Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
File: CSU4hqAlCgTsab4Au_hDPC8BS3w.mft (raw, json)
Hash identifier: f4rf1MFFoyJ64trF800QrSO/D28Au0FmK67ozA1OBds=
Subject key identifier: 05:14:29:43:4B:F3:61:C0:99:1E:95:45:CF:8E:DE:A1:3C:D3:ED:65
Authority key identifier: 09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
Certificate issuer: /CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Certificate serial: 01983616330BFF15E759BB37EEF14AA0B047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
Manifest number: 15FD
Signing time: Wed 23 Jul 2025 07:01:21 +0000
Manifest this update: Wed 23 Jul 2025 07:01:21 +0000
Manifest next update: Thu 24 Jul 2025 07:01:21 +0000
Files and hashes: 1: CSU4hqAlCgTsab4Au_hDPC8BS3w.crl (hash: wYuiTI+6eze+mo3Nkc656ClNLNF4SoXUWQMRDrtXTEE=)
2: VEEuJRf1IaY-i7njwh4GTFyz4KQ.roa (hash: K73j5BLwJXJOZ/R7FX/mXQkCi9Da4esGEBz7JkbDtTI=)
3: _MIIbyQenzH6F7OwMqPXOOY9ctM.roa (hash: eIV7bKM/aiDgvacDkUhEBLMcFg6gGKWdnq3Gtl3ghX0=)
4: xWk3TJ8xAGPDUZQKY3kASUL6dzM.roa (hash: /z7ZjPJ/gv/pCsZNSb1u2GohazjLks0+0ejnDw3SaX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 06:24:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:36:16:33:0b:ff:15:e7:59:bb:37:ee:f1:4a:a0:b0:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Validity
Not Before: Jul 23 07:01:21 2025 GMT
Not After : Jul 24 07:01:21 2025 GMT
Subject: CN=051429434bf361c0991e9545cf8edea13cd3ed65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c1:3d:6f:6c:1c:54:34:f5:6f:a1:42:24:c2:
22:f3:72:5a:67:7f:36:74:2e:f2:b6:f7:e2:a4:f6:
74:e2:42:88:c9:ed:2f:e9:29:95:f6:e6:26:8b:25:
1a:12:a2:4d:2c:ec:f4:49:75:40:0f:77:07:3e:26:
4d:58:8f:6c:a8:43:fd:3f:aa:94:79:05:fb:b4:27:
af:2e:ee:93:f4:47:73:56:13:ff:b3:68:20:72:14:
b6:2e:b0:65:d1:5a:f5:ba:6d:e8:27:b0:15:61:07:
eb:e9:e8:4c:37:c0:f3:dd:94:e1:24:d1:fc:0a:c7:
6b:01:c9:27:9f:38:6a:71:c7:2a:c3:0d:75:d4:ed:
c2:a1:a4:ee:0e:69:8b:ba:d4:6c:47:6b:25:68:d3:
c4:4b:96:86:90:8b:7e:84:3c:f6:35:3d:78:05:11:
c1:55:33:e4:5e:ca:ff:12:8b:cc:c3:5a:d1:ac:96:
33:de:41:78:83:a1:34:84:f3:7d:0a:59:23:a1:94:
72:6a:33:70:27:6f:5d:1b:87:b5:65:48:d5:ad:cd:
8b:20:6c:07:de:86:da:64:85:01:66:3a:8a:fd:e9:
85:3d:b6:4b:7f:5c:dd:bb:95:02:09:88:d5:28:10:
16:41:8e:1f:84:6a:67:d6:3c:b4:bc:e4:fc:47:c6:
7f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:14:29:43:4B:F3:61:C0:99:1E:95:45:CF:8E:DE:A1:3C:D3:ED:65
X509v3 Authority Key Identifier:
keyid:09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c5:52:47:25:f6:a0:2c:e8:65:c2:50:15:d2:bd:69:bf:91:
47:f9:a9:92:ec:7e:18:e6:d6:e6:b0:07:98:4c:98:d8:cc:ec:
d0:6e:66:ac:f0:f6:15:fa:c0:0e:1f:89:8b:23:2c:55:01:de:
e6:2e:e4:7c:05:20:9c:66:5b:f7:3e:52:f9:87:fa:f3:c4:6a:
38:a4:6b:83:6c:22:0a:94:17:e5:76:13:0b:40:dd:40:88:53:
5d:26:08:f9:96:00:30:76:28:dd:7e:de:43:75:88:38:20:b3:
24:38:22:5e:23:ea:96:d2:e4:ad:69:76:39:4d:01:63:d0:af:
b8:5b:60:0a:7a:b3:4c:3a:b4:18:fd:dc:fb:85:b7:94:b9:3c:
d3:95:52:cb:3d:50:1f:3d:ba:a1:b9:8d:65:5c:89:8c:12:5f:
30:0c:f7:fc:78:90:8a:f3:9c:4d:e8:a0:80:4f:e9:24:7a:c1:
b2:db:4f:30:e9:70:02:78:6f:92:75:9f:31:73:ca:2a:99:21:
d1:57:66:23:6c:b6:05:b0:fd:68:d0:14:c4:70:fd:95:77:c3:
39:cc:74:b5:58:2f:be:02:4c:89:09:d7:f4:04:9c:b7:de:9b:
f0:53:54:c8:90:11:b5:c1:fd:5f:1b:3f:e4:a9:cb:00:4a:1f:
8b:0e:e4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 07:54:46 2025 by rpki-client