Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
File: CeSsRu925l8V9UCjpCqt7KG_Luw.mft (raw, json)
Hash identifier: AH++2E6n88ZjKTTWWSdChhDNYOhLgFLT8wKjjP9srK4=
Subject key identifier: 63:90:48:07:B3:C0:A1:E4:79:B7:0C:B8:C7:94:3D:F7:69:39:20:6F
Authority key identifier: 09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC
Certificate issuer: /CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
Certificate serial: 0196C7CCD03CD52E49E9F964EC8463C9CE8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
Manifest number: 1501
Signing time: Tue 13 May 2025 04:00:10 +0000
Manifest this update: Tue 13 May 2025 04:00:10 +0000
Manifest next update: Wed 14 May 2025 04:00:10 +0000
Files and hashes: 1: CeSsRu925l8V9UCjpCqt7KG_Luw.crl (hash: gUK9rKcyzA8RQrriACLFfhdB/tdEt/BLDLkaLEzTNco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:cc:d0:3c:d5:2e:49:e9:f9:64:ec:84:63:c9:ce:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
Validity
Not Before: May 13 04:00:10 2025 GMT
Not After : May 14 04:00:10 2025 GMT
Subject: CN=63904807b3c0a1e479b70cb8c7943df76939206f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:60:9a:7e:37:2d:77:f1:4c:4e:25:67:1a:df:
58:d1:24:54:f0:0a:ab:39:d9:56:f5:ec:eb:ad:e2:
12:3d:9c:83:4e:c8:fa:8f:d8:40:c8:fe:03:f1:85:
71:61:40:63:d7:dc:06:53:29:ec:d3:74:41:70:b2:
9c:70:76:50:25:57:82:c2:2b:b5:90:00:f0:11:a0:
eb:1c:1b:8e:18:3a:ec:49:4d:eb:5e:b7:42:3e:d2:
df:5b:82:fa:10:26:0c:39:08:0d:df:55:29:14:c9:
f7:5b:51:f0:95:0f:68:b0:e9:c8:5f:b5:3b:f0:e6:
06:a2:d9:d1:3e:27:2f:a4:ff:93:ac:16:b0:c7:30:
20:06:1e:ec:22:f7:86:8a:36:e2:c0:8c:53:d2:56:
71:ec:e9:91:6e:db:ad:89:ca:cf:9b:04:62:e1:e2:
30:94:ae:24:a8:54:ed:6f:3e:85:58:60:f5:06:45:
d4:ef:f1:39:f9:98:51:3f:9b:47:40:42:37:4e:84:
6a:d0:a5:88:27:0d:32:8f:19:37:50:6f:8f:78:ac:
c8:f8:f3:01:92:0f:c7:3a:d1:46:ed:e1:2b:50:44:
22:f9:3c:95:a9:bb:ec:0e:64:54:a8:89:da:18:59:
01:de:52:fc:9f:16:d3:47:69:b7:11:1d:49:bb:e2:
36:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:90:48:07:B3:C0:A1:E4:79:B7:0C:B8:C7:94:3D:F7:69:39:20:6F
X509v3 Authority Key Identifier:
keyid:09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ea:08:77:0b:51:41:35:a6:37:c5:31:71:c7:c6:31:fc:a2:
77:83:0a:ca:55:7b:9c:34:c5:e9:d8:cc:9b:14:42:a9:fd:39:
57:c9:38:b7:00:27:c5:22:d0:7e:68:8a:7b:5d:75:a1:1f:8b:
e7:16:51:f2:99:f9:0e:cb:f7:e3:ac:a8:5c:83:17:10:ac:58:
0a:aa:ce:ff:03:25:35:51:ef:23:e8:82:51:75:dc:87:37:cd:
c5:97:31:d8:33:ec:1c:58:60:22:80:20:23:5d:8b:25:5b:06:
5e:9e:a9:b1:9d:67:21:74:d0:6a:f4:64:11:91:90:04:09:eb:
50:d4:9d:fd:44:4b:5b:52:da:8f:e9:bf:f8:13:41:2e:b4:58:
e7:de:0a:90:e9:a0:eb:e1:03:e5:99:28:91:79:2d:2e:cd:88:
c6:54:48:1c:6f:7a:7f:6b:cc:a3:a6:30:d4:14:c6:80:62:b8:
c2:38:69:4c:f4:34:89:f9:5b:58:b9:de:61:75:c3:e4:64:f6:
63:88:ac:e0:37:54:67:f2:61:eb:a3:27:47:8b:b1:bf:39:5d:
30:1a:2e:85:ab:fa:26:56:94:67:72:24:04:51:0a:36:77:0b:
54:f4:ea:de:ab:b6:39:61:25:3d:5d:e9:33:f4:3a:ce:4c:02:
ac:f4:b0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:20:35 2025 by rpki-client