Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
File: SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft (raw, json)
Hash identifier: QUSitw2DDeiPChkX38+M2CAsghrq2FFLlmPfLQc2IJo=
Subject key identifier: CA:C5:03:EF:B7:2B:E3:59:82:47:A7:70:90:E6:28:F7:CC:42:55:DC
Authority key identifier: 49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65
Certificate issuer: /CN=4940cf778dd9817657cd8d4feedd423d46d1a965
Certificate serial: 0196A276E3262940019293F649F13BF2AFD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
Manifest number: 0ED9
Signing time: Mon 05 May 2025 22:00:22 +0000
Manifest this update: Mon 05 May 2025 22:00:22 +0000
Manifest next update: Tue 06 May 2025 22:00:22 +0000
Files and hashes: 1: SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl (hash: QIKCfg3qnuVS+XSqnbzAZPMYqY1SueXPWyBOSr4a620=)
2: loSCgoJ4hKRK0jtudHBRcmTN9d4.roa (hash: URCezxxo5xLAhnqyK4BChNtSek6R2eu9KtpYGfArpvI=)
3: nggdnA4mAiKLiw6UHtzESJ0klE0.roa (hash: pHSsRZvm29dKmGcn5inpqu8Q9t703aQ9huVnyG7i37U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:76:e3:26:29:40:01:92:93:f6:49:f1:3b:f2:af:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4940cf778dd9817657cd8d4feedd423d46d1a965
Validity
Not Before: May 5 22:00:22 2025 GMT
Not After : May 6 22:00:22 2025 GMT
Subject: CN=cac503efb72be3598247a77090e628f7cc4255dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:29:38:09:11:2d:5d:4e:9d:bd:23:1b:b8:8f:
87:b4:91:2f:b4:f0:94:bf:14:43:78:5c:02:40:89:
a1:ce:ee:a8:a3:2d:fd:0a:ff:de:35:a5:da:3f:d6:
59:9c:87:d0:e9:c9:5c:d8:dd:01:0c:99:f0:3a:c3:
cf:4f:e7:ff:7e:c2:61:b5:23:56:a6:1b:42:b5:62:
e5:d3:1a:f4:e9:3c:64:f2:d1:98:f7:5a:d4:75:d2:
47:44:f2:0a:aa:ed:b8:af:78:b8:1a:7d:b1:d6:66:
76:56:59:22:ba:3e:7f:62:85:f4:cd:f7:3c:a0:c9:
7b:2b:b3:ac:62:d1:58:c7:63:35:49:04:8f:32:34:
9a:ef:0e:eb:2e:c4:fd:19:2c:90:fd:a3:46:13:50:
47:a1:25:bc:67:2d:f2:55:66:fc:05:5a:8b:1b:1f:
1e:d2:e1:56:d1:6a:e8:14:da:a5:80:11:0b:1e:5b:
3d:93:68:37:b3:12:d5:26:1a:7a:b0:f7:f0:bb:45:
56:d7:6d:e7:14:f6:86:21:66:4b:6c:bf:82:b1:29:
77:2e:76:78:a1:68:a6:25:0f:03:b7:43:8b:ae:70:
e8:75:a5:11:88:42:1b:d3:0e:70:8f:87:ca:15:00:
cf:43:d4:78:55:b9:b4:28:84:ef:2a:02:a5:13:40:
de:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C5:03:EF:B7:2B:E3:59:82:47:A7:70:90:E6:28:F7:CC:42:55:DC
X509v3 Authority Key Identifier:
keyid:49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:fa:f4:16:e9:46:15:43:8c:18:c1:6f:21:07:59:d8:a0:d3:
12:96:9d:fd:23:0d:a0:6c:28:d0:c1:71:0f:80:08:65:78:59:
b8:f0:1b:38:b5:ee:19:d2:56:17:bf:3c:35:7a:4f:eb:be:34:
6f:a3:e0:15:97:47:9d:a9:17:24:ce:db:ae:b8:36:d1:b2:73:
6e:2c:e2:4c:d8:34:e4:2d:45:59:71:46:5d:f0:1f:65:a5:6c:
ae:fc:1e:38:c8:29:6d:3b:b8:0d:21:8a:ac:8d:b0:27:e4:13:
ef:58:6b:8c:a9:12:31:5f:6b:0a:06:46:39:37:fb:21:e4:6d:
f9:22:05:02:c9:2f:25:cf:63:52:83:d3:53:a0:c1:25:63:97:
f3:82:54:7e:61:ac:f5:2f:24:35:b5:b5:11:56:0d:17:fb:6d:
45:bf:69:62:7e:80:ae:ec:92:7b:94:54:98:13:a5:66:a9:e5:
54:df:1d:54:a8:ff:03:cd:c9:42:2b:22:0b:f5:a9:b6:7c:2b:
06:30:e0:e4:99:ee:87:59:20:75:50:99:2f:8c:f3:44:5e:d6:
f7:17:f9:b5:ec:82:d1:3f:a6:e2:46:8b:1e:1d:6a:92:d3:dd:
1e:d1:79:58:a4:32:93:ca:72:a9:ce:36:7d:21:c9:fb:a4:29:
db:fd:e5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:39:05 2025 by rpki-client