Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
File: CsgX_khqx3vpTil6zjqVzyff-xo.mft (raw, json)
Hash identifier: gCVWuAD3gdIRAwNwTcKVLcG581RhVb+/d5mMvC0oxTg=
Subject key identifier: A7:D1:2F:73:F8:6A:D4:C5:BB:61:97:13:5A:75:74:23:03:73:48:79
Authority key identifier: 0A:C8:17:FE:48:6A:C7:7B:E9:4E:29:7A:CE:3A:95:CF:27:DF:FB:1A
Certificate issuer: /CN=0ac817fe486ac77be94e297ace3a95cf27dffb1a
Certificate serial: 0196C1943A25451875D67440DAA3655FEBE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
Manifest number: 0A65
Signing time: Sun 11 May 2025 23:00:38 +0000
Manifest this update: Sun 11 May 2025 23:00:38 +0000
Manifest next update: Mon 12 May 2025 23:00:38 +0000
Files and hashes: 1: CsgX_khqx3vpTil6zjqVzyff-xo.crl (hash: FsQ4ZH/khPNtOXDkj0gJxgXnuGPP4AgbrsjybL0nnS0=)
2: rKgQI-w1UXNWfaL5RhIkWUF_FgI.roa (hash: hcJ9d+FGrXGqRkOgDTqfnuX4GbB1zYDVH1Gwhkt3mDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 23:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:94:3a:25:45:18:75:d6:74:40:da:a3:65:5f:eb:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ac817fe486ac77be94e297ace3a95cf27dffb1a
Validity
Not Before: May 11 23:00:38 2025 GMT
Not After : May 12 23:00:38 2025 GMT
Subject: CN=a7d12f73f86ad4c5bb6197135a75742303734879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ee:d5:2e:0a:24:65:0d:d6:25:b3:e8:17:98:
9d:2d:3c:ed:3f:08:f6:3e:9f:c2:75:68:a6:2d:61:
89:e3:c4:f5:14:27:09:93:e8:e2:da:f0:da:ed:e5:
69:fb:fe:5a:2e:28:c9:cf:d8:9a:ed:e5:0d:67:0b:
65:8c:9f:f6:33:9f:89:c2:7d:9a:9d:73:01:f2:83:
16:4a:25:58:89:27:e1:1b:e5:52:94:ec:89:3b:72:
24:7c:ab:31:02:03:5c:f5:31:17:83:da:f6:95:df:
74:0f:24:47:a0:09:df:d1:b7:47:1e:65:ab:2f:84:
a1:47:ac:b7:51:c0:26:b5:e0:d9:15:17:c2:f2:6e:
4d:26:39:51:cc:fb:01:43:cf:be:b9:da:b7:a4:64:
bc:26:54:51:0d:23:9e:80:43:28:60:24:3c:a5:70:
1e:d1:11:36:89:d2:8f:65:5e:da:86:41:95:6c:d1:
f8:16:9e:dd:8e:d9:d1:6b:b6:4d:63:da:1c:de:05:
18:01:0b:b9:0b:88:a4:5f:d3:5f:ca:82:74:04:bd:
f2:4e:32:0d:12:ca:78:b5:da:78:b0:50:7d:ea:93:
ad:00:27:6c:2f:55:94:c7:16:80:d0:7e:ac:c2:fb:
5e:d7:cc:1f:9a:41:74:5d:5c:89:42:2d:6b:d2:c1:
33:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D1:2F:73:F8:6A:D4:C5:BB:61:97:13:5A:75:74:23:03:73:48:79
X509v3 Authority Key Identifier:
keyid:0A:C8:17:FE:48:6A:C7:7B:E9:4E:29:7A:CE:3A:95:CF:27:DF:FB:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsgX_khqx3vpTil6zjqVzyff-xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c25098-d7c9-4fa9-a3c1-d7fc8c5d00aa/1/CsgX_khqx3vpTil6zjqVzyff-xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:be:3b:39:20:06:7c:1f:47:cc:39:f0:ae:ff:a7:9a:87:3c:
