Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
File: 9Csush9rBnIU3PrbKQJT2nF9YuM.mft (raw, json)
Hash identifier: 4uPi4rGIJfl6o3D/jf3ZA6OCbJFhTfKV/QkWl9zvoAY=
Subject key identifier: D0:2D:D6:8F:05:D2:57:50:0F:28:43:F6:07:AD:57:33:2F:B3:99:E2
Authority key identifier: F4:2B:2E:B2:1F:6B:06:72:14:DC:FA:DB:29:02:53:DA:71:7D:62:E3
Certificate issuer: /CN=f42b2eb21f6b067214dcfadb290253da717d62e3
Certificate serial: 01965E71D33F79AE66E7759ED19FB233BB39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
Manifest number: 1502
Signing time: Tue 22 Apr 2025 17:00:39 +0000
Manifest this update: Tue 22 Apr 2025 17:00:39 +0000
Manifest next update: Wed 23 Apr 2025 17:00:39 +0000
Files and hashes: 1: 9Csush9rBnIU3PrbKQJT2nF9YuM.crl (hash: gxGIh1NMIvwLZPagHaanQAJ0sxXQTG76ESuk7FGmiNs=)
2: pauhzMvpgkVgNc366YpahktJW_E.roa (hash: CXLZhXqRNNwNQ9k+Lw14xdWMjm1xkv/Bk4H8O3Arf58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 17:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:71:d3:3f:79:ae:66:e7:75:9e:d1:9f:b2:33:bb:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42b2eb21f6b067214dcfadb290253da717d62e3
Validity
Not Before: Apr 22 17:00:39 2025 GMT
Not After : Apr 23 17:00:39 2025 GMT
Subject: CN=d02dd68f05d257500f2843f607ad57332fb399e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:60:18:da:ba:6e:8b:e7:48:0e:83:c0:5c:11:
b0:05:53:fd:98:c7:9b:7c:e9:e8:59:87:38:54:35:
66:14:c5:32:c6:0f:5a:24:df:4d:2b:86:c8:a2:82:
18:97:54:dc:ae:f1:bf:54:75:86:ee:e9:76:c0:c3:
86:d8:d7:c6:78:ac:dc:20:45:af:ab:95:60:e0:54:
e1:b3:5b:ff:01:46:cd:e9:f1:48:03:fc:bb:f9:0e:
3f:d8:0d:ef:15:e1:ab:3e:97:bf:97:fa:87:c6:32:
cb:60:e4:e6:85:97:d7:ec:dc:f9:c6:9e:c2:47:a4:
0a:8b:8e:94:d3:04:e6:c5:71:19:fc:5f:1b:04:4e:
4f:d8:0f:9e:3e:ac:c4:27:dc:27:06:ca:84:70:de:
5c:d1:f4:59:f3:ae:d3:05:10:4b:99:c9:5d:f2:22:
ef:aa:c9:45:04:8e:69:26:81:ab:4b:b2:8e:26:12:
c5:58:f3:ef:21:98:c1:b3:13:25:3a:f7:ab:11:0d:
a1:33:7a:90:49:e2:f5:0b:33:9e:59:dc:22:7d:8c:
f7:56:8d:0f:1d:47:9b:2d:29:18:3b:e6:dd:b4:ec:
aa:bc:f5:b1:87:fd:74:66:6d:37:62:38:0e:0a:84:
d2:92:64:3e:df:f4:50:2d:a9:28:0e:c8:a8:e5:2c:
e1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2D:D6:8F:05:D2:57:50:0F:28:43:F6:07:AD:57:33:2F:B3:99:E2
X509v3 Authority Key Identifier:
keyid:F4:2B:2E:B2:1F:6B:06:72:14:DC:FA:DB:29:02:53:DA:71:7D:62:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:cf:f9:97:43:3b:b5:98:72:10:8f:76:87:e9:7f:98:08:a5:
fb:c2:81:f6:63:95:08:6b:3d:55:ef:7a:44:c3:19:94:57:6b:
3f:e5:db:4f:e8:15:1a:97:3b:61:80:44:16:26:e9:45:de:71:
a8:0a:c6:14:b9:00:8c:c6:7f:b2:92:3f:57:78:a5:bf:20:e2:
ba:7a:9e:60:93:af:c9:cb:63:fd:f9:74:0d:35:02:8c:a5:ae:
a5:2c:a8:f9:d5:74:20:48:f8:07:21:fd:61:d8:64:67:5d:2e:
7b:75:51:82:40:cc:d5:15:59:ce:86:d2:bc:cb:c0:8d:b1:83:
e1:bc:78:43:f3:9b:7d:00:e7:2b:ed:22:57:c7:3e:f2:b4:f1:
f1:75:48:e6:08:e1:61:d1:c1:ee:6d:c5:9c:23:5c:ee:50:3c:
82:02:7c:a3:c5:6f:a8:46:fd:38:62:cf:4a:60:5d:b4:e9:a1:
1d:9c:ec:b0:c3:00:1c:2f:b2:32:41:63:7c:e5:0a:f2:b1:51:
9b:e7:6b:c3:6e:24:80:d2:9a:d7:52:e4:7e:81:e8:d1:80:4e:
57:02:cc:a0:f8:d3:ae:e3:5a:c5:a1:75:33:ac:1d:2d:5e:35:
a7:67:27:e5:b9:a5:27:3c:21:fa:c3:81:d8:50:5f:4f:94:f9:
65:1c:8b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:13:02 2025 by rpki-client