Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
File: soU6oesyv-4P6xSDwUk20QHxbt8.mft (raw, json)
Hash identifier: Rp0cqsxY3iAtVwQ1Ztdxhzy7fMU0pYffSVYrZJCmWW4=
Subject key identifier: A6:96:AB:DD:D7:CD:44:EE:13:CC:D7:D6:22:5D:AE:8E:48:B1:B0:9A
Authority key identifier: B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
Certificate issuer: /CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Certificate serial: 01963508575F68B50A5ED8923901188777EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
Manifest number: 14F2
Signing time: Mon 14 Apr 2025 16:01:01 +0000
Manifest this update: Mon 14 Apr 2025 16:01:01 +0000
Manifest next update: Tue 15 Apr 2025 16:01:01 +0000
Files and hashes: 1: QgESeVhsipvfmTCXEv6UR11P7ys.roa (hash: Mu2ldKy/m2YeXhlwaFd2rkbf1PYIDTAFyxWdZhH8Ols=)
2: nXXaYKD_d1MxUbe-6_FzTsWPKIg.roa (hash: OwFYUlDkb/OofczMk6EkLbLKjgmPMmo8vCWYFs08jQ8=)
3: soU6oesyv-4P6xSDwUk20QHxbt8.crl (hash: hiuvdI1+Wth+TMaUyd1PeMhlmnY8cNNmYmha53MeR0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 14:19:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:35:08:57:5f:68:b5:0a:5e:d8:92:39:01:18:87:77:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Validity
Not Before: Apr 14 16:01:01 2025 GMT
Not After : Apr 15 16:01:01 2025 GMT
Subject: CN=a696abddd7cd44ee13ccd7d6225dae8e48b1b09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9a:50:c3:a2:55:fa:f5:df:3b:c5:2b:5d:53:
91:a8:ca:a2:cd:e7:f5:58:89:fd:a1:fe:cc:af:58:
d1:6e:05:a2:8d:05:54:32:5f:8a:37:87:9a:ee:1e:
93:a1:e0:a2:b9:63:c4:0a:7a:2c:76:4a:ea:90:5a:
6c:bc:da:1a:6b:f0:4f:bc:73:5d:c4:af:71:40:4f:
da:21:fa:2f:6c:db:d9:f7:9b:1d:62:62:6a:0d:8b:
e1:e6:23:fe:ff:5d:80:56:9f:bd:02:fd:89:a4:d1:
95:21:3c:ff:25:5b:be:52:c7:2f:7e:d8:6d:be:25:
70:bc:82:5a:55:c2:48:d7:17:45:27:d0:e2:af:06:
77:a0:ed:40:da:00:73:e8:05:7a:e0:94:14:aa:aa:
70:af:04:9a:d3:40:d2:42:2a:0d:65:13:e4:d3:e2:
cc:2d:37:06:b4:f0:46:09:1d:fa:93:5d:c1:3a:1e:
05:0d:70:7f:44:1e:bf:80:4f:cb:b0:ee:db:3e:a9:
95:10:e6:aa:13:96:fd:d1:c5:bd:9b:e2:32:3f:69:
cb:8b:62:ee:7c:e0:2e:b8:e2:2b:6a:4e:b1:c2:21:
7a:1f:7a:54:25:4d:e2:9d:6b:b9:db:15:47:ee:6e:
06:40:1a:94:74:c2:2f:ff:8b:70:e6:5a:b3:cd:e4:
b9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:96:AB:DD:D7:CD:44:EE:13:CC:D7:D6:22:5D:AE:8E:48:B1:B0:9A
X509v3 Authority Key Identifier:
keyid:B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c5:1e:32:ac:14:7a:2e:d2:b8:56:1d:9e:c5:63:e2:a8:52:
7a:d8:1f:63:27:ac:7f:c5:62:2a:30:cf:78:12:07:d3:17:1d:
ba:52:27:14:47:e8:6c:aa:04:23:ed:46:b8:49:ff:79:fa:0e:
e0:c0:c2:8b:2d:d2:0a:ac:14:85:7a:fb:ca:3d:c8:1f:46:4c:
28:d9:f4:74:80:0f:ec:1c:8b:fb:48:14:df:10:0e:11:8e:30:
a5:a7:99:af:ee:01:4d:4f:51:5f:0f:9b:dc:5e:df:35:46:46:
22:1a:e1:a0:ef:4f:53:f1:50:da:8e:df:68:ab:44:4b:54:78:
e5:73:19:15:a1:9e:ca:0e:b5:46:00:9b:fb:0e:03:75:79:99:
f4:e4:74:36:77:2b:2f:7d:03:06:40:97:38:55:f1:aa:03:37:
15:d3:8c:09:0b:83:7a:43:52:11:fa:cc:8c:2f:c4:58:e8:28:
8a:26:64:42:0a:49:57:18:1b:c6:8a:de:b9:e2:34:35:f4:b7:
4e:14:fb:be:b9:5d:cf:cb:95:a3:9e:7b:85:f6:ba:8f:fb:93:
30:ec:5c:df:db:e9:b5:ed:20:7c:a9:ac:e5:65:08:ed:e5:fc:
59:3c:bc:d9:44:f5:d2:af:70:bb:37:75:f8:68:9c:0e:2e:be:
b7:e1:fa:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 19:14:10 2025 by rpki-client