Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
File: CSU4hqAlCgTsab4Au_hDPC8BS3w.mft (raw, json)
Hash identifier: YFXKfCpHjO+O58bTboHBP/FulQ5SQj3X9vUhcv7FF88=
Subject key identifier: 74:C6:7D:20:8C:E1:9E:3D:00:8F:8D:B4:7D:E3:E5:2A:26:B6:D3:EB
Authority key identifier: 09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
Certificate issuer: /CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Certificate serial: 019645566086C6BA301CCFB1A713463BB6B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
Manifest number: 14FB
Signing time: Thu 17 Apr 2025 20:00:10 +0000
Manifest this update: Thu 17 Apr 2025 20:00:10 +0000
Manifest next update: Fri 18 Apr 2025 20:00:10 +0000
Files and hashes: 1: 7gE45KfXQALOMAUGdb2BAregZuQ.roa (hash: FrGkbAlx02b1cSATN7WbBjpuh48y5i0oZZPxwkdVo9g=)
2: CSU4hqAlCgTsab4Au_hDPC8BS3w.crl (hash: pfxe8FZ3QQOABeurx3b+sweaWA8DPYIOLiE/UO4b4+g=)
3: xWk3TJ8xAGPDUZQKY3kASUL6dzM.roa (hash: /z7ZjPJ/gv/pCsZNSb1u2GohazjLks0+0ejnDw3SaX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:56:60:86:c6:ba:30:1c:cf:b1:a7:13:46:3b:b6:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Validity
Not Before: Apr 17 20:00:10 2025 GMT
Not After : Apr 18 20:00:10 2025 GMT
Subject: CN=74c67d208ce19e3d008f8db47de3e52a26b6d3eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ff:3d:02:89:ff:97:84:3e:03:b4:59:f9:fc:
8c:76:67:c0:a8:80:c4:26:a9:2d:4b:91:ce:bb:0e:
34:f0:ce:eb:b8:1b:c4:14:0f:71:2f:d7:e7:4b:cd:
95:81:c6:ae:19:47:d9:f9:df:18:8f:16:0c:4e:25:
1d:ae:98:0d:2a:91:31:09:54:27:99:20:ab:82:5f:
f9:ed:2d:51:95:8f:e9:3b:32:8e:37:0a:4a:a4:3e:
97:9c:9f:03:0a:fb:3a:32:1a:7a:9f:13:b5:7b:84:
a9:d7:16:63:d2:38:2a:62:b8:21:0a:68:c4:1b:9b:
db:95:a0:0f:f3:dc:27:e6:b6:0a:86:d3:ac:d5:e1:
3b:73:fb:d7:34:eb:df:ba:74:88:58:c4:91:cb:15:
72:8f:ff:7a:db:c2:4b:6f:4e:5f:8b:40:37:77:7a:
25:0d:6d:22:87:24:9b:4a:f0:0d:77:37:4a:6c:37:
0b:7b:c2:b9:42:1e:ff:ff:ff:c4:da:57:be:4b:d1:
87:13:e7:7c:4b:7b:c3:b5:4d:1f:29:ee:1d:c8:ab:
72:5e:de:35:80:a1:99:5d:1d:3e:9c:d7:0c:cc:97:
9b:11:d1:8d:d8:0f:0a:be:49:e8:cf:34:98:6d:ae:
56:a4:68:bd:23:c3:17:22:9e:5b:de:93:56:a5:ff:
67:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C6:7D:20:8C:E1:9E:3D:00:8F:8D:B4:7D:E3:E5:2A:26:B6:D3:EB
X509v3 Authority Key Identifier:
keyid:09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:76:8a:e6:ad:2a:f1:d4:de:09:ed:ab:82:93:c3:9d:84:3e:
6c:2b:14:0e:72:25:6d:40:c6:65:2f:69:88:c5:9f:df:2f:bd:
21:ed:58:58:5e:2e:e8:ec:c5:3f:fb:85:f3:4b:68:db:49:81:
23:ea:a5:75:93:fd:43:5a:00:60:fd:0b:e4:62:4a:a8:c9:e6:
d5:e2:31:fe:64:c9:58:fc:ac:df:5d:e4:19:bf:b5:4c:bc:48:
a3:2a:ba:f1:10:32:1c:0b:7c:9d:5b:aa:18:7c:87:89:f8:cd:
d8:6f:1a:30:d1:7b:f6:4c:ba:f5:50:32:70:88:20:19:e3:25:
ac:d0:34:ba:79:4a:c3:3b:bd:0b:4e:0f:02:45:bb:0e:05:dd:
fd:99:51:15:65:89:97:1a:9b:80:c5:9d:dc:bd:ec:f7:ed:0a:
bc:e6:6f:79:7a:72:4a:59:75:e3:60:de:ab:10:69:62:54:ab:
8a:cb:01:91:4c:9a:f9:ee:79:52:41:1a:45:75:f5:54:01:36:
81:cf:e1:73:b1:b6:bc:a7:88:86:ca:12:15:84:87:90:f6:72:
dc:e7:f4:2f:e2:52:73:52:77:b2:54:e2:2c:ad:01:b0:d1:fa:
66:4e:4a:7e:a7:5a:0f:e0:1d:8c:cf:44:77:27:0f:3c:6f:6e:
62:bc:93:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:37:48 2025 by rpki-client