Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
File: SsoEWGqF7RLpzag039-hGcGliXU.mft (raw, json)
Hash identifier: vhrTIELNYN/WHyjrdLZ9zge0XLplMKiEPxUGwLUXDf8=
Subject key identifier: 8C:9E:D8:38:13:83:D3:CA:5C:7F:86:60:C5:32:10:17:58:34:E1:44
Authority key identifier: 4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75
Certificate issuer: /CN=4aca04586a85ed12e9cda834dfdfa119c1a58975
Certificate serial: 0196383FF6F325F11112AD4407D88974B4E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
Manifest number: 08BF
Signing time: Tue 15 Apr 2025 07:00:38 +0000
Manifest this update: Tue 15 Apr 2025 07:00:38 +0000
Manifest next update: Wed 16 Apr 2025 07:00:38 +0000
Files and hashes: 1: SsoEWGqF7RLpzag039-hGcGliXU.crl (hash: HhfOCxuudraeA13RaWBD3l2yPte4Fbf2XrM/qvArRHo=)
2: TdqltWNYsCkDJcg9oYqYHfFyayw.roa (hash: IHz6X9KAAba9wnzN//Chx4Lew1Pbb5Sq3pXLZ65RVVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:38:3f:f6:f3:25:f1:11:12:ad:44:07:d8:89:74:b4:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aca04586a85ed12e9cda834dfdfa119c1a58975
Validity
Not Before: Apr 15 07:00:38 2025 GMT
Not After : Apr 16 07:00:38 2025 GMT
Subject: CN=8c9ed8381383d3ca5c7f8660c53210175834e144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:02:4e:23:3a:41:ac:bc:9c:f0:3c:7d:05:37:
0b:98:2e:e5:d6:44:97:d9:65:d5:54:8b:91:92:76:
52:ee:6e:aa:73:89:1b:32:85:2c:1e:3d:3c:f4:09:
b2:a8:6e:c0:2b:f9:a2:f2:e2:44:f2:a4:bb:65:24:
49:5e:3a:32:71:3e:61:c6:d3:fa:bd:e7:35:89:11:
53:9a:51:c1:d2:5f:9e:d0:0d:61:69:48:51:04:95:
6c:54:eb:67:6c:ee:1a:7c:89:be:53:89:0d:f8:a7:
52:3c:6f:b2:50:ba:86:f0:47:c4:5e:c9:df:a2:f0:
e8:65:5e:d1:3e:e0:cf:f0:72:ab:e7:59:b1:18:e8:
58:de:ca:49:c8:89:12:cd:90:b8:f7:a1:1b:5f:84:
b0:f4:c2:aa:37:a4:b8:f0:70:35:52:c7:03:fa:63:
dd:53:f0:5d:8b:78:40:95:b2:f0:5c:72:55:91:cc:
c4:6e:ba:23:07:a6:a5:0d:7e:f5:f3:0d:a0:76:9c:
f4:bd:a4:3e:8b:32:3d:ca:35:2e:18:e8:8b:5c:c4:
fd:1d:ee:9a:2d:a3:72:87:57:80:11:22:49:b0:93:
21:30:da:cd:9e:8a:99:62:7a:87:04:32:d5:ee:c9:
8a:9a:7b:12:bb:9f:55:77:34:98:4e:b9:06:5f:ff:
69:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:9E:D8:38:13:83:D3:CA:5C:7F:86:60:C5:32:10:17:58:34:E1:44
X509v3 Authority Key Identifier:
keyid:4A:CA:04:58:6A:85:ED:12:E9:CD:A8:34:DF:DF:A1:19:C1:A5:89:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SsoEWGqF7RLpzag039-hGcGliXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d2e137-cebb-4794-9ace-1b5de5b76062/1/SsoEWGqF7RLpzag039-hGcGliXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:12:83:0d:68:a6:f7:c0:19:f0:19:78:19:58:d7:b0:b5:44:
43:95:21:af:43:47:b3:c0:9a:70:30:65:8e:7b:ae:d7:df:f1:
a1:de:a2:09:3d:24:4a:bc:19:b2:f8:e3:19:ae:9c:3d:a4:66:
e0:07:2a:a7:17:61:b6:8e:6a:30:c7:a0:42:62:7e:4b:89:39:
07:9d:5e:c8:51:86:a9:13:a9:3c:84:27:6f:b4:26:2b:33:f8:
54:e7:74:93:25:13:31:24:73:4b:57:78:b4:d1:4a:1a:71:4b:
77:f6:56:0d:3a:99:5a:24:73:c0:ea:11:ea:56:f0:d6:44:55:
c1:01:db:d4:1d:ff:df:04:c0:60:34:67:0d:f5:37:7e:d4:ad:
d7:58:95:8c:ef:af:3b:16:55:94:91:82:0d:7a:2f:cb:a9:82:
9f:80:58:da:b4:70:8f:57:4c:00:2d:bb:8e:8d:4e:dd:3b:a4:
cc:40:fb:1a:51:cc:65:b9:63:14:61:0d:09:41:06:71:63:5f:
c1:c7:06:b0:8b:39:15:f9:25:1f:11:9a:9f:b5:96:84:6f:e8:
09:e7:86:aa:c4:a8:86:94:0f:67:e2:fa:02:f0:62:55:2c:1a:
5e:b1:c5:98:b6:90:1f:9e:7e:0d:96:55:0a:ad:25:c2:78:f1:
a1:1b:0f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 11:59:18 2025 by rpki-client