Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
File: CUSqrH8uuymBwkdj6z1gRe-9bwY.mft (raw, json)
Hash identifier: F94zO5x1frnbWqbFA8ehh3FA2j6Kt6erEA050NMYVmU=
Subject key identifier: 4F:16:E2:AA:93:4C:D2:54:1C:23:66:4D:C8:96:51:9C:94:7A:38:8F
Authority key identifier: 09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06
Certificate issuer: /CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06
Certificate serial: 0196DBC18FBB953AEA15E3281C70FF868675
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
Manifest number: 0B83
Signing time: Sat 17 May 2025 01:00:17 +0000
Manifest this update: Sat 17 May 2025 01:00:17 +0000
Manifest next update: Sun 18 May 2025 01:00:17 +0000
Files and hashes: 1: CUSqrH8uuymBwkdj6z1gRe-9bwY.crl (hash: B3bYcou0eSJ7XXKZBtbZwHzGHtEQzpYEEWrvxtOksZk=)
2: U0OBxV0NmzWdhOROB_4XE_nOuxo.roa (hash: R0oHniHcgRLjr+xP295YEa+yjJ7+h87sW92ahFuO7CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:db:c1:8f:bb:95:3a:ea:15:e3:28:1c:70:ff:86:86:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0944aaac7f2ebb2981c24763eb3d6045efbd6f06
Validity
Not Before: May 17 01:00:17 2025 GMT
Not After : May 18 01:00:17 2025 GMT
Subject: CN=4f16e2aa934cd2541c23664dc896519c947a388f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:55:32:d3:e2:d1:31:52:12:26:51:bc:80:a6:
2a:5e:ce:c2:13:90:fe:64:77:2d:de:fd:e9:34:3f:
66:e2:a8:66:83:c9:f8:75:e4:4d:49:ce:f3:f8:96:
2b:22:d0:93:62:d2:73:59:82:57:0b:cf:9b:63:6f:
e5:2d:bf:c2:94:15:80:2b:e2:b0:ad:6f:e1:55:2e:
5d:ba:d9:56:c9:1a:1d:04:5c:f6:2c:1b:fa:b9:ab:
3d:c9:f6:6a:c3:48:34:99:7d:d4:b7:96:4a:f2:d1:
86:ae:1b:29:cc:51:85:85:84:e1:bc:5a:2e:ac:0d:
5a:49:c7:6f:ec:74:0f:96:94:68:da:23:f4:30:4d:
3c:f0:ef:71:46:97:e6:4e:30:75:0c:26:67:62:02:
b0:06:f2:f8:b3:99:54:7f:45:5d:e1:cc:25:12:85:
0f:81:79:94:a2:d0:31:34:d3:8b:08:7c:ab:29:2a:
28:4c:f9:61:90:9b:b1:88:89:e6:70:1b:56:43:85:
83:f3:6d:52:1c:1f:23:93:36:5a:69:0d:94:bf:52:
1c:96:dc:b5:ad:ac:80:c0:41:3e:40:46:d8:26:1c:
c5:dd:fb:e0:d2:e1:0d:b7:3e:b3:0f:ad:8b:cd:b7:
03:d5:26:2b:48:f3:6f:bf:90:bb:f1:68:12:b8:f5:
1f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:16:E2:AA:93:4C:D2:54:1C:23:66:4D:C8:96:51:9C:94:7A:38:8F
X509v3 Authority Key Identifier:
keyid:09:44:AA:AC:7F:2E:BB:29:81:C2:47:63:EB:3D:60:45:EF:BD:6F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUSqrH8uuymBwkdj6z1gRe-9bwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/434849-89da-43ae-b2be-66cd01961e46/1/CUSqrH8uuymBwkdj6z1gRe-9bwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:62:0b:85:f2:c6:3d:3c:58:12:9c:ac:39:4c:d3:6c:9b:1f:
29:bf:1b:5e:a6:13:64:65:69:d3:09:c9:0c:99:53:3d:22:7f:
60:9a:2e:2b:9c:39:1d:f5:83:60:04:60:c6:8f:7f:bb:54:0a:
28:c6:53:2d:9c:a8:af:73:66:ad:79:d1:17:6a:27:08:c6:03:
ea:08:2c:9b:be:07:6f:c3:1f:e7:6f:d3:51:bc:6a:3e:62:d2:
1b:4f:8d:7d:ae:01:69:85:06:4c:a9:e5:15:f9:75:65:9f:13:
aa:50:82:02:91:a7:48:21:33:6f:c3:ac:73:57:f3:55:d9:e8:
7f:ec:c8:7c:12:92:28:cf:c8:51:b3:bc:bc:9b:cb:4c:dd:f3:
7b:01:f8:1f:89:3f:e5:4b:48:b0:d4:11:b3:43:25:93:d4:c6:
95:73:1c:5a:67:d7:f6:21:03:da:9a:4c:0f:6d:93:32:bc:c9:
7e:9b:e9:07:3a:a8:d6:6f:05:36:7c:56:ec:36:7b:4b:08:66:
a0:8b:1d:bf:bb:8d:45:ce:61:ff:3a:cd:07:4b:cf:c9:0c:32:
0d:79:ec:dc:85:7f:30:69:c3:a6:03:d2:95:b7:7f:22:9d:e1:
bb:ff:de:f7:f9:a7:db:50:38:ae:47:a1:80:56:d0:e9:12:5f:
62:66:fa:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 06:49:44 2025 by rpki-client