Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
File: 9Csush9rBnIU3PrbKQJT2nF9YuM.mft (raw, json)
Hash identifier: xFnOqUP5rzEfH9z5kanT3MMWlFVB1qG6HQw1U2mOnEI=
Subject key identifier: B7:4B:03:FE:DC:DA:BC:AF:A5:09:BD:F1:9B:90:6B:97:E8:4B:24:47
Authority key identifier: F4:2B:2E:B2:1F:6B:06:72:14:DC:FA:DB:29:02:53:DA:71:7D:62:E3
Certificate issuer: /CN=f42b2eb21f6b067214dcfadb290253da717d62e3
Certificate serial: 0198D5F198452D67723FABBA9CE5C2CB702B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 08:00:36 +0000
Manifest this update: Sat 23 Aug 2025 08:00:36 +0000
Manifest next update: Sun 24 Aug 2025 08:00:36 +0000
Files and hashes: 1: 9Csush9rBnIU3PrbKQJT2nF9YuM.crl (hash: 2PP8QBpZY5OTd2X8CrOrwm4lx5Lb3s7oeUcSkdeg2Co=)
2: pauhzMvpgkVgNc366YpahktJW_E.roa (hash: CXLZhXqRNNwNQ9k+Lw14xdWMjm1xkv/Bk4H8O3Arf58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:98:45:2d:67:72:3f:ab:ba:9c:e5:c2:cb:70:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42b2eb21f6b067214dcfadb290253da717d62e3
Validity
Not Before: Aug 23 08:00:36 2025 GMT
Not After : Aug 24 08:00:36 2025 GMT
Subject: CN=b74b03fedcdabcafa509bdf19b906b97e84b2447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:10:b2:9b:13:6b:66:93:82:70:78:05:59:0f:
c6:f9:a2:c5:7e:13:3e:f0:c3:8c:bc:d2:19:57:a9:
dd:b7:6f:7d:d2:c9:c8:d9:e4:a9:b0:3f:d3:94:2a:
12:97:8d:86:06:e7:fe:e9:4b:70:db:df:50:b7:94:
b2:88:f3:2d:24:75:e6:af:7d:aa:62:63:14:d4:42:
ea:38:0d:3a:00:41:60:3d:45:c3:4d:5e:08:72:18:
74:a7:01:46:b4:cc:44:9b:cb:ab:e5:5b:11:5c:6c:
ed:60:9f:36:fb:5e:74:e7:5e:1a:f0:1f:3d:95:db:
57:89:cc:dc:03:6e:56:fe:bf:22:a3:41:8e:f1:e3:
7c:fe:3f:c7:e7:9a:1a:56:69:d4:3c:89:a5:00:66:
27:e9:8a:96:a1:5a:f5:08:6b:52:3d:de:08:13:ed:
9a:17:e6:93:08:fc:5e:8c:a4:8e:b2:5e:67:a8:53:
0a:8a:4f:95:9a:28:ab:08:bb:ce:d0:32:a0:af:24:
7a:86:55:1e:b4:65:0b:a2:84:e2:29:e3:3f:dc:d1:
de:54:6c:a9:80:48:5c:38:a4:e0:6e:3a:de:e5:87:
f3:47:77:35:c7:e4:f7:c6:12:e9:70:2d:00:00:8f:
80:7a:04:43:3c:f4:e7:27:a3:a8:0a:da:34:1c:20:
d2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4B:03:FE:DC:DA:BC:AF:A5:09:BD:F1:9B:90:6B:97:E8:4B:24:47
X509v3 Authority Key Identifier:
keyid:F4:2B:2E:B2:1F:6B:06:72:14:DC:FA:DB:29:02:53:DA:71:7D:62:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:ac:16:f6:12:b2:3f:93:bd:50:13:51:36:e2:24:07:e8:34:
e2:e5:45:38:e6:55:ba:2f:d6:f3:c4:81:1d:5a:da:8f:41:2f:
3d:52:17:07:68:7a:70:e0:20:2e:0a:06:eb:94:79:43:ee:d3:
48:cf:76:00:c0:9c:8c:59:05:6b:4d:a1:26:c9:1a:3e:1c:4d:
5c:58:e5:37:fe:e5:c1:c4:5b:a7:97:1c:ab:09:ac:33:07:0a:
55:30:e4:78:46:85:59:67:56:4e:57:25:db:00:6c:35:01:76:
55:d0:cd:da:86:53:48:3b:d8:9a:04:a1:09:b7:aa:26:28:eb:
46:59:57:8e:d2:32:e4:86:4c:d1:41:92:57:6f:54:40:be:da:
ca:5d:a3:3a:e9:c4:96:8a:01:05:8a:fe:07:69:32:f9:21:f8:
95:f1:c0:97:1e:7a:58:18:c8:d8:b3:88:9e:5f:73:4f:f6:d8:
54:c0:69:b4:62:41:7b:75:74:f1:d4:e9:88:77:d9:0a:bc:ff:
ff:f9:31:50:64:d3:b5:16:d0:42:36:ab:68:44:52:8e:7a:57:
42:cd:37:23:a2:88:e4:6d:26:01:7d:2d:be:26:fe:f5:a9:b0:
96:c0:cb:c6:91:ae:9b:a0:8a:38:14:94:b8:26:85:65:ef:89:
7c:8b:ee:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:49:35 2025 by rpki-client