Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft
File: soWZKSpjJCl-Av_zxRGb7gsxdUg.mft (raw, json)
Hash identifier: riE2wHaXSkm96eVvbtgE8zeMg9crExk/PO+fzFLrlxs=
Subject key identifier: 8E:71:75:DD:4A:90:40:89:A4:D9:C2:16:81:0A:8F:5F:A2:19:E7:F9
Authority key identifier: B2:85:99:29:2A:63:24:29:7E:02:FF:F3:C5:11:9B:EE:0B:31:75:48
Certificate issuer: /CN=b28599292a6324297e02fff3c5119bee0b317548
Certificate serial: 019680225B0945A4C9A455D5712964942832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 06:00:57 +0000
Manifest this update: Tue 29 Apr 2025 06:00:57 +0000
Manifest next update: Wed 30 Apr 2025 06:00:57 +0000
Files and hashes: 1: soWZKSpjJCl-Av_zxRGb7gsxdUg.crl (hash: vpj+/ns0hZFo2TQQzudgPCTfjplxmOqEq0L/XRucqCo=)
2: yVvkuO-jgpRX6XN3GXN1npWJJ6g.roa (hash: 1v07ddxL5rWksw0TtZmPMhkBlMfB2KOWe+9tKgMQP40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:22:5b:09:45:a4:c9:a4:55:d5:71:29:64:94:28:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b28599292a6324297e02fff3c5119bee0b317548
Validity
Not Before: Apr 29 06:00:57 2025 GMT
Not After : Apr 30 06:00:57 2025 GMT
Subject: CN=8e7175dd4a904089a4d9c216810a8f5fa219e7f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3f:48:f2:71:d0:f5:d2:72:f6:84:f5:a8:98:
35:dd:62:b3:57:75:b3:35:4f:4b:f8:a0:2a:2a:de:
fa:c7:d6:27:3c:d4:61:bc:2f:1c:95:7c:ba:a0:66:
a5:d9:47:22:2d:96:ee:cf:0d:73:bf:34:27:f2:00:
bb:a6:1c:3f:45:af:b6:65:3c:49:01:7b:c6:cc:33:
37:dd:fc:27:2e:17:8c:86:c0:65:1c:f4:90:08:a0:
0b:72:01:45:9b:9a:7a:0a:d6:69:07:83:b5:39:0c:
73:7f:2c:6a:12:96:6a:21:fb:ae:12:a9:72:26:c2:
58:65:92:12:40:25:c0:b3:f6:24:7f:85:2c:ff:3e:
45:a3:7c:a4:85:69:2c:3a:1f:e1:84:63:e3:fb:6d:
e4:ed:d9:3b:42:65:aa:2e:bb:1f:3d:6a:08:61:03:
1c:60:39:4c:6b:37:e9:ec:ad:26:31:7b:3d:67:83:
cc:e2:86:28:48:47:5e:52:7f:3f:9e:5f:48:08:3c:
76:c7:6b:27:ea:36:e9:49:b2:ae:48:03:7b:70:cf:
e2:2a:14:0d:e0:20:5d:47:bc:32:70:b2:fe:36:86:
32:a5:e3:74:ec:b6:fc:ed:fa:7d:6e:73:52:2c:e0:
bb:01:7d:54:94:ba:df:e6:58:cf:78:47:42:ea:70:
43:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:71:75:DD:4A:90:40:89:A4:D9:C2:16:81:0A:8F:5F:A2:19:E7:F9
X509v3 Authority Key Identifier:
keyid:B2:85:99:29:2A:63:24:29:7E:02:FF:F3:C5:11:9B:EE:0B:31:75:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:d6:f5:c0:96:cf:79:32:15:dd:23:5d:e7:b9:e9:f1:e0:82:
6f:33:8a:9d:46:0b:29:ac:2d:be:44:93:e5:ae:8a:d8:25:61:
d1:68:3d:08:b2:34:a9:4f:3f:9a:ca:05:75:d1:a3:1c:70:b8:
0e:6a:11:60:fd:8d:c1:bf:5b:1f:97:de:37:7f:0d:59:c4:d7:
55:29:4e:6a:03:e5:f9:7b:6c:36:0a:f3:77:fe:70:a1:ce:4b:
42:06:c5:a8:ee:36:4b:f4:cd:1d:c1:14:3b:ac:ca:bc:13:23:
74:e5:ab:1f:c2:6c:30:e4:c4:30:35:59:59:d5:76:f4:e1:17:
0b:60:61:1a:3f:22:8c:0e:14:c5:9d:ef:81:02:96:30:1e:97:
2c:49:fc:74:3e:a4:cd:bc:28:e0:fa:71:f0:05:6d:8f:89:2f:
6a:7b:c7:c4:ee:77:00:13:cb:64:73:ee:bc:d8:6a:c1:dd:5d:
bf:e6:ee:d7:bf:d5:3f:c4:63:2c:f5:bd:af:ab:45:61:e2:d4:
72:67:25:48:ba:d1:e1:5c:e3:4b:80:91:29:38:96:4b:6f:db:
96:e6:e9:6e:5b:5d:c3:ca:1d:d2:ed:d6:59:fe:07:53:2a:47:
cc:82:0f:ae:70:0c:c7:71:6f:1f:82:50:70:b3:db:d0:a6:fb:
54:e6:13:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:52:22 2025 by rpki-client