Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
File: CeSsRu925l8V9UCjpCqt7KG_Luw.mft (raw, json)
Hash identifier: LTne+/2MRUd3S9vwCDmzog/NShOpi/LdE7rL7kVtWV4=
Subject key identifier: 92:50:01:4C:B0:CA:BA:6E:60:30:3A:6B:9D:B8:17:5E:A0:26:04:6F
Authority key identifier: 09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC
Certificate issuer: /CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
Certificate serial: 0197B74544D10B80FFA472686FC714425B6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
Manifest number: 157D
Signing time: Sat 28 Jun 2025 16:00:59 +0000
Manifest this update: Sat 28 Jun 2025 16:00:59 +0000
Manifest next update: Sun 29 Jun 2025 16:00:59 +0000
Files and hashes: 1: CeSsRu925l8V9UCjpCqt7KG_Luw.crl (hash: QNiE5Kzos5DML4w+Ms8waV22wEcOC8L0uOtYnMrURi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:44:d1:0b:80:ff:a4:72:68:6f:c7:14:42:5b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
Validity
Not Before: Jun 28 16:00:59 2025 GMT
Not After : Jun 29 16:00:59 2025 GMT
Subject: CN=9250014cb0caba6e60303a6b9db8175ea026046f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:50:99:7f:6a:9f:53:7b:36:8e:93:7a:fe:99:
96:d5:9d:ea:87:bb:dd:aa:6f:8c:e7:02:13:0d:67:
35:98:29:3d:1c:22:5e:cf:35:72:d6:25:aa:31:ac:
e8:7d:82:d9:e7:2c:b1:33:e1:60:6a:e5:e7:2b:19:
2e:03:a1:88:56:ab:da:06:5f:1a:1f:8d:ab:4a:aa:
6d:d2:da:7b:66:a2:7c:42:de:e7:c4:f2:84:49:0a:
32:ce:75:56:8d:95:63:4f:16:fd:21:d9:a7:7c:13:
9d:09:b6:ff:78:df:6a:c4:ab:2b:c7:50:81:57:df:
75:bd:3c:b2:82:7f:37:bf:e7:05:70:ed:cb:2d:37:
8d:83:1c:67:a3:3b:cc:ca:da:10:af:23:46:95:b3:
b5:54:78:25:49:96:8f:58:00:c4:fe:4e:42:36:e2:
8f:94:ea:32:bd:37:1e:6a:81:c0:f4:54:44:3d:c3:
82:16:78:71:db:b8:33:8b:74:e5:68:66:d8:4c:21:
eb:12:1c:ee:96:07:34:e5:64:ea:eb:27:ea:a5:18:
ea:5e:ea:a8:da:b5:8b:ba:c9:a8:59:e8:f4:e1:91:
b2:60:fd:9d:f7:62:e1:20:17:e6:84:78:83:03:42:
c5:bd:b9:3c:40:a0:95:b7:9c:57:41:c3:4b:f5:c5:
6b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:50:01:4C:B0:CA:BA:6E:60:30:3A:6B:9D:B8:17:5E:A0:26:04:6F
X509v3 Authority Key Identifier:
keyid:09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d3:73:9f:ac:70:0d:ae:8f:bc:a0:bf:64:f1:74:a4:14:53:
6e:80:17:d8:b5:90:96:e7:2d:d0:5a:58:df:b3:53:11:1a:06:
60:ee:9b:c3:9c:0e:2d:93:a6:88:90:bd:8f:0e:fb:71:95:f6:
cb:47:28:06:53:a9:65:c3:5e:79:66:9d:d8:15:a5:75:5d:1a:
b0:08:72:d0:8f:cc:40:3f:01:60:23:5d:1d:27:cd:1a:50:59:
ac:39:4f:8a:e8:a2:ec:08:e2:32:f9:4d:89:8c:0b:2b:36:39:
e6:b9:4e:1f:38:8d:ad:ef:b0:e1:f4:d4:c5:51:b5:e4:50:d3:
61:e8:e8:c0:63:b4:dd:4c:83:8b:b1:03:a2:ef:ed:f7:b1:33:
4e:43:56:08:88:55:0c:d1:27:97:f1:eb:b4:34:5b:4b:d0:97:
96:3f:b3:11:fd:b3:dc:ba:4e:f2:17:c0:3d:89:68:30:19:a5:
53:28:fc:1d:2c:53:5f:88:6e:e1:a9:6d:08:e1:25:0c:c5:2c:
90:33:ad:9f:7b:39:34:0a:8e:be:80:2f:f7:d7:2a:3d:b5:26:
a8:6e:f6:0f:65:50:2c:49:ee:bc:8f:85:ef:f6:86:88:60:0a:
a6:33:64:51:40:11:46:61:ff:11:0f:06:97:f2:47:2a:bc:d9:
07:bd:b7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:26:55 2025 by rpki-client