Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
File: So5ocC711IxPKwctnLRz5iuHs-Q.mft (raw, json)
Hash identifier: W1qQ3KGA/oennMfOGqdSnjx4F//Whwm8VgpuVKvYLwI=
Subject key identifier: BA:A1:E1:19:8C:28:3D:57:93:F9:B4:82:A0:28:03:02:26:6C:5A:9C
Authority key identifier: 4A:8E:68:70:2E:F5:D4:8C:4F:2B:07:2D:9C:B4:73:E6:2B:87:B3:E4
Certificate issuer: /CN=4a8e68702ef5d48c4f2b072d9cb473e62b87b3e4
Certificate serial: 01964B8FABAB07D99DBDAB0E0B6D6DF25927
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
Manifest number: 1505
Signing time: Sat 19 Apr 2025 01:00:28 +0000
Manifest this update: Sat 19 Apr 2025 01:00:28 +0000
Manifest next update: Sun 20 Apr 2025 01:00:28 +0000
Files and hashes: 1: Cb8GvWaqJEP99Z_1Zf6W9V1dLBE.roa (hash: uP8GgxIXXmDUgYigzqGg9J8WDHDnaKE1GYwFp10x32c=)
2: OXid8ZIo0gYd60wcu8PCjC7LJPY.roa (hash: rslXzL1goIGJkIHIKNU4kWEWp+av7vzPHwq4yajVlZ8=)
3: So5ocC711IxPKwctnLRz5iuHs-Q.crl (hash: NVltLC1FhmF6PgIU5rulFt7uhW8PqBb/jG5OQ6pgWdk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:8f:ab:ab:07:d9:9d:bd:ab:0e:0b:6d:6d:f2:59:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8e68702ef5d48c4f2b072d9cb473e62b87b3e4
Validity
Not Before: Apr 19 01:00:28 2025 GMT
Not After : Apr 20 01:00:28 2025 GMT
Subject: CN=baa1e1198c283d5793f9b482a0280302266c5a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e4:33:de:a3:04:c8:2a:f8:9e:20:9b:21:34:
e1:ff:21:f1:6d:23:71:59:58:3a:d4:a3:19:4b:50:
8b:09:4e:06:4b:04:12:8b:0c:df:3a:b2:55:24:3f:
93:8d:04:61:5a:60:6f:08:6f:10:1d:78:e2:28:de:
45:65:50:a2:e5:cb:4a:72:aa:9d:31:e9:cb:a7:40:
ec:71:3c:47:26:66:4b:13:bb:c1:2e:22:56:cd:9e:
72:3c:bf:ac:03:5c:92:d9:d5:02:1c:db:f2:3f:6d:
ca:3a:d0:a3:46:0f:e1:f7:65:be:85:af:0c:eb:fd:
bc:7d:66:e6:b3:96:c4:7c:6f:5c:b6:cb:f7:c3:8d:
bd:1d:25:7f:05:79:c1:05:e2:f1:fa:4b:82:f6:64:
1f:c4:17:04:4a:8a:00:22:e7:8f:8e:aa:6d:32:42:
b6:9c:6f:8b:ed:e9:dd:e4:31:92:b3:74:97:ab:db:
de:a0:7d:d7:63:ad:a8:b3:d3:06:63:33:42:41:17:
22:bf:5b:98:b2:b1:e6:f6:12:5a:80:d3:20:19:ab:
b7:f9:14:7d:8a:86:43:99:0e:97:f0:c9:7b:97:95:
29:f8:49:3c:58:90:27:08:71:74:c1:14:cf:70:25:
f9:db:be:de:90:38:36:2b:b7:26:ed:eb:15:6d:65:
b5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A1:E1:19:8C:28:3D:57:93:F9:B4:82:A0:28:03:02:26:6C:5A:9C
X509v3 Authority Key Identifier:
keyid:4A:8E:68:70:2E:F5:D4:8C:4F:2B:07:2D:9C:B4:73:E6:2B:87:B3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a0:76:10:fc:f7:9d:20:88:62:42:e4:f1:10:01:94:62:f1:
30:ba:2f:cd:9f:54:55:4c:c1:31:ac:6f:32:57:69:f0:50:19:
43:15:a0:48:06:48:13:f2:d2:7c:2d:00:5c:b3:80:ce:e4:9e:
7a:4b:70:a5:c3:7a:5f:c1:0f:65:fe:a9:e3:6e:61:bb:fe:94:
b5:d4:4d:49:38:b4:ef:91:b7:d7:2c:ce:05:66:5e:b2:05:31:
5d:49:79:b5:5b:63:8d:d9:ea:60:7d:f7:74:0d:6f:21:77:aa:
f2:5f:6c:71:3b:fe:63:76:57:af:87:93:73:44:b3:e5:21:9e:
a0:b0:4f:c4:d0:6c:1c:0a:c2:b0:17:be:db:c1:ef:ad:a2:51:
b1:68:6c:40:0b:4e:08:2d:4c:e6:38:20:ce:d6:72:97:62:06:
c6:32:1c:47:ca:4b:4e:52:2d:06:8d:33:3f:bf:5c:92:36:2d:
72:d3:af:bc:f5:d3:4b:b5:d5:cf:b2:50:7a:66:50:ea:bd:13:
cb:ef:74:a2:44:bb:11:3d:88:7c:7e:ce:ea:6d:04:2b:a1:1a:
c2:5e:c2:34:3a:7b:77:a6:13:49:bb:db:9e:be:a8:81:17:33:
6a:26:4b:d6:16:fc:61:81:84:f1:cd:d0:de:0f:e5:43:a6:38:
ab:c2:d0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:41:56 2025 by rpki-client