Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft
File: SoPufcwyg3sLpbiR2PFFQ1qztgo.mft (raw, json)
Hash identifier: DuD9StVOA3SGK75VM9uXtvbf8UXF6QyMgKfUF7dP12g=
Subject key identifier: 25:43:A5:77:0E:68:B6:C2:7E:58:B1:DD:A8:DB:4A:12:91:1E:B0:7B
Authority key identifier: 4A:83:EE:7D:CC:32:83:7B:0B:A5:B8:91:D8:F1:45:43:5A:B3:B6:0A
Certificate issuer: /CN=4a83ee7dcc32837b0ba5b891d8f145435ab3b60a
Certificate serial: 01964A7CE636B4AD4051152C169BC4E119DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft
Manifest number: 0F02
Signing time: Fri 18 Apr 2025 20:00:21 +0000
Manifest this update: Fri 18 Apr 2025 20:00:21 +0000
Manifest next update: Sat 19 Apr 2025 20:00:21 +0000
Files and hashes: 1: SoPufcwyg3sLpbiR2PFFQ1qztgo.crl (hash: kMyrazKEae4uuplw/WSP3nFbDBKuLO61pEZgXwfDI7g=)
2: sN71VdE_vP-brkQYYHxei4Ctk7k.roa (hash: Ng80yhJSUZ9ywzwtEcf5TCIYC5bSHVuPL+nXnqyIEIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:7c:e6:36:b4:ad:40:51:15:2c:16:9b:c4:e1:19:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a83ee7dcc32837b0ba5b891d8f145435ab3b60a
Validity
Not Before: Apr 18 20:00:21 2025 GMT
Not After : Apr 19 20:00:21 2025 GMT
Subject: CN=2543a5770e68b6c27e58b1dda8db4a12911eb07b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:89:c0:cb:a2:a4:fe:7f:02:b6:be:7f:f9:94:
99:ef:b5:1d:40:c0:fe:e3:72:88:60:66:73:ce:c9:
aa:de:2d:3f:76:72:ed:33:82:07:54:59:68:f7:dd:
bf:db:58:ab:0a:7c:55:ec:8d:b7:34:47:03:9b:4f:
fa:cb:e6:8f:2c:d8:e7:a0:d5:4f:43:22:01:05:84:
d4:9e:76:eb:de:4e:bb:1c:b0:0d:60:68:8a:15:59:
0d:ab:6a:39:8d:33:8a:9c:9d:83:eb:39:a4:6b:1c:
18:d8:9b:40:ec:af:dd:d2:a4:03:40:b3:74:ee:a2:
07:cb:9d:4a:d2:ee:7a:f3:a5:a1:12:5e:c9:04:25:
78:ec:74:8f:7c:a7:ef:99:84:b4:dc:48:76:89:1d:
96:73:82:77:22:98:61:ec:4b:36:d3:02:3e:28:eb:
4f:5c:4c:11:8d:cb:ff:8a:d6:4c:b5:4b:e9:bd:b5:
38:aa:94:76:29:c3:c3:c8:c3:a1:9b:82:08:5d:a0:
36:7e:bf:ae:a3:d1:6f:3a:83:a4:be:99:96:6d:f3:
af:ea:13:19:36:9f:61:f5:a9:9d:a4:be:d0:a1:e9:
d0:ff:0b:9b:21:a2:a4:17:c3:d2:d4:a8:5b:4b:b1:
12:51:d6:fd:8d:87:fe:21:ed:ed:d2:e0:c9:66:e3:
77:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:43:A5:77:0E:68:B6:C2:7E:58:B1:DD:A8:DB:4A:12:91:1E:B0:7B
X509v3 Authority Key Identifier:
keyid:4A:83:EE:7D:CC:32:83:7B:0B:A5:B8:91:D8:F1:45:43:5A:B3:B6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SoPufcwyg3sLpbiR2PFFQ1qztgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/513e8a-ad5b-42be-9b6e-b4269463bce8/1/SoPufcwyg3sLpbiR2PFFQ1qztgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:7d:5d:46:ba:4f:8e:36:23:17:ad:c0:df:e2:45:ae:aa:06:
