Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
File: soU6oesyv-4P6xSDwUk20QHxbt8.mft (raw, json)
Hash identifier: 6l1Km60g9fWf+ZcISM1CHlRMg58j+myszJk0ub9GsXA=
Subject key identifier: 03:54:82:2E:C1:4A:B9:2B:1B:A9:D4:F3:4C:0A:86:9D:39:76:BA:F4
Authority key identifier: B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
Certificate issuer: /CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Certificate serial: 01974742EB03CE5602CD1CC0595F8A289B5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
Manifest number: 1580
Signing time: Fri 06 Jun 2025 22:00:57 +0000
Manifest this update: Fri 06 Jun 2025 22:00:57 +0000
Manifest next update: Sat 07 Jun 2025 22:00:57 +0000
Files and hashes: 1: QgESeVhsipvfmTCXEv6UR11P7ys.roa (hash: Mu2ldKy/m2YeXhlwaFd2rkbf1PYIDTAFyxWdZhH8Ols=)
2: nXXaYKD_d1MxUbe-6_FzTsWPKIg.roa (hash: OwFYUlDkb/OofczMk6EkLbLKjgmPMmo8vCWYFs08jQ8=)
3: soU6oesyv-4P6xSDwUk20QHxbt8.crl (hash: WHhgTnEgjjkdS3UDze2DUVmYIxrSW5Brx0fwAj5d9Ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:eb:03:ce:56:02:cd:1c:c0:59:5f:8a:28:9b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Validity
Not Before: Jun 6 22:00:57 2025 GMT
Not After : Jun 7 22:00:57 2025 GMT
Subject: CN=0354822ec14ab92b1ba9d4f34c0a869d3976baf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8e:7c:6e:1b:e1:c0:78:7e:a9:20:f6:1b:94:
3b:53:b5:b6:f5:1d:c1:a3:65:7a:2d:9f:d2:5c:45:
5f:33:22:e4:e5:10:7a:31:4c:e7:4a:80:25:c1:7d:
29:05:8a:0a:65:8e:c1:ba:1c:5a:1f:4a:85:20:5c:
35:f3:7b:63:51:0b:0d:1b:96:d5:f1:1d:76:d5:f2:
31:2a:b2:85:30:80:b1:6a:a8:d9:a2:a7:97:e2:2e:
10:91:1d:53:7f:28:4c:02:46:ce:9c:72:57:62:4b:
5d:89:82:60:a5:ac:d7:ca:43:74:dd:51:7d:61:51:
5c:e9:9a:74:4f:9b:f5:8c:2f:07:9b:80:f2:de:df:
b8:73:4d:ba:a7:1d:ce:d1:1c:c9:6c:5e:cf:6a:3e:
ad:ed:7a:95:8d:d0:87:ac:cd:09:0c:42:c2:85:10:
86:b2:69:b0:65:6c:5a:c1:43:3d:6e:86:10:d9:67:
ff:1c:d4:21:95:8b:ed:89:31:c4:4e:d0:57:8c:d9:
23:51:1a:f9:f2:e3:88:41:65:f6:cf:97:03:1a:6a:
e2:18:6d:f5:51:f6:e4:be:3e:6c:4d:08:fe:31:a2:
f6:57:68:01:8e:46:87:ac:15:4c:b8:29:e6:4a:64:
69:0f:12:44:11:6d:10:d3:53:c7:5e:94:6f:60:0b:
dd:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:54:82:2E:C1:4A:B9:2B:1B:A9:D4:F3:4C:0A:86:9D:39:76:BA:F4
X509v3 Authority Key Identifier:
keyid:B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:4b:aa:f3:d4:0b:6e:0a:1a:81:55:a2:c6:3f:fc:73:c7:2f:
a1:9c:67:8e:ae:61:f3:a8:d9:de:29:0a:ec:c0:8b:75:7d:b0:
36:56:30:fe:e9:9b:58:87:53:b7:04:50:f2:97:b7:cf:91:39:
4f:e3:a4:37:37:34:8b:56:11:e8:2e:39:21:3c:dc:eb:b8:a6:
45:7b:63:f4:9a:de:62:b9:0f:7d:da:00:97:97:77:ac:3e:e3:
fc:96:df:43:d0:2a:65:e5:da:46:ec:4e:fd:e0:e1:ca:dc:4b:
56:48:0a:d5:f5:86:00:f3:68:d0:e5:c0:25:29:72:84:0f:f6:
f1:c2:ac:f5:e7:93:a5:ff:7e:91:ce:1a:6f:29:3d:c9:32:23:
9d:85:98:64:cb:1b:7c:97:4c:b6:b4:e8:2a:d1:d1:a8:51:dd:
95:e5:55:22:4d:4c:4f:9e:8c:be:e4:b5:c9:fe:42:8f:1b:4a:
e7:6d:24:9f:a4:51:35:2b:0c:5a:be:1b:10:b6:f5:84:da:66:
70:04:79:59:a2:3b:e0:35:32:a9:d6:cf:f5:62:43:0e:b7:3a:
47:ba:2b:e5:f6:cf:be:58:92:f0:c1:fe:2f:9f:c9:b2:b0:39:
29:4a:d0:2e:71:45:51:0b:75:d0:18:1b:7a:23:bb:63:df:61:
80:2d:a9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:59:34 2025 by rpki-client