Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
File: CSU4hqAlCgTsab4Au_hDPC8BS3w.mft (raw, json)
Hash identifier: WKgTE/UKUh1W9aE1O5+OIuP14mk+jTwNKH8jp25EJWI=
Subject key identifier: EC:C4:D0:B3:96:6E:04:28:FB:3F:8E:91:72:59:F1:A2:A6:46:2A:02
Authority key identifier: 09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
Certificate issuer: /CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Certificate serial: 0196759E3FEFB4E9E1C78945B24A2EC48258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
Manifest number: 1514
Signing time: Sun 27 Apr 2025 05:00:27 +0000
Manifest this update: Sun 27 Apr 2025 05:00:27 +0000
Manifest next update: Mon 28 Apr 2025 05:00:27 +0000
Files and hashes: 1: 7gE45KfXQALOMAUGdb2BAregZuQ.roa (hash: FrGkbAlx02b1cSATN7WbBjpuh48y5i0oZZPxwkdVo9g=)
2: CSU4hqAlCgTsab4Au_hDPC8BS3w.crl (hash: uAO5+QsZAEeA9/BMxtxhiTwhbArRZ3TfKKd60d8ZTsY=)
3: xWk3TJ8xAGPDUZQKY3kASUL6dzM.roa (hash: /z7ZjPJ/gv/pCsZNSb1u2GohazjLks0+0ejnDw3SaX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:3f:ef:b4:e9:e1:c7:89:45:b2:4a:2e:c4:82:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09253886a0250a04ec69be00bbf8433c2f014b7c
Validity
Not Before: Apr 27 05:00:27 2025 GMT
Not After : Apr 28 05:00:27 2025 GMT
Subject: CN=ecc4d0b3966e0428fb3f8e917259f1a2a6462a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:97:cf:4e:4b:4b:45:5c:1b:69:60:fd:f1:d0:
2d:f5:52:11:08:cd:73:98:18:87:39:3e:c2:07:13:
50:48:0f:1f:ff:7c:f1:7a:78:26:95:84:2c:0f:b7:
d1:4c:79:80:de:c0:18:88:5e:b2:c5:52:18:42:95:
83:f1:83:31:0a:08:23:11:76:16:07:9e:52:ee:f4:
1e:40:53:b0:f5:c6:8b:5b:96:21:46:91:66:bc:71:
23:48:d9:5d:eb:8d:82:bb:cf:82:6a:df:95:b1:3d:
ef:d7:62:04:fe:91:6d:96:49:b7:e5:81:2a:86:79:
dd:d2:91:65:75:07:12:1e:d0:8a:ab:88:2f:19:ca:
1a:32:80:ca:4d:ac:c5:af:6b:b4:48:dc:00:0c:ca:
31:1f:93:72:8a:3a:31:3d:ee:39:36:37:84:ce:7d:
05:65:36:45:7d:85:15:5c:f2:a6:4f:5b:23:59:71:
77:9f:54:eb:cd:c0:2a:00:66:3c:b3:e3:24:1f:d0:
fd:44:0e:fe:cf:02:38:8b:98:fc:29:14:78:33:39:
b7:bd:1d:02:2f:47:4b:0c:2c:31:0a:68:c5:8c:57:
40:94:37:11:43:6b:fa:d0:6e:1b:3f:d8:2a:9e:f8:
c8:5d:c8:19:32:a3:22:e3:6c:8d:b4:e2:02:ff:5f:
6b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C4:D0:B3:96:6E:04:28:FB:3F:8E:91:72:59:F1:A2:A6:46:2A:02
X509v3 Authority Key Identifier:
keyid:09:25:38:86:A0:25:0A:04:EC:69:BE:00:BB:F8:43:3C:2F:01:4B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSU4hqAlCgTsab4Au_hDPC8BS3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/36f83e-6be6-42c5-8380-114ad41cf331/1/CSU4hqAlCgTsab4Au_hDPC8BS3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:cb:88:10:c8:63:3a:4f:1b:6f:06:b9:4f:5f:62:c9:ae:d2:
32:08:dc:ce:9a:62:ce:81:b2:36:7a:50:ae:65:3d:57:6b:08:
91:fe:b8:2d:12:32:57:b2:55:b8:ca:64:9b:b3:ff:80:90:22:
d4:3b:0c:99:80:f4:37:89:95:88:14:0f:94:2f:57:2b:a9:fa:
a6:16:ec:15:d6:a3:4e:fc:9d:c4:6c:88:11:61:43:e8:61:97:
dd:60:c9:77:69:87:08:63:ce:1c:61:a4:5a:3a:6f:67:be:a6:
2b:ef:34:0f:b9:9e:6d:bc:d1:4c:5a:42:87:0c:b6:43:fd:71:
48:05:1a:0d:65:71:3c:26:8e:36:39:cf:00:1f:64:0b:1b:53:
a8:f2:d8:90:96:a6:37:d9:f2:ff:9c:7c:af:6f:46:77:e1:bf:
49:fd:25:bf:d1:55:3d:a3:f1:73:a3:35:ea:5b:98:12:28:f8:
e3:6f:8d:1e:fb:00:cd:96:50:de:75:1c:4e:1d:ee:da:c0:fc:
35:a3:bc:9a:8a:60:1d:0c:38:aa:80:4b:eb:50:34:6f:11:16:
af:79:3a:83:05:2f:98:39:49:eb:4f:17:c1:4c:cd:12:8e:ec:
7b:27:2d:d3:e2:6b:5a:d3:3f:70:44:4f:2b:91:6c:9c:58:c1:
e4:67:2d:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1nj/vtOnhx4lFskouxIJYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MjUzODg2YTAyNTBhMDRlYzY5YmUwMGJiZjg0MzNjMmYw
MTRiN2MwHhcNMjUwNDI3MDUwMDI3WhcNMjUwNDI4MDUwMDI3WjAzMTEwLwYDVQQD
EyhlY2M0ZDBiMzk2NmUwNDI4ZmIzZjhlOTE3MjU5ZjFhMmE2NDYyYTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZfPTktLRVwbaWD98dAt9VIRCM1z
mBiHOT7CBxNQSA8f/3zxengmlYQsD7fRTHmA3sAYiF6yxVIYQpWD8YMxCggjEXYW
B55S7vQeQFOw9caLW5YhRpFmvHEjSNld642Cu8+Cat+VsT3v12IE/pFtlkm35YEq
hnnd0pFldQcSHtCKq4gvGcoaMoDKTazFr2u0SNwADMoxH5NyijoxPe45NjeEzn0F
ZTZFfYUVXPKmT1sjWXF3n1TrzcAqAGY8s+MkH9D9RA7+zwI4i5j8KRR4Mzm3vR0C
L0dLDCwxCmjFjFdAlDcRQ2v60G4bP9gqnvjIXcgZMqMi42yNtOIC/19rQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzE0LOWbgQo+z+OkXJZ8aKmRioCMB8GA1UdIwQY
MBaAFAklOIagJQoE7Gm+ALv4QzwvAUt8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1NVNGhxQWxDZ1RzYWI0QXVfaERQQzhCUzN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8zNmY4M2UtNmJlNi00MmM1LTgzODAt
MTE0YWQ0MWNmMzMxLzEvQ1NVNGhxQWxDZ1RzYWI0QXVfaERQQzhCUzN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8zNmY4M2UtNmJlNi00MmM1LTgzODAtMTE0YWQ0MWNmMzMx
LzEvQ1NVNGhxQWxDZ1RzYWI0QXVfaERQQzhCUzN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFcuIEMhj
Ok8bbwa5T19iya7SMgjczppizoGyNnpQrmU9V2sIkf64LRIyV7JVuMpkm7P/gJAi
1DsMmYD0N4mViBQPlC9XK6n6phbsFdajTvydxGyIEWFD6GGX3WDJd2mHCGPOHGGk
WjpvZ76mK+80D7mebbzRTFpChwy2Q/1xSAUaDWVxPCaONjnPAB9kCxtTqPLYkJam
N9ny/5x8r29Gd+G/Sf0lv9FVPaPxc6M16luYEij442+NHvsAzZZQ3nUcTh3u2sD8
NaO8mopgHQw4qoBL61A0bxEWr3k6gwUvmDlJ608XwUzNEo7seyct0+JrWtM/cERP
K5FsnFjB5GctEw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 07:42:12 2025 by rpki-client