2: wdIm1qCd0ObJ1xyB5TPQkFaC0YA.roa (hash: oOyNKTQaCSCE6Wpivc9w4AbPACJjW6ReZk27bCRwMBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:c5:41:3c:61:00:41:22:05:4b:b1:c7:26:bf:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7238fbfea5768479c86300906e74eb254dcb5c69
Validity
Not Before: Nov 11 05:00:51 2025 GMT
Not After : Nov 12 05:00:51 2025 GMT
Subject: CN=267f20d6f117f4b3b0eb6e206ed37e0ca3120b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:67:ec:7b:36:36:8a:3f:b7:58:b1:ac:0a:2f:
68:82:2b:94:b7:dd:b5:8d:5d:ac:fe:3c:0b:55:75:
8d:e5:e3:fa:0a:97:35:83:3e:5e:59:5e:d2:ef:90:
5e:5d:4e:a8:dc:d9:37:1a:1c:c0:cc:5a:28:77:cf:
89:ba:5e:2b:3d:a0:dc:29:4f:3c:56:69:db:32:3f:
f2:fd:c9:04:6e:82:dc:13:f0:1a:c4:03:9c:2e:fa:
ee:59:dc:fa:86:43:6a:a8:03:a8:c7:33:a1:31:c1:
a2:b1:85:b6:59:72:ca:58:38:86:35:2c:44:3f:44:
42:76:bd:7b:16:9c:ff:b7:d1:9c:b4:30:60:96:46:
87:e8:74:02:9e:5d:4d:26:a4:26:a8:86:0b:02:4c:
b4:2d:36:0f:34:aa:2f:b8:84:ad:5c:57:44:eb:70:
53:a5:9a:e3:ac:b7:e0:47:33:e0:20:67:61:89:00:
56:7e:cf:72:13:7b:65:c6:6b:88:1a:6f:c4:16:f6:
6a:8f:b8:65:f3:9f:8a:4c:3e:5b:d6:87:ea:88:4b:
50:90:03:aa:ca:7d:ee:b8:3f:f2:af:8d:ca:91:9f:
73:3d:be:ba:09:b5:7d:3e:9f:ab:9e:5f:fb:50:b5:
a4:01:91:1a:ef:9d:5f:91:18:ea:4e:17:0e:1b:bc:
3c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:7F:20:D6:F1:17:F4:B3:B0:EB:6E:20:6E:D3:7E:0C:A3:12:0B:87
X509v3 Authority Key Identifier:
keyid:72:38:FB:FE:A5:76:84:79:C8:63:00:90:6E:74:EB:25:4D:CB:5C:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cjj7_qV2hHnIYwCQbnTrJU3LXGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/fb22ab-b546-4071-beb1-be10e8b4a00e/1/cjj7_qV2hHnIYwCQbnTrJU3LXGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:62:e0:29:87:dd:ea:ef:16:29:b9:05:c4:3a:0f:f8:f5:fa:
0d:91:50:ef:69:53:92:c2:3f:2b:b5:fd:b7:a5:39:5d:11:cd:
0e:e2:40:bf:e1:a7:e0:79:63:96:44:08:7a:52:bb:11:81:f1:
2d:e4:fd:48:42:e7:86:30:ed:84:c7:7b:49:81:51:3c:35:5e:
69:09:78:ab:4f:ba:72:c6:76:69:48:77:ec:1b:c9:2c:12:10:
b0:00:49:e4:22:3d:88:84:3b:2d:96:62:b3:d5:6a:d6:9f:cc:
f3:03:bc:14:45:e7:b6:45:4a:50:e8:b0:7f:9f:c0:fb:f7:5f:
72:5d:f6:86:f8:ff:09:9a:a4:20:a5:e8:ea:81:bc:f2:a6:99:
c7:d8:3f:5a:cd:62:f0:3f:b4:67:c3:48:e9:23:09:74:51:8b:
0e:7a:91:72:48:a0:5e:16:e7:fa:0c:c7:8f:66:f9:d2:9e:81:
d0:a4:73:c2:46:ee:44:f5:1a:74:9b:92:7f:e6:92:bf:31:c7:
f7:87:93:aa:2f:13:f8:7d:a2:eb:3c:57:23:48:c5:3a:10:35:
ec:b5:d1:b6:b6:5a:24:6d:4c:38:a7:58:18:d2:ab:50:9d:99:
af:3e:07:04:66:60:d4:cf:ae:c8:b6:cc:42:d8:f2:22:cb:4d:
c4:e0:67:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:59 2025 by rpki-client