Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
File: Su_P7VH_FY--aMzWC3s5vl8-riA.mft (raw, json)
Hash identifier: a+h0sGFjhr1+daolQA7ptpDj8FhXv3EzZO+GkKnIBb4=
Subject key identifier: 75:8B:0B:49:12:26:A8:D3:28:27:6B:D5:6A:FC:66:57:97:5C:AF:C4
Authority key identifier: 4A:EF:CF:ED:51:FF:15:8F:BE:68:CC:D6:0B:7B:39:BE:5F:3E:AE:20
Certificate issuer: /CN=4aefcfed51ff158fbe68ccd60b7b39be5f3eae20
Certificate serial: 01969D198147CDC8C0CE5FFC33B462CA4A44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Su_P7VH_FY--aMzWC3s5vl8-riA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
Manifest number: 1524
Signing time: Sun 04 May 2025 21:00:16 +0000
Manifest this update: Sun 04 May 2025 21:00:16 +0000
Manifest next update: Mon 05 May 2025 21:00:16 +0000
Files and hashes: 1: HfROKsu5S9Kv9xQEghcCyLc0QU0.roa (hash: qqPIft59QLOT66DNtALVd3oXV+0wgDN34FKKDYySGVY=)
2: Su_P7VH_FY--aMzWC3s5vl8-riA.crl (hash: YyUup/y1lRaizcbGT/c3smMGN0Zn0ScyRboRn16G34k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Su_P7VH_FY--aMzWC3s5vl8-riA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 21:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:19:81:47:cd:c8:c0:ce:5f:fc:33:b4:62:ca:4a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aefcfed51ff158fbe68ccd60b7b39be5f3eae20
Validity
Not Before: May 4 21:00:16 2025 GMT
Not After : May 5 21:00:16 2025 GMT
Subject: CN=758b0b491226a8d328276bd56afc6657975cafc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:03:ec:15:7b:a7:c5:ee:31:4b:81:da:72:38:
14:c6:13:3b:14:1e:08:c4:5f:df:a9:aa:c6:da:c7:
29:6b:2d:85:00:be:8a:d3:59:b8:5d:bb:c4:01:39:
3a:97:cc:25:61:d9:73:90:b8:2e:e6:b7:42:07:e1:
71:21:3d:57:7d:1f:f4:c8:9d:d0:65:11:69:63:83:
69:45:17:0f:8a:b7:86:9c:2f:86:b0:c9:9b:39:04:
9e:d9:9a:d4:9c:03:5b:b4:46:76:61:36:81:70:62:
a4:40:61:54:65:5b:fd:b3:ed:03:6f:8f:14:24:fc:
df:4b:42:b3:18:1c:6e:9b:8f:9b:f9:6d:c0:3c:74:
1a:e1:a4:f6:73:fe:37:3b:74:72:93:1b:47:e2:4a:
09:ec:68:d3:1c:5c:77:17:82:f7:ba:ca:94:c5:fc:
f8:64:64:d2:5f:a1:a3:44:48:c5:1a:4b:26:7e:aa:
ae:56:83:fe:71:8b:76:3f:51:2b:ec:91:36:b9:20:
d5:6e:8d:98:b1:87:96:9d:c0:1a:c3:d1:92:64:4c:
3e:f5:77:62:dd:7a:72:be:d0:1b:cc:8f:d0:be:8b:
17:32:93:20:95:d3:f2:4e:c5:3d:83:2f:22:41:52:
e9:7c:b1:42:88:04:38:eb:a3:0d:8d:f5:f5:22:99:
77:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:8B:0B:49:12:26:A8:D3:28:27:6B:D5:6A:FC:66:57:97:5C:AF:C4
X509v3 Authority Key Identifier:
