Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
File: CUSqrH8uuymBwkdj6z1gRe-9bwY.mft (raw, json)
Hash identifier: wQxAdttjYSRMfjwithYXs+LLudro62SP/0bNYxVnar8=
Subject key identifier: DC:FB:4F:40:67:81:A8:76:0D:9C:1F:CA:28:AB:73:4E:E8:68:7D:4F
Authority key identifier: 09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06
Certificate issuer: /CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06
Certificate serial: 019768BBD02EFFA0AE7067AAFB5E61A34589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
Manifest number: 0BCC
Signing time: Fri 13 Jun 2025 10:00:28 +0000
Manifest this update: Fri 13 Jun 2025 10:00:28 +0000
Manifest next update: Sat 14 Jun 2025 10:00:28 +0000
Files and hashes: 1: CUSqrH8uuymBwkdj6z1gRe-9bwY.crl (hash: 6BXLrDnBZmiY+noaO3WbTq4PM7Es2U87mup8gZAtroY=)
2: U0OBxV0NmzWdhOROB_4XE_nOuxo.roa (hash: R0oHniHcgRLjr+xP295YEa+yjJ7+h87sW92ahFuO7CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:d0:2e:ff:a0:ae:70:67:aa:fb:5e:61:a3:45:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06
Validity
Not Before: Jun 13 10:00:28 2025 GMT
Not After : Jun 14 10:00:28 2025 GMT
Subject: CN=dcfb4f406781a8760d9c1fca28ab734ee8687d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0c:0c:51:9d:00:98:8a:38:5c:06:5e:5d:82:
b7:81:bb:97:fe:31:bc:78:ee:42:5d:22:22:73:78:
eb:6e:ab:49:c1:63:da:cc:c7:51:3e:10:01:fc:a7:
87:f4:a7:a9:9b:b2:0a:3a:d6:ec:30:26:a4:92:20:
60:b8:72:d5:46:64:56:63:da:c9:42:22:1c:6f:da:
93:b8:b1:f4:01:7d:11:d7:e8:ad:85:67:d6:66:4b:
2a:d2:6f:41:74:5c:2c:3f:ef:78:1f:84:d9:36:6b:
f8:ed:5b:3d:82:5c:f6:4a:36:5e:89:b7:ba:9e:7a:
93:78:1e:66:b4:b4:d9:bf:1e:b5:df:be:d0:94:be:
5b:fc:bf:44:ed:c6:85:6b:1b:4f:4c:b8:75:ac:a9:
c3:ef:e4:2d:d1:1a:65:d0:77:e8:55:31:12:ab:59:
c9:aa:13:b7:2f:df:72:0e:fd:ef:18:4a:3a:54:1a:
6d:9d:82:7b:85:02:e8:b8:2a:45:86:20:3b:df:6a:
01:f0:71:d0:15:68:48:c7:e7:59:d2:0b:ee:24:43:
14:7a:e2:0c:01:51:7a:f2:f7:a6:cd:e7:1c:6f:48:
63:ef:57:71:e6:1c:33:66:27:0d:a9:d7:5e:4a:3c:
1c:2f:f0:0c:7a:62:dc:73:ea:e7:fa:b5:27:b5:e1:
e4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FB:4F:40:67:81:A8:76:0D:9C:1F:CA:28:AB:73:4E:E8:68:7D:4F
X509v3 Authority Key Identifier:
keyid:09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ff:0c:46:e4:1b:1c:a5:02:ce:a5:ed:90:9e:ec:27:dd:40:
6c:84:4f:2e:6c:61:41:a2:a7:57:99:c7:af:09:fc:85:38:61:
98:29:a9:79:c2:5d:ef:07:ab:46:a9:ca:13:22:f7:d8:f5:70:
f7:67:5c:7a:c7:36:07:c2:44:53:53:b9:64:43:71:fe:0c:6b:
6d:ea:f6:b3:75:bf:49:f7:ab:2e:72:a7:6b:5d:98:89:7f:07:
8f:eb:fa:a4:e9:ac:c5:e7:a9:31:f3:e4:37:d2:ef:90:07:b9:
7d:2a:b2:e8:79:b2:1c:d0:fd:b2:5c:79:f8:49:dd:bd:35:43:
e9:e4:8f:d6:b0:ad:57:05:52:30:35:90:b6:5e:e4:52:fe:65:
a3:03:16:24:cf:b1:33:55:0a:86:ba:2c:50:d2:e7:6a:aa:7c:
c4:2a:18:29:3b:f8:df:21:df:dd:33:2f:6b:47:d9:bd:cf:d5:
a5:d2:73:12:28:8c:38:bd:77:b0:73:56:47:9d:b4:e6:7d:b0:
18:09:4a:bf:76:e7:04:46:61:75:a9:18:b4:be:13:40:51:8b:
ab:48:49:8c:12:e1:75:55:7b:e2:76:64:b7:e2:2c:f1:99:0f:
12:71:ad:e4:f3:fa:83:96:16:68:7a:59:21:74:65:cf:56:83:
5e:6e:3c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:16:30 2025 by rpki-client