
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
File: So5ocC711IxPKwctnLRz5iuHs-Q.mft (raw, json)
Hash identifier: 8FHO3hfCvdNx6HDSuoAeeFeeqBf3UbJFVkAgdxB95K0=
Subject key identifier: D6:38:B3:F2:A2:FD:FB:E7:A6:FE:7A:89:80:39:8F:EF:23:72:47:E5
Authority key identifier: 4A:8E:68:70:2E:F5:D4:8C:4F:2B:07:2D:9C:B4:73:E6:2B:87:B3:E4
Certificate issuer: /CN=4a8e68702ef5d48c4f2b072d9cb473e62b87b3e4
Certificate serial: 0196D1079046C24A7110510973C23011185D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
Manifest number: 154B
Signing time: Wed 14 May 2025 23:00:55 +0000
Manifest this update: Wed 14 May 2025 23:00:55 +0000
Manifest next update: Thu 15 May 2025 23:00:55 +0000
Files and hashes: 1: Cb8GvWaqJEP99Z_1Zf6W9V1dLBE.roa (hash: uP8GgxIXXmDUgYigzqGg9J8WDHDnaKE1GYwFp10x32c=)
2: So5ocC711IxPKwctnLRz5iuHs-Q.crl (hash: mae7Z0C5yoD1MGIX1C04NomZ0BubSK4fvL5Ev3VNQKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d1:07:90:46:c2:4a:71:10:51:09:73:c2:30:11:18:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8e68702ef5d48c4f2b072d9cb473e62b87b3e4
Validity
Not Before: May 14 23:00:55 2025 GMT
Not After : May 15 23:00:55 2025 GMT
Subject: CN=d638b3f2a2fdfbe7a6fe7a8980398fef237247e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b5:6a:2e:47:bd:c3:10:86:70:ff:00:c4:83:
ae:98:18:fa:fe:63:46:1f:fd:7b:5a:2d:26:e9:b9:
b8:40:86:b3:c8:ed:bc:13:4b:a3:8a:76:f1:89:67:
cb:c1:a5:fa:7c:fd:f5:8f:4c:9a:31:bc:83:00:14:
fd:fe:76:95:79:fe:4f:1f:88:b4:54:33:e3:13:d7:
f8:50:03:a8:ad:b6:5a:2a:d4:d1:ec:3e:45:ca:42:
b4:b9:e4:55:cc:07:89:77:fb:9a:50:09:f8:10:d8:
22:05:aa:25:b8:c4:fe:39:2e:69:8a:76:8b:fe:4b:
cd:35:af:1f:3e:a6:9d:49:16:6d:a3:86:46:0f:e5:
d7:e8:11:dc:3e:d4:68:92:0f:d6:e2:2d:52:4a:45:
a6:03:cc:75:2e:85:84:57:00:d8:0e:74:59:19:dc:
55:79:43:aa:a1:4c:dc:79:e7:ba:da:bc:80:19:a5:
f3:44:1e:79:84:b4:79:a9:19:cc:54:0d:3a:20:ef:
84:81:80:da:0d:7c:eb:fe:ba:9f:37:98:a5:9e:dd:
d5:40:df:47:b7:b5:53:12:7a:2d:d5:ae:39:6b:9f:
cf:4a:0b:4b:b9:ee:f8:51:df:13:ae:ee:03:69:27:
7a:1d:0d:eb:2d:7c:c0:01:fe:ef:0d:44:f4:7c:97:
b0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:38:B3:F2:A2:FD:FB:E7:A6:FE:7A:89:80:39:8F:EF:23:72:47:E5
X509v3 Authority Key Identifier:
keyid:4A:8E:68:70:2E:F5:D4:8C:4F:2B:07:2D:9C:B4:73:E6:2B:87:B3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So5ocC711IxPKwctnLRz5iuHs-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d19fc2-8949-4fe6-931b-1c4bb58ab720/1/So5ocC711IxPKwctnLRz5iuHs-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:ec:c1:5b:6f:8c:18:0c:b1:47:9c:64:c0:3f:55:35:53:37:
12:18:98:75:84:8c:ca:d5:10:1a:26:ea:91:0b:57:62:04:df:
3a:5a:82:80:67:79:b2:2a:35:be:0c:75:30:2f:60:e5:b6:ab:
c8:5a:ec:94:77:56:d2:02:f6:48:54:32:3e:68:3a:d3:e3:f5:
c1:70:b5:77:4d:ef:63:c8:74:a2:35:24:7e:f9:1f:8b:18:49:
cc:78:37:ba:23:54:de:08:16:8d:25:50:6b:3c:ac:55:95:85:
9d:a4:02:36:2a:06:6e:78:a0:3d:44:bb:93:97:61:31:a1:9e:
8b:af:19:42:3b:b7:46:1b:90:fa:a3:63:b6:0c:95:ff:2a:01:
47:57:33:40:cd:30:48:62:76:45:cc:b2:5d:82:60:37:e2:42:
ed:24:83:24:ed:f3:5f:a5:d2:3a:aa:d1:24:2d:38:64:b0:10:
6b:7c:e0:45:69:aa:7c:f2:44:97:7c:ae:f1:d9:45:d5:f6:9a:
68:71:12:8f:5b:ea:8e:41:a4:0d:70:cf:88:2d:a8:51:a8:1a:
69:f3:cd:dd:68:9a:5d:e8:fc:a8:6a:cc:30:9f:6d:a6:56:39:
21:a2:56:ce:ef:2b:2d:07:04:dd:27:ce:e3:1e:ad:9b:a9:f7:
8d:11:20:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 05:39:08 2025 by rpki-client