Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
File: 1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft (raw, json)
Hash identifier: ztGkLBTM01+ZgBeemOLnjAAjQ+41dN1A2Av3gOia5d8=
Subject key identifier: D2:F2:6C:53:E1:72:30:49:71:C2:9E:4D:C5:14:BD:CF:91:53:70:49
Authority key identifier: D5:24:A8:3F:FF:2F:00:0E:99:C1:F2:8E:C1:96:48:98:6F:8D:DC:37
Certificate issuer: /CN=d524a83fff2f000e99c1f28ec19648986f8ddc37
Certificate serial: 01958B4DDA13B5FDFA408AAC44AEBE2A23D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
Manifest number: 0C1E
Signing time: Wed 12 Mar 2025 17:01:29 +0000
Manifest this update: Wed 12 Mar 2025 17:01:29 +0000
Manifest next update: Thu 13 Mar 2025 17:01:29 +0000
Files and hashes: 1: 1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl (hash: SI80VXlKO87Q3CsLsInfO/YoA1FN7P6rIjGyuQ6+/PQ=)
2: sdwBrQY4WiA2lt3H1cKis5W9S04.roa (hash: Mk3APkF4fBeIqw1OvvqRXpLXb2g4dXwfd7H1jQoWJzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 17:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:4d:da:13:b5:fd:fa:40:8a:ac:44:ae:be:2a:23:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d524a83fff2f000e99c1f28ec19648986f8ddc37
Validity
Not Before: Mar 12 17:01:29 2025 GMT
Not After : Mar 13 17:01:29 2025 GMT
Subject: CN=d2f26c53e172304971c29e4dc514bdcf91537049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8f:aa:d3:37:75:8b:69:7b:71:c6:c3:87:c6:
67:8c:3e:68:6f:3b:74:2b:ae:38:81:12:a1:9d:7f:
a5:22:92:be:30:16:95:b3:c8:cc:94:e3:ec:6d:02:
6a:b8:4b:91:7f:6a:cd:99:8b:bf:63:d7:c5:8d:d0:
c1:d3:d1:37:a3:b2:8f:4e:f5:c7:97:77:9a:23:28:
26:63:60:ad:b9:98:a3:77:60:e7:9c:24:5c:cd:11:
05:18:71:86:08:3a:c5:aa:bd:f4:b8:a8:6b:8f:0c:
67:1d:81:0c:d9:00:e6:c5:c3:1e:03:29:df:f5:36:
3c:e1:1a:cf:af:28:84:17:f6:32:1f:c8:a9:45:56:
e0:a7:71:1e:05:28:3c:32:0c:9b:e3:8f:71:c8:69:
40:e5:e0:da:a1:9f:b8:23:84:57:3f:d3:88:dd:fd:
1a:f8:54:ef:49:f1:89:ff:bc:07:19:7a:df:cc:a6:
c1:52:01:b4:58:10:29:6e:35:28:06:c1:d3:ec:0a:
c7:9d:cd:2f:a6:e5:cc:46:0a:39:e5:f5:11:ec:27:
7c:f3:8f:e4:97:0a:1f:d8:3a:f8:11:69:11:bd:ae:
71:63:92:d0:71:06:16:a3:67:af:08:c6:fd:7e:77:
90:55:ff:46:56:bb:9f:e5:8e:b4:9b:3c:b9:1a:58:
26:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F2:6C:53:E1:72:30:49:71:C2:9E:4D:C5:14:BD:CF:91:53:70:49
X509v3 Authority Key Identifier:
keyid:D5:24:A8:3F:FF:2F:00:0E:99:C1:F2:8E:C1:96:48:98:6F:8D:DC:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:25:1b:39:be:34:0e:27:43:13:e6:20:2a:62:d0:c2:ba:60:
84:df:55:5d:2f:45:eb:7b:98:c8:57:66:3e:cc:60:e2:25:a1:
4b:7e:20:6d:c4:eb:b2:d9:4d:c8:79:d6:01:8d:ac:e6:86:eb:
e0:ab:85:a5:5f:2e:5e:9b:0d:e5:86:2a:f0:ff:9e:1b:be:43:
43:1a:e5:4d:6b:ae:88:ab:84:d4:f0:bd:0b:cf:8e:8e:44:69:
3c:a2:39:90:3d:d0:17:2b:27:98:e5:37:e0:64:e5:e4:9c:ca:
eb:77:1b:00:41:f9:04:2f:46:bb:bc:93:b9:6c:68:86:af:c9:
72:b3:e8:98:45:34:c5:f3:45:69:9b:55:3c:44:60:0f:03:4e:
52:21:bf:62:a6:17:0d:d9:d6:ac:0c:b7:10:c9:f1:19:c5:69:
da:c8:1c:3c:0b:79:83:22:41:29:bc:69:fd:ac:4f:7c:49:42:
fc:72:76:6b:9b:c1:dc:78:4f:fe:33:aa:e8:ae:56:b8:f3:b5:
73:00:da:cc:e4:43:7d:54:09:fb:ea:ad:9d:cd:3a:96:69:d7:
c6:1e:be:4f:d7:a9:56:59:cb:85:a5:b2:30:0a:46:e2:b2:5f:
57:b9:0a:8e:39:c0:d8:fe:4e:cb:24:48:99:d0:c0:c9:8d:8f:
ed:ba:b9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:37:58 2025 by rpki-client