Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
File: 9Csush9rBnIU3PrbKQJT2nF9YuM.mft (raw, json)
Hash identifier: qfrMXZU7LtVeJNWljz2NgZM5usyYOJ1tveQoFl8p2cs=
Subject key identifier: 91:66:D4:D6:53:3E:68:EC:10:02:2D:CB:0D:28:B3:E4:2C:CB:D7:23
Authority key identifier: F4:2B:2E:B2:1F:6B:06:72:14:DC:FA:DB:29:02:53:DA:71:7D:62:E3
Certificate issuer: /CN=f42b2eb21f6b067214dcfadb290253da717d62e3
Certificate serial: 01975D5CF724F035874EEF3660D7F214C9CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
Manifest number: 1586
Signing time: Wed 11 Jun 2025 05:01:03 +0000
Manifest this update: Wed 11 Jun 2025 05:01:03 +0000
Manifest next update: Thu 12 Jun 2025 05:01:03 +0000
Files and hashes: 1: 9Csush9rBnIU3PrbKQJT2nF9YuM.crl (hash: JjGVh0Rp612EbKiuUl+OwioLw5KikXfwvxqknSm2cPI=)
2: pauhzMvpgkVgNc366YpahktJW_E.roa (hash: CXLZhXqRNNwNQ9k+Lw14xdWMjm1xkv/Bk4H8O3Arf58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:5c:f7:24:f0:35:87:4e:ef:36:60:d7:f2:14:c9:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42b2eb21f6b067214dcfadb290253da717d62e3
Validity
Not Before: Jun 11 05:01:03 2025 GMT
Not After : Jun 12 05:01:03 2025 GMT
Subject: CN=9166d4d6533e68ec10022dcb0d28b3e42ccbd723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:38:87:4a:fb:6a:e8:3a:eb:5e:18:8e:10:4d:
86:8f:f1:bf:97:67:16:d5:6d:11:76:1a:4a:a7:16:
e1:c1:44:48:f2:de:33:43:31:60:92:d4:d8:4c:5a:
8f:ce:8c:a2:9a:a6:9f:e8:a8:d3:f3:02:b1:a5:26:
f7:04:d5:f2:bd:2f:b5:1c:be:6a:43:5c:9d:56:95:
c3:f4:06:f3:d8:de:2f:ad:58:d2:f6:a3:83:55:8e:
93:dc:8d:e8:08:23:01:ed:3b:a4:37:d1:71:5e:17:
99:73:2d:51:d1:4e:92:35:de:7e:45:d5:0f:b0:d3:
77:04:1a:11:a1:ed:a2:40:6b:fd:0d:6d:df:96:8f:
9c:20:61:f0:cd:f3:86:3c:7b:9c:e3:50:92:bc:6e:
a4:16:80:2c:c4:22:7b:84:ef:72:17:e0:f9:9e:86:
99:ed:38:ca:08:4b:bd:a6:08:dc:10:1b:9b:aa:fe:
62:df:b5:d7:7b:7f:94:27:7c:ad:b5:7a:31:02:1f:
fa:22:29:45:17:a7:01:30:35:73:be:71:4d:54:5b:
76:08:1d:80:a2:6a:09:dd:06:ca:0a:47:ed:20:9e:
4e:74:70:27:e1:3c:9e:24:44:fc:a0:3f:6b:47:3c:
59:26:a8:b8:ee:0f:65:31:b9:bc:ac:b2:ba:99:88:
8c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:66:D4:D6:53:3E:68:EC:10:02:2D:CB:0D:28:B3:E4:2C:CB:D7:23
X509v3 Authority Key Identifier:
keyid:F4:2B:2E:B2:1F:6B:06:72:14:DC:FA:DB:29:02:53:DA:71:7D:62:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:4c:cf:bd:88:d1:65:bf:c9:1b:94:36:fd:a3:f2:6f:8f:e4:
b9:3e:3f:05:bd:fc:19:e9:2d:1a:d6:84:df:e3:07:97:19:8f:
14:60:1f:f6:56:74:e3:f9:49:16:b0:c1:f5:53:91:24:db:05:
59:b3:cc:9b:d2:7f:8d:ad:ed:7d:ba:68:10:1c:5b:65:a1:6a:
73:f6:37:f8:6b:ae:81:7a:5c:11:08:40:2a:59:97:6a:91:69:
79:ec:8e:04:ac:53:7f:10:b8:82:e0:69:cf:04:15:0b:88:25:
03:3c:8d:e4:da:32:c2:5b:65:50:dd:71:ea:4d:7d:76:aa:de:
59:05:9e:92:28:e7:41:17:03:35:f3:f7:d9:56:4a:c7:2c:a2:
2e:7d:75:f1:3f:e5:54:f0:ba:92:e4:a1:d8:59:e7:ed:78:23:
c5:53:4f:c8:49:90:fc:2f:b3:1e:c5:4b:a5:55:a9:7d:d9:d5:
01:a2:fe:2b:82:22:6e:14:84:fb:56:ad:a1:13:30:61:ca:11:
c3:12:cb:eb:87:f7:a4:0c:f0:f3:30:56:9c:3d:84:2e:f7:dc:
9a:e8:3a:f4:47:d4:73:b9:83:45:10:1c:c5:d5:06:07:68:9a:
d7:8d:84:a4:03:e7:89:3d:98:dc:a3:3c:2b:dd:02:ba:e2:44:
b6:5d:c1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 08:10:04 2025 by rpki-client