
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
File: CeSsRu925l8V9UCjpCqt7KG_Luw.mft (raw, json)
Hash identifier: X/2jkwRpROlZPWnfBVNpylaWX4jfta9G4xEZV/uhhQo=
Subject key identifier: 63:84:9D:93:39:47:20:4F:CF:A8:19:41:66:70:DD:9B:82:29:39:C7
Authority key identifier: 09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC
Certificate issuer: /CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
Certificate serial: 01988BB38247D09EB74718021AEE87A88B21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
Manifest number: 15EB
Signing time: Fri 08 Aug 2025 22:00:53 +0000
Manifest this update: Fri 08 Aug 2025 22:00:53 +0000
Manifest next update: Sat 09 Aug 2025 22:00:53 +0000
Files and hashes: 1: CeSsRu925l8V9UCjpCqt7KG_Luw.crl (hash: TQXHac9ZWoWuB6gCG4BISg6GmK+A73ckOOuC8dKDxZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:b3:82:47:d0:9e:b7:47:18:02:1a:ee:87:a8:8b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
Validity
Not Before: Aug 8 22:00:53 2025 GMT
Not After : Aug 9 22:00:53 2025 GMT
Subject: CN=63849d933947204fcfa819416670dd9b822939c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:31:cc:b1:1c:25:5c:21:8a:c7:e7:83:4f:6c:
5d:3b:bc:b7:26:79:38:9c:6e:4f:cd:dc:e8:66:42:
91:b5:cc:85:24:ea:9c:1e:b1:d8:b8:8d:ad:7e:f7:
a6:f4:f2:b6:97:c7:fa:50:8d:1e:68:72:b3:e5:76:
c9:d4:ab:3c:c7:a8:3e:20:7e:ce:8f:f1:52:cb:02:
e9:bc:ab:d5:bd:41:6c:06:5f:f3:16:ad:d6:44:85:
04:06:2f:72:0f:1c:5a:80:4f:fd:47:06:b9:db:30:
40:c6:5a:c8:1d:38:3c:60:41:c5:a6:d6:1a:f4:77:
fa:64:37:6a:03:94:22:3d:f3:f4:f7:be:ba:c1:22:
9b:71:d1:ae:71:ea:8b:28:0e:26:0c:d8:cf:0a:8c:
09:c2:b2:4f:90:47:be:b6:41:b2:5b:a9:58:55:da:
b8:c5:82:61:1d:14:e1:dd:90:60:e2:1e:8d:30:a2:
e3:8a:28:ac:4f:28:c9:ce:d2:af:82:e5:8e:e2:d6:
6c:e7:cf:6a:9e:0e:d4:84:88:19:c4:94:6a:e7:4a:
5f:0e:ab:24:ac:ee:20:60:11:3c:98:4d:e5:53:8d:
32:57:98:6d:2a:b8:b3:9e:16:84:ac:9f:5c:7c:d2:
92:1f:3c:a1:bf:d9:ff:71:00:7e:a6:35:a4:f4:b5:
38:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:84:9D:93:39:47:20:4F:CF:A8:19:41:66:70:DD:9B:82:29:39:C7
X509v3 Authority Key Identifier:
keyid:09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:df:08:39:fa:b1:2e:d9:c2:cc:dd:16:69:39:a3:d8:0f:80:
c2:d7:9d:56:4a:90:11:13:c6:bc:f7:f1:78:36:80:46:b8:a0:
96:06:1f:bf:9c:0b:6b:56:0e:79:4d:7d:93:f1:8a:d8:81:2e:
14:6b:19:50:eb:01:45:ae:b7:b2:4c:26:0f:8e:63:ea:42:d0:
48:34:d1:b7:06:36:aa:36:48:ff:fc:7d:cc:f3:a9:47:4b:79:
8a:ff:1b:02:46:7c:22:df:87:4b:62:a2:69:e0:69:a8:28:79:
93:b5:59:0f:46:80:3e:71:30:f1:41:cf:fe:89:ca:d0:db:fa:
90:0d:a7:58:d5:ff:ab:52:02:a0:b1:70:c7:64:86:36:bc:34:
5c:e3:a9:88:1f:2d:9d:a2:20:d6:f3:a9:2e:cc:e8:ff:17:dd:
e9:ec:3b:81:3b:08:91:2b:97:4b:92:f7:11:9b:4e:b6:5b:e9:
58:0d:3e:46:43:3c:ba:e0:5f:d2:41:22:17:1e:e7:27:96:a0:
f1:50:f7:b5:ed:17:d5:40:ba:3e:a7:03:99:48:94:43:48:2d:
ec:69:d1:43:e9:57:52:7e:45:8d:de:2a:27:47:a3:0d:d8:c8:
bc:0a:7e:65:d4:43:d0:bb:63:95:5c:e6:ed:b0:1d:87:84:53:
00:4d:1e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:17 2025 by rpki-client