Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
File: So4X_aopGHuOQNYwrd69n9JMAXY.mft (raw, json)
Hash identifier: oew5AyOyMgz5nmDEkOaGPKTukZWLO5+Dv1J2O6muyNo=
Subject key identifier: DC:EC:33:F6:15:28:89:8B:DF:61:D5:56:A9:6F:45:5D:70:CB:C5:1C
Authority key identifier: 4A:8E:17:FD:AA:29:18:7B:8E:40:D6:30:AD:DE:BD:9F:D2:4C:01:76
Certificate issuer: /CN=4a8e17fdaa29187b8e40d630addebd9fd24c0176
Certificate serial: 01965D2855EED1D5BBCD1E2C9B175F55C02B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
Manifest number: 1500
Signing time: Tue 22 Apr 2025 11:00:46 +0000
Manifest this update: Tue 22 Apr 2025 11:00:46 +0000
Manifest next update: Wed 23 Apr 2025 11:00:46 +0000
Files and hashes: 1: 0Wv8atHhhinqkL8Z_4yWBd1Kqg8.roa (hash: fILNYD3epuR8fxYq9hgXxD3GgQQCM01sw2YL4pd5Wks=)
2: So4X_aopGHuOQNYwrd69n9JMAXY.crl (hash: uC6cYrwIZ6/XlJ7in3+1MtldA3Hvk0g4Mrq2fnyPfyU=)
3: ndcYXik2c-8B-vqJArbqTb-_G3U.roa (hash: yy5P560QguXuhVFyLBs0BE4KQ8bMeN1jFaQHeK1c0oU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:28:55:ee:d1:d5:bb:cd:1e:2c:9b:17:5f:55:c0:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8e17fdaa29187b8e40d630addebd9fd24c0176
Validity
Not Before: Apr 22 11:00:46 2025 GMT
Not After : Apr 23 11:00:46 2025 GMT
Subject: CN=dcec33f61528898bdf61d556a96f455d70cbc51c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a5:4a:50:f9:84:c2:c7:cf:9c:69:3e:14:4f:
05:c3:36:fe:4a:ff:ff:10:b4:22:37:2b:3b:11:db:
86:11:b0:db:7f:e4:97:6e:41:7d:2e:b9:d2:62:30:
87:3f:ee:20:6d:43:fc:e3:f2:b1:9d:b9:46:82:b4:
89:d9:0d:80:4e:cf:e9:06:0b:33:40:30:fb:c2:b1:
91:66:d6:c4:91:e7:35:99:94:37:b8:43:49:1e:fa:
64:e0:82:8a:be:96:59:7e:14:5b:57:c3:20:b6:51:
50:49:c6:92:d1:b1:d0:ae:19:8a:0a:68:30:c3:4b:
3a:0b:24:4e:39:90:f1:6a:44:fc:f6:92:f5:68:cb:
ee:0d:40:13:ef:6c:a9:97:e1:6e:54:58:19:3d:b7:
02:02:dd:ab:aa:ae:c6:f2:ea:1f:d8:03:2d:65:1a:
f2:fa:bf:2b:28:57:d4:44:a4:87:41:7e:2f:c3:2f:
0d:e6:82:95:3d:80:c6:7a:79:a2:ea:9c:a3:03:c9:
a1:20:76:46:1f:c2:05:e0:64:75:d7:6f:09:7e:bb:
dc:be:dd:00:72:e6:f7:62:55:14:1c:2b:63:1b:cd:
14:3b:5b:1a:de:9b:50:c9:10:21:3e:d7:dd:4b:43:
13:49:c9:62:b7:06:3f:10:2e:45:93:e5:e8:b3:91:
55:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EC:33:F6:15:28:89:8B:DF:61:D5:56:A9:6F:45:5D:70:CB:C5:1C
X509v3 Authority Key Identifier:
keyid:4A:8E:17:FD:AA:29:18:7B:8E:40:D6:30:AD:DE:BD:9F:D2:4C:01:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:82:c0:28:27:26:9c:78:ca:66:9a:01:51:55:cb:08:20:4c:
ee:eb:f8:cf:8b:60:59:b6:95:fe:ab:eb:20:36:6b:a6:0c:0d:
d7:ef:64:36:8a:da:6d:2f:38:e9:7b:d4:cd:1d:84:93:f0:38:
6f:1c:c4:7a:3a:1c:9c:de:7d:2b:3a:98:1f:fb:88:28:fa:d8:
48:51:42:44:e1:3d:9b:ff:a1:75:1d:7d:e9:2b:3b:da:12:55:
9f:e3:69:f9:46:48:67:aa:21:43:b8:9b:3e:91:26:58:1b:b8:
c2:a0:44:f5:06:4b:8b:8a:de:a6:60:17:a0:6a:76:b7:81:7e:
f0:ca:e4:d7:ce:34:33:0e:83:0c:70:74:69:96:9d:d6:0e:09:
d5:5c:67:72:c5:9c:ba:f3:a2:7b:20:18:9d:1e:8c:0d:02:1f:
5f:cd:7b:4a:a0:20:a1:43:6c:23:93:70:ce:55:b3:75:5f:aa:
fd:af:8c:e9:14:b6:90:73:86:c2:78:07:bf:f1:60:55:3a:4c:
ab:cd:ca:18:f6:10:00:1e:96:78:e5:8a:20:27:85:c2:df:5b:
fa:dc:03:0b:16:9a:fa:61:c1:76:d1:94:a0:4d:b5:bc:5d:ef:
69:9a:d3:59:1a:b7:28:dd:95:b2:6d:a3:63:15:5d:38:80:47:
d3:24:85:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:01:21 2025 by rpki-client