Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
File: So4X_aopGHuOQNYwrd69n9JMAXY.mft (raw, json)
Hash identifier: epm9n0RxF08Bo9rbXinc+zUrcCLEe8H6Lmez0vQ/KZk=
Subject key identifier: A7:D3:84:61:C0:93:BC:46:03:82:44:6D:1E:D0:91:63:35:52:38:FC
Authority key identifier: 4A:8E:17:FD:AA:29:18:7B:8E:40:D6:30:AD:DE:BD:9F:D2:4C:01:76
Certificate issuer: /CN=4a8e17fdaa29187b8e40d630addebd9fd24c0176
Certificate serial: 01974E8E86FF9A24A568912AFC8EF0EC1954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
Manifest number: 157D
Signing time: Sun 08 Jun 2025 08:00:52 +0000
Manifest this update: Sun 08 Jun 2025 08:00:52 +0000
Manifest next update: Mon 09 Jun 2025 08:00:52 +0000
Files and hashes: 1: 0Wv8atHhhinqkL8Z_4yWBd1Kqg8.roa (hash: fILNYD3epuR8fxYq9hgXxD3GgQQCM01sw2YL4pd5Wks=)
2: So4X_aopGHuOQNYwrd69n9JMAXY.crl (hash: j6WuTiwwWuKcQIThtaJ7f0/wX1ORTWsdoWJvQ4Vc5yY=)
3: ndcYXik2c-8B-vqJArbqTb-_G3U.roa (hash: yy5P560QguXuhVFyLBs0BE4KQ8bMeN1jFaQHeK1c0oU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:86:ff:9a:24:a5:68:91:2a:fc:8e:f0:ec:19:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8e17fdaa29187b8e40d630addebd9fd24c0176
Validity
Not Before: Jun 8 08:00:52 2025 GMT
Not After : Jun 9 08:00:52 2025 GMT
Subject: CN=a7d38461c093bc460382446d1ed09163355238fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b7:8a:d9:98:27:ca:57:1c:cf:58:ae:d5:14:
7b:4b:f1:01:f0:f4:e9:94:29:ec:36:af:9e:e7:3a:
59:94:2c:06:67:2e:19:f6:a4:89:83:c0:39:b7:b0:
13:41:ab:0f:ee:1a:16:52:e1:45:32:af:27:62:7c:
f8:4f:46:32:e0:74:a6:aa:6e:1e:d6:c0:70:91:3e:
8a:c0:ce:ce:d3:10:29:a5:ef:0d:24:37:61:c9:a1:
7b:81:30:d0:73:ef:0f:ae:e8:5d:08:f5:a3:24:0b:
32:8d:98:a1:7c:01:71:6a:9c:61:36:14:d3:95:73:
7c:7b:14:2c:34:81:e4:30:06:9e:9f:30:28:4a:85:
e9:5e:b6:6d:ef:8d:91:20:18:05:33:bb:2b:74:95:
09:e2:21:07:2d:cc:6b:f4:1e:f7:2f:6b:af:0c:55:
f5:e0:35:9c:7f:06:d8:ef:bf:79:6e:40:63:92:31:
3e:ac:b5:cf:66:a4:61:69:dd:87:38:d5:9b:ca:06:
9d:72:22:58:2c:23:a6:0e:e7:e9:92:03:25:53:76:
59:55:16:39:79:43:1e:48:61:04:6e:ad:69:bc:08:
b6:7b:2d:7c:67:38:2a:da:25:36:9f:82:bc:8f:52:
88:5d:de:55:56:86:28:1a:4a:48:de:29:7b:57:53:
29:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D3:84:61:C0:93:BC:46:03:82:44:6D:1E:D0:91:63:35:52:38:FC
X509v3 Authority Key Identifier:
keyid:4A:8E:17:FD:AA:29:18:7B:8E:40:D6:30:AD:DE:BD:9F:D2:4C:01:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:12:b3:df:f6:9c:fb:44:7e:a1:2b:e2:49:03:8c:e4:5a:4c:
dc:57:69:1f:a4:d4:4c:9a:bd:e4:25:8e:12:a8:9c:45:ad:84:
2c:5b:de:db:ee:d0:d3:22:ac:f8:30:e7:54:41:78:f3:30:49:
05:91:24:73:65:74:56:43:7f:78:30:7c:dc:be:7b:a3:0d:b2:
d5:cd:9a:7d:21:08:6d:60:de:a7:0f:a5:31:21:03:66:55:8e:
80:2d:2a:73:89:b8:db:95:7c:f6:41:c1:67:3c:bd:6c:38:cd:
2e:0f:eb:6d:25:1f:9c:71:4a:75:9d:f9:d9:83:c6:eb:28:eb:
a7:b6:59:e6:8f:dc:a2:9c:f4:6e:fd:f0:33:97:74:ba:f9:c6:
50:2d:4b:93:a5:1b:a1:c6:be:f4:b3:12:5a:75:dd:ca:79:d6:
a5:94:c2:ca:82:80:7d:73:d4:16:45:44:9d:c5:54:fe:c2:ad:
89:12:97:d6:b6:46:9b:0a:a6:b7:25:8f:27:f2:66:6f:bb:8e:
5a:d0:f5:de:8f:d8:ad:2e:d1:a0:ed:ea:59:9b:19:ad:c7:9e:
49:01:72:9d:3a:65:8f:a9:cf:ff:56:3e:1c:d2:ef:f3:97:a3:
ad:b4:59:8c:a9:34:47:ef:a8:39:9b:0a:dd:76:ab:0c:2b:d8:
1f:ad:b3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:52:48 2025 by rpki-client