Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
File: So4X_aopGHuOQNYwrd69n9JMAXY.mft (raw, json)
Hash identifier: J8yXcMxNpS+4fqhTs+QBMiPwRjhTgC9R1ClYb90Ip2c=
Subject key identifier: E8:C1:AF:E4:AC:99:29:A9:20:2A:12:F6:29:66:8E:22:6F:5C:6C:70
Authority key identifier: 4A:8E:17:FD:AA:29:18:7B:8E:40:D6:30:AD:DE:BD:9F:D2:4C:01:76
Certificate issuer: /CN=4a8e17fdaa29187b8e40d630addebd9fd24c0176
Certificate serial: 0197B6D799E965C59B8C11EF3C5EA0F4117F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 14:01:12 +0000
Manifest this update: Sat 28 Jun 2025 14:01:12 +0000
Manifest next update: Sun 29 Jun 2025 14:01:12 +0000
Files and hashes: 1: 0Wv8atHhhinqkL8Z_4yWBd1Kqg8.roa (hash: fILNYD3epuR8fxYq9hgXxD3GgQQCM01sw2YL4pd5Wks=)
2: So4X_aopGHuOQNYwrd69n9JMAXY.crl (hash: CHZuD+5fkjnZSWmDp6aX8w/SltGLrD/0Bghr6ZKZto8=)
3: ndcYXik2c-8B-vqJArbqTb-_G3U.roa (hash: yy5P560QguXuhVFyLBs0BE4KQ8bMeN1jFaQHeK1c0oU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:99:e9:65:c5:9b:8c:11:ef:3c:5e:a0:f4:11:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8e17fdaa29187b8e40d630addebd9fd24c0176
Validity
Not Before: Jun 28 14:01:12 2025 GMT
Not After : Jun 29 14:01:12 2025 GMT
Subject: CN=e8c1afe4ac9929a9202a12f629668e226f5c6c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4d:60:a5:bc:ef:55:34:d7:d1:0b:3d:c8:0e:
29:71:69:97:79:51:e1:d0:96:58:83:63:81:e3:53:
a1:99:bd:b4:50:de:0f:85:6d:ad:1f:11:c5:5f:ed:
5a:ee:9d:89:50:38:04:a9:9f:23:0c:6b:33:14:99:
ea:50:78:65:96:d6:de:f9:0b:0d:df:73:8a:3f:e4:
ed:87:6a:03:f9:ac:e8:74:e8:65:5d:f6:20:a0:96:
5e:7f:25:01:68:84:94:28:3a:05:6e:94:be:57:2c:
13:35:e0:a2:c3:9e:a5:02:87:91:d7:0e:a7:2f:ce:
69:1b:f3:d6:2f:67:5a:ab:63:33:67:c9:df:f9:5e:
c3:a2:37:62:06:b0:2e:5d:69:b8:1f:be:d5:19:a9:
6c:18:aa:f8:b1:c7:35:22:a4:46:39:03:a1:d3:b0:
d8:5f:80:ad:6e:fe:0d:4e:54:52:d9:d7:3f:e9:e0:
96:d6:23:e0:fb:f9:6d:ef:7f:49:db:36:02:0a:25:
d2:51:b1:f1:2b:4c:43:6b:cc:58:5d:ae:f9:45:90:
23:f1:ea:ba:4d:06:b1:a1:84:66:be:aa:85:11:b8:
9b:f0:82:0a:9e:e7:83:da:0d:6b:5d:72:1a:1d:70:
ff:e3:e0:09:f6:c5:fc:14:04:ed:df:e6:64:1d:d3:
b0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C1:AF:E4:AC:99:29:A9:20:2A:12:F6:29:66:8E:22:6F:5C:6C:70
X509v3 Authority Key Identifier:
keyid:4A:8E:17:FD:AA:29:18:7B:8E:40:D6:30:AD:DE:BD:9F:D2:4C:01:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:33:fe:51:60:22:0b:fc:a0:9c:12:09:b8:9c:23:ff:78:9c:
44:b6:21:54:7f:92:1f:7b:69:2c:83:8c:09:e1:53:c9:29:35:
58:54:c1:00:99:a6:31:b0:99:d0:27:61:f9:6a:f7:7f:36:49:
b3:f6:a4:b6:c2:c7:d7:a4:36:f7:c4:84:29:0d:55:d9:fc:96:
76:b4:d7:42:ad:16:6f:ef:2e:b0:a9:03:77:42:c2:18:ab:b0:
c6:56:d0:ca:10:98:3e:fb:d5:52:42:f3:84:91:ef:3b:63:05:
0a:85:21:cb:f9:08:48:1c:b3:de:85:8a:19:62:f9:1d:3c:d5:
5d:5c:5f:2b:a4:11:79:cf:b1:8c:7c:8c:6d:c8:00:ce:f3:a4:
e0:ee:4e:8e:21:d5:d1:de:03:b2:44:ed:68:51:d5:97:12:8a:
4c:31:08:84:fc:db:e6:a0:2f:12:be:6c:e8:73:f0:bf:e0:bf:
1e:a7:eb:dd:dd:1c:c0:e9:7c:c0:28:85:e5:ad:76:f0:3f:1f:
30:a3:d9:56:9c:5e:64:c0:34:cb:fe:29:ec:d6:43:83:2c:3b:
9a:22:47:81:c2:d2:54:79:34:26:60:03:60:f2:ed:84:37:bf:
77:6f:5d:f1:00:11:5f:a1:73:d2:fc:66:9b:dd:0a:aa:7e:e9:
43:85:ed:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:31 2025 by rpki-client