Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
File: CSU4hqAlCgTsab4Au_hDPC8BS3w.mft (raw, json)
Hash identifier: kaADF6EMt4NdmAOZkkQGf1CFEuDzTjwTKNtm2xWVhtc=
Subject key identifier: 3C:6D:F0:96:62:9B:89:16:D5:E8:CA:F8:26:E6:65:5F:BB:4A:C1:A1
Authority key identifier: 09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
Certificate issuer: /CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Certificate serial: 0198D65F7765B1B111486B717ADA6E99E5D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 10:00:37 +0000
Manifest this update: Sat 23 Aug 2025 10:00:37 +0000
Manifest next update: Sun 24 Aug 2025 10:00:37 +0000
Files and hashes: 1: CSU4hqAlCgTsab4Au_hDPC8BS3w.crl (hash: yttkwQU3CnkN/DtKyATcZ7LM0OZUYmYpOmBmGHq2ZcE=)
2: VEEuJRf1IaY-i7njwh4GTFyz4KQ.roa (hash: K73j5BLwJXJOZ/R7FX/mXQkCi9Da4esGEBz7JkbDtTI=)
3: _MIIbyQenzH6F7OwMqPXOOY9ctM.roa (hash: eIV7bKM/aiDgvacDkUhEBLMcFg6gGKWdnq3Gtl3ghX0=)
4: xWk3TJ8xAGPDUZQKY3kASUL6dzM.roa (hash: /z7ZjPJ/gv/pCsZNSb1u2GohazjLks0+0ejnDw3SaX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:77:65:b1:b1:11:48:6b:71:7a:da:6e:99:e5:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Validity
Not Before: Aug 23 10:00:37 2025 GMT
Not After : Aug 24 10:00:37 2025 GMT
Subject: CN=3c6df096629b8916d5e8caf826e6655fbb4ac1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:79:6d:6a:c5:71:6c:a4:fb:ec:4c:b4:4f:f5:
8d:a3:f5:da:a9:22:41:a5:64:c1:8e:ab:43:ee:75:
3d:21:c9:4c:cf:2b:3a:1d:05:96:05:ee:29:76:5d:
d3:e0:ce:7e:f5:c3:fe:70:e3:98:c7:24:4d:49:6f:
ac:7f:28:45:02:6b:14:07:3d:c8:0a:c2:a1:aa:8b:
68:e8:ef:7b:84:35:88:67:42:62:b0:81:25:72:04:
c0:a6:28:29:e6:34:49:a5:6c:a4:ea:59:90:ae:c3:
e7:6a:51:4f:10:60:0b:9f:5c:fd:81:e8:d2:73:54:
b8:44:c6:34:c1:33:78:54:ae:e1:07:d4:82:39:f3:
68:90:d5:f7:97:1f:64:74:ea:94:ad:9a:29:c0:c6:
b0:63:7e:03:c7:b0:34:19:ab:b6:a3:52:22:3d:56:
ea:ed:c2:bc:a4:64:71:94:4a:ec:34:44:30:3d:b8:
b9:00:d3:9a:98:68:f9:3d:27:98:4e:fc:69:58:64:
fe:12:a7:49:9b:92:31:f7:e1:df:ff:73:77:c7:1a:
ce:7a:66:9c:c7:75:fc:37:ca:41:bb:5c:d4:89:be:
54:5d:fa:a3:6e:f3:7a:5f:e3:06:73:b2:59:75:c3:
44:a4:f0:46:fe:14:be:cb:6d:54:c8:73:a9:5b:75:
62:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6D:F0:96:62:9B:89:16:D5:E8:CA:F8:26:E6:65:5F:BB:4A:C1:A1
X509v3 Authority Key Identifier:
keyid:09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ee:e6:b3:b5:5b:a0:25:0b:3b:4c:a7:42:38:c1:02:17:8a:
0b:b0:1a:10:b3:63:e0:c8:20:d3:92:f2:47:30:f0:78:9d:b5:
28:1e:2c:8c:a0:e4:27:de:28:53:06:57:b9:26:b9:fe:8f:07:
08:2e:7f:af:33:76:97:d8:ca:43:e2:73:73:4d:2b:d8:34:cc:
c3:1b:b3:41:d8:50:8b:12:15:0e:1e:2b:df:bf:8c:14:95:c9:
72:4e:72:bc:7b:c6:49:f9:98:36:8f:6f:04:29:c7:d2:cc:4c:
59:b6:f8:87:99:59:6e:25:a3:d6:c3:6d:2e:fd:00:6a:3e:d9:
ea:5e:a9:52:70:c7:5e:4d:77:85:2c:49:fc:9d:3b:8e:41:97:
ff:9f:b1:31:05:4c:71:ef:e6:cb:e3:08:47:e7:0f:42:3c:b6:
fb:b0:a3:e1:2d:a4:21:74:dc:72:5b:da:60:d2:7e:1a:3c:55:
ff:5d:a1:65:11:8c:33:5a:11:4b:f7:7f:b8:30:c4:af:06:da:
ea:3e:97:af:86:69:9e:86:b2:ad:fc:37:c3:68:7b:ea:88:02:
2e:08:1e:e0:47:9f:b6:8d:a5:c6:94:d9:35:9b:e3:45:bc:47:
ec:ed:4b:b3:bd:39:fa:c7:46:68:d7:78:d5:30:44:9c:ea:9b:
e3:6f:48:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:01:13 2025 by rpki-client