Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft
File: soH_MU_IquOXVAewoMF_L9403CY.mft (raw, json)
Hash identifier: Z+Sg27ThyUikTRQGaFst1IDCpxLws0HNKkqsyhak5Wg=
Subject key identifier: 82:91:CE:82:75:2E:82:66:8D:62:D9:71:B2:BE:8D:83:2C:4E:58:98
Authority key identifier: B2:81:FF:31:4F:C8:AA:E3:97:54:07:B0:A0:C1:7F:2F:DE:34:DC:26
Certificate issuer: /CN=b281ff314fc8aae3975407b0a0c17f2fde34dc26
Certificate serial: 01967E342DEDDCE131FC3F62465579220A52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft
Manifest number: 0E03
Signing time: Mon 28 Apr 2025 21:01:10 +0000
Manifest this update: Mon 28 Apr 2025 21:01:10 +0000
Manifest next update: Tue 29 Apr 2025 21:01:10 +0000
Files and hashes: 1: go1QZ0e22NiGhCdbGFP80uaB__o.roa (hash: CjjqC3BGYnOdj8L5wiPgLlhe25x4Dta7BFEkigZuNFk=)
2: soH_MU_IquOXVAewoMF_L9403CY.crl (hash: n5/lz1ws6NGxWBW3ih9j68tAETwRScxq3P0lXFVjkhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft
rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:34:2d:ed:dc:e1:31:fc:3f:62:46:55:79:22:0a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b281ff314fc8aae3975407b0a0c17f2fde34dc26
Validity
Not Before: Apr 28 21:01:10 2025 GMT
Not After : Apr 29 21:01:10 2025 GMT
Subject: CN=8291ce82752e82668d62d971b2be8d832c4e5898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:23:e1:ae:45:61:0a:24:32:3c:8e:b2:82:64:
72:bc:21:98:00:de:d2:0e:ac:6d:b2:b3:99:f9:0f:
c6:b8:4d:27:c2:49:aa:5b:7a:1e:35:e8:b1:5b:06:
fe:62:8a:df:d7:84:80:48:a9:3e:d0:fa:52:05:74:
58:05:99:b8:65:1c:fa:95:1e:8e:ca:b5:6b:82:bc:
dc:d8:10:d7:76:ad:91:bc:e2:7e:b9:6b:bc:fb:83:
6d:10:df:a9:9e:52:83:28:64:6d:45:9f:c8:5a:e7:
ef:ca:45:21:3b:dc:c6:06:40:d2:2a:b7:73:e6:47:
e2:bf:8f:d9:7c:88:d4:67:fa:06:e2:e4:61:3d:42:
a4:95:2c:c3:fb:ed:3a:e6:1a:f9:e7:94:f2:d0:29:
b1:f9:b9:e9:f7:75:bb:4f:63:c8:51:ce:38:3b:ee:
68:94:61:aa:dc:87:b6:0e:f2:3f:3b:a1:8d:d6:90:
5b:0b:3a:cf:d5:56:ab:f2:1f:91:28:18:a0:3d:8a:
4e:8d:22:b5:98:cf:0e:c4:19:4e:ea:12:c5:43:57:
53:9a:bc:33:24:c0:d4:e3:c7:82:8a:f9:e3:15:83:
93:ac:d3:84:01:bf:aa:67:d5:78:50:92:38:e1:39:
d5:db:17:30:9c:9c:50:70:4d:5d:07:c5:5d:dc:2a:
d3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:91:CE:82:75:2E:82:66:8D:62:D9:71:B2:BE:8D:83:2C:4E:58:98
X509v3 Authority Key Identifier:
keyid:B2:81:FF:31:4F:C8:AA:E3:97:54:07:B0:A0:C1:7F:2F:DE:34:DC:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soH_MU_IquOXVAewoMF_L9403CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d73592-e46d-4598-8b12-fa9114a82ac9/1/soH_MU_IquOXVAewoMF_L9403CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:8d:1b:ff:79:da:21:9d:cf:c9:00:33:c3:76:d3:ad:bc:01:
