Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
File: CSU4hqAlCgTsab4Au_hDPC8BS3w.mft (raw, json)
Hash identifier: g+SIPoyJaOm9nxhzx+E8hkhRwtODSJMrYF4VKruk46I=
Subject key identifier: E7:78:98:1E:EC:CE:A0:51:35:60:EF:F5:5E:F0:28:BA:B3:F6:2B:58
Authority key identifier: 09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
Certificate issuer: /CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Certificate serial: 0197462FF429B6FB7163E7CC2497B40CF1BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
Manifest number: 1580
Signing time: Fri 06 Jun 2025 17:00:37 +0000
Manifest this update: Fri 06 Jun 2025 17:00:37 +0000
Manifest next update: Sat 07 Jun 2025 17:00:37 +0000
Files and hashes: 1: 7gE45KfXQALOMAUGdb2BAregZuQ.roa (hash: FrGkbAlx02b1cSATN7WbBjpuh48y5i0oZZPxwkdVo9g=)
2: CSU4hqAlCgTsab4Au_hDPC8BS3w.crl (hash: bpilDVho6Kqk23iTGsCISGXZSrStRng9UXy6IZ/yLUw=)
3: xWk3TJ8xAGPDUZQKY3kASUL6dzM.roa (hash: /z7ZjPJ/gv/pCsZNSb1u2GohazjLks0+0ejnDw3SaX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:2f:f4:29:b6:fb:71:63:e7:cc:24:97:b4:0c:f1:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Validity
Not Before: Jun 6 17:00:37 2025 GMT
Not After : Jun 7 17:00:37 2025 GMT
Subject: CN=e778981eeccea0513560eff55ef028bab3f62b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:64:f5:5a:87:2e:4c:3d:85:24:7f:60:83:35:
99:a0:a2:b1:de:2b:14:ec:16:aa:93:78:89:63:93:
06:93:28:c9:7e:37:55:2e:e1:12:7d:78:56:06:cd:
be:48:55:9a:ac:d4:8c:7a:19:87:ba:f8:17:dd:3f:
8b:ab:fd:5f:c6:75:cc:12:e5:69:3a:bc:8c:29:86:
f8:55:c9:21:5f:e5:b0:95:50:8a:e3:9b:5a:f7:93:
3c:42:4e:6e:de:07:67:65:a5:1e:dd:2d:f5:f5:aa:
91:77:fb:9c:74:61:ca:6b:56:36:da:90:18:d9:32:
3a:06:ee:cb:d9:0b:9c:a3:3b:9b:62:96:6b:09:31:
da:56:42:6c:1d:0f:11:d0:1e:53:c5:79:e2:1f:be:
a6:47:7a:a2:3e:6e:60:03:3a:44:2c:c1:f9:df:28:
9b:86:51:10:d3:ca:d6:f6:5c:02:76:a3:65:00:d5:
05:93:b7:12:e9:05:7f:e5:fb:11:54:86:82:db:cc:
42:fb:08:3a:87:f6:cb:0a:29:f1:e0:db:02:57:8c:
0c:43:4e:01:ed:70:f4:fc:bb:a4:6b:1c:39:a3:13:
ca:cb:ae:96:42:13:44:61:f8:8b:2d:50:37:55:b3:
81:7c:9c:12:ea:0f:34:c5:d3:79:88:df:65:d9:cd:
18:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:78:98:1E:EC:CE:A0:51:35:60:EF:F5:5E:F0:28:BA:B3:F6:2B:58
X509v3 Authority Key Identifier:
keyid:09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:37:57:87:23:19:32:34:71:f9:c3:bd:ac:9a:5d:02:09:c2:
e1:88:22:19:b9:56:b4:09:59:cd:93:d3:f2:92:c4:b4:e9:6d:
f2:44:c9:0d:c8:ad:23:fb:88:9d:20:5a:15:d3:7c:1a:3f:07:
5d:cf:43:2d:3f:e7:33:3a:d1:9b:ed:7d:e5:e3:bf:68:ea:f4:
fb:14:dc:77:c5:e0:31:a3:e0:19:8a:14:24:43:09:7a:10:65:
3d:64:00:1e:0e:d6:e0:18:12:1e:cf:ef:bc:f9:ce:c3:8c:28:
3f:75:c4:18:45:8f:f9:71:ae:09:1d:29:2a:b3:ef:14:8d:13:
a1:0d:16:fe:ca:ca:d4:c0:63:f3:76:aa:b8:d2:03:ad:e8:0a:
fd:48:b4:c8:51:f9:ef:e5:1a:8b:c8:2c:f1:a8:92:51:5e:a3:
32:bb:62:37:11:4a:2c:80:81:41:1d:09:b6:5b:3f:15:56:79:
97:b9:8d:fc:60:79:f4:f6:a7:bc:eb:1a:2c:7f:a6:a7:d0:bb:
38:55:c8:2a:04:a3:ee:df:04:85:c7:b2:41:b3:06:81:06:b7:
c6:61:03:0a:09:a6:13:d7:74:8d:8d:d2:66:3b:50:ad:26:a3:
79:f1:c3:d0:91:be:66:4d:fc:43:5b:cb:d7:6c:65:08:f2:0a:
0e:86:12:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:57:09 2025 by rpki-client