Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
File: CSU4hqAlCgTsab4Au_hDPC8BS3w.mft (raw, json)
Hash identifier: KBxjjjQ+HgJFEGjxcI35TybHpwWQzlm74Y+znO13J2w=
Subject key identifier: 56:48:99:D7:F4:6F:B4:98:D1:7D:88:B9:39:D3:1B:4C:B1:F4:07:C9
Authority key identifier: 09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
Certificate issuer: /CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Certificate serial: 0197B6A1E79BE6562721908F8EA1E779F219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
Manifest number: 15BB
Signing time: Sat 28 Jun 2025 13:02:33 +0000
Manifest this update: Sat 28 Jun 2025 13:02:33 +0000
Manifest next update: Sun 29 Jun 2025 13:02:33 +0000
Files and hashes: 1: CSU4hqAlCgTsab4Au_hDPC8BS3w.crl (hash: zjTDwKv+yKwcbiJenNZWmsWi1szJU1j0oHpuBUfs6C0=)
2: VEEuJRf1IaY-i7njwh4GTFyz4KQ.roa (hash: K73j5BLwJXJOZ/R7FX/mXQkCi9Da4esGEBz7JkbDtTI=)
3: _MIIbyQenzH6F7OwMqPXOOY9ctM.roa (hash: eIV7bKM/aiDgvacDkUhEBLMcFg6gGKWdnq3Gtl3ghX0=)
4: xWk3TJ8xAGPDUZQKY3kASUL6dzM.roa (hash: /z7ZjPJ/gv/pCsZNSb1u2GohazjLks0+0ejnDw3SaX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:e7:9b:e6:56:27:21:90:8f:8e:a1:e7:79:f2:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Validity
Not Before: Jun 28 13:02:33 2025 GMT
Not After : Jun 29 13:02:33 2025 GMT
Subject: CN=564899d7f46fb498d17d88b939d31b4cb1f407c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e9:d0:06:48:82:d6:65:13:86:28:cd:19:90:
41:bc:2c:3f:c7:77:52:a3:8c:ab:fb:84:87:68:0c:
13:e3:15:4d:cc:fc:21:79:d0:a5:3e:7f:51:4e:c3:
ee:d5:e2:62:c4:85:24:91:a3:7e:8f:27:f7:d9:9e:
89:be:58:5e:38:ed:3a:c9:da:40:7e:f7:af:ee:78:
19:ef:04:2c:e2:4a:12:11:04:f1:e8:f8:cd:69:3d:
75:1b:38:42:d5:24:17:b1:2f:f5:85:74:3d:8a:e4:
13:be:9d:61:cd:5e:c6:e0:16:27:7f:e6:95:07:64:
04:4e:09:0c:08:d3:ea:e1:50:94:90:24:12:20:f9:
a3:97:59:65:75:36:c9:7f:77:1c:3e:dd:44:0f:1f:
06:f4:09:81:9d:41:b1:f4:5d:1a:ef:9e:98:92:9f:
a6:7d:7c:13:d0:a1:10:e2:a4:0e:f0:71:10:5c:64:
07:32:b1:e4:95:8c:e7:61:2f:52:6b:5e:f9:94:7b:
c0:6f:f3:92:f9:47:e3:cc:65:4a:64:94:54:b7:22:
06:b1:cd:0a:a0:67:f9:a4:04:fd:f3:10:9b:a5:13:
cf:44:e0:10:95:91:79:5d:54:95:bb:dc:be:f5:3c:
52:79:45:17:e8:b9:83:ec:c1:8c:7d:5c:44:de:f9:
ba:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:48:99:D7:F4:6F:B4:98:D1:7D:88:B9:39:D3:1B:4C:B1:F4:07:C9
X509v3 Authority Key Identifier:
keyid:09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d3:1d:66:6b:0b:ef:6a:73:ab:0e:22:ef:cc:bf:b3:15:10:
16:34:03:54:41:9a:9e:9c:b2:2a:c6:83:50:bd:65:96:f0:e6:
33:91:9d:44:43:52:c9:44:f1:54:4a:05:9d:84:f0:c2:27:3f:
24:b9:21:f2:25:4d:a7:80:3c:52:da:d8:8e:14:f2:18:ab:d2:
2b:b8:f0:01:0c:9e:25:9b:94:b7:4d:57:17:4d:e4:01:aa:7c:
f5:f3:89:ad:f4:5c:2c:e9:00:7f:96:ec:a3:a2:27:69:ce:5d:
a4:98:28:d9:e0:37:92:7a:ef:cd:9e:1c:64:46:23:f8:9c:a7:
5e:c3:78:68:65:59:1e:24:6a:41:c4:fd:d4:1c:cd:74:3a:ba:
f8:a2:57:0c:23:c1:d0:d8:98:2a:98:0e:59:2e:01:f4:20:4f:
2f:76:5c:ee:f6:0b:b0:41:05:f3:ce:e8:2b:66:c4:87:86:87:
3b:34:6c:0e:60:b6:10:ec:f4:da:7e:c3:e2:8a:31:51:16:11:
1b:d4:34:7f:a3:e4:7b:61:f3:c3:8f:5f:0f:9f:9c:1d:f6:11:
a5:8e:a3:ac:b8:e9:dc:34:43:99:33:12:99:88:8b:98:4b:09:
6e:ab:bc:dd:8d:71:2e:68:0c:47:63:74:5c:a7:ef:08:a9:74:
85:a5:27:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oeeb5lYnIZCPjqHnefIZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MjUzODg2YTAyNTBhMDRlYzY5YmUwMGJiZjg0MzNjMmYw
MTRiN2MwHhcNMjUwNjI4MTMwMjMzWhcNMjUwNjI5MTMwMjMzWjAzMTEwLwYDVQQD
Eyg1NjQ4OTlkN2Y0NmZiNDk4ZDE3ZDg4YjkzOWQzMWI0Y2IxZjQwN2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+nQBkiC1mUThijNGZBBvCw/x3dS
o4yr+4SHaAwT4xVNzPwhedClPn9RTsPu1eJixIUkkaN+jyf32Z6JvlheOO06ydpA
fvev7ngZ7wQs4koSEQTx6PjNaT11GzhC1SQXsS/1hXQ9iuQTvp1hzV7G4BYnf+aV
B2QETgkMCNPq4VCUkCQSIPmjl1lldTbJf3ccPt1EDx8G9AmBnUGx9F0a756Ykp+m
fXwT0KEQ4qQO8HEQXGQHMrHklYznYS9Sa175lHvAb/OS+UfjzGVKZJRUtyIGsc0K
oGf5pAT98xCbpRPPROAQlZF5XVSVu9y+9TxSeUUX6LmD7MGMfVxE3vm6gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFZImdf0b7SY0X2IuTnTG0yx9AfJMB8GA1UdIwQY
MBaAFAklOIagJQoE7Gm+ALv4QzwvAUt8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1NVNGhxQWxDZ1RzYWI0QXVfaERQQzhCUzN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8zNmY4M2UtNmJlNi00MmM1LTgzODAt
MTE0YWQ0MWNmMzMxLzEvQ1NVNGhxQWxDZ1RzYWI0QXVfaERQQzhCUzN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8zNmY4M2UtNmJlNi00MmM1LTgzODAtMTE0YWQ0MWNmMzMx
LzEvQ1NVNGhxQWxDZ1RzYWI0QXVfaERQQzhCUzN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADdMdZmsL
72pzqw4i78y/sxUQFjQDVEGanpyyKsaDUL1llvDmM5GdRENSyUTxVEoFnYTwwic/
JLkh8iVNp4A8UtrYjhTyGKvSK7jwAQyeJZuUt01XF03kAap89fOJrfRcLOkAf5bs
o6Inac5dpJgo2eA3knrvzZ4cZEYj+JynXsN4aGVZHiRqQcT91BzNdDq6+KJXDCPB
0NiYKpgOWS4B9CBPL3Zc7vYLsEEF887oK2bEh4aHOzRsDmC2EOz02n7D4ooxURYR
G9Q0f6Pke2Hzw49fD5+cHfYRpY6jrLjp3DRDmTMSmYiLmEsJbqu83Y1xLmgMR2N0
XKfvCKl0haUnnw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 18:59:42 2025 by rpki-client