Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
File: CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft (raw, json)
Hash identifier: LWJE5dVeyo+xLMlleQrNBM9K1a10uDZ6sDBh+08btkI=
Subject key identifier: 05:B4:F3:63:FE:77:56:41:5F:88:E6:AC:0C:51:33:F1:22:AC:CF:3E
Authority key identifier: 09:35:09:E7:EC:68:FE:2D:94:34:07:D5:DD:12:6A:0F:59:6F:2A:B5
Certificate issuer: /CN=093509e7ec68fe2d943407d5dd126a0f596f2ab5
Certificate serial: 01967A57482AC16888108D2136A7BA2234EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
Manifest number: 1042
Signing time: Mon 28 Apr 2025 03:01:02 +0000
Manifest this update: Mon 28 Apr 2025 03:01:02 +0000
Manifest next update: Tue 29 Apr 2025 03:01:02 +0000
Files and hashes: 1: CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl (hash: dVDncIP5dGrBmIq0QU01yX6OpOUMCxg6ijK/W3gdsMo=)
2: x-sFc0XuZWyC8mb5YkUAH-GfdII.roa (hash: SLT0QNLc8vBCO5UeVhbutYzbWFamBQrhqoa9wxuI2Us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:57:48:2a:c1:68:88:10:8d:21:36:a7:ba:22:34:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093509e7ec68fe2d943407d5dd126a0f596f2ab5
Validity
Not Before: Apr 28 03:01:02 2025 GMT
Not After : Apr 29 03:01:02 2025 GMT
Subject: CN=05b4f363fe7756415f88e6ac0c5133f122accf3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:44:19:e2:96:27:8b:09:99:98:46:c7:ae:d0:
65:73:5c:b0:16:28:3a:5b:f4:ea:38:d8:2d:bd:31:
e1:65:ef:c5:ee:90:e9:e4:e4:be:ef:68:5f:49:67:
b9:ef:28:ad:09:67:d6:f1:12:83:3b:55:3b:8e:4e:
6e:3c:84:80:4f:ee:3e:99:1f:f8:23:e4:d9:83:3c:
b2:68:87:e1:d1:28:02:40:52:74:44:35:c2:8c:0f:
20:31:f5:92:bf:aa:69:ab:47:2f:96:3a:37:01:1d:
4e:86:98:a8:b5:9a:cf:cd:4d:f5:98:8f:ce:57:d2:
96:fc:51:03:1a:3c:ca:aa:2c:ae:08:b3:5c:f3:70:
3d:34:b7:1e:a4:76:4c:78:f4:a4:eb:9f:e0:23:99:
47:e7:e7:e2:10:05:54:ae:41:cb:cb:35:94:53:f7:
c4:15:19:38:37:e7:7c:bc:e8:f2:9c:ae:05:72:8d:
99:0a:84:96:8f:c3:0b:e8:64:2a:76:43:96:db:4d:
d7:6b:88:0a:b7:61:e4:a9:cc:65:4c:58:6e:cc:f2:
36:a7:59:5e:ce:bf:f2:5e:33:87:2c:ab:85:f4:23:
64:ef:ad:ca:90:db:f2:8e:99:40:f3:53:fb:81:09:
fd:12:0c:ea:9c:bf:90:f0:2b:49:99:07:74:e4:3f:
0d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B4:F3:63:FE:77:56:41:5F:88:E6:AC:0C:51:33:F1:22:AC:CF:3E
X509v3 Authority Key Identifier:
keyid:09:35:09:E7:EC:68:FE:2D:94:34:07:D5:DD:12:6A:0F:59:6F:2A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dfb94c-fdf4-4972-9ad8-7d697337137b/1/CTUJ5-xo_i2UNAfV3RJqD1lvKrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:78:ef:4a:0c:e7:08:ff:8e:8b:8e:32:5f:50:2c:dd:93:2b:
