Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
File: CUSqrH8uuymBwkdj6z1gRe-9bwY.mft (raw, json)
Hash identifier: QXiZY8s4qKxy3o5AKqQucsQ4rczLqcDiEYn8JQW4oF0=
Subject key identifier: DC:83:2C:A5:A6:16:46:51:11:12:C9:BF:B2:AE:E7:E0:11:57:B5:FE
Authority key identifier: 09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06
Certificate issuer: /CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06
Certificate serial: 0198D7A927DAF92C694E3BCE9D6662E0BD6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
Manifest number: 0C8A
Signing time: Sat 23 Aug 2025 16:00:43 +0000
Manifest this update: Sat 23 Aug 2025 16:00:43 +0000
Manifest next update: Sun 24 Aug 2025 16:00:43 +0000
Files and hashes: 1: CUSqrH8uuymBwkdj6z1gRe-9bwY.crl (hash: 7CWPlIZCSWJnmf/QMuYnuAYdcb2rT/jkgU9viq3I/YU=)
2: U0OBxV0NmzWdhOROB_4XE_nOuxo.roa (hash: R0oHniHcgRLjr+xP295YEa+yjJ7+h87sW92ahFuO7CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a9:27:da:f9:2c:69:4e:3b:ce:9d:66:62:e0:bd:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06
Validity
Not Before: Aug 23 16:00:43 2025 GMT
Not After : Aug 24 16:00:43 2025 GMT
Subject: CN=dc832ca5a61646511112c9bfb2aee7e01157b5fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d3:77:e8:96:1a:0b:40:31:24:57:fd:0f:0b:
63:ef:8a:b7:c6:d7:e9:cc:1e:bd:ee:64:a1:e9:ff:
a7:95:90:60:0c:72:22:44:b8:7d:99:7e:2e:af:ff:
32:15:e5:26:73:cb:ca:70:6b:43:20:01:d7:94:5e:
f2:bc:0c:82:73:9b:aa:a3:9c:06:1e:bb:96:0f:96:
b0:56:0b:f5:1f:ad:1d:91:ac:7d:f8:61:60:e2:de:
a2:54:ab:a0:49:40:68:52:59:f7:93:a2:40:df:70:
01:41:06:b5:8b:ab:74:59:c0:f9:74:0d:1f:93:a2:
ee:35:06:32:1c:b0:ad:98:18:81:3d:e0:da:56:0f:
61:83:f2:1b:03:c6:8d:aa:f4:14:0f:b3:11:37:9f:
2c:3c:82:38:11:fe:88:d5:50:01:8a:1a:3b:e9:9e:
db:40:fe:2e:25:1c:3f:c3:9b:d9:1b:c5:04:05:b6:
6e:7b:4e:4c:a1:6b:0a:11:93:45:a5:3b:ee:0d:0b:
0d:61:3c:99:85:a7:38:cc:d7:12:ae:65:8d:79:47:
15:9a:08:ac:cb:41:12:62:fa:db:38:79:cf:0b:3b:
28:c4:be:45:eb:b3:0d:1e:67:5c:98:75:e0:fb:d0:
53:c6:b9:76:5b:8c:3d:a8:2d:fa:e2:7a:63:f8:9f:
31:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:83:2C:A5:A6:16:46:51:11:12:C9:BF:B2:AE:E7:E0:11:57:B5:FE
X509v3 Authority Key Identifier:
keyid:09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a7:1d:f1:a8:1d:bb:63:9b:45:c4:18:fe:49:a8:a6:db:61:
3d:7e:4a:9a:5f:97:ce:51:b3:64:7a:0b:89:a5:45:84:6e:37:
b9:ac:1d:06:6b:ef:ba:c0:b6:05:d5:50:e4:c2:3b:e8:6f:a9:
e4:25:7d:e1:55:26:b8:b1:24:08:5d:ff:7b:2d:c1:16:e0:d2:
fe:e5:48:4f:0c:4d:c6:17:92:b7:e9:d7:30:d1:0d:f9:e1:3f:
e5:84:cc:de:5d:e9:d9:7c:c0:6f:90:44:a3:30:9b:1a:07:0d:
01:36:63:38:ce:fa:3f:f6:40:6f:69:1f:41:69:c6:9e:ef:9f:
90:a9:1f:91:72:48:d5:fc:04:4d:18:00:1f:99:42:21:4c:ca:
df:cb:97:f6:ef:2a:61:e2:ce:d3:89:b4:5f:19:35:44:8c:a5:
71:e7:19:01:9c:1a:d6:e2:61:fa:0c:3a:57:04:a5:54:8c:1b:
3e:b9:b7:2c:17:5f:a8:2b:1f:ad:a6:85:de:e5:f7:77:67:a1:
27:8c:bc:12:0e:2a:76:22:94:dc:41:3c:16:7b:f1:41:e0:4d:
05:40:7b:f9:bc:6d:34:2b:ff:c0:40:a3:0d:30:6e:11:50:ad:
88:f7:b5:d2:e0:98:1b:e3:71:1e:9c:f8:6a:56:39:4e:dc:b5:
63:56:82:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:37:42 2025 by rpki-client