Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
File: SQsh95ueovPQQjdHFIZ9EkAZlds.mft (raw, json)
Hash identifier: mwaiCVRvUCI62SEI8slmYnrHYEyBa0x72W8ExUR+18A=
Subject key identifier: 0A:C1:CB:2B:C8:13:B1:BC:E5:5E:EB:63:E7:46:EC:47:68:E1:E1:58
Authority key identifier: 49:0B:21:F7:9B:9E:A2:F3:D0:42:37:47:14:86:7D:12:40:19:95:DB
Certificate issuer: /CN=490b21f79b9ea2f3d042374714867d12401995db
Certificate serial: 019673E723C0767ACAF9422F07EBAA4B7D2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
Manifest number: 1512
Signing time: Sat 26 Apr 2025 21:00:49 +0000
Manifest this update: Sat 26 Apr 2025 21:00:49 +0000
Manifest next update: Sun 27 Apr 2025 21:00:49 +0000
Files and hashes: 1: NApugC31V5WK63Ny4-racw1twJY.roa (hash: bVtlfHYisvNWIzitGovNgNsC2+/TaBl7fpGIvEq6gaQ=)
2: OI4m2d90B9xfmwLaDwu0RLIhyHI.roa (hash: 1tPpSMdOXEc4uC4QEVA58ahEFZcfSMXztb+GTkRhAk8=)
3: SQsh95ueovPQQjdHFIZ9EkAZlds.crl (hash: pTJUKiHCtcTncow7NrcuDtKdATV/iyjAVDr5zgZFCNs=)
4: i4v6AZ8AjCY-DaijxXBLxpCWr-o.roa (hash: IzqUiUJUiq+h6Lhm9373nMFr5yy8oOrsxUoRI4smlK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:e7:23:c0:76:7a:ca:f9:42:2f:07:eb:aa:4b:7d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=490b21f79b9ea2f3d042374714867d12401995db
Validity
Not Before: Apr 26 21:00:49 2025 GMT
Not After : Apr 27 21:00:49 2025 GMT
Subject: CN=0ac1cb2bc813b1bce55eeb63e746ec4768e1e158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:94:56:c2:5e:b3:f1:8d:91:a1:2a:a4:6e:89:
a0:62:bf:e7:7b:45:86:5e:0e:25:04:18:ab:0e:9e:
59:af:e8:85:38:3e:9c:b9:36:c2:e8:c9:8c:dc:08:
a7:fb:a5:9e:63:de:b4:1c:2e:c7:b0:36:6b:36:4d:
00:a1:83:21:ae:ae:f0:96:0a:8f:89:e0:6e:db:c2:
0b:61:32:ee:6b:5c:d8:34:3a:4d:a3:cb:d8:45:14:
35:37:3d:fd:ac:6d:ef:3f:56:a6:8a:5e:d2:05:31:
30:84:14:33:ee:fd:e2:df:97:9b:0b:2a:f0:cf:c9:
ad:c1:e1:70:af:54:d2:02:92:7c:c1:b0:88:8a:30:
75:40:17:aa:78:d5:63:33:2b:89:fe:22:e6:8c:7f:
84:f8:68:08:b0:e0:dc:03:0a:16:89:eb:fe:97:b6:
7b:f9:11:b7:1d:bf:61:04:d7:1a:31:43:e0:a5:ae:
8b:07:f8:d2:9a:ac:8f:d3:38:34:f4:43:98:52:aa:
cd:5a:52:85:6c:15:6e:d2:af:8a:29:e8:36:69:ec:
37:6c:b8:18:fd:20:df:fb:a1:76:9c:38:6e:96:7f:
e2:16:e5:4e:4b:9a:fd:26:6d:42:e2:c4:d1:1e:5e:
fd:fc:b9:47:68:97:ca:31:6c:cf:ce:af:06:5f:09:
74:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C1:CB:2B:C8:13:B1:BC:E5:5E:EB:63:E7:46:EC:47:68:E1:E1:58
X509v3 Authority Key Identifier:
keyid:49:0B:21:F7:9B:9E:A2:F3:D0:42:37:47:14:86:7D:12:40:19:95:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SQsh95ueovPQQjdHFIZ9EkAZlds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/e10165-b4cd-4321-bf3c-480c32f400e1/1/SQsh95ueovPQQjdHFIZ9EkAZlds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:98:e2:d6:22:91:4e:55:2b:60:6e:ee:eb:d3:55:69:36:05:
ad:bf:b0:f8:e7:0a:88:5d:15:ea:4d:26:e1:e1:44:f7:e3:54:
2f:39:fe:f7:d6:38:27:28:a7:ae:1a:27:da:aa:4a:48:9d:6a:
3d:5d:51:9a:5d:ad:42:70:1c:24:47:bf:ef:9e:ad:06:a7:a1:
c3:ca:54:e5:4d:68:38:f7:63:5b:3a:ce:6f:c5:e6:79:c8:39:
85:71:a8:3f:01:35:55:ce:85:a9:e5:04:43:ed:fd:47:30:b9:
f0:15:d8:18:11:2d:e5:53:f6:04:ed:21:67:4c:05:df:2c:9f:
78:65:5c:19:d1:11:8f:0c:1c:f0:13:06:33:90:e9:9c:24:48:
fd:6c:c9:34:46:12:1c:5c:2d:70:89:d2:8f:cb:cb:fe:a4:e9:
3d:0d:c1:72:47:62:3d:bb:71:86:67:8e:fd:b5:16:1e:0b:ec:
8c:32:2a:31:4d:4e:81:c9:6d:4a:ce:ca:66:b9:c2:83:98:ec:
b8:eb:85:7a:ce:16:41:09:f5:5a:c4:8f:93:6c:5e:4d:8b:4f:
c0:2d:95:c9:8f:01:1c:48:25:f3:a7:b2:54:8e:8b:d5:d3:0d:
9a:ac:90:81:65:b3:b3:ea:9f:4c:b5:8a:e3:50:6f:88:be:98:
47:3f:ac:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:48:53 2025 by rpki-client