Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
File: So4X_aopGHuOQNYwrd69n9JMAXY.mft (raw, json)
Hash identifier: zrmMm9nJxGqKKnRkhok47JPJxI2vbHHDS4ogWZUxv5o=
Subject key identifier: 9A:69:E9:40:4D:7F:40:72:32:DF:0E:0A:C4:41:42:05:31:C5:73:E4
Authority key identifier: 4A:8E:17:FD:AA:29:18:7B:8E:40:D6:30:AD:DE:BD:9F:D2:4C:01:76
Certificate issuer: /CN=4a8e17fdaa29187b8e40d630addebd9fd24c0176
Certificate serial: 019678315677F1998A96AFCE7556A9291083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 17:00:21 +0000
Manifest this update: Sun 27 Apr 2025 17:00:21 +0000
Manifest next update: Mon 28 Apr 2025 17:00:21 +0000
Files and hashes: 1: 0Wv8atHhhinqkL8Z_4yWBd1Kqg8.roa (hash: fILNYD3epuR8fxYq9hgXxD3GgQQCM01sw2YL4pd5Wks=)
2: So4X_aopGHuOQNYwrd69n9JMAXY.crl (hash: +KbvPbzdtOFCUIzBUJi36UkrlzVo6wVS7Jg1nqzvax0=)
3: ndcYXik2c-8B-vqJArbqTb-_G3U.roa (hash: yy5P560QguXuhVFyLBs0BE4KQ8bMeN1jFaQHeK1c0oU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 17:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:56:77:f1:99:8a:96:af:ce:75:56:a9:29:10:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8e17fdaa29187b8e40d630addebd9fd24c0176
Validity
Not Before: Apr 27 17:00:21 2025 GMT
Not After : Apr 28 17:00:21 2025 GMT
Subject: CN=9a69e9404d7f407232df0e0ac441420531c573e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:35:be:33:33:38:3b:ec:ba:f5:69:0a:06:e3:
ea:8d:7a:04:e8:04:64:97:2f:0e:4a:ca:2c:d7:c3:
58:10:61:63:37:21:25:af:aa:86:eb:c5:f8:65:18:
8e:cf:19:93:fb:47:11:a8:a9:ee:38:3e:3d:99:1b:
b9:03:f6:7a:92:64:f0:c4:bf:53:be:2f:72:32:d5:
47:13:00:43:0d:da:f6:91:e5:cc:14:53:1e:03:f2:
8d:ef:06:6c:ff:1e:7b:e6:2c:b0:a5:b9:22:b6:a9:
91:bc:b6:bc:b9:8c:77:3d:cc:b7:d0:f7:d8:b4:ca:
b1:81:dc:5e:7e:1a:e4:3c:18:98:ba:9c:67:a0:94:
3c:a7:81:04:9d:e8:59:92:a9:ca:bc:4f:c5:2d:69:
fc:32:77:f4:06:f4:39:c1:d4:48:9f:7e:1d:e9:a0:
79:36:ce:2b:7a:74:de:57:d5:18:d4:4b:19:cc:fd:
e8:e9:72:ca:1e:bb:8c:54:e8:ed:44:f8:f6:02:e9:
bf:9b:45:75:70:d4:ee:d0:05:d6:eb:eb:38:9c:4a:
1b:0b:ce:99:ce:40:7d:56:4f:6d:69:dc:c9:05:ad:
db:7a:be:55:7b:5b:43:20:ec:97:56:f7:b9:0c:ad:
43:68:50:27:be:86:7b:13:90:31:90:62:cf:0f:29:
b1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:69:E9:40:4D:7F:40:72:32:DF:0E:0A:C4:41:42:05:31:C5:73:E4
X509v3 Authority Key Identifier:
keyid:4A:8E:17:FD:AA:29:18:7B:8E:40:D6:30:AD:DE:BD:9F:D2:4C:01:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:6e:e3:f3:8f:41:7d:c7:ce:b0:64:97:ea:78:db:9f:bd:8b:
9e:65:77:2a:c2:ef:e9:ac:21:2c:a0:f3:94:fd:2a:d0:3a:31:
2c:f1:8e:84:b1:35:58:cd:5a:b5:8a:4d:79:99:35:bc:e3:b0:
f1:60:53:dc:fb:29:e8:50:04:5b:c4:27:39:89:e4:c2:89:1f:
39:9e:e3:0b:07:d4:7d:59:bb:a0:9e:e7:e4:db:bf:a9:a3:0c:
51:52:33:af:cb:b2:a0:e4:4b:06:b4:da:b9:3c:02:4c:28:02:
1c:ce:1b:65:10:24:31:4f:a8:34:30:20:54:39:00:67:e8:80:
13:c8:d4:17:d5:b0:8d:82:ab:46:3c:76:d4:10:28:74:44:20:
57:49:82:77:0c:fa:a1:ab:84:bc:6b:0d:8f:b1:35:e1:f4:5a:
09:0f:a3:b7:a0:e7:e7:03:f9:34:c8:f6:c5:8a:81:1f:bd:a4:
38:e7:8a:f8:32:a2:b3:da:e3:df:86:11:5a:c2:e1:cb:f5:32:
b2:4c:9b:68:ec:7d:fe:14:e5:6c:9a:00:0d:76:0d:df:78:68:
c8:3a:f2:20:89:5b:8d:9d:20:40:06:74:77:1d:84:d2:9e:b0:
b9:a8:9f:a9:98:87:96:11:8d:c5:b0:42:b9:a5:57:8a:73:87:
a7:ed:ce:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:34:46 2025 by rpki-client