Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
File: CUSqrH8uuymBwkdj6z1gRe-9bwY.mft (raw, json)
Hash identifier: mF201Wv0ukpLQ6vLzBPtqMO/pkJ9KYB2XwSuUQ/hFIQ=
Subject key identifier: A4:48:BA:0E:0A:1B:5F:2B:A1:20:DA:D6:50:80:33:A8:1A:4F:03:D2
Authority key identifier: 09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06
Certificate issuer: /CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06
Certificate serial: 019897EEBB1A0E52B69D7A430F91B1293878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
Manifest number: 0C69
Signing time: Mon 11 Aug 2025 07:01:01 +0000
Manifest this update: Mon 11 Aug 2025 07:01:01 +0000
Manifest next update: Tue 12 Aug 2025 07:01:01 +0000
Files and hashes: 1: CUSqrH8uuymBwkdj6z1gRe-9bwY.crl (hash: S2zNMey2dPhe13yIzJuKMBEd31/CPxOawWPrR+K2cVE=)
2: U0OBxV0NmzWdhOROB_4XE_nOuxo.roa (hash: R0oHniHcgRLjr+xP295YEa+yjJ7+h87sW92ahFuO7CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 07:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:ee:bb:1a:0e:52:b6:9d:7a:43:0f:91:b1:29:38:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06
Validity
Not Before: Aug 11 07:01:01 2025 GMT
Not After : Aug 12 07:01:01 2025 GMT
Subject: CN=a448ba0e0a1b5f2ba120dad6508033a81a4f03d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ff:65:e1:be:9e:f6:1e:a3:8f:1c:c6:52:16:
d6:f6:c1:fe:b5:34:76:0f:e5:e2:d1:fb:9d:96:12:
c5:8b:35:49:38:90:70:da:50:0f:79:f4:f1:16:3e:
cc:df:00:93:c2:87:b0:c6:2b:05:c5:b7:5a:72:e9:
0e:e2:5a:31:ac:63:51:01:d3:15:e9:e8:d3:ca:5a:
37:75:86:18:b6:d7:df:18:5a:a1:25:fb:91:76:e8:
bb:7e:e5:11:e9:0f:07:d8:28:a4:fe:5f:e1:b8:9c:
13:8e:5b:72:f7:87:2b:f8:45:3f:43:9c:b4:e9:7a:
84:a0:ed:d6:49:d4:04:7a:9b:bb:24:b6:78:c5:74:
82:16:c7:d1:ba:03:bb:62:ca:87:d1:23:96:08:d7:
a3:20:d4:9b:3d:01:cc:c9:70:10:7a:7b:bd:e1:5d:
a4:a8:14:4f:12:93:81:06:f3:30:93:21:0b:0b:95:
e1:1b:a5:ed:ed:53:ad:64:82:43:79:fc:9a:c0:5f:
9d:cc:ad:9d:34:0d:1e:f4:e5:0f:9e:e4:4e:06:03:
a0:80:00:1e:61:4a:17:be:71:d3:90:16:c2:47:df:
50:84:73:bf:bb:e3:63:74:23:8f:f0:52:9d:11:31:
47:cc:f8:c6:60:96:21:26:b0:80:40:98:95:68:e0:
60:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:48:BA:0E:0A:1B:5F:2B:A1:20:DA:D6:50:80:33:A8:1A:4F:03:D2
X509v3 Authority Key Identifier:
keyid:09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:34:40:53:b4:ec:2e:60:8f:31:36:ba:61:ab:90:0c:f2:e3:
a5:64:05:ce:b3:71:6b:2f:f3:d7:d1:88:10:38:d9:52:29:e3:
b2:a5:c8:e7:b2:e6:0e:c4:02:d6:dd:fc:51:af:4c:d0:0f:f5:
d7:85:c1:0d:90:db:10:6d:9d:c5:93:6a:a1:b4:38:f6:e7:a4:
c0:70:30:08:69:e5:14:1d:75:38:0a:49:ed:bd:2b:1b:62:4b:
78:7b:41:f9:c1:7d:23:f4:6b:06:9e:9c:49:f3:b2:0a:44:77:
a9:a5:1f:b7:b4:8c:b3:eb:6f:8f:26:11:57:93:33:8c:18:ab:
45:a1:98:c3:3c:38:94:10:5b:38:9a:c8:b9:0e:ea:10:f4:51:
90:be:4c:c2:96:e2:72:40:d0:5b:62:b9:24:65:d3:27:01:45:
5a:7d:1d:90:3f:6d:22:c3:35:78:93:4e:9d:d8:0a:34:3d:26:
1c:a8:a8:15:9a:6d:3f:b3:2f:e3:25:4b:80:57:73:f3:c9:da:
8e:fa:49:e5:0a:87:fa:5a:36:d3:85:b1:f2:62:d2:59:51:6a:
6d:0f:a3:66:60:96:bb:02:e1:10:04:69:25:ed:c9:10:0d:59:
7e:c2:6b:5f:7f:27:d4:ee:80:11:e4:19:4d:be:d7:06:64:7f:
36:c6:aa:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 12:58:20 2025 by rpki-client