Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
File: x4QShQX3-Zx1cEQpgK3rivkMwnA.mft (raw, json)
Hash identifier: 8zME2EInPzt3+7O6JtzXADvmDj9V4RdLo5zvSuYlbN8=
Subject key identifier: 7F:38:38:1F:A9:E9:5B:A9:72:CE:E0:BC:06:DA:3D:57:0C:9C:91:9E
Authority key identifier: C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70
Certificate issuer: /CN=c784128505f7f99c7570442980adeb8af90cc270
Certificate serial: 019688EE3EDDB1EFB9D1576F20EE46BE0A64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
Manifest number: 151D
Signing time: Wed 30 Apr 2025 23:00:37 +0000
Manifest this update: Wed 30 Apr 2025 23:00:37 +0000
Manifest next update: Thu 01 May 2025 23:00:37 +0000
Files and hashes: 1: 1k_-7iaL3-MiuBsEwzsqEjXw8Aw.roa (hash: MvGzqoey/hCfcwmRhO21Z8RbLw85JPgQ7VzzDBc6ROg=)
2: B5D9MGD5HNxMn2ytn4E-XXNfFUU.roa (hash: ZF/ZQXZ6OV0r+xXPNKcSMNFa0v6w/gQVQYon3rz/hOA=)
3: V3axZivK3WrjDfjp92dOnzYIRGs.roa (hash: Nvb4IvNDmUJ1oDhZXKGSuAJ/dOxxdh42DYgaZcrkkzQ=)
4: x4QShQX3-Zx1cEQpgK3rivkMwnA.crl (hash: YLS40GI+/LpOQspQrJErhHSezLhCMjpo7kPSpaxn4Zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 23:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:ee:3e:dd:b1:ef:b9:d1:57:6f:20:ee:46:be:0a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c784128505f7f99c7570442980adeb8af90cc270
Validity
Not Before: Apr 30 23:00:37 2025 GMT
Not After : May 1 23:00:37 2025 GMT
Subject: CN=7f38381fa9e95ba972cee0bc06da3d570c9c919e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:49:c0:8a:0f:cf:a7:14:14:66:23:20:70:38:
2f:9c:7c:87:d3:de:32:92:23:fe:11:90:12:8c:d9:
d1:87:17:84:bd:ef:67:3a:d8:3b:38:c6:e7:93:1d:
97:2b:3b:5b:6b:7d:bc:1a:66:1a:1d:d1:b9:86:9b:
5c:af:c8:36:f1:f4:65:a8:cd:a2:62:23:07:c2:b6:
b2:4a:ab:90:30:0f:0b:20:23:93:04:e6:5c:34:8d:
d1:e9:4f:64:ec:1e:8c:97:ae:b3:9c:de:e5:b1:93:
a6:f5:92:9d:90:f5:ac:f8:d6:e4:db:11:15:15:da:
bd:06:b2:8b:64:0a:70:79:26:27:d1:d9:0c:3b:e5:
d6:25:e6:c5:21:d5:0b:55:5e:45:ff:90:6c:c3:cf:
51:3b:2f:72:41:fd:f5:7d:ca:fa:ca:8f:7c:e1:c9:
98:39:c1:e7:3d:ff:69:f3:67:e3:c0:58:4d:b4:6d:
f2:76:75:de:aa:d9:fd:12:45:e7:c1:63:9b:84:a6:
b9:8e:58:cb:a6:19:44:57:d3:94:b1:21:ce:d3:e6:
71:42:40:9f:46:2e:4c:24:33:bd:58:a4:3d:c5:0f:
4e:c0:a3:95:e1:fc:a1:c8:4c:bd:77:5e:04:06:48:
fb:23:42:e5:eb:83:71:ea:42:ca:ba:15:a8:18:db:
e0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:38:38:1F:A9:E9:5B:A9:72:CE:E0:BC:06:DA:3D:57:0C:9C:91:9E
X509v3 Authority Key Identifier:
keyid:C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:db:63:cc:3e:90:18:ee:08:7e:70:26:a6:3b:29:c8:0f:ad:
37:2f:07:18:e7:f6:22:60:ca:07:d9:21:da:08:86:a5:77:b6:
dd:68:ba:f9:1f:47:da:d6:77:37:50:db:b5:6d:35:a7:37:dc:
52:a8:e6:fd:ae:7f:72:32:6f:88:2f:68:15:ba:ad:f7:5b:01:
50:f5:44:26:40:b4:05:ab:43:03:f6:b4:39:54:3b:77:ea:9e:
66:df:a7:e8:e1:3c:c6:b1:71:70:d4:ba:92:b8:c5:63:0a:13:
10:91:ba:c8:b3:1d:7b:5e:4e:e6:8d:86:6a:70:c9:ef:a6:9c:
6e:69:09:33:8d:15:81:fc:89:b6:66:e5:c9:b5:d3:38:0c:cd:
3d:6a:09:de:a9:d8:ff:8d:b1:cd:35:17:6c:dd:68:25:ca:b6:
c8:d3:2c:89:fb:1d:b2:af:bf:9b:45:b3:fd:4d:bc:07:8d:ee:
31:14:2a:0b:b7:c3:1d:bd:ae:e0:e5:d7:ef:a8:00:bb:9e:a8:
c6:d7:b7:17:ce:bd:b0:89:66:19:45:d1:3e:8b:54:56:5f:04:
48:72:d3:db:da:9a:58:90:4c:01:e6:78:1e:03:d4:41:66:8b:
d4:bc:59:95:d5:ea:09:c6:c4:96:8d:dd:0b:cb:5b:8b:52:41:
7d:d2:bf:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:58:17 2025 by rpki-client