Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
File: soU6oesyv-4P6xSDwUk20QHxbt8.mft (raw, json)
Hash identifier: S0EKw/acD/rhVOaNzF5j6JNOrDd8eZt4zsOJwJWotHI=
Subject key identifier: BC:52:84:CE:2B:F9:10:19:12:5E:4C:6F:6B:AB:BD:35:27:33:79:2B
Authority key identifier: B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
Certificate issuer: /CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Certificate serial: 0196C7CCE3E05F1870D92820FDC9D1ABAE9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
Manifest number: 153E
Signing time: Tue 13 May 2025 04:00:15 +0000
Manifest this update: Tue 13 May 2025 04:00:15 +0000
Manifest next update: Wed 14 May 2025 04:00:15 +0000
Files and hashes: 1: QgESeVhsipvfmTCXEv6UR11P7ys.roa (hash: Mu2ldKy/m2YeXhlwaFd2rkbf1PYIDTAFyxWdZhH8Ols=)
2: nXXaYKD_d1MxUbe-6_FzTsWPKIg.roa (hash: OwFYUlDkb/OofczMk6EkLbLKjgmPMmo8vCWYFs08jQ8=)
3: soU6oesyv-4P6xSDwUk20QHxbt8.crl (hash: 4bvUDJDdAxuRmrMBvS5lXrLhKJrTW8mQ29JUEHPNASw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:cc:e3:e0:5f:18:70:d9:28:20:fd:c9:d1:ab:ae:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Validity
Not Before: May 13 04:00:15 2025 GMT
Not After : May 14 04:00:15 2025 GMT
Subject: CN=bc5284ce2bf91019125e4c6f6babbd352733792b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:20:d8:4e:21:69:81:15:a8:c2:7d:1b:f6:14:
f2:fc:9a:46:08:67:ca:d9:c3:14:d1:39:c8:49:48:
6b:8d:f3:d8:51:ac:c4:e7:36:1b:39:20:b5:85:9f:
13:28:12:cd:d5:e7:b0:38:8e:a8:c5:c4:c9:51:60:
25:e4:a1:15:cc:49:cd:31:45:b7:42:ca:d3:55:7d:
ed:5d:35:f3:d3:30:53:87:b1:cf:76:2f:95:6a:3e:
9a:d8:53:5f:1a:a7:25:cd:26:e1:9a:f7:6f:f8:c9:
8c:be:37:67:7d:bc:70:bb:c3:bd:17:76:a9:96:9a:
07:c3:66:25:2e:9d:fe:08:19:9a:16:df:71:05:af:
35:95:c2:07:94:e8:2a:a9:aa:95:18:53:f4:07:fe:
e1:e0:1c:6b:b3:51:12:02:70:f9:8f:38:61:91:6d:
13:4f:47:0d:79:35:ff:00:9a:69:bd:a6:32:a5:50:
3f:6e:91:62:b5:30:8e:0f:f0:3e:04:72:ac:fd:3e:
a4:63:c5:8a:d1:32:71:71:94:15:91:2a:a6:51:ac:
33:0e:fb:c4:3b:70:34:1d:9e:f1:af:fb:40:ad:03:
b3:42:04:cb:7a:b6:d2:bb:82:4e:a5:39:1e:7f:ba:
11:0a:83:78:6a:ee:6c:67:86:d5:da:89:7b:f7:09:
33:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:52:84:CE:2B:F9:10:19:12:5E:4C:6F:6B:AB:BD:35:27:33:79:2B
X509v3 Authority Key Identifier:
keyid:B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:11:19:39:52:a1:fd:c7:05:b7:25:64:73:bd:55:40:2e:d1:
d5:47:3e:11:33:e3:06:ef:3d:56:aa:4a:95:46:a7:85:e5:9a:
0c:c7:a6:f7:be:8f:4d:42:2f:4b:d3:f8:95:44:1b:ea:9f:c0:
79:05:80:f6:8b:e2:c5:77:0b:a4:1a:05:31:09:96:9c:be:b0:
e9:0a:bd:f8:8c:ea:41:38:05:d8:40:5a:8d:1b:09:8f:7b:f0:
00:e0:92:3d:32:66:f3:0c:6a:28:33:e7:56:b3:db:fd:13:8b:
8a:fa:ce:3e:ea:e7:70:c4:b0:7a:44:ce:a9:21:f3:59:31:13:
1c:41:c1:5c:19:ab:13:d6:2e:81:0a:17:bb:dd:dd:73:c4:85:
63:a5:81:0b:c0:2d:87:82:29:23:d0:d3:cc:f2:38:2c:64:2e:
ca:5a:ec:f8:5b:f0:5d:da:2d:a5:d1:42:1a:89:b5:d9:c0:c9:
f2:af:83:b6:c6:4a:ff:a1:de:e3:36:bb:19:04:18:25:15:9e:
c5:44:1c:03:35:5c:46:8a:a1:1d:35:0f:2f:a6:6b:47:e2:fd:
cd:e5:0a:f7:bb:80:c0:07:9a:58:43:ef:a1:3c:2c:8e:d4:f0:
33:42:0a:b4:6f:0d:10:2d:22:b3:18:9b:31:84:6e:43:f5:e1:
75:7b:7a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:44:26 2025 by rpki-client