Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft
File: SOowwPKOAiacV2W_SgRWd8onlKU.mft (raw, json)
Hash identifier: V4cblHIPr5rVGPdN6Z0ofglG5nfcU/QIfhhXBX7HX00=
Subject key identifier: 84:F7:1E:B8:28:63:0F:EA:D0:A2:22:38:00:B3:0A:F3:E8:7E:09:98
Authority key identifier: 48:EA:30:C0:F2:8E:02:26:9C:57:65:BF:4A:04:56:77:CA:27:94:A5
Certificate issuer: /CN=48ea30c0f28e02269c5765bf4a045677ca2794a5
Certificate serial: 0196730B47FD9856202DA653F8BDDA2EF8A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOowwPKOAiacV2W_SgRWd8onlKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft
Manifest number: 1115
Signing time: Sat 26 Apr 2025 17:00:41 +0000
Manifest this update: Sat 26 Apr 2025 17:00:41 +0000
Manifest next update: Sun 27 Apr 2025 17:00:41 +0000
Files and hashes: 1: SOowwPKOAiacV2W_SgRWd8onlKU.crl (hash: m6XhxDKhZb1Pw6yezf0JQurkTxPLU+4Cy4hZoJoLRYs=)
2: ZyzamFxx31MI8DWtNOW9NjiSAdw.roa (hash: k0oTub67+XpNNg/oLxWWVGf2ml63S+4IV7J2xSqjNvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SOowwPKOAiacV2W_SgRWd8onlKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:0b:47:fd:98:56:20:2d:a6:53:f8:bd:da:2e:f8:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48ea30c0f28e02269c5765bf4a045677ca2794a5
Validity
Not Before: Apr 26 17:00:41 2025 GMT
Not After : Apr 27 17:00:41 2025 GMT
Subject: CN=84f71eb828630fead0a2223800b30af3e87e0998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a9:2f:a4:40:a0:8d:e6:33:63:d5:6c:f3:19:
a2:55:c9:68:c6:bf:3e:6a:cf:0f:cc:cf:e2:a5:ef:
27:41:39:54:cf:4a:02:a1:c6:ad:f6:6f:56:9f:90:
6e:3f:db:48:c3:e5:7c:da:7d:bb:51:86:33:5f:80:
9e:4a:06:6e:a7:59:43:8a:28:7a:60:4d:a2:28:68:
9d:44:c3:f9:6f:54:6e:3a:ea:07:54:0b:3c:6c:cc:
3a:99:73:f8:4d:bf:3f:06:3a:fd:68:62:01:52:7a:
37:26:a0:74:74:38:2a:5b:39:36:df:18:2c:45:0f:
e0:eb:f3:8a:ae:32:3f:fc:9c:db:01:eb:3a:6f:f5:
66:cd:1c:a8:8d:63:09:4e:26:a0:46:3c:d6:88:11:
89:3d:86:60:4f:96:9e:ba:ac:ac:d1:4a:eb:77:42:
ab:35:0c:d9:49:cc:63:67:d3:e6:29:87:17:b8:28:
b6:dc:de:61:b5:42:d6:8f:53:22:35:41:94:75:1f:
9f:af:08:3f:ba:89:ec:6a:42:11:a1:47:ab:03:56:
74:c7:54:a0:01:88:2f:8b:40:d6:ee:fc:ad:87:01:
a0:d1:5b:84:80:96:c1:a2:ca:17:b9:fb:d2:28:b5:
81:64:c6:03:59:60:12:e3:40:0e:e1:56:c2:8e:0b:
60:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F7:1E:B8:28:63:0F:EA:D0:A2:22:38:00:B3:0A:F3:E8:7E:09:98
X509v3 Authority Key Identifier:
keyid:48:EA:30:C0:F2:8E:02:26:9C:57:65:BF:4A:04:56:77:CA:27:94:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOowwPKOAiacV2W_SgRWd8onlKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:bd:68:23:05:d7:98:41:34:d3:c7:64:fc:a7:95:34:35:f8:
08:2f:85:d7:0f:82:29:97:e3:c7:2f:ec:b4:25:16:23:f5:48:
13:b0:66:7b:0b:91:b3:a4:eb:a0:3a:bc:e2:6a:93:31:f6:de:
d1:e7:78:25:95:e2:83:34:fe:74:d6:a0:04:9f:4a:24:34:85:
a1:5a:24:5f:03:7f:fc:5d:5f:44:a1:40:a8:06:eb:28:e5:04:
5f:9a:29:8b:bb:10:1a:dd:5f:a3:6a:34:c4:45:98:83:f6:bb:
2f:a6:bf:a8:b4:ce:8a:0a:90:6c:99:0e:07:c3:ae:b8:c3:fb:
e9:dd:59:be:fa:44:3c:2c:3c:97:af:c1:d2:b7:5e:d8:e5:ff:
25:d9:5a:87:d9:61:e6:14:d2:76:a6:1e:8e:f7:a9:45:84:bd:
7b:93:01:04:8e:00:3e:64:4c:4b:95:33:1c:c7:53:30:54:7f:
27:82:35:b1:81:e8:cd:0e:0c:46:8b:79:e8:80:f5:9c:16:6c:
5f:4b:3e:30:70:43:53:18:7d:bb:80:94:f4:8e:93:45:83:f5:
cb:94:14:79:99:ea:04:e0:99:df:c0:78:f3:93:86:72:57:62:
9d:43:80:77:d7:ff:d4:e6:53:97:bd:71:08:fe:db:c7:b5:7a:
56:35:87:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:29:33 2025 by rpki-client