de:5f:16:42:84:2b:00:af:34:7c:90:1c:37:a6:87:0b:b6:5f:
fc:87:2c:b5:94:b8:7c:a5:ee:83:69:40:00:55:32:c0:86:95:
18:62:35:a2:43:0d:1d:c4:6e:28:7f:9a:20:80:eb:62:07:8c:
44:3b:5e:86:11:d2:f2:0b:0b:fe:46:ee:ec:c2:77:54:59:2f:
79:ae:49:90:fb:d1:da:a7:f5:ad:f6:65:40:fd:be:39:14:66:
54:09:cd:00:66:a1:15:2f:99:ff:41:47:b4:84:68:93:28:4f:
f7:be:b8:0c:81:4e:7e:93:e4:49:f4:17:c1:47:f2:6d:85:c5:
90:9b:ed:c1:57:4a:a8:68:fa:f9:02:e7:0f:e1:1c:80:f6:7f:
44:20:3f:57:05:7d:99:ce:a0:ae:78:9a:61:ba:29:10:a5:77:
b5:0d:79:3d:8d:6d:38:6a:b3:06:80:87:d1:bc:38:3e:4e:d1:
0b:8d:b5:14:75:57:1b:e1:4c:a3:17:81:a8:0d:d9:10:77:e5:
13:21:bb:73:30:34:ca:7b:70:4a:f5:79:8f:45:1f:95:3b:57:
c0:b9:45:08:da:e0:88:84:94:63:b5:d4:62:d2:04:a4:5d:ad:
a3:bb:ce:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ+NC3t3OEx/D9iRlV5IgpSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyODFmZjMxNGZjOGFhZTM5NzU0MDdiMGEwYzE3ZjJmZGUz
NGRjMjYwHhcNMjUwNDI4MjEwMTEwWhcNMjUwNDI5MjEwMTEwWjAzMTEwLwYDVQQD
Eyg4MjkxY2U4Mjc1MmU4MjY2OGQ2MmQ5NzFiMmJlOGQ4MzJjNGU1ODk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriPhrkVhCiQyPI6ygmRyvCGYAN7S
DqxtsrOZ+Q/GuE0nwkmqW3oeNeixWwb+Yorf14SASKk+0PpSBXRYBZm4ZRz6lR6O
yrVrgrzc2BDXdq2RvOJ+uWu8+4NtEN+pnlKDKGRtRZ/IWufvykUhO9zGBkDSKrdz
5kfiv4/ZfIjUZ/oG4uRhPUKklSzD++065hr555Ty0Cmx+bnp93W7T2PIUc44O+5o
lGGq3Ie2DvI/O6GN1pBbCzrP1Var8h+RKBigPYpOjSK1mM8OxBlO6hLFQ1dTmrwz
JMDU48eCivnjFYOTrNOEAb+qZ9V4UJI44TnV2xcwnJxQcE1dB8Vd3CrTTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIKRzoJ1LoJmjWLZcbK+jYMsTliYMB8GA1UdIwQY
MBaAFLKB/zFPyKrjl1QHsKDBfy/eNNwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc29IX01VX0lxdU9YVkFld29NRl9MOTQwM0NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9kNzM1OTItZTQ2ZC00NTk4LThiMTIt
ZmE5MTE0YTgyYWM5LzEvc29IX01VX0lxdU9YVkFld29NRl9MOTQwM0NZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9kNzM1OTItZTQ2ZC00NTk4LThiMTItZmE5MTE0YTgyYWM5
LzEvc29IX01VX0lxdU9YVkFld29NRl9MOTQwM0NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArY0b/3na
IZ3PyQAzw3bTrbwB3l8WQoQrAK80fJAcN6aHC7Zf/IcstZS4fKXug2lAAFUywIaV
GGI1okMNHcRuKH+aIIDrYgeMRDtehhHS8gsL/kbu7MJ3VFkvea5JkPvR2qf1rfZl
QP2+ORRmVAnNAGahFS+Z/0FHtIRokyhP9764DIFOfpPkSfQXwUfybYXFkJvtwVdK
qGj6+QLnD+EcgPZ/RCA/VwV9mc6grniaYbopEKV3tQ15PY1tOGqzBoCH0bw4Pk7R
C421FHVXG+FMoxeBqA3ZEHflEyG7czA0yntwSvV5j0UflTtXwLlFCNrgiISUY7XU
YtIEpF2to7vOTg==
-----END CERTIFICATE-----
Generated at Tue Apr 29 04:17:43 2025 by rpki-client