Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
File: CeSsRu925l8V9UCjpCqt7KG_Luw.mft (raw, json)
Hash identifier: c/Qy7bZz6tMyj8m3gIeOGr0deYiE9e/xDQx1G8fqDs0=
Subject key identifier: FB:A9:B8:B5:FB:76:CC:6A:A6:C6:78:04:E1:43:1F:9C:11:92:04:5F
Authority key identifier: 09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC
Certificate issuer: /CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
Certificate serial: 01984A09F7BFC77B0C1636AF57BCF7397CBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
Manifest number: 15C9
Signing time: Sun 27 Jul 2025 04:00:23 +0000
Manifest this update: Sun 27 Jul 2025 04:00:23 +0000
Manifest next update: Mon 28 Jul 2025 04:00:23 +0000
Files and hashes: 1: CeSsRu925l8V9UCjpCqt7KG_Luw.crl (hash: vca3oPa4f/BZJ3mPNmLD3vFNNvX/GgQwtCD+CRpWEjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:f7:bf:c7:7b:0c:16:36:af:57:bc:f7:39:7c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
Validity
Not Before: Jul 27 04:00:23 2025 GMT
Not After : Jul 28 04:00:23 2025 GMT
Subject: CN=fba9b8b5fb76cc6aa6c67804e1431f9c1192045f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:94:ed:e8:0f:72:67:e0:e1:c5:a3:07:84:96:
76:61:94:83:66:c9:2b:be:b5:4e:ba:52:85:b1:55:
99:91:db:f1:6f:a9:d1:74:ff:a4:62:c3:c1:9e:f8:
52:7c:d7:de:32:49:83:03:9f:04:63:6c:fc:db:d4:
a8:fb:9c:35:c4:ab:14:ce:d6:db:f2:5d:db:19:e8:
a2:83:88:b4:46:01:95:a3:54:19:32:a7:9d:0b:16:
12:d3:ab:59:25:5d:4b:2e:00:38:d0:d5:81:ca:93:
96:bf:a1:c0:58:5d:1a:f6:f3:f3:84:8e:02:1b:51:
30:2e:44:29:32:d4:44:a3:b0:d1:71:6e:b8:0e:be:
0c:62:4c:84:59:88:6f:e5:f0:31:2c:f5:15:64:18:
15:57:20:ff:36:01:44:1d:1c:78:65:b1:e3:19:97:
78:90:0c:b5:5b:6d:75:fb:ac:e3:f3:cf:84:5a:68:
a4:09:b9:5c:c4:b4:5e:3b:2e:49:5e:91:ce:ba:78:
f0:f0:c2:7a:1f:0b:f0:ac:74:05:36:aa:5d:6a:20:
dd:77:a7:a4:17:67:d7:b1:f9:c2:0b:02:3f:1b:60:
50:c3:84:af:21:f9:7b:88:56:42:45:ff:c6:a0:67:
00:b0:df:eb:91:8b:d5:63:6f:5d:39:69:41:ec:36:
ef:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A9:B8:B5:FB:76:CC:6A:A6:C6:78:04:E1:43:1F:9C:11:92:04:5F
X509v3 Authority Key Identifier:
keyid:09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:4e:34:3c:d0:c1:d0:16:e7:dd:81:0b:a9:86:89:5e:2f:8c:
54:c5:44:35:30:31:30:f3:c8:d5:15:98:10:14:14:2a:09:bd:
f7:8e:85:74:27:44:d7:96:a6:00:b3:ba:ab:20:09:6f:c8:9a:
f9:cf:d9:15:fc:cb:db:43:c8:9e:07:0b:74:83:b0:cc:af:1c:
5f:cb:db:5a:58:dd:53:96:a1:aa:de:a9:6e:df:9e:ce:c0:e0:
06:e7:90:79:99:16:3b:d5:36:65:92:fa:58:d6:e5:f1:a3:4b:
2a:2b:32:50:23:fa:39:53:4c:bc:d3:12:02:e5:68:48:65:68:
64:92:97:03:84:77:85:2d:fc:1e:17:e6:f4:02:e0:89:b7:51:
44:75:c5:c2:40:f4:5d:97:8d:71:ca:b1:38:83:c9:16:5d:6d:
87:52:b0:e4:2d:b1:72:8d:f5:c9:20:b7:78:99:4f:d8:95:83:
11:8b:93:72:18:ba:f7:1e:24:aa:68:7d:a3:b8:2f:2d:90:ce:
7b:c0:4f:c7:63:7d:6d:40:4d:6d:d1:5b:1c:d6:25:81:bc:27:
87:20:f7:d9:ff:35:1d:bf:ae:d9:fe:60:3e:04:a1:8d:d5:84:
85:60:f1:49:5a:80:c3:59:df:f7:5d:be:52:02:1e:be:af:2e:
65:17:a4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:21:09 2025 by rpki-client