Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
File: 1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft (raw, json)
Hash identifier: WYYxvzAZUU+2h7eDvXKHl0HEQkNYgB3FVpyG92KUrMM=
Subject key identifier: 44:F2:3A:0E:5F:2C:8B:E4:01:91:DC:6B:02:B2:F2:A0:75:BD:3E:AE
Authority key identifier: D5:24:A8:3F:FF:2F:00:0E:99:C1:F2:8E:C1:96:48:98:6F:8D:DC:37
Certificate issuer: /CN=d524a83fff2f000e99c1f28ec19648986f8ddc37
Certificate serial: 0196108DDF6BF9581B96366FB7EC73FCB46B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
Manifest number: 0C63
Signing time: Mon 07 Apr 2025 14:00:55 +0000
Manifest this update: Mon 07 Apr 2025 14:00:55 +0000
Manifest next update: Tue 08 Apr 2025 14:00:55 +0000
Files and hashes: 1: 1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl (hash: HYLDulLP4EKedD9HeaDWiiRyGRUXDVC9e3sE48mxqTc=)
2: sdwBrQY4WiA2lt3H1cKis5W9S04.roa (hash: Mk3APkF4fBeIqw1OvvqRXpLXb2g4dXwfd7H1jQoWJzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:8d:df:6b:f9:58:1b:96:36:6f:b7:ec:73:fc:b4:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d524a83fff2f000e99c1f28ec19648986f8ddc37
Validity
Not Before: Apr 7 14:00:55 2025 GMT
Not After : Apr 8 14:00:55 2025 GMT
Subject: CN=44f23a0e5f2c8be40191dc6b02b2f2a075bd3eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f2:ca:06:97:78:d1:c6:c4:df:9e:8a:11:1c:
9a:9d:48:da:c6:ea:94:5f:24:08:93:07:3b:0d:64:
00:a5:3b:b1:b1:97:bf:3f:18:9b:3e:d0:37:3b:19:
a8:80:03:d4:40:84:17:e6:15:42:15:19:47:78:6f:
aa:43:cb:37:9c:77:a9:b0:47:92:91:ea:83:4d:ed:
af:78:d9:27:57:60:b2:f0:04:76:c5:3a:0d:76:5f:
18:a9:60:fb:bb:f7:7c:47:23:f3:b2:7b:a3:ac:13:
16:19:fc:96:b9:20:1c:36:91:f7:7c:4b:d0:3c:f4:
35:1a:03:92:0d:ec:e5:ef:27:f5:80:29:e5:d7:f4:
7f:e7:1b:d9:ee:ee:3d:89:1f:32:30:dc:95:21:bc:
35:1c:42:10:5f:89:85:7a:92:47:20:cd:66:9c:f0:
c8:6a:6f:68:a9:33:5d:0e:b6:e1:98:92:54:c3:b5:
d2:d8:37:3a:8b:64:4b:d9:68:d2:18:9d:47:de:14:
af:2e:35:c8:ef:8e:ae:28:59:48:f2:0a:b8:b0:3a:
8a:f7:81:a9:04:6b:44:0f:42:1c:45:5c:9f:28:57:
00:d7:ac:ae:06:e8:6a:4c:78:39:9c:37:7f:62:ec:
fa:b2:fc:06:fe:c8:17:fc:d7:c1:7d:47:3a:7a:38:
23:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F2:3A:0E:5F:2C:8B:E4:01:91:DC:6B:02:B2:F2:A0:75:BD:3E:AE
X509v3 Authority Key Identifier:
keyid:D5:24:A8:3F:FF:2F:00:0E:99:C1:F2:8E:C1:96:48:98:6F:8D:DC:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:84:05:e7:65:94:b1:a5:02:0f:70:dd:4c:d7:ab:2e:f9:76:
cb:09:95:ea:a3:e8:c5:3b:c5:5f:29:40:bd:22:54:9c:fc:6f:
91:46:82:af:7b:36:ab:d6:5f:5a:ff:17:6a:aa:4b:8f:72:0c:
0b:33:8c:e6:55:ab:5a:9f:f4:bf:4c:88:81:98:b0:fa:61:44:
be:fb:1b:0b:64:4b:0a:d9:b2:f6:e9:29:7a:f1:24:c1:67:38:
95:46:c6:93:42:b5:fa:5d:76:3a:e8:fa:ea:42:9e:2f:98:6b:
c8:4c:4c:6f:e9:35:f0:81:ff:3f:1c:f1:df:51:32:7b:98:a4:
eb:cf:40:4c:fc:42:02:e2:2a:50:a5:f5:e7:ce:0b:b3:a2:a0:
66:c9:4c:43:dd:e2:1b:cb:42:72:1f:f3:67:55:52:58:7f:ac:
0c:ea:5f:77:83:c7:d3:73:d0:8d:e6:ac:0e:32:e2:38:1d:f9:
d7:c2:6d:c9:31:7f:aa:ea:ec:cf:b8:3b:cd:4e:b3:05:de:cd:
aa:b4:a0:18:53:b9:b7:8c:aa:1a:6e:05:f8:a0:7f:c1:3c:35:
00:06:19:12:04:91:5a:81:a8:51:9c:92:67:ec:eb:28:f8:70:
4c:42:ed:b6:26:28:33:f2:2c:f2:b0:5c:1b:d5:a7:3d:b5:ad:
c9:f6:35:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:55:46 2025 by rpki-client