Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft
File: SOmaP-7GTWutCY0bLfC1NqA4jqM.mft (raw, json)
Hash identifier: CLH67k+Iqb0iOwnUu9IE5+XR39KUO6GKrnkbal8quqk=
Subject key identifier: 8F:BD:D8:7B:EC:3E:E1:F4:10:C8:FC:D4:90:43:F1:8D:C0:FE:94:2B
Authority key identifier: 48:E9:9A:3F:EE:C6:4D:6B:AD:09:8D:1B:2D:F0:B5:36:A0:38:8E:A3
Certificate issuer: /CN=48e99a3feec64d6bad098d1b2df0b536a0388ea3
Certificate serial: 0196580225147F004F9E8CD714FEA095E55A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOmaP-7GTWutCY0bLfC1NqA4jqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft
Manifest number: 1501
Signing time: Mon 21 Apr 2025 11:00:57 +0000
Manifest this update: Mon 21 Apr 2025 11:00:57 +0000
Manifest next update: Tue 22 Apr 2025 11:00:57 +0000
Files and hashes: 1: JqTAJDe2OYCUvbJc8miiDJhn9ck.roa (hash: XOVcEkw4qLtgeZZ1W3TII3S4x02laIR1b6T9nld7824=)
2: SOmaP-7GTWutCY0bLfC1NqA4jqM.crl (hash: gdoTCOu2qzvBYe6GpfRo6DblGoeMOlvhXOjS59xyPAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SOmaP-7GTWutCY0bLfC1NqA4jqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:02:25:14:7f:00:4f:9e:8c:d7:14:fe:a0:95:e5:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48e99a3feec64d6bad098d1b2df0b536a0388ea3
Validity
Not Before: Apr 21 11:00:57 2025 GMT
Not After : Apr 22 11:00:57 2025 GMT
Subject: CN=8fbdd87bec3ee1f410c8fcd49043f18dc0fe942b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b4:44:d5:a3:a2:37:e9:e5:63:a5:dc:6b:10:
b0:03:d1:e4:6c:a6:c5:e2:c0:ac:9b:46:1b:31:6b:
20:df:21:61:a3:62:0b:5d:d8:0b:36:58:87:f1:12:
2d:64:27:66:84:1a:bf:e1:9c:2c:b6:17:50:fb:7e:
06:40:a2:f2:6b:83:ba:ac:2d:62:2f:6a:39:7f:fb:
13:3e:08:9b:61:5d:17:39:5b:58:2b:dd:20:9b:3f:
e4:10:23:17:19:ed:88:ea:3a:39:96:6c:66:ef:34:
6b:78:48:61:2b:0c:3c:81:b6:99:79:69:b9:76:19:
86:01:bd:b4:f7:68:0b:a9:f2:aa:fd:13:86:26:01:
a7:3f:d3:75:e1:46:db:e2:4c:d3:73:11:2b:44:1f:
19:d0:51:3d:86:2d:15:c4:e8:a1:c9:63:82:ad:74:
a8:6a:f0:60:af:47:b9:89:1f:83:ab:a8:ca:ea:63:
d7:47:03:61:5a:9e:d7:d0:c3:b6:8f:1f:da:87:44:
09:65:ee:00:64:4f:9e:cb:3a:1c:a3:c4:c1:39:d8:
2c:31:29:bf:f0:6b:ca:f2:2b:aa:6b:74:e6:44:c0:
21:d6:81:e3:64:f5:e2:61:63:3c:7d:c3:1c:90:ea:
f5:5d:f8:6f:2e:99:09:f4:b2:63:d7:8d:10:9a:41:
dd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BD:D8:7B:EC:3E:E1:F4:10:C8:FC:D4:90:43:F1:8D:C0:FE:94:2B
X509v3 Authority Key Identifier:
keyid:48:E9:9A:3F:EE:C6:4D:6B:AD:09:8D:1B:2D:F0:B5:36:A0:38:8E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOmaP-7GTWutCY0bLfC1NqA4jqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:1e:db:14:cd:81:c4:5b:72:62:83:fa:ea:98:d0:78:bd:06:
3d:7e:d5:12:e6:a0:6f:b6:87:24:f0:2d:55:cd:ca:35:9f:20:
35:51:18:91:ff:ca:8d:d2:71:67:73:14:3c:18:37:94:0c:68:
8c:fa:55:42:69:a9:fc:8b:21:ef:e9:3f:56:eb:8f:a7:09:b0:
80:1e:72:9e:a0:18:4d:e0:61:4a:45:f6:41:09:3f:e9:ef:0a:
60:44:de:44:f4:c4:42:41:5f:62:de:08:a4:7e:70:06:de:92:
27:ac:60:bf:94:c1:72:cb:49:3d:be:02:14:79:3b:90:58:db:
eb:03:7e:5a:b5:40:46:9c:4b:99:7d:ee:8c:f2:18:2f:8e:36:
96:a8:8c:89:60:02:9c:c0:83:46:cf:62:76:b0:5b:e7:a5:6e:
80:d9:45:c1:c1:49:1c:6e:68:05:30:fe:0c:3d:51:ab:d6:ac:
22:08:c2:ea:c4:d3:a9:e0:ac:17:38:d0:e0:fe:b1:42:1d:d3:
6f:03:7f:e3:56:c5:c1:bf:75:b2:56:47:90:74:21:57:48:b4:
e5:82:85:7e:65:78:e2:2d:12:9a:8d:b8:47:8c:62:bd:c6:d5:
d2:09:3a:cd:6a:17:7c:18:76:91:3c:0d:03:f5:8d:e5:38:df:
b9:31:f6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:07:48 2025 by rpki-client