37:a2:77:88:d1:b7:41:c2:9e:bd:24:ba:5d:62:39:42:fa:07:
e6:04:5b:b8:d5:29:7b:d9:d5:67:fe:d9:75:6b:1f:ac:47:cf:
7a:e5:2b:71:37:46:a4:8d:6d:7e:03:ab:ff:a1:6a:dd:cd:ec:
a0:93:46:9f:e0:85:78:9d:4f:b4:87:73:8c:3d:ed:24:78:89:
27:6d:9b:29:db:27:94:62:c8:01:2a:8c:60:e9:ee:a2:9b:bb:
ea:b8:2f:20:d9:7d:9c:a8:0a:d0:95:8e:a9:66:b8:7f:3d:d5:
6c:d1:6f:8d:bd:3a:e1:bb:68:69:d4:ed:33:35:f0:a8:d9:21:
a5:33:cb:c8:4c:08:45:89:c6:77:a7:2e:4a:cb:e1:23:fe:0c:
f2:b2:c3:fe:b1:22:d4:97:bc:b7:b9:b5:c8:15:e5:39:77:a6:
8d:4f:d2:d5:61:3d:d8:43:27:c7:61:83:10:58:73:31:f9:bc:
00:78:a8:b6:ad:99:ea:26:b7:e8:fe:42:b6:5f:f2:ca:95:ea:
04:57:83:43:e7:5e:53:22:ed:da:19:41:09:16:74:91:41:4c:
e9:3b:f5:18:ff:f0:96:4b:4b:d9:ef:a6:39:ec:e4:87:aa:32:
ee:8e:5f:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZKfOY2tK1AURUsFpvE4RnbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhODNlZTdkY2MzMjgzN2IwYmE1Yjg5MWQ4ZjE0NTQzNWFi
M2I2MGEwHhcNMjUwNDE4MjAwMDIxWhcNMjUwNDE5MjAwMDIxWjAzMTEwLwYDVQQD
EygyNTQzYTU3NzBlNjhiNmMyN2U1OGIxZGRhOGRiNGExMjkxMWViMDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuInAy6Kk/n8Ctr5/+ZSZ77UdQMD+
43KIYGZzzsmq3i0/dnLtM4IHVFlo992/21irCnxV7I23NEcDm0/6y+aPLNjnoNVP
QyIBBYTUnnbr3k67HLANYGiKFVkNq2o5jTOKnJ2D6zmkaxwY2JtA7K/d0qQDQLN0
7qIHy51K0u5686WhEl7JBCV47HSPfKfvmYS03Eh2iR2Wc4J3Iphh7Es20wI+KOtP
XEwRjcv/itZMtUvpvbU4qpR2KcPDyMOhm4IIXaA2fr+uo9FvOoOkvpmWbfOv6hMZ
Np9h9amdpL7QoenQ/wubIaKkF8PS1KhbS7ESUdb9jYf+Ie3t0uDJZuN3iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCVDpXcOaLbCflix3ajbShKRHrB7MB8GA1UdIwQY
MBaAFEqD7n3MMoN7C6W4kdjxRUNas7YKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU29QdWZjd3lnM3NMcGJpUjJQRkZRMXF6dGdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS81MTNlOGEtYWQ1Yi00MmJlLTliNmUt
YjQyNjk0NjNiY2U4LzEvU29QdWZjd3lnM3NMcGJpUjJQRkZRMXF6dGdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS81MTNlOGEtYWQ1Yi00MmJlLTliNmUtYjQyNjk0NjNiY2U4
LzEvU29QdWZjd3lnM3NMcGJpUjJQRkZRMXF6dGdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXn1dRrpP
jjYjF63A3+JFrqoGN6J3iNG3QcKevSS6XWI5QvoH5gRbuNUpe9nVZ/7ZdWsfrEfP
euUrcTdGpI1tfgOr/6Fq3c3soJNGn+CFeJ1PtIdzjD3tJHiJJ22bKdsnlGLIASqM
YOnuopu76rgvINl9nKgK0JWOqWa4fz3VbNFvjb064btoadTtMzXwqNkhpTPLyEwI
RYnGd6cuSsvhI/4M8rLD/rEi1Je8t7m1yBXlOXemjU/S1WE92EMnx2GDEFhzMfm8
AHiotq2Z6ia36P5Ctl/yypXqBFeDQ+deUyLt2hlBCRZ0kUFM6Tv1GP/wlktL2e+m
Oezkh6oy7o5fgg==
-----END CERTIFICATE-----
Generated at Sat Apr 19 04:45:37 2025 by rpki-client