Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft
File: b2Wy-ou61lAcfSHvR13ERUE_sos.mft (raw, json)
Hash identifier: x6F+hXWCoEzHLcv6KAhPNXCeAYiC2GE0mNzuP0YU/zU=
Subject key identifier: 49:14:1A:B3:80:18:98:64:12:C5:54:08:62:F2:56:63:99:4E:9F:33
Authority key identifier: 6F:65:B2:FA:8B:BA:D6:50:1C:7D:21:EF:47:5D:C4:45:41:3F:B2:8B
Certificate issuer: /CN=6f65b2fa8bbad6501c7d21ef475dc445413fb28b
Certificate serial: 0196D43F47425BE5148D74CCD2F1B0E5B251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft
Manifest number: 153E
Signing time: Thu 15 May 2025 14:00:38 +0000
Manifest this update: Thu 15 May 2025 14:00:38 +0000
Manifest next update: Fri 16 May 2025 14:00:38 +0000
Files and hashes: 1: 1rm581qxLhd--ZUi0JVR0LPynog.roa (hash: Uo6Qum6Vso45WYow9KfGBMAaa8QdwTLlKBrcDIp7POk=)
2: b2Wy-ou61lAcfSHvR13ERUE_sos.crl (hash: KqpDWb7O6ukfc0hfTe+j5NSBuKnz10WErGay+1DgV64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft
rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d4:3f:47:42:5b:e5:14:8d:74:cc:d2:f1:b0:e5:b2:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f65b2fa8bbad6501c7d21ef475dc445413fb28b
Validity
Not Before: May 15 14:00:38 2025 GMT
Not After : May 16 14:00:38 2025 GMT
Subject: CN=49141ab38018986412c5540862f25663994e9f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:74:78:c5:be:41:06:c4:a5:60:07:2c:09:fe:
ae:ad:f0:03:6d:2a:ed:ba:af:b5:a3:dc:1e:e0:19:
e2:ca:f3:c9:98:93:96:1c:2b:c7:73:46:12:47:ac:
f0:6e:1d:21:a3:ce:85:33:fe:e8:0c:e8:65:ee:0d:
47:ce:e7:ec:35:dd:de:73:2f:23:fd:80:ee:ec:33:
33:31:c0:81:2e:9b:c2:49:5f:fd:b1:f9:b4:0b:0a:
6a:d9:0f:03:7d:e0:6b:0a:a2:34:4e:ec:56:2f:7d:
d5:08:ef:51:ad:f0:ae:66:4b:37:48:2c:de:d9:48:
84:ac:d0:ab:b0:cf:9d:18:aa:87:ae:9d:3c:37:95:
1a:9c:51:85:90:41:29:4e:7a:71:ea:50:52:9e:fa:
07:fe:d0:7f:8f:98:09:1e:a1:68:e4:2d:e1:6e:53:
d0:b1:b0:3d:f8:34:bc:f8:83:87:e9:b4:18:f3:fb:
c9:ff:8f:c8:99:16:57:f9:37:23:78:d4:d2:78:44:
4f:7b:a8:2b:76:ef:35:a5:e9:53:7d:87:be:4b:ae:
16:50:dd:e3:ad:87:e1:e3:6d:ea:c5:5f:d6:a3:c5:
b3:77:83:d0:d1:f5:a5:92:a4:d0:6a:db:6e:5c:b0:
b8:e4:be:ff:11:ea:38:7b:41:1f:0e:39:a7:0c:ef:
42:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:14:1A:B3:80:18:98:64:12:C5:54:08:62:F2:56:63:99:4E:9F:33
X509v3 Authority Key Identifier:
keyid:6F:65:B2:FA:8B:BA:D6:50:1C:7D:21:EF:47:5D:C4:45:41:3F:B2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2Wy-ou61lAcfSHvR13ERUE_sos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0681bc-e278-46c5-b1e3-7f67442f9f32/1/b2Wy-ou61lAcfSHvR13ERUE_sos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:70:99:32:6d:5f:b6:8c:62:68:1e:2a:da:f4:99:de:65:a1:
53:31:37:1c:ae:89:a7:5d:c8:77:31:6e:ba:42:81:fd:58:64:
76:a2:57:37:53:85:1c:a7:b7:47:49:5b:52:db:43:4e:6a:48:
db:ae:1a:95:ee:c7:da:33:4e:ed:cc:86:ec:c3:e7:d0:4c:75:
15:2b:41:98:ec:96:77:66:ec:18:45:11:c6:9c:2e:11:01:da:
36:e6:b1:30:64:1e:9c:01:32:14:c2:89:b0:2b:13:c8:b4:49:
e5:d9:a9:b3:a2:10:1b:32:1b:1c:08:0c:0d:43:73:77:c0:c8:
d7:0c:c3:8e:bf:a5:27:ae:b5:d5:8f:83:f4:ab:f3:8a:29:3e:
54:b1:a1:d2:a6:b0:7f:31:9b:9d:0d:91:c6:3a:24:4f:ee:a5:
ca:a9:09:cb:45:23:86:d2:20:1c:e4:36:27:51:f6:e6:80:4f:
7d:d4:81:f5:09:d5:b1:2c:8e:0f:e9:53:d5:65:30:6f:2e:7f:
37:20:71:99:a1:7e:7e:7c:53:ec:6e:ad:5a:3d:00:58:ff:71:
f7:39:8f:12:26:f4:8a:ce:28:d3:59:ae:3e:75:3e:66:56:53:
3b:54:6a:e6:00:80:1f:64:9f:69:4c:17:bc:c0:03:e1:9c:36:
99:8f:11:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 18:00:32 2025 by rpki-client