Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft
File: soWZKSpjJCl-Av_zxRGb7gsxdUg.mft (raw, json)
Hash identifier: zEvzsZjjJiMw16ES864unCJDlZv2+r10XWATsV/fSyU=
Subject key identifier: C0:C9:5E:C0:82:E4:7B:9B:56:04:F7:47:9E:1D:0B:BF:AE:6D:D5:A6
Authority key identifier: B2:85:99:29:2A:63:24:29:7E:02:FF:F3:C5:11:9B:EE:0B:31:75:48
Certificate issuer: /CN=b28599292a6324297e02fff3c5119bee0b317548
Certificate serial: 01951134FDFD7DD3F176533D3FF9EF1F9DDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft
Manifest number: 1458
Signing time: Mon 17 Feb 2025 00:00:40 +0000
Manifest this update: Mon 17 Feb 2025 00:00:40 +0000
Manifest next update: Tue 18 Feb 2025 00:00:40 +0000
Files and hashes: 1: soWZKSpjJCl-Av_zxRGb7gsxdUg.crl (hash: 3l406a7zxIl5pPVPM/qu2ouPIM1M/+4yZme5vEquGyo=)
2: yVvkuO-jgpRX6XN3GXN1npWJJ6g.roa (hash: 1v07ddxL5rWksw0TtZmPMhkBlMfB2KOWe+9tKgMQP40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:34:fd:fd:7d:d3:f1:76:53:3d:3f:f9:ef:1f:9d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b28599292a6324297e02fff3c5119bee0b317548
Validity
Not Before: Feb 17 00:00:40 2025 GMT
Not After : Feb 18 00:00:40 2025 GMT
Subject: CN=c0c95ec082e47b9b5604f7479e1d0bbfae6dd5a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6f:d9:9d:2c:9e:41:ba:51:a7:63:64:3e:22:
31:1c:1a:a5:4a:3d:5b:b4:69:5f:c2:61:98:7e:8f:
43:36:b4:04:8b:b3:9c:88:0b:c3:2c:ff:fa:dc:78:
24:64:e3:c2:73:e4:35:14:21:90:d0:70:f9:b7:ce:
e0:3f:8d:83:16:15:c2:07:18:01:d1:d9:42:b4:9f:
1b:77:52:a9:30:68:d8:1a:1a:0f:31:a9:f0:0f:0e:
e8:a3:25:89:72:a8:cc:f5:d4:0c:a0:9c:3b:cf:35:
b3:42:f0:3f:e2:e6:20:ad:4e:fd:a0:a3:9c:25:b0:
0c:61:07:3a:40:77:fd:9c:43:03:59:e9:2a:21:f5:
80:6a:4b:80:a0:5e:8f:2f:51:74:d2:bb:41:1e:34:
a5:c0:cf:d5:f1:d6:77:f8:7b:32:aa:1a:93:aa:69:
d2:87:a4:11:04:5c:60:da:6f:50:a5:70:d8:d9:dd:
51:24:dc:73:64:e0:ac:d0:06:bf:f3:a6:cf:7d:3c:
ca:69:52:de:27:02:d6:20:76:db:df:d9:5a:09:e0:
68:25:fe:87:3c:18:ee:51:a9:c6:8d:3e:b4:7f:91:
2a:e6:11:cd:7f:95:47:bf:e9:2d:2a:5a:01:fc:3e:
04:f4:4a:44:33:29:9a:b4:f8:d7:6b:f9:3c:53:d7:
dd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C9:5E:C0:82:E4:7B:9B:56:04:F7:47:9E:1D:0B:BF:AE:6D:D5:A6
X509v3 Authority Key Identifier:
keyid:B2:85:99:29:2A:63:24:29:7E:02:FF:F3:C5:11:9B:EE:0B:31:75:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soWZKSpjJCl-Av_zxRGb7gsxdUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e552f4-96ca-4259-a82a-e35a67e5d9e2/1/soWZKSpjJCl-Av_zxRGb7gsxdUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:f2:f0:99:75:ba:c5:8f:84:79:63:52:b7:e4:c6:a9:95:db:
70:e9:dc:b6:80:cc:0b:86:bf:b6:7c:0d:13:34:7b:6e:8c:05:
90:63:49:bc:89:37:9a:c2:e9:a6:70:55:b7:61:ad:94:e0:fa:
28:ad:06:5b:1c:08:6b:c2:e0:0c:ca:d4:40:eb:fa:3b:53:55:
05:a3:ba:a3:7e:1a:23:1a:da:7d:88:e1:4b:ad:d4:01:ff:da:
1b:92:2e:12:c0:ea:b9:ef:c6:03:cd:1e:83:a9:89:90:8d:a6:
f9:e8:bb:b1:5a:60:5a:fe:6c:b6:44:07:be:f2:9b:b0:48:8b:
14:20:f3:0c:d3:c0:60:de:2a:fe:96:ce:54:cd:ac:4b:94:a4:
55:84:f3:c2:a9:9c:50:1a:8b:04:cf:11:69:dc:00:da:cd:fc:
3c:a5:b0:2c:0e:7e:44:29:02:43:71:77:c2:3d:c3:01:d5:08:
50:63:e5:bd:ee:52:72:01:2b:5a:3f:ab:4a:63:5b:5a:d2:56:
c7:5d:26:87:fd:4b:30:e4:76:7f:79:ea:bd:fc:a4:1e:1e:ab:
df:2b:95:63:71:45:46:0b:4f:c5:9c:11:5a:cb:fd:88:47:37:
30:75:3e:ee:7f:d0:b2:01:f9:22:08:17:5e:24:43:13:0a:8b:
a8:73:0e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:42 2025 by rpki-client