Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft
File: soWZKSpjJCl-Av_zxRGb7gsxdUg.mft (raw, json)
Hash identifier: xt/uJRF/KXQswi4BZnocD5xvT+kusDnjXuyMWb4Ahis=
Subject key identifier: 22:9D:4D:D5:67:A0:A7:C5:8E:0D:60:01:B4:14:56:3B:46:36:25:86
Authority key identifier: B2:85:99:29:2A:63:24:29:7E:02:FF:F3:C5:11:9B:EE:0B:31:75:48
Certificate issuer: /CN=b28599292a6324297e02fff3c5119bee0b317548
Certificate serial: 01964820DE5E6208DDA61AA6DD5FC8B56B74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft
Manifest number: 14F9
Signing time: Fri 18 Apr 2025 09:00:35 +0000
Manifest this update: Fri 18 Apr 2025 09:00:35 +0000
Manifest next update: Sat 19 Apr 2025 09:00:35 +0000
Files and hashes: 1: soWZKSpjJCl-Av_zxRGb7gsxdUg.crl (hash: To2yUMKXmFJMusHTmSKk5qVeMt5Crf2vfnFNgew8up8=)
2: yVvkuO-jgpRX6XN3GXN1npWJJ6g.roa (hash: 1v07ddxL5rWksw0TtZmPMhkBlMfB2KOWe+9tKgMQP40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 09:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:20:de:5e:62:08:dd:a6:1a:a6:dd:5f:c8:b5:6b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b28599292a6324297e02fff3c5119bee0b317548
Validity
Not Before: Apr 18 09:00:35 2025 GMT
Not After : Apr 19 09:00:35 2025 GMT
Subject: CN=229d4dd567a0a7c58e0d6001b414563b46362586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5d:e1:8e:4a:7f:9e:36:98:a1:40:d8:86:87:
ee:28:56:b1:8f:ef:b4:a6:d5:2b:b0:a1:89:b5:4a:
00:d3:d7:f8:04:46:9c:a3:a2:6c:ec:db:f2:86:65:
d9:cb:b2:c3:c4:42:f3:9b:64:0a:34:f3:05:a8:ba:
9d:51:f2:b8:e5:94:00:95:68:b7:46:81:68:fc:fa:
9b:8d:3b:be:8b:a1:35:43:70:ea:5a:c7:6d:a3:59:
1e:a2:87:88:cf:7c:ce:92:48:40:2f:ae:10:4b:f1:
63:cd:b4:3d:87:ca:e9:f2:7d:02:63:4a:db:3b:b9:
be:c9:85:7d:39:bb:19:96:78:50:74:50:cd:02:a3:
4e:46:81:89:23:8e:64:2e:1b:4e:7e:4b:d9:7e:88:
9f:a4:d0:38:a7:0c:36:ae:7d:eb:08:39:64:9f:39:
0a:73:d2:b7:0e:ec:50:9c:e6:ff:e8:c3:7a:3c:a8:
90:5d:1c:a1:6e:db:10:41:74:0d:32:8f:a1:a4:82:
38:38:15:ae:38:8d:b2:6e:3f:0f:78:4e:4b:e9:5a:
3e:89:3d:0f:5f:4a:c1:e6:df:b6:61:36:af:16:3a:
da:6f:6d:db:b5:ce:1e:53:e9:57:59:61:12:64:bb:
e8:fc:83:24:4e:06:b9:2a:45:4d:1a:4d:59:bb:92:
90:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9D:4D:D5:67:A0:A7:C5:8E:0D:60:01:B4:14:56:3B:46:36:25:86
X509v3 Authority Key Identifier:
keyid:B2:85:99:29:2A:63:24:29:7E:02:FF:F3:C5:11:9B:EE:0B:31:75:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:57:65:6a:00:66:f6:78:cb:9b:3e:0f:05:83:e5:1f:15:d7:
fb:f8:80:61:1b:ab:42:12:ad:f8:ea:f0:a2:ca:ab:07:8e:61:
07:6b:9a:9c:ce:78:c6:21:1c:2a:ee:73:c7:9f:76:18:fd:fb:
11:c2:3f:23:e0:e1:27:a7:89:24:4a:76:cd:79:0a:aa:b3:0e:
0b:1b:0f:2c:59:4d:41:a5:ad:86:96:fd:a1:9f:d2:ac:d4:64:
f2:16:3c:1b:1c:63:7f:f9:0f:9e:e8:a8:e8:8a:9f:09:2f:ee:
eb:26:32:61:e6:4f:f2:75:a9:65:d7:aa:fe:46:b2:c5:52:84:
f2:a1:8e:9e:b0:79:c0:32:2c:15:13:56:8f:71:70:cb:8b:27:
e5:59:3e:a8:4a:2d:d7:fb:f4:68:36:66:f7:96:02:43:55:10:
de:49:3c:7d:d5:26:b6:b6:01:08:4c:87:45:00:8d:cd:a7:65:
c9:be:77:0b:38:a5:39:9d:ab:77:c9:b4:9f:d1:67:20:33:f0:
c8:c6:f1:52:03:e5:5b:60:26:45:78:34:09:55:2e:ee:e4:96:
b0:55:b3:8d:0b:5b:7d:29:ab:a4:15:0b:2b:3b:19:ab:b4:77:
5e:b1:56:2c:a4:41:20:c0:79:b1:0f:65:8b:2f:c9:d4:91:08:
af:e0:82:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 13:39:42 2025 by rpki-client