Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
File: CsgX_khqx3vpTil6zjqVzyff-xo.mft (raw, json)
Hash identifier: 5Iit6wrP7mevGZJ5eTmfDJWh8N1VPSoGdVupAAioVLE=
Subject key identifier: BB:A6:9B:88:A0:84:5C:E5:8E:61:AC:F6:E0:C5:2D:A8:39:46:3A:BB
Authority key identifier: 0A:C8:17:FE:48:6A:C7:7B:E9:4E:29:7A:CE:3A:95:CF:27:DF:FB:1A
Certificate issuer: /CN=0ac817fe486ac77be94e297ace3a95cf27dffb1a
Certificate serial: 01974AB15D4E6975211DA9BF0BD870103165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
Manifest number: 0AAC
Signing time: Sat 07 Jun 2025 14:00:27 +0000
Manifest this update: Sat 07 Jun 2025 14:00:27 +0000
Manifest next update: Sun 08 Jun 2025 14:00:27 +0000
Files and hashes: 1: CsgX_khqx3vpTil6zjqVzyff-xo.crl (hash: eHpspgFpLR5OF5uZ4c3U8WTe3Eml7zTtoQmTG/bU4TE=)
2: rKgQI-w1UXNWfaL5RhIkWUF_FgI.roa (hash: hcJ9d+FGrXGqRkOgDTqfnuX4GbB1zYDVH1Gwhkt3mDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:5d:4e:69:75:21:1d:a9:bf:0b:d8:70:10:31:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac817fe486ac77be94e297ace3a95cf27dffb1a
Validity
Not Before: Jun 7 14:00:27 2025 GMT
Not After : Jun 8 14:00:27 2025 GMT
Subject: CN=bba69b88a0845ce58e61acf6e0c52da839463abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:02:8f:2b:2d:e5:23:ab:2d:ad:34:51:5e:9f:
08:11:cd:ef:b1:99:52:42:02:d3:e9:4d:40:fd:da:
b3:30:35:fa:eb:5c:27:8d:60:0b:00:14:8f:7c:df:
5e:58:5f:77:b0:07:f9:fc:d9:e3:c6:4b:62:b5:e8:
e7:e4:2a:0b:da:fc:73:01:e2:44:a4:08:8f:1f:fe:
a8:a2:45:c4:9a:30:36:8b:cf:5a:42:59:6c:7d:bf:
3e:77:e5:5a:4f:46:c3:0d:ca:b2:eb:b0:d9:32:bf:
d6:77:75:01:ca:09:b7:83:14:84:68:66:df:3c:8b:
48:3e:b2:19:d4:bc:03:18:0c:1b:09:27:64:d4:c9:
3b:9d:05:28:39:7c:00:97:d0:b6:67:85:e6:9a:3b:
d0:07:6d:95:08:43:81:be:52:da:97:13:13:3d:00:
31:23:ff:17:60:19:f1:22:15:f5:8a:50:58:8c:8f:
2d:a4:70:22:76:8c:65:b3:53:82:0b:c2:d6:2e:2d:
65:a5:ab:e5:0e:5a:fb:d1:8e:ed:e0:30:a1:92:82:
b5:2a:1a:0c:db:d9:6f:e4:7f:c5:93:00:65:70:9a:
95:e1:01:16:2b:20:1d:17:8b:bf:90:70:11:bd:32:
59:f5:73:8f:f7:18:8f:b7:68:14:c3:4c:50:8b:20:
f8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A6:9B:88:A0:84:5C:E5:8E:61:AC:F6:E0:C5:2D:A8:39:46:3A:BB
X509v3 Authority Key Identifier:
keyid:0A:C8:17:FE:48:6A:C7:7B:E9:4E:29:7A:CE:3A:95:CF:27:DF:FB:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:db:eb:b0:d3:21:82:3f:a9:05:28:89:e7:b4:6a:73:a8:21:
ed:24:f1:02:a5:42:37:fe:0d:98:c0:08:65:94:13:02:9c:bb:
9e:0e:56:e1:ca:5d:23:25:f8:3a:90:f6:9d:d2:a8:14:ce:e3:
4c:45:d2:16:cd:53:ac:dd:f6:22:1a:fd:7a:39:95:85:45:01:
92:e3:bb:b9:64:93:a3:83:0b:8b:4d:cd:20:c5:bf:1c:ef:d2:
24:52:09:0a:1c:68:8c:54:f1:d8:87:fb:b1:5b:50:69:e0:e1:
04:c0:cb:59:1e:b1:56:57:f0:41:7e:ae:d9:ae:9f:c6:aa:8e:
29:b4:4d:26:f8:d9:8a:0d:e1:8a:63:96:74:78:04:75:cb:c6:
3a:1b:d9:42:f2:1c:15:b0:ef:8e:61:17:9b:e1:43:c0:c7:66:
65:27:c4:17:8e:d4:f0:6b:e0:31:5a:89:8d:6a:d4:a1:2a:11:
42:6c:46:7c:f0:ce:b4:b0:a7:1b:d2:36:05:b5:14:22:ed:d4:
bd:51:bf:b9:1f:e9:fd:2f:fc:fe:47:db:42:f8:6d:38:16:04:
02:c4:5a:a2:86:88:ae:ae:dd:55:1a:4a:60:b7:ab:f6:5f:d5:
c0:df:f9:ea:5c:92:be:1c:bb:97:9f:fd:f4:fd:f1:e7:13:20:
b5:f4:32:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:31:33 2025 by rpki-client