f6:f8:93:e3:b7:92:d3:1d:73:1f:ba:20:fd:b4:08:9e:b3:93:
8c:1d:dc:e8:15:02:44:3d:3d:8a:34:96:89:48:7e:bf:6f:6d:
f3:fa:f1:99:25:af:c9:87:25:a1:ad:e8:32:6b:4d:5b:78:ac:
75:62:0d:2c:20:98:26:3b:05:b8:1f:e6:94:63:6c:b8:a4:7a:
d9:83:0e:83:b7:46:55:8d:ff:5b:a9:8a:23:40:d5:e0:43:f5:
4d:c2:29:3c:e2:6e:00:62:51:f9:f9:eb:50:cf:17:c2:48:0b:
25:ef:c5:d9:f5:f4:9f:04:4f:bf:a3:cc:59:3e:d4:a3:46:26:
e6:47:63:e4:a7:b1:f3:cd:0b:d3:09:20:77:6f:7c:fa:d5:cf:
6a:cd:6e:4a:e8:ef:fe:25:fe:15:72:33:44:38:5a:ab:25:82:
d8:f3:cf:54:ae:f0:06:d2:1b:b1:56:b2:8b:86:30:44:03:7d:
c2:d6:36:3a:c1:6c:32:0f:ad:cd:43:8e:fc:bc:8f:01:39:d7:
d6:13:27:80:69:70:3f:99:a5:ab:51:c2:41:d6:2d:18:a5:e3:
c5:04:61:cc:42:e5:15:37:9c:42:39:e1:c6:b1:69:88:68:c5:
20:2b:07:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbBlDolRRh11nRA2qNlX+vhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhYzgxN2ZlNDg2YWM3N2JlOTRlMjk3YWNlM2E5NWNmMjdk
ZmZiMWEwHhcNMjUwNTExMjMwMDM4WhcNMjUwNTEyMjMwMDM4WjAzMTEwLwYDVQQD
EyhhN2QxMmY3M2Y4NmFkNGM1YmI2MTk3MTM1YTc1NzQyMzAzNzM0ODc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAou7VLgokZQ3WJbPoF5idLTztPwj2
Pp/CdWimLWGJ48T1FCcJk+ji2vDa7eVp+/5aLijJz9ia7eUNZwtljJ/2M5+Jwn2a
nXMB8oMWSiVYiSfhG+VSlOyJO3IkfKsxAgNc9TEXg9r2ld90DyRHoAnf0bdHHmWr
L4ShR6y3UcAmteDZFRfC8m5NJjlRzPsBQ8++udq3pGS8JlRRDSOegEMoYCQ8pXAe
0RE2idKPZV7ahkGVbNH4Fp7djtnRa7ZNY9oc3gUYAQu5C4ikX9NfyoJ0BL3yTjIN
Esp4tdp4sFB96pOtACdsL1WUxxaA0H6swvte18wfmkF0XVyJQi1r0sEzgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKfRL3P4atTFu2GXE1p1dCMDc0h5MB8GA1UdIwQY
MBaAFArIF/5Iasd76U4pes46lc8n3/saMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3NnWF9raHF4M3ZwVGlsNnpqcVZ6eWZmLXhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9jMjUwOTgtZDdjOS00ZmE5LWEzYzEt
ZDdmYzhjNWQwMGFhLzEvQ3NnWF9raHF4M3ZwVGlsNnpqcVZ6eWZmLXhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9jMjUwOTgtZDdjOS00ZmE5LWEzYzEtZDdmYzhjNWQwMGFh
LzEvQ3NnWF9raHF4M3ZwVGlsNnpqcVZ6eWZmLXhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr747OSAG
fB9HzDnwrv+nmoc89viT47eS0x1zH7og/bQInrOTjB3c6BUCRD09ijSWiUh+v29t
8/rxmSWvyYcloa3oMmtNW3isdWINLCCYJjsFuB/mlGNsuKR62YMOg7dGVY3/W6mK
I0DV4EP1TcIpPOJuAGJR+fnrUM8XwkgLJe/F2fX0nwRPv6PMWT7Uo0Ym5kdj5Kex
880L0wkgd298+tXPas1uSujv/iX+FXIzRDhaqyWC2PPPVK7wBtIbsVayi4YwRAN9
wtY2OsFsMg+tzUOO/LyPATnX1hMngGlwP5mlq1HCQdYtGKXjxQRhzELlFTecQjnh
xrFpiGjFICsHUw==
-----END CERTIFICATE-----
Generated at Mon May 12 04:55:05 2025 by rpki-client