Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
File: So4X_aopGHuOQNYwrd69n9JMAXY.mft (raw, json)
Hash identifier: +TivJEQxfbzwNo8FkaPXVxcHiY3dOqYz0AGijRngGWo=
Subject key identifier: 12:F5:DD:91:29:20:2A:06:66:E6:9E:7E:00:BC:9B:B2:1F:67:25:B0
Authority key identifier: 4A:8E:17:FD:AA:29:18:7B:8E:40:D6:30:AD:DE:BD:9F:D2:4C:01:76
Certificate issuer: /CN=4a8e17fdaa29187b8e40d630addebd9fd24c0176
Certificate serial: 0196BDB7499B1FC28C86B27902D3155C3330
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
Manifest number: 1532
Signing time: Sun 11 May 2025 05:00:27 +0000
Manifest this update: Sun 11 May 2025 05:00:27 +0000
Manifest next update: Mon 12 May 2025 05:00:27 +0000
Files and hashes: 1: 0Wv8atHhhinqkL8Z_4yWBd1Kqg8.roa (hash: fILNYD3epuR8fxYq9hgXxD3GgQQCM01sw2YL4pd5Wks=)
2: So4X_aopGHuOQNYwrd69n9JMAXY.crl (hash: q1uHwhyH40px07xucQ+NfFrZ37YmqMvTfTy3FpbVl80=)
3: ndcYXik2c-8B-vqJArbqTb-_G3U.roa (hash: yy5P560QguXuhVFyLBs0BE4KQ8bMeN1jFaQHeK1c0oU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:49:9b:1f:c2:8c:86:b2:79:02:d3:15:5c:33:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8e17fdaa29187b8e40d630addebd9fd24c0176
Validity
Not Before: May 11 05:00:27 2025 GMT
Not After : May 12 05:00:27 2025 GMT
Subject: CN=12f5dd9129202a0666e69e7e00bc9bb21f6725b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e8:42:d7:e8:dc:74:6e:27:79:2c:31:e7:f8:
4a:3b:cc:04:65:cc:63:55:84:65:8e:38:da:c5:2d:
50:8b:46:8a:26:eb:3f:78:4f:ad:a8:9e:61:da:3c:
80:72:2d:2e:6c:cc:8c:79:f3:a5:f7:3e:01:97:3f:
31:2f:9b:ee:c5:3c:ad:a8:9c:ab:7b:0c:da:b3:90:
ee:14:25:79:18:86:d6:9d:06:82:37:8e:68:6a:63:
25:7f:39:d7:85:2a:4b:f1:2c:48:7b:8e:93:7f:03:
e4:08:4c:e3:53:e5:27:6b:96:f6:97:9d:3e:a0:48:
c8:ab:0f:90:2b:10:08:9f:26:ed:f6:d2:48:01:4b:
be:80:e6:9f:f3:f1:44:f3:2c:60:7f:f8:22:1a:0e:
d1:d9:8c:c7:0b:f5:93:a2:ed:f0:09:4a:44:b1:99:
ae:17:f3:11:26:56:1f:8d:3a:57:37:57:07:a8:4e:
6b:6e:9c:93:12:26:8c:25:f0:cb:81:d5:2c:9e:ed:
d3:c1:a3:e9:d7:82:1f:51:11:17:17:ec:54:82:dc:
34:17:a8:c6:40:e0:84:60:e6:5a:30:48:e7:81:50:
7a:0d:8f:7e:4e:f0:c3:28:5c:0d:9a:49:7c:28:2d:
7d:d0:fa:20:e3:82:25:97:c0:d8:8d:ee:17:26:94:
3c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F5:DD:91:29:20:2A:06:66:E6:9E:7E:00:BC:9B:B2:1F:67:25:B0
X509v3 Authority Key Identifier:
keyid:4A:8E:17:FD:AA:29:18:7B:8E:40:D6:30:AD:DE:BD:9F:D2:4C:01:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/So4X_aopGHuOQNYwrd69n9JMAXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c24341-a7cf-4275-ac4f-5c765c5373a3/1/So4X_aopGHuOQNYwrd69n9JMAXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:68:15:c4:20:3c:b0:73:c2:46:8f:9c:d7:cc:ee:f3:86:90:
9c:6b:c4:5c:ff:48:e2:9b:6d:a0:a4:16:e9:5b:4c:e1:36:9d:
30:27:af:7d:ae:04:7f:44:ba:f3:9c:55:c0:bb:a6:49:8f:c9:
c1:6d:cc:73:b2:fc:84:4a:3d:87:c8:96:01:43:09:43:4f:e5:
93:7f:bb:75:25:4f:29:02:f7:74:c5:51:9d:41:af:ff:1d:fc:
9b:c5:2c:20:ee:04:3e:2f:b2:c6:f8:c9:09:11:b7:f2:b4:a1:
c5:21:5d:d0:ee:24:9f:a7:2b:7a:c4:00:84:93:7e:12:ed:59:
4b:02:e9:ae:fa:c5:bd:e8:25:e7:e6:cd:c9:83:a6:2f:e4:18:
54:8f:f8:2e:56:05:d4:8b:12:ed:d7:63:22:ea:cc:1e:a3:ba:
b7:09:4c:43:09:03:92:e1:af:77:86:63:85:4d:90:eb:25:45:
69:e4:a2:f6:60:3a:11:5e:5f:44:ca:8c:87:81:f4:38:b0:f6:
1b:ab:49:6e:28:34:4e:a3:fb:41:a9:2c:a3:02:83:52:9c:8a:
13:4b:cb:80:23:6d:5c:c5:82:48:1e:bb:18:fa:e0:00:21:61:
7b:bf:0c:e4:54:f8:5d:79:98:bf:a7:bf:43:7a:3a:3c:8d:87:
4a:c9:8c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:12:27 2025 by rpki-client