1e:1f:b7:0e:71:d8:68:97:fb:16:ff:2b:7f:3e:f6:db:6e:4e:
3a:c9:9d:ce:62:06:a2:a1:fb:de:09:73:fc:72:0e:f2:fa:fb:
bf:ef:da:21:10:37:8b:8a:44:f1:98:ae:37:2f:9b:44:95:d3:
1c:31:94:43:db:2c:39:7d:94:c5:f2:a0:50:3a:9e:12:c5:67:
c1:a8:bf:ce:0b:2d:3a:a6:a5:77:f9:bc:74:b0:20:8a:06:7f:
b0:11:89:3e:31:41:7e:0b:9c:6b:56:d8:fc:e2:12:c3:4e:bb:
1c:6c:e7:86:b1:54:fa:36:3f:64:8b:fe:90:aa:25:de:3c:37:
09:15:9e:c0:a1:d0:b3:c1:73:a5:ae:a9:bb:75:16:54:3d:64:
70:a0:ed:6b:fa:39:21:d5:4d:36:c1:cd:02:38:cd:2c:5a:28:
ef:a5:a8:c8:b7:22:ed:c7:83:eb:c0:ff:2c:1a:87:61:1e:e1:
2e:77:7c:06:31:a1:6a:9d:4e:d1:f6:b1:97:b7:be:aa:09:da:
6c:7b:b7:f2:79:ca:31:f7:45:84:ed:f8:43:76:c8:0d:22:1a:
9b:24:c0:0a:2c:86:95:eb:9a:9d:c8:45:c4:66:87:62:04:b3:
75:41:84:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ6V0gqwWiIEI0hNqe6IjTrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzUwOWU3ZWM2OGZlMmQ5NDM0MDdkNWRkMTI2YTBmNTk2
ZjJhYjUwHhcNMjUwNDI4MDMwMTAyWhcNMjUwNDI5MDMwMTAyWjAzMTEwLwYDVQQD
EygwNWI0ZjM2M2ZlNzc1NjQxNWY4OGU2YWMwYzUxMzNmMTIyYWNjZjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0QZ4pYniwmZmEbHrtBlc1ywFig6
W/TqONgtvTHhZe/F7pDp5OS+72hfSWe57yitCWfW8RKDO1U7jk5uPISAT+4+mR/4
I+TZgzyyaIfh0SgCQFJ0RDXCjA8gMfWSv6ppq0cvljo3AR1OhpiotZrPzU31mI/O
V9KW/FEDGjzKqiyuCLNc83A9NLcepHZMePSk65/gI5lH5+fiEAVUrkHLyzWUU/fE
FRk4N+d8vOjynK4Fco2ZCoSWj8ML6GQqdkOW203Xa4gKt2HkqcxlTFhuzPI2p1le
zr/yXjOHLKuF9CNk763KkNvyjplA81P7gQn9EgzqnL+Q8CtJmQd05D8NUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAW082P+d1ZBX4jmrAxRM/EirM8+MB8GA1UdIwQY
MBaAFAk1CefsaP4tlDQH1d0Sag9Zbyq1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1RVSjUteG9faTJVTkFmVjNSSnFEMWx2S3JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9kZmI5NGMtZmRmNC00OTcyLTlhZDgt
N2Q2OTczMzcxMzdiLzEvQ1RVSjUteG9faTJVTkFmVjNSSnFEMWx2S3JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9kZmI5NGMtZmRmNC00OTcyLTlhZDgtN2Q2OTczMzcxMzdi
LzEvQ1RVSjUteG9faTJVTkFmVjNSSnFEMWx2S3JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB3jvSgzn
CP+Oi44yX1As3ZMrHh+3DnHYaJf7Fv8rfz72225OOsmdzmIGoqH73glz/HIO8vr7
v+/aIRA3i4pE8ZiuNy+bRJXTHDGUQ9ssOX2UxfKgUDqeEsVnwai/zgstOqald/m8
dLAgigZ/sBGJPjFBfguca1bY/OISw067HGznhrFU+jY/ZIv+kKol3jw3CRWewKHQ
s8Fzpa6pu3UWVD1kcKDta/o5IdVNNsHNAjjNLFoo76WoyLci7ceD68D/LBqHYR7h
Lnd8BjGhap1O0faxl7e+qgnabHu38nnKMfdFhO34Q3bIDSIamyTACiyGleuanchF
xGaHYgSzdUGEdw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:16:20 2025 by rpki-client