Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
File: CeSsRu925l8V9UCjpCqt7KG_Luw.mft (raw, json)
Hash identifier: 5lXWO+QlNj+g9yzxcJ5WqctDOQn6jiRZrxiFYyEmWws=
Subject key identifier: BD:38:35:54:4D:60:71:45:CF:55:CC:DB:5D:35:EA:2B:C1:CA:A5:B4
Authority key identifier: 09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC
Certificate issuer: /CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
Certificate serial: 0198D5159FC4777682B232A46427C6A1078C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
Manifest number: 1611
Signing time: Sat 23 Aug 2025 04:00:20 +0000
Manifest this update: Sat 23 Aug 2025 04:00:20 +0000
Manifest next update: Sun 24 Aug 2025 04:00:20 +0000
Files and hashes: 1: CeSsRu925l8V9UCjpCqt7KG_Luw.crl (hash: D/oi65fnipo9fXZu8eHIo5bXFXyYI3hM0FhlN4UXdz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:9f:c4:77:76:82:b2:32:a4:64:27:c6:a1:07:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
Validity
Not Before: Aug 23 04:00:20 2025 GMT
Not After : Aug 24 04:00:20 2025 GMT
Subject: CN=bd3835544d607145cf55ccdb5d35ea2bc1caa5b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8c:6b:43:15:7d:b7:ac:f5:f1:6c:08:68:8b:
c8:9a:24:e1:ac:6c:c3:d7:30:6f:e2:f8:ab:06:51:
59:82:89:02:16:4a:51:3b:5d:a9:d6:9f:00:87:72:
24:70:bc:eb:b2:d8:c2:df:0c:3b:da:5b:76:e5:0b:
9a:84:65:15:7c:af:6e:5b:40:5a:f7:41:e0:67:3e:
ad:0c:20:1a:48:f1:19:ed:ee:73:99:56:f0:ea:e3:
6b:2f:a5:c0:0e:c2:c4:71:4d:a1:14:fc:9a:a0:d0:
9f:6d:30:b3:e5:c1:c5:4d:d0:1f:fe:2d:d3:32:9c:
41:d5:a1:b5:73:95:ee:26:34:6b:fd:aa:5e:fe:20:
7e:cf:b1:8f:2f:f0:c8:d7:3f:80:3b:ae:a9:ae:3e:
e2:9f:bb:e6:d2:03:97:ae:0e:50:a7:9c:a0:d8:33:
ba:cd:3d:df:27:a7:21:99:1b:53:ad:2a:d0:4f:c5:
69:ec:82:74:c5:33:8f:b2:98:67:c3:60:3d:e0:a1:
a7:ab:c3:05:8a:5e:0e:36:40:0e:3f:96:36:1a:aa:
c0:1a:ea:4e:c3:6e:0a:b8:25:7f:99:32:cf:51:a7:
f7:34:3d:5d:03:c8:2f:3a:50:ba:66:05:e4:b0:49:
da:02:1f:a0:f7:f5:3b:8c:54:bf:54:68:28:dd:59:
3a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:38:35:54:4D:60:71:45:CF:55:CC:DB:5D:35:EA:2B:C1:CA:A5:B4
X509v3 Authority Key Identifier:
keyid:09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:8e:b6:48:00:f3:f1:47:9e:28:7f:e8:4b:bf:a9:77:f3:5b:
61:ff:ea:ed:ac:a4:04:db:37:56:c0:7a:43:3f:1c:b8:24:35:
a3:73:a9:6e:3b:83:38:10:18:a9:ff:f8:5c:0b:10:ee:b6:32:
4d:68:64:8b:56:fe:70:0e:13:0e:8b:5d:10:7b:38:40:de:4f:
86:ba:fe:73:ef:29:b4:ad:e3:c0:4c:f3:12:54:05:26:8c:20:
de:51:88:fd:cc:06:a7:82:7f:b6:15:65:f9:3f:64:ca:2e:33:
ee:b3:9d:7c:0d:a8:54:06:ee:bb:5a:1b:07:fa:bd:ee:33:76:
df:1c:70:50:1a:2c:03:b3:11:9d:d3:d9:91:0f:6a:2f:99:b0:
41:12:10:d2:4c:e6:01:13:91:b2:39:a0:38:ea:3a:f6:5c:85:
72:fc:28:b5:90:a2:a1:de:96:e5:4e:f7:64:01:4b:1e:3e:b5:
7f:9e:9c:27:24:61:a0:c6:f9:4c:3e:9f:46:b4:84:00:37:bd:
80:76:84:41:d8:5c:95:4d:16:0c:dc:54:a9:95:bb:f4:95:7e:
10:80:f9:13:5e:d4:d3:67:c8:7d:87:e7:7d:a2:58:03:ed:04:
b1:24:dd:fa:52:45:47:97:14:95:56:5d:60:dd:38:2e:9f:a1:
aa:7e:1c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:17:16 2025 by rpki-client