keyid:4A:EF:CF:ED:51:FF:15:8F:BE:68:CC:D6:0B:7B:39:BE:5F:3E:AE:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Su_P7VH_FY--aMzWC3s5vl8-riA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8e5576-33c8-4002-a437-db6671ac7672/1/Su_P7VH_FY--aMzWC3s5vl8-riA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:79:66:e0:85:cd:d1:f4:f0:e2:5c:02:20:04:80:59:9d:2b:
9c:ee:82:9f:41:27:3c:f8:35:31:26:14:15:92:18:24:12:fc:
af:0a:e6:ab:87:ad:38:bc:38:a8:a8:d3:72:0b:3e:f3:98:57:
96:20:2b:40:b7:c5:2e:81:54:0c:c9:0a:99:92:cc:5e:d4:72:
75:17:f3:0e:6f:63:90:93:22:d0:b9:e5:80:51:33:dc:f6:e2:
a0:2e:7e:d3:ce:2a:5c:e9:de:09:72:39:b6:37:58:67:2e:93:
66:f5:e1:30:20:fd:9b:49:20:1a:9f:69:a0:3a:46:93:e8:24:
30:53:b7:36:6c:5b:d0:73:e6:6d:05:46:f4:1d:b1:18:31:19:
77:3f:8f:f5:e9:ea:55:18:69:fb:36:75:30:27:91:38:11:42:
12:38:42:8f:b0:6f:74:c5:43:b3:08:a9:21:e8:27:4c:76:04:
61:fc:9f:67:80:5c:53:33:26:72:c8:41:7e:7c:bc:ec:7a:00:
fb:b1:24:55:37:83:6b:67:8f:0d:75:b9:13:c0:be:72:14:29:
ec:ab:1d:e9:2f:2c:f5:9e:8d:b1:63:16:cf:22:45:47:a8:db:
46:f8:91:50:99:5d:f1:20:a5:df:15:44:ca:97:f8:cf:00:1d:
e3:5e:be:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZadGYFHzcjAzl/8M7RiykpEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhZWZjZmVkNTFmZjE1OGZiZTY4Y2NkNjBiN2IzOWJlNWYz
ZWFlMjAwHhcNMjUwNTA0MjEwMDE2WhcNMjUwNTA1MjEwMDE2WjAzMTEwLwYDVQQD
Eyg3NThiMGI0OTEyMjZhOGQzMjgyNzZiZDU2YWZjNjY1Nzk3NWNhZmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwPsFXunxe4xS4HacjgUxhM7FB4I
xF/fqarG2scpay2FAL6K01m4XbvEATk6l8wlYdlzkLgu5rdCB+FxIT1XfR/0yJ3Q
ZRFpY4NpRRcPireGnC+GsMmbOQSe2ZrUnANbtEZ2YTaBcGKkQGFUZVv9s+0Db48U
JPzfS0KzGBxum4+b+W3APHQa4aT2c/43O3RykxtH4koJ7GjTHFx3F4L3usqUxfz4
ZGTSX6GjREjFGksmfqquVoP+cYt2P1Er7JE2uSDVbo2YsYeWncAaw9GSZEw+9Xdi
3XpyvtAbzI/QvosXMpMgldPyTsU9gy8iQVLpfLFCiAQ466MNjfX1Ipl3HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHWLC0kSJqjTKCdr1Wr8ZleXXK/EMB8GA1UdIwQY
MBaAFErvz+1R/xWPvmjM1gt7Ob5fPq4gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3VfUDdWSF9GWS0tYU16V0MzczV2bDgtcmlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS84ZTU1NzYtMzNjOC00MDAyLWE0Mzct
ZGI2NjcxYWM3NjcyLzEvU3VfUDdWSF9GWS0tYU16V0MzczV2bDgtcmlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS84ZTU1NzYtMzNjOC00MDAyLWE0MzctZGI2NjcxYWM3Njcy
LzEvU3VfUDdWSF9GWS0tYU16V0MzczV2bDgtcmlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUXlm4IXN
0fTw4lwCIASAWZ0rnO6Cn0EnPPg1MSYUFZIYJBL8rwrmq4etOLw4qKjTcgs+85hX
liArQLfFLoFUDMkKmZLMXtRydRfzDm9jkJMi0LnlgFEz3PbioC5+084qXOneCXI5
tjdYZy6TZvXhMCD9m0kgGp9poDpGk+gkMFO3Nmxb0HPmbQVG9B2xGDEZdz+P9enq
VRhp+zZ1MCeROBFCEjhCj7BvdMVDswipIegnTHYEYfyfZ4BcUzMmcshBfny87HoA
+7EkVTeDa2ePDXW5E8C+chQp7Ksd6S8s9Z6NsWMWzyJFR6jbRviRUJld8SCl3xVE
ypf4zwAd416+Gw==
-----END CERTIFICATE-----
Generated at Mon May 5 06:22:50 2025 by rpki-client