Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
File: 9Csush9rBnIU3PrbKQJT2nF9YuM.mft (raw, json)
Hash identifier: jB71zGqxSDdGX5ERk3VY5FjeVCPmWjIZF9ckIJ6f0tk=
Subject key identifier: 66:49:78:51:D5:48:42:52:A4:8C:55:7B:FA:0E:B2:52:16:EA:C7:0C
Authority key identifier: F4:2B:2E:B2:1F:6B:06:72:14:DC:FA:DB:29:02:53:DA:71:7D:62:E3
Certificate issuer: /CN=f42b2eb21f6b067214dcfadb290253da717d62e3
Certificate serial: 01969C3DB3A2964403D823CF594683AB046B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
Manifest number: 1522
Signing time: Sun 04 May 2025 17:00:11 +0000
Manifest this update: Sun 04 May 2025 17:00:11 +0000
Manifest next update: Mon 05 May 2025 17:00:11 +0000
Files and hashes: 1: 9Csush9rBnIU3PrbKQJT2nF9YuM.crl (hash: EZ15IL/gEe80zb3xdY4o91CRKJx6X2MHSibwLBcWVXQ=)
2: pauhzMvpgkVgNc366YpahktJW_E.roa (hash: CXLZhXqRNNwNQ9k+Lw14xdWMjm1xkv/Bk4H8O3Arf58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 13:58:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:3d:b3:a2:96:44:03:d8:23:cf:59:46:83:ab:04:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f42b2eb21f6b067214dcfadb290253da717d62e3
Validity
Not Before: May 4 17:00:11 2025 GMT
Not After : May 5 17:00:11 2025 GMT
Subject: CN=66497851d5484252a48c557bfa0eb25216eac70c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:67:e5:5d:dd:80:83:dc:46:a4:e2:f1:4a:c4:
2a:e1:40:ca:82:8b:e6:26:c0:d9:71:2c:8f:fb:4d:
74:51:4c:16:55:ce:e6:f3:3d:d2:15:03:1d:1c:46:
83:15:8c:b8:49:e6:72:37:24:4c:34:48:2a:90:e1:
0f:e8:16:2a:0a:bf:83:81:3b:66:a8:e6:aa:aa:97:
14:b0:39:a3:6d:3d:91:96:4e:95:e0:35:08:34:56:
3f:67:32:dc:37:6b:27:c6:49:c2:5b:5a:77:aa:99:
d6:a6:c0:af:dd:4d:ac:9f:6e:e3:dd:b9:42:3c:95:
ec:3e:fb:a1:76:46:90:0c:be:8c:73:20:8c:d5:a8:
ad:89:8d:dd:65:ee:46:14:d6:50:11:9d:70:60:bb:
6c:2e:a1:59:3f:4c:39:78:9e:d6:6e:0b:1c:42:44:
54:9b:b8:88:b3:ca:56:b5:70:e5:e1:2e:20:7f:2d:
89:e1:70:bd:79:14:f5:17:0e:96:29:92:bd:dd:77:
84:30:81:45:d5:49:4b:77:47:09:bc:94:1d:13:a7:
52:cd:9f:89:b2:bd:b5:8b:64:15:2a:59:d4:12:d8:
df:0f:e6:0d:16:b8:bb:5c:a8:f5:ab:39:b7:f5:a2:
22:2f:14:fa:0c:93:16:5d:6c:f4:3b:9b:50:87:9e:
d6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:49:78:51:D5:48:42:52:A4:8C:55:7B:FA:0E:B2:52:16:EA:C7:0C
X509v3 Authority Key Identifier:
keyid:F4:2B:2E:B2:1F:6B:06:72:14:DC:FA:DB:29:02:53:DA:71:7D:62:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:f6:19:d7:82:ac:42:17:fd:04:6c:93:03:e5:83:eb:a9:b5:
94:7e:f5:3a:40:4c:6f:41:56:06:42:f7:f0:84:34:cb:f4:59:
5b:28:0c:8a:08:2f:5a:e7:ed:68:fd:c6:df:e3:b0:90:2e:ca:
f3:38:c8:b3:f7:bc:f8:92:38:b1:57:4d:c9:1c:08:59:39:5c:
71:99:1b:dd:f0:e1:93:cd:d2:e5:2d:c5:8b:ad:5f:4a:c4:ce:
50:09:03:8f:22:25:21:b9:9e:0b:24:84:f4:a6:17:56:a7:fc:
af:53:4f:fb:f2:8a:88:e8:21:69:02:17:28:b5:94:d6:2c:cc:
b5:d2:25:c6:19:bf:39:cd:ce:b8:15:d3:0a:d2:7a:02:68:d5:
c2:0f:45:b5:5e:67:e2:ff:86:2d:b4:51:b7:1c:32:7d:2f:78:
69:3a:46:ec:31:d3:96:5d:25:99:91:e7:ac:b7:73:c5:fa:fe:
ef:21:65:36:3d:48:19:aa:47:d7:23:81:43:15:33:15:f5:45:
a1:17:4f:51:24:5d:3e:f1:28:ed:2f:15:50:aa:73:60:e7:bd:
fe:d9:76:7c:ac:1a:6c:c8:bd:21:c1:08:44:14:4f:d0:82:28:
37:e2:85:01:89:82:87:98:97:4d:e4:d7:75:bb:6d:99:4a:cd:
00:e1:61:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 21:14:46 2025 by rpki-client