Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
File: CeSsRu925l8V9UCjpCqt7KG_Luw.mft (raw, json)
Hash identifier: Fis126H0kx2cylgI5FPoxRuPs6bsr3bBLUr+8vkcD1Q=
Subject key identifier: 21:9A:2C:A0:52:7C:78:1C:B9:E9:2F:E5:57:7E:C5:3F:29:2A:0C:F5
Authority key identifier: 09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC
Certificate issuer: /CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
Certificate serial: 01976BF3FBDCF5F8DA39AC8BA1A4DCEA2C57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
Manifest number: 1556
Signing time: Sat 14 Jun 2025 01:00:41 +0000
Manifest this update: Sat 14 Jun 2025 01:00:41 +0000
Manifest next update: Sun 15 Jun 2025 01:00:41 +0000
Files and hashes: 1: CeSsRu925l8V9UCjpCqt7KG_Luw.crl (hash: DHmp0/UQeP+82YovBTR/ZU80pdBi1GOa4e2zLLPu1Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f3:fb:dc:f5:f8:da:39:ac:8b:a1:a4:dc:ea:2c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
Validity
Not Before: Jun 14 01:00:41 2025 GMT
Not After : Jun 15 01:00:41 2025 GMT
Subject: CN=219a2ca0527c781cb9e92fe5577ec53f292a0cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ed:db:6f:e0:58:12:77:3d:3d:c2:c4:35:c5:
16:c2:2a:e5:5a:ae:f0:51:38:5d:24:77:ae:84:74:
e7:ae:2b:02:bb:98:59:be:76:64:fe:93:46:88:7b:
2b:d0:36:7e:ac:97:89:f1:51:16:10:e7:dd:13:e5:
76:a2:90:e4:de:a0:3a:f6:6f:3e:95:86:7a:54:7d:
26:c8:07:ae:09:73:57:c9:f0:d0:2f:81:97:37:07:
f0:2e:05:54:a4:96:ab:4b:13:49:00:2b:7d:d5:5d:
2f:64:16:a3:6a:fc:de:80:6a:5a:1c:0e:a2:42:cf:
ed:12:3c:9d:76:ea:0e:08:18:35:f7:d8:79:bf:43:
e6:16:da:36:55:fc:66:a0:fb:bf:7a:bd:2e:bc:06:
d7:4c:3e:8d:87:59:a1:97:c6:ff:8c:05:95:e5:49:
ff:2b:d5:3d:74:ee:1e:42:aa:d3:82:be:5b:79:89:
19:2b:30:6a:b9:9e:ca:51:cc:d3:e8:9c:b0:7a:a7:
e3:65:ba:70:40:29:8f:d3:a1:1d:3f:c0:14:59:bf:
05:5b:78:50:87:6a:78:b3:1e:30:db:85:4d:66:65:
1c:a9:b0:8b:d1:59:a2:36:47:e3:9d:66:9e:cf:a2:
9f:c3:53:31:f6:be:14:01:d8:d8:f1:96:c1:b1:08:
45:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9A:2C:A0:52:7C:78:1C:B9:E9:2F:E5:57:7E:C5:3F:29:2A:0C:F5
X509v3 Authority Key Identifier:
keyid:09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:07:5b:a1:02:af:94:a1:c3:eb:5e:30:68:ba:e8:a3:e5:42:
04:93:73:37:e3:13:22:27:56:0f:93:e9:d0:fb:5c:48:3c:30:
6f:a6:2b:42:53:96:4a:22:95:a3:df:f7:5a:49:55:4b:93:03:
da:b0:3f:ff:7a:0a:87:ee:00:20:b4:9c:ab:37:34:0d:ac:36:
74:a6:e3:1a:21:45:33:36:b1:d5:20:6a:ae:1e:ff:6e:a2:03:
e2:7e:44:98:e7:56:f6:ba:c5:8d:44:54:77:b6:d3:7a:91:0e:
5d:31:2a:08:90:dd:50:45:9e:84:eb:32:43:6a:2a:95:f2:97:
a8:16:0b:a3:98:1f:ca:2e:3d:7e:d3:55:9d:04:a3:ee:de:77:
c0:e3:61:fc:f2:61:94:36:35:2d:b4:19:01:78:62:c2:53:82:
c7:a0:69:16:9f:19:94:95:65:d2:89:cd:64:f6:47:f4:d7:cf:
c4:f1:73:56:16:d8:ae:92:f6:37:0d:74:40:65:57:2f:60:bc:
de:02:e5:38:de:9e:f7:2b:0a:6b:47:90:3a:94:25:bb:04:ea:
93:87:de:4c:bf:53:6e:65:63:8b:7f:17:90:0b:b7:c8:43:03:
7e:a9:85:e7:f8:15:fc:a3:d7:11:e3:e9:65:57:19:e7:36:c7:
2c:e6:01:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:52:40 2025 by rpki-client