Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
File: CSU4hqAlCgTsab4Au_hDPC8BS3w.mft (raw, json)
Hash identifier: xWgPRVrHtyBPcFTBSBeczgpMZ5qWstLB9RqxSYkWWAs=
Subject key identifier: B3:6A:19:DE:D4:0A:8D:9D:86:61:DF:0C:C4:D5:3B:9B:81:41:62:E3
Authority key identifier: 09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
Certificate issuer: /CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Certificate serial: 019873E2E23BE96A720AC9B3D5CA36543CCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
Manifest number: 161D
Signing time: Mon 04 Aug 2025 07:01:45 +0000
Manifest this update: Mon 04 Aug 2025 07:01:45 +0000
Manifest next update: Tue 05 Aug 2025 07:01:45 +0000
Files and hashes: 1: CSU4hqAlCgTsab4Au_hDPC8BS3w.crl (hash: uhM7eeC+LelLxyQkCopkThsnlGZz+34A9Nd7oXLlJnI=)
2: VEEuJRf1IaY-i7njwh4GTFyz4KQ.roa (hash: K73j5BLwJXJOZ/R7FX/mXQkCi9Da4esGEBz7JkbDtTI=)
3: _MIIbyQenzH6F7OwMqPXOOY9ctM.roa (hash: eIV7bKM/aiDgvacDkUhEBLMcFg6gGKWdnq3Gtl3ghX0=)
4: xWk3TJ8xAGPDUZQKY3kASUL6dzM.roa (hash: /z7ZjPJ/gv/pCsZNSb1u2GohazjLks0+0ejnDw3SaX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:e2:3b:e9:6a:72:0a:c9:b3:d5:ca:36:54:3c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Validity
Not Before: Aug 4 07:01:45 2025 GMT
Not After : Aug 5 07:01:45 2025 GMT
Subject: CN=b36a19ded40a8d9d8661df0cc4d53b9b814162e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0a:9b:0f:7e:c7:9e:33:55:96:b8:0b:d1:99:
26:7c:56:4c:66:4e:35:a1:21:1e:58:60:81:a0:21:
b6:6e:5c:5b:d1:6c:9a:66:6f:ed:2d:2b:b0:85:53:
8e:13:d6:ef:ce:c4:26:ef:75:23:8b:0b:e6:96:28:
61:90:85:d5:d7:f1:84:35:e5:3b:47:d8:36:e2:69:
7b:f7:ce:6f:b2:fb:9b:4a:1c:51:cf:70:eb:d3:58:
c8:0d:7a:54:63:a2:16:00:14:5d:cd:95:8c:0d:6d:
64:9f:74:0b:87:d1:63:d5:6e:9f:52:3b:6f:b2:56:
da:a4:8a:0d:64:dc:f7:a8:30:b4:de:49:b4:62:bd:
41:59:02:be:93:3d:60:fa:d2:59:15:ee:f3:76:19:
85:96:93:03:1a:8e:6e:54:41:12:8c:49:e9:07:5a:
d4:bd:25:a7:9c:a2:e6:a5:3b:20:74:f7:58:20:45:
62:fa:88:8e:0d:44:1a:b8:10:18:35:5b:8b:57:18:
80:3d:47:26:85:9d:b2:2d:9a:4f:53:2c:c0:d8:f1:
f7:fe:de:40:f1:24:25:0e:e9:2d:6a:fb:f4:a5:74:
c2:1f:5a:c6:40:5e:83:d2:7e:fe:7f:29:27:05:4e:
8d:73:b3:f6:b2:69:78:75:9f:4b:83:20:4a:19:70:
02:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6A:19:DE:D4:0A:8D:9D:86:61:DF:0C:C4:D5:3B:9B:81:41:62:E3
X509v3 Authority Key Identifier:
keyid:09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:de:a3:7e:65:f2:73:64:52:59:91:75:cc:33:a4:7a:67:28:
88:44:61:a3:18:0a:5a:c7:02:b9:17:34:0d:48:00:ef:96:6e:
a7:61:0d:c5:f2:42:d0:1e:a6:ef:e8:03:76:ef:cf:58:8d:67:
61:1c:ef:ae:22:d5:be:aa:a1:e4:e9:c1:e0:d4:15:a6:97:2b:
b3:52:73:4c:04:4a:d9:28:5b:89:59:a9:04:05:5e:00:8d:34:
82:a4:7f:63:58:85:c4:4a:fd:f1:09:25:e4:4d:eb:8f:dd:32:
0c:a9:cd:64:70:df:74:d2:7c:7c:18:e0:73:04:d3:c7:f4:72:
14:02:b5:53:0e:b4:65:72:6c:ba:97:f4:8d:c5:a4:e3:31:9b:
1d:bb:7f:3d:a2:28:64:6a:1d:f2:08:27:ee:63:52:05:35:a8:
93:64:2a:f1:9b:47:bc:e6:ea:5e:69:75:65:fa:e2:b3:22:c9:
99:db:38:4f:58:cf:00:31:d5:ba:f3:74:52:e1:33:f2:f3:b8:
68:c5:5a:d6:ff:4d:89:98:b0:38:ce:b1:cc:20:5c:5a:74:14:
83:de:8c:a1:e8:89:8d:ce:05:cc:92:db:f1:38:a8:5b:56:54:
5f:a8:14:b1:03:ba:aa:8d:81:ca:34:af:08:4f:76:78:f1:f0:
11:0d:43:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:58:04 2025 by rpki-client