Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
File: CX4FUW_IeTQGhouBCePARLcCcWw.mft (raw, json)
Hash identifier: UI9es4G1vmiAq3ck2aRgoDbaQsiCp+9vV73XsmrvhmU=
Subject key identifier: DA:36:CE:36:61:20:6B:6B:CB:F8:3F:81:03:8D:1B:CD:5A:44:C8:7A
Authority key identifier: 09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C
Certificate issuer: /CN=097e05516fc8793406868b8109e3c044b702716c
Certificate serial: 0196AE7B368FAE499B2D5823D85965F8955F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
Manifest number: 152D
Signing time: Thu 08 May 2025 06:00:32 +0000
Manifest this update: Thu 08 May 2025 06:00:32 +0000
Manifest next update: Fri 09 May 2025 06:00:32 +0000
Files and hashes: 1: CX4FUW_IeTQGhouBCePARLcCcWw.crl (hash: HHcMY+rMMv+u/A0wyqiNvm0aAr3Ne40UzALubxwqRGk=)
2: LYov3s-RBNegs9sCI5mzwI0B-OM.roa (hash: Q5JNZZskubtUF3draKhRYhTL06FaQ8LhpyPNSVMlulo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:7b:36:8f:ae:49:9b:2d:58:23:d8:59:65:f8:95:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097e05516fc8793406868b8109e3c044b702716c
Validity
Not Before: May 8 06:00:32 2025 GMT
Not After : May 9 06:00:32 2025 GMT
Subject: CN=da36ce3661206b6bcbf83f81038d1bcd5a44c87a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:dd:85:3f:e6:89:11:99:22:96:1b:71:94:a5:
45:c7:ac:d1:d2:3b:d1:a2:c2:c8:ef:c5:74:4b:5f:
04:43:0f:ec:ca:e1:83:f6:b9:0d:dd:f5:91:9b:12:
d3:f0:0e:f0:22:4f:ff:e1:20:5b:ab:77:a4:38:66:
c1:aa:7d:f9:86:c1:14:61:7b:89:fe:d5:63:83:64:
9a:ef:98:6f:ed:df:09:ec:58:71:23:b3:5c:3c:dd:
30:9c:e2:61:72:26:bf:d2:da:71:e7:28:a7:aa:76:
a0:e8:d6:f8:e2:98:d7:30:5d:08:0f:5e:6c:e6:c2:
e0:0c:8a:b0:86:e6:6e:0c:7f:45:23:60:9d:cd:d4:
f5:54:bd:a0:ff:a6:a8:db:bf:47:c3:e1:19:41:5a:
b6:e6:74:3e:ed:24:49:f5:6b:56:f3:69:41:ef:1d:
d9:70:70:23:ef:1f:c5:b6:b8:81:5c:e5:9c:69:0c:
b3:f1:1e:08:d3:cf:5f:a6:2a:e3:8d:20:5c:22:ca:
96:9f:c7:b9:60:71:68:2a:48:6e:2e:3b:a5:cd:42:
40:01:3b:ee:ee:13:f6:41:23:94:95:47:ea:3f:00:
ca:11:d8:dd:f1:df:d1:bb:c1:22:54:5a:27:50:4d:
79:3f:2c:c7:16:fb:be:3b:bb:b4:65:21:14:c9:96:
91:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:36:CE:36:61:20:6B:6B:CB:F8:3F:81:03:8D:1B:CD:5A:44:C8:7A
X509v3 Authority Key Identifier:
keyid:09:7E:05:51:6F:C8:79:34:06:86:8B:81:09:E3:C0:44:B7:02:71:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CX4FUW_IeTQGhouBCePARLcCcWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a50372-da39-482e-9ad4-30becfc1b311/1/CX4FUW_IeTQGhouBCePARLcCcWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:5c:b1:f2:2f:c0:01:4e:fc:de:57:3f:71:c7:48:a1:d8:c0:
e5:6f:ca:10:2f:7c:c3:7a:e3:a8:7f:65:86:4d:f9:27:cd:2a:
ec:f0:73:27:65:49:b3:4e:d8:ad:8e:be:b9:9d:4e:b4:14:d5:
40:65:a8:cd:6a:4c:bb:f6:06:31:2a:b3:cf:51:2b:a8:c0:f8:
32:ab:64:2c:b2:5b:6e:62:28:87:da:ce:26:14:3b:5e:e3:1f:
62:e6:b1:c1:a1:e5:67:9a:22:74:84:70:33:cf:fc:f6:11:3f:
a2:b2:1e:2f:77:d9:5e:75:40:cd:01:ef:22:f6:47:27:17:07:
12:0c:dd:40:d0:05:1f:3c:e7:b5:a6:3b:d2:cf:0c:cd:42:ce:
e6:53:63:93:c9:ba:f4:c1:be:f7:37:2c:e2:45:94:24:51:81:
f9:44:32:f1:22:aa:3a:7d:7a:f2:de:32:c6:b5:db:7c:30:c8:
99:af:ff:b1:10:75:f4:21:7c:52:e1:ea:7f:67:20:22:ea:86:
6a:81:ca:9d:4c:e4:e0:53:94:02:d2:37:bb:6d:47:64:13:b5:
65:5f:4d:f0:bc:24:6e:9c:76:21:4d:4e:be:c7:34:0e:9d:68:
a1:dd:76:b4:64:f5:d5:1f:15:99:6c:a4:24:42:cb:71:1a:4b:
c5:41:18:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 09:11:33 2025 by rpki-client