Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft
File: b2Wy-ou61lAcfSHvR13ERUE_sos.mft (raw, json)
Hash identifier: 1MiSnRRSlpaSM+tGeXsdaYhKVH+jxPiYTW17qUDpc84=
Subject key identifier: F0:63:B9:43:F6:1A:26:C6:D6:04:03:0B:D8:D2:F5:1B:32:BF:AE:E1
Authority key identifier: 6F:65:B2:FA:8B:BA:D6:50:1C:7D:21:EF:47:5D:C4:45:41:3F:B2:8B
Certificate issuer: /CN=6f65b2fa8bbad6501c7d21ef475dc445413fb28b
Certificate serial: 01958BF26D3B089BED8571FADAE29B76D696
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft
Manifest number: 1494
Signing time: Wed 12 Mar 2025 20:01:15 +0000
Manifest this update: Wed 12 Mar 2025 20:01:15 +0000
Manifest next update: Thu 13 Mar 2025 20:01:15 +0000
Files and hashes: 1: 1rm581qxLhd--ZUi0JVR0LPynog.roa (hash: Uo6Qum6Vso45WYow9KfGBMAaa8QdwTLlKBrcDIp7POk=)
2: b2Wy-ou61lAcfSHvR13ERUE_sos.crl (hash: czlCiiok17W1k16RS6W7KpWqr0xqDzaIhTDcyuS5n9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft
rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:f2:6d:3b:08:9b:ed:85:71:fa:da:e2:9b:76:d6:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f65b2fa8bbad6501c7d21ef475dc445413fb28b
Validity
Not Before: Mar 12 20:01:15 2025 GMT
Not After : Mar 13 20:01:15 2025 GMT
Subject: CN=f063b943f61a26c6d604030bd8d2f51b32bfaee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7c:46:17:e9:68:4a:8e:02:61:92:f9:20:45:
07:05:f8:46:f3:d1:bc:08:c2:f0:ed:8d:8f:37:0d:
58:f2:a5:d1:23:42:52:50:aa:c3:cc:d4:61:4d:50:
b8:b6:a7:3d:6a:08:56:01:17:26:00:c1:5d:5e:1e:
ed:bc:e3:bb:29:20:62:d5:bd:3f:6c:a8:d1:5d:d6:
3b:5a:c1:f3:12:bf:91:dd:1f:ef:83:f5:4a:c2:cd:
fa:0d:69:bf:30:9a:01:20:e9:d3:fe:9a:cb:45:11:
bd:9e:3d:41:73:4d:92:ad:91:d8:1d:97:2d:57:e3:
57:cd:fd:ee:af:ec:38:87:65:0c:35:c3:09:ba:e9:
9c:d1:d5:37:3c:cf:60:7a:32:df:69:96:81:0c:c6:
88:15:10:0d:c9:ae:31:ba:24:d7:d4:99:a1:76:be:
9a:89:bb:31:d5:09:8e:61:58:e2:47:7b:91:45:20:
16:fa:3d:11:fd:ed:8c:6c:1d:47:79:be:16:03:bf:
a2:e3:91:45:39:7f:47:ce:97:05:ec:95:9a:68:93:
fc:27:c7:d4:76:1a:4d:b9:11:fc:c7:c7:47:92:5d:
75:70:e9:8f:7a:ae:e8:8e:84:77:81:79:b8:e4:15:
10:86:cb:dd:1d:56:53:ae:11:42:dd:9c:2d:b4:65:
08:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:63:B9:43:F6:1A:26:C6:D6:04:03:0B:D8:D2:F5:1B:32:BF:AE:E1
X509v3 Authority Key Identifier:
keyid:6F:65:B2:FA:8B:BA:D6:50:1C:7D:21:EF:47:5D:C4:45:41:3F:B2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:42:d4:6b:35:a3:e2:65:8e:bc:09:7d:80:d9:54:2b:56:a3:
4f:99:d6:4d:dc:4d:0c:b1:f7:85:3f:a3:ca:ea:66:b9:4d:0b:
92:15:d3:6f:bf:f4:f6:5c:02:2f:72:a7:78:99:1f:3b:b7:e4:
4c:e2:ef:11:40:ba:44:86:a6:d0:f9:15:d3:0b:4c:0f:f0:e1:
8a:f9:c2:2a:35:1d:44:8b:6d:07:9d:00:2c:7e:cb:7a:e2:04:
dc:22:f5:89:be:8e:2a:52:27:96:0c:da:fe:68:2e:19:51:1e:
fb:76:79:84:41:23:52:b0:26:15:97:6c:ca:b8:82:ad:d9:f4:
7a:65:c8:44:d9:06:8d:c6:b2:cc:d5:4d:80:03:13:cc:8c:13:
eb:83:97:79:1b:e7:6c:47:4a:57:a0:48:c4:38:99:b3:68:d3:
15:7e:a4:c5:12:be:49:ed:80:21:e7:bf:10:dd:b2:96:fd:da:
d6:27:84:69:6f:a0:84:46:6a:d6:2d:2d:69:dd:9f:d5:7c:a3:
78:01:b2:0a:a1:0b:48:d1:dd:1c:1e:95:a3:73:8c:b0:6b:ef:
79:29:32:73:62:74:95:7e:90:2c:43:15:a3:c9:f8:64:7f:07:
0a:e8:20:d3:3e:d3:2b:31:e6:34:e7:8e:47:5a:83:89:89:b4:
ad:67:e8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:47:35 2025 by rpki-client