Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
File: 9Csush9rBnIU3PrbKQJT2nF9YuM.mft (raw, json)
Hash identifier: orirtGfRqdxqgUdvQSq9VqZqDMSY1oS7pXG1nPOZbHc=
Subject key identifier: 3E:41:7E:2C:D6:BE:FC:F2:0C:7D:BD:1C:9B:AE:B2:9A:27:0C:E2:2F
Authority key identifier: F4:2B:2E:B2:1F:6B:06:72:14:DC:FA:DB:29:02:53:DA:71:7D:62:E3
Certificate issuer: /CN=f42b2eb21f6b067214dcfadb290253da717d62e3
Certificate serial: 01975791653B5CD16A6AFE07A75F704C146C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
Manifest number: 1583
Signing time: Tue 10 Jun 2025 02:00:35 +0000
Manifest this update: Tue 10 Jun 2025 02:00:35 +0000
Manifest next update: Wed 11 Jun 2025 02:00:35 +0000
Files and hashes: 1: 9Csush9rBnIU3PrbKQJT2nF9YuM.crl (hash: 9tArIhlJ7LUAcDYs9KhYIHiM3E1ZFBh6gPb1IQjDl0E=)
2: pauhzMvpgkVgNc366YpahktJW_E.roa (hash: CXLZhXqRNNwNQ9k+Lw14xdWMjm1xkv/Bk4H8O3Arf58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:91:65:3b:5c:d1:6a:6a:fe:07:a7:5f:70:4c:14:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42b2eb21f6b067214dcfadb290253da717d62e3
Validity
Not Before: Jun 10 02:00:35 2025 GMT
Not After : Jun 11 02:00:35 2025 GMT
Subject: CN=3e417e2cd6befcf20c7dbd1c9baeb29a270ce22f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:90:68:c1:a1:f8:46:ec:93:8c:a3:51:66:97:
8c:46:9f:e4:5d:cc:2d:1b:40:53:52:6b:ae:5c:51:
48:1f:c6:8a:25:d0:43:59:17:26:47:a7:e2:0d:1b:
c6:55:8b:27:dd:3d:a8:52:45:a0:12:e7:2c:8b:4b:
19:2b:8a:ff:74:59:21:aa:4c:94:96:51:bd:91:33:
85:b0:fd:bb:8a:12:e8:17:53:03:e3:2d:0e:94:fe:
a4:0c:02:70:92:99:38:be:36:4a:10:9a:19:6f:90:
7a:76:b6:71:d7:c3:d5:da:0d:1e:2d:c7:4d:d8:5a:
db:1f:be:c8:4f:f2:a7:a8:27:74:ec:c8:d1:87:68:
91:31:81:2b:82:ce:97:cb:f1:31:c8:54:9e:19:1f:
32:5b:a2:24:4c:e1:8b:26:73:64:3c:be:9a:82:ee:
62:6e:e2:a8:ec:a7:84:04:53:cc:6d:56:7e:09:8b:
6e:24:72:65:c4:d9:05:54:28:e5:21:3f:11:0f:7b:
80:c2:58:dc:3e:d1:84:ab:eb:b5:4f:a7:ab:48:72:
82:63:eb:2a:31:44:fe:11:bf:85:ff:73:10:d0:74:
f1:13:5b:15:be:c0:33:f4:39:2c:55:f5:df:c9:99:
f8:74:ad:ee:d1:64:7b:33:38:fc:c2:2f:14:97:3f:
c1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:41:7E:2C:D6:BE:FC:F2:0C:7D:BD:1C:9B:AE:B2:9A:27:0C:E2:2F
X509v3 Authority Key Identifier:
keyid:F4:2B:2E:B2:1F:6B:06:72:14:DC:FA:DB:29:02:53:DA:71:7D:62:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:f4:a6:e7:f5:04:bb:e8:fa:38:d8:98:83:b5:e4:74:e2:7b:
2b:cc:90:b2:8d:ac:42:6b:d6:3b:ac:33:51:a4:51:08:ba:20:
fa:23:e7:fd:3c:98:4d:c8:18:39:5c:31:0f:28:e2:38:00:6c:
3a:bb:44:9c:a5:5d:81:98:02:5f:30:18:6d:42:72:c3:c9:24:
c1:f4:19:e2:8d:e5:15:79:a4:6f:d3:32:f9:dd:67:6e:a4:41:
9b:35:b0:0e:91:d7:ce:e2:0b:07:18:e4:2c:86:66:e1:96:74:
16:c0:70:f6:2a:64:0e:61:58:6f:33:33:fa:0c:58:17:4a:b2:
22:2e:82:a9:5f:85:b9:43:0a:cc:84:e6:08:37:b5:47:dd:94:
fb:77:44:b2:69:ee:ce:b2:79:e6:9c:fe:33:60:f9:9d:0f:16:
97:8a:db:12:ad:72:b1:ba:26:cf:2a:6c:88:54:e7:6f:b4:77:
78:1a:06:06:ba:2d:c2:da:02:9f:4b:20:2c:0a:d2:5a:ef:5f:
48:70:b4:df:13:a2:2e:2b:31:fd:fd:52:9f:46:65:02:f0:e5:
ad:1b:ed:b9:81:05:88:30:f0:ad:95:35:a9:8e:41:33:e4:de:
94:20:48:2f:5d:30:2f:92:95:93:e0:ce:de:38:29:8f:9d:7b:
37:f5:14:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 06:47:38 2025 by rpki-client