Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
File: CMuJoREU774OHiVQ7Nozb9eS7F8.mft (raw, json)
Hash identifier: aTYB0zjphaLX2f25kdBbDEsqB6/SGRFjw1lZ66T7iWM=
Subject key identifier: 58:6C:77:D8:45:5B:3D:49:4B:3F:C0:60:0A:02:AE:D9:80:28:6E:74
Authority key identifier: 08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F
Certificate issuer: /CN=08cb89a11114efbe0e1e2550ecda336fd792ec5f
Certificate serial: 01991CF8129EE6BCDF1A7CAD406B1E812C2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
Manifest number: 1301
Signing time: Sat 06 Sep 2025 03:00:43 +0000
Manifest this update: Sat 06 Sep 2025 03:00:43 +0000
Manifest next update: Sun 07 Sep 2025 03:00:43 +0000
Files and hashes: 1: CMuJoREU774OHiVQ7Nozb9eS7F8.crl (hash: tNpQSWDC+6GZKpWz8Y1xTevgKx2xG0DvZAbb7i9vYg8=)
2: QEhnuw8ud1j9n62qQluLx43WHjQ.roa (hash: 1M0hr4yzSJjpoSUF2lAkNTs362XypkDSGbasmLEH2gU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 19:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1c:f8:12:9e:e6:bc:df:1a:7c:ad:40:6b:1e:81:2c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08cb89a11114efbe0e1e2550ecda336fd792ec5f
Validity
Not Before: Sep 6 03:00:43 2025 GMT
Not After : Sep 7 03:00:43 2025 GMT
Subject: CN=586c77d8455b3d494b3fc0600a02aed980286e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d0:1d:6b:ab:13:c0:66:07:8b:4e:c0:37:4f:
9f:3f:da:6f:6e:38:6e:98:a3:f0:ac:8a:6b:64:17:
23:29:dd:46:4b:3c:8a:34:8a:00:6c:d4:79:b4:b6:
bd:e4:3a:df:b4:54:ce:72:f6:cb:77:31:ea:bb:20:
7a:85:4f:57:c3:75:22:a4:84:5b:92:35:62:cd:46:
8e:9b:22:39:65:b7:53:9f:d0:c2:9e:39:d2:45:c5:
17:30:0e:b5:ff:09:36:ce:be:bb:ee:22:cf:dc:fc:
44:81:1a:9a:02:c0:ea:7b:a9:57:2b:a0:6d:12:e3:
60:88:4c:4a:d5:d9:0f:8a:6f:5b:f9:ea:3a:51:cf:
be:6a:51:3d:10:67:ba:fd:11:a2:f6:c1:18:23:a5:
ff:23:84:d8:64:d4:7d:97:f0:f0:b5:1e:bb:54:00:
ff:89:7d:39:9a:ab:ce:99:34:ae:dd:49:e1:df:ad:
33:84:38:05:89:eb:1b:96:d1:49:c8:05:57:17:52:
c4:8a:b5:7c:d8:0e:24:39:2d:67:60:b4:85:86:f3:
c4:41:75:04:e0:cf:39:43:58:41:2c:71:8f:73:37:
0c:2a:38:4b:09:2e:28:b9:68:01:2d:59:da:b1:1d:
13:92:7d:8a:74:99:14:be:ef:e0:0f:bd:86:aa:4c:
ab:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6C:77:D8:45:5B:3D:49:4B:3F:C0:60:0A:02:AE:D9:80:28:6E:74
X509v3 Authority Key Identifier:
keyid:08:CB:89:A1:11:14:EF:BE:0E:1E:25:50:EC:DA:33:6F:D7:92:EC:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CMuJoREU774OHiVQ7Nozb9eS7F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/be10af-d67c-47e9-938a-4af1fa36cdb9/1/CMuJoREU774OHiVQ7Nozb9eS7F8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:72:c3:79:f1:85:9a:9b:38:f6:8a:7b:1b:fd:8d:97:85:01:
07:c6:1e:d1:04:28:ac:15:10:f0:9b:fd:65:24:fe:3f:c9:53:
32:6a:ff:66:24:49:72:f7:21:ec:5a:ff:ee:51:32:c1:6e:1c:
cf:62:4d:0a:ad:39:eb:99:32:1a:2a:8f:30:22:70:fb:b8:f4:
4b:b6:23:b9:56:a2:b6:4d:e9:e7:22:64:07:6d:cf:a3:23:99:
b0:d5:7a:a8:c2:bc:08:8a:87:90:00:2d:7a:7e:2b:70:d3:57:
17:62:87:5c:a5:07:9b:fd:ee:da:1b:65:b4:33:78:31:6c:07:
e5:d2:c3:2d:af:29:85:a5:b4:bc:9b:6c:3d:04:fd:ac:89:83:
17:08:36:00:ac:6c:c8:db:30:d4:74:8f:bf:eb:9e:0f:ae:cc:
82:db:eb:15:7d:c5:99:17:82:49:8c:d7:93:04:b6:d3:81:90:
09:d4:95:df:16:4c:c7:18:f6:8a:b1:6a:ad:12:30:7d:7e:f8:
91:3a:d3:1d:1a:5b:d2:70:0c:23:96:17:2c:16:9d:85:71:eb:
68:21:8d:c7:32:27:2e:26:4c:a0:9b:35:df:0e:2b:70:0c:0f:
5f:47:d6:12:5f:40:9a:2d:05:b4:24:24:ea:82:53:46:c2:a7:
bc:13:e2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 05:43:10 2025 by rpki-client