Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
File: So5ocC711IxPKwctnLRz5iuHs-Q.mft (raw, json)
Hash identifier: +W1Wf/WrnVBvoR+z2hu9IBWq/lTf5wV4+unnCYmuieI=
Subject key identifier: 5A:D4:70:F3:92:16:BB:C1:1C:75:88:5C:BC:0F:EE:44:81:55:56:F2
Authority key identifier: 4A:8E:68:70:2E:F5:D4:8C:4F:2B:07:2D:9C:B4:73:E6:2B:87:B3:E4
Certificate issuer: /CN=4a8e68702ef5d48c4f2b072d9cb473e62b87b3e4
Certificate serial: 0196857F828EAD1ED42AE8D69142FD134804
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
Manifest number: 1523
Signing time: Wed 30 Apr 2025 07:00:48 +0000
Manifest this update: Wed 30 Apr 2025 07:00:48 +0000
Manifest next update: Thu 01 May 2025 07:00:48 +0000
Files and hashes: 1: Cb8GvWaqJEP99Z_1Zf6W9V1dLBE.roa (hash: uP8GgxIXXmDUgYigzqGg9J8WDHDnaKE1GYwFp10x32c=)
2: OXid8ZIo0gYd60wcu8PCjC7LJPY.roa (hash: rslXzL1goIGJkIHIKNU4kWEWp+av7vzPHwq4yajVlZ8=)
3: So5ocC711IxPKwctnLRz5iuHs-Q.crl (hash: hG2nY4eZpm6OHORZanB1ztfY7EGHE+da1Frr6aFIdD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:7f:82:8e:ad:1e:d4:2a:e8:d6:91:42:fd:13:48:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8e68702ef5d48c4f2b072d9cb473e62b87b3e4
Validity
Not Before: Apr 30 07:00:48 2025 GMT
Not After : May 1 07:00:48 2025 GMT
Subject: CN=5ad470f39216bbc11c75885cbc0fee44815556f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9c:18:57:db:e3:2e:a4:b7:59:16:5b:47:29:
fb:ca:70:6e:0f:a7:81:ca:bc:e7:26:6e:e0:9b:cd:
fb:d2:5f:81:cb:65:05:f2:f5:17:4b:9d:1c:96:f9:
a9:c0:85:c9:19:16:cd:3f:10:c4:4a:ad:f1:c5:ca:
40:92:3d:a0:8d:2c:9d:1a:1a:ff:69:06:15:c2:69:
82:8a:d0:d9:c3:9d:87:16:ea:83:dd:ef:01:75:a0:
71:ac:fd:d4:0e:75:de:39:13:26:00:57:65:82:84:
93:5e:e9:fe:3f:3b:c4:96:b7:14:75:78:32:d1:68:
c7:ff:9e:39:99:96:cc:5f:c0:72:18:f3:66:c8:68:
ea:5c:52:be:91:7e:b5:7c:4f:0e:db:49:8b:79:78:
6b:d3:4b:34:26:ae:43:a4:fd:4f:72:29:80:37:62:
5d:4f:ac:6f:cc:1e:65:87:96:38:06:f8:81:1c:dd:
1c:2e:1d:5b:74:84:aa:d3:2b:6d:66:a3:f8:09:9c:
d0:ae:3c:ea:48:02:1e:fd:12:ae:04:ce:83:61:e4:
be:b4:57:b3:f5:c8:53:30:29:d1:dc:12:23:12:37:
e0:1a:cd:c7:61:1a:00:11:f2:4f:36:60:b9:45:50:
b4:53:c0:3f:98:04:25:90:73:72:0c:e7:0e:bf:c4:
bd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D4:70:F3:92:16:BB:C1:1C:75:88:5C:BC:0F:EE:44:81:55:56:F2
X509v3 Authority Key Identifier:
keyid:4A:8E:68:70:2E:F5:D4:8C:4F:2B:07:2D:9C:B4:73:E6:2B:87:B3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:2b:10:9c:a4:58:cb:fe:16:47:29:31:94:2f:ee:ec:9a:09:
4e:cb:c1:0d:c3:67:03:a7:53:ba:b5:df:9e:17:fe:e3:68:7e:
c8:27:a3:fb:7e:9f:3d:89:a9:9c:6d:68:4e:aa:d5:e1:c0:f8:
7e:bb:73:21:4a:d2:60:cd:f9:d1:60:fd:bb:c0:0f:7d:78:f9:
d0:b9:49:a2:06:d8:8f:78:16:57:b6:dd:fe:36:a0:64:52:cb:
c6:28:8b:48:d6:47:a1:ca:91:32:79:da:da:9d:96:8c:c2:02:
ff:23:4f:81:7a:51:d5:58:ce:66:ff:f5:33:51:e7:d4:0f:1a:
35:50:f3:50:54:24:ff:b2:9b:58:f0:77:4a:18:c3:c2:c9:2c:
11:aa:84:14:3a:f7:4a:5c:4c:29:82:f6:9f:cf:6d:53:0f:cd:
64:31:0e:1d:b3:3e:a6:fb:25:ce:22:ed:75:47:fc:7c:89:9e:
73:d2:d5:09:f3:b8:4b:14:50:41:32:11:5e:21:84:b3:d0:af:
5b:dc:ef:87:2d:bf:e4:81:7e:18:b4:d0:42:23:b9:c6:3d:fe:
9e:db:ee:76:1f:6d:bb:b1:cd:2d:be:fc:fa:74:aa:2b:e8:f7:
bd:9d:c0:00:a4:55:78:f5:03:eb:f0:2b:0b:56:4d:42:94:cc:
b7:d6:b6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 11:51:49 2025 by rpki-client