Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
File: Su-5nSoG7pneqVZvFr8ibbPlbJI.mft (raw, json)
Hash identifier: 14Qb0KYOdaGfla2ShZf8Zhi1NkBTQfJphNTPnmKoos4=
Subject key identifier: 0B:98:85:DF:D0:04:B1:97:7C:8F:0E:82:29:5D:B7:8C:26:A9:90:A5
Authority key identifier: 4A:EF:B9:9D:2A:06:EE:99:DE:A9:56:6F:16:BF:22:6D:B3:E5:6C:92
Certificate issuer: /CN=4aefb99d2a06ee99dea9566f16bf226db3e56c92
Certificate serial: 0196BFA5C4C356B050DA9630626B2EA2070C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 14:00:34 +0000
Manifest this update: Sun 11 May 2025 14:00:34 +0000
Manifest next update: Mon 12 May 2025 14:00:34 +0000
Files and hashes: 1: Su-5nSoG7pneqVZvFr8ibbPlbJI.crl (hash: 2tQz495T8I4QqoAfS0HpLBo7pa0uHG3LT0zxs3sOk0M=)
2: zFoJFUnlPbl4jZ_b8xY0tJqEvEA.roa (hash: LdaJGwGlR/sqxaI5NlWcBg7c+O1FzJXWT3jVGiryGW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:a5:c4:c3:56:b0:50:da:96:30:62:6b:2e:a2:07:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aefb99d2a06ee99dea9566f16bf226db3e56c92
Validity
Not Before: May 11 14:00:34 2025 GMT
Not After : May 12 14:00:34 2025 GMT
Subject: CN=0b9885dfd004b1977c8f0e82295db78c26a990a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d4:b8:53:c5:5d:e8:14:1f:2f:e8:0e:f0:8e:
f1:94:7d:4c:d7:08:8b:25:dd:1e:7c:d1:c2:30:e4:
b9:17:52:11:da:3e:92:d8:c4:da:7f:d3:7f:b4:c1:
a8:98:ec:ee:8a:01:97:cb:77:e1:bf:3f:d4:a9:80:
c2:f2:8b:5e:f6:2c:92:da:5d:87:09:d8:b9:84:af:
fa:f8:d4:db:1b:a3:7c:8f:b2:1c:93:92:a1:b6:18:
e7:69:5e:b1:23:09:e5:13:41:0c:55:6a:e8:eb:89:
3d:c2:cb:01:ca:33:59:04:4a:7b:28:b1:05:11:f2:
7f:88:e8:f0:bc:e4:68:9e:67:cd:0b:27:f5:24:88:
d2:df:54:ec:0d:9c:f3:6e:e1:1d:fe:9f:3c:93:63:
3b:9f:7d:b8:a7:f1:04:78:83:68:e8:8a:5c:be:51:
e2:3b:41:65:0b:0f:f0:2f:73:c4:ea:05:b7:b4:f4:
de:5b:73:52:48:a2:fe:9b:93:1b:73:f4:e2:6a:ec:
2d:ba:80:b4:f4:92:0c:df:8b:35:a3:dd:10:04:46:
71:76:11:4d:11:e4:13:a5:7c:47:9e:68:9a:94:84:
ee:f9:43:3c:70:d3:f5:85:3d:a0:04:4c:2d:d7:d0:
62:8c:5f:97:e2:37:2a:73:b2:5e:09:25:d7:73:19:
a2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:98:85:DF:D0:04:B1:97:7C:8F:0E:82:29:5D:B7:8C:26:A9:90:A5
X509v3 Authority Key Identifier:
keyid:4A:EF:B9:9D:2A:06:EE:99:DE:A9:56:6F:16:BF:22:6D:B3:E5:6C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Su-5nSoG7pneqVZvFr8ibbPlbJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/169a3b-6a73-49ec-affa-ed0a7aba8cb2/1/Su-5nSoG7pneqVZvFr8ibbPlbJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:bf:81:55:fb:d7:64:bc:10:0e:ef:a9:a2:8a:19:54:f9:83:
02:d7:a3:a8:62:d4:7f:19:88:c0:4e:d9:c8:a3:10:6a:f6:77:
2b:1a:71:42:6a:f4:3d:2a:29:92:4d:d3:e6:5a:a7:14:34:16:
31:cd:f7:12:4a:7d:89:12:eb:9e:04:80:79:dd:a6:62:d5:e9:
64:49:91:38:80:f6:64:27:3e:96:c2:c9:a0:07:aa:5b:b8:9a:
48:96:63:3d:ae:55:ed:f2:8b:aa:8e:01:2d:5e:04:54:99:9f:
51:7d:42:b2:ae:0d:a9:82:0f:1f:f9:e8:b2:b7:f0:dd:81:ee:
e0:a3:d6:e0:ee:53:27:d5:12:53:14:22:ff:dc:9e:78:39:72:
a7:06:3e:fe:29:05:f5:be:20:e6:f7:46:a0:4f:6d:9b:5c:12:
b9:74:6a:52:01:15:68:38:53:72:d7:a6:74:4b:b4:8f:ee:59:
f0:a7:3c:dd:50:fc:c4:e1:94:52:74:e5:c7:ee:89:11:e7:3c:
e5:16:46:1e:8f:c8:ff:ed:68:9b:87:3d:68:69:c1:a6:fe:21:
7c:d7:8c:0c:c8:fd:9e:4d:93:6b:91:4f:50:c0:77:2b:e4:f3:
72:63:2f:be:29:ec:5e:00:31:e8:1c:e0:06:cf:60:8a:66:a4:
8c:0a:3e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:00:05 2025 by rpki-client