Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
File: x4QShQX3-Zx1cEQpgK3rivkMwnA.mft (raw, json)
Hash identifier: sY9cSXbJc5UzFgD2ESlheljYsqHj29qpvf2jeMpERnw=
Subject key identifier: 24:4B:46:23:E1:CF:0C:9C:8B:49:6B:73:B2:C6:B4:9B:2A:55:EF:5B
Authority key identifier: C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70
Certificate issuer: /CN=c784128505f7f99c7570442980adeb8af90cc270
Certificate serial: 0196C8A9172162CA3DCF03DD8282EC5979E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
Manifest number: 153E
Signing time: Tue 13 May 2025 08:00:46 +0000
Manifest this update: Tue 13 May 2025 08:00:46 +0000
Manifest next update: Wed 14 May 2025 08:00:46 +0000
Files and hashes: 1: 1k_-7iaL3-MiuBsEwzsqEjXw8Aw.roa (hash: MvGzqoey/hCfcwmRhO21Z8RbLw85JPgQ7VzzDBc6ROg=)
2: B5D9MGD5HNxMn2ytn4E-XXNfFUU.roa (hash: ZF/ZQXZ6OV0r+xXPNKcSMNFa0v6w/gQVQYon3rz/hOA=)
3: V3axZivK3WrjDfjp92dOnzYIRGs.roa (hash: Nvb4IvNDmUJ1oDhZXKGSuAJ/dOxxdh42DYgaZcrkkzQ=)
4: x4QShQX3-Zx1cEQpgK3rivkMwnA.crl (hash: Anu7MkJd7nTuGzyviqITvn7LQKRkkl8q+KY9Uv5JNk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:a9:17:21:62:ca:3d:cf:03:dd:82:82:ec:59:79:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c784128505f7f99c7570442980adeb8af90cc270
Validity
Not Before: May 13 08:00:46 2025 GMT
Not After : May 14 08:00:46 2025 GMT
Subject: CN=244b4623e1cf0c9c8b496b73b2c6b49b2a55ef5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c1:17:df:54:06:d2:dc:68:fd:bc:c4:89:7b:
2d:74:60:cc:2f:ab:95:d5:e1:19:35:3f:60:96:0e:
e4:74:cd:09:24:f4:03:c7:00:04:12:0f:3f:e2:59:
86:72:4d:4e:b3:11:d8:1c:28:78:9f:7f:3b:03:f4:
86:e8:d9:88:5b:37:6f:75:a2:1b:10:cb:47:e9:4c:
2b:ae:78:dd:60:db:e7:f1:e6:9c:52:fe:52:73:89:
12:f9:8d:76:86:8d:eb:7a:0e:87:e5:56:d3:22:37:
dc:21:38:d8:9c:c5:ca:8d:86:8a:b2:39:8f:13:f2:
0f:eb:eb:9d:1e:9b:28:47:7a:c8:af:1a:c6:a8:63:
d4:6d:92:4e:f5:d3:b6:ea:72:24:f6:ba:33:f0:3e:
27:f9:56:26:16:53:6b:86:eb:dd:73:03:81:c9:49:
d7:bf:9e:f5:af:e8:94:bc:8c:1d:49:af:1d:4c:28:
8c:bb:3c:f5:3b:e4:1d:ee:e4:eb:6c:e4:6c:e6:f1:
aa:f7:d9:27:4d:99:1e:06:ec:fe:4d:14:13:11:3f:
5e:c6:25:df:df:e8:43:27:0b:64:85:f2:1b:b0:0a:
8e:34:82:8a:3f:6e:ca:18:ac:b5:69:0c:98:e4:da:
44:cf:60:9a:53:cc:16:a0:db:84:95:65:17:30:81:
2a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4B:46:23:E1:CF:0C:9C:8B:49:6B:73:B2:C6:B4:9B:2A:55:EF:5B
X509v3 Authority Key Identifier:
keyid:C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:1b:09:04:a7:85:ef:10:66:d9:98:62:f0:20:88:63:31:b7:
9b:05:75:c5:e9:10:82:fb:2e:fc:b8:05:f1:b6:b3:7d:43:eb:
ad:23:89:fb:b3:02:04:2a:0c:08:11:f1:7c:2b:cf:ea:46:b8:
cb:ea:78:60:fd:48:d9:d2:f1:ef:10:4f:01:55:e0:01:23:86:
ac:d4:2a:21:eb:3d:d2:22:b2:6d:7f:fa:39:f8:e6:0c:57:65:
cd:2d:9a:ac:74:bf:2f:e0:be:f4:71:ec:84:7e:0d:4d:73:45:
25:52:0f:bd:15:c1:e9:42:f5:7f:cb:13:67:f3:d7:2a:e9:2d:
1d:2d:ee:18:b5:60:6c:34:1f:13:1d:df:64:6c:b3:93:7a:21:
90:61:97:1c:cf:4e:70:b5:d3:ed:71:62:22:b2:f2:02:5d:ef:
12:d2:06:9e:c0:2a:99:10:28:37:2a:fe:ed:ef:89:b9:8a:7b:
3e:b8:fe:e9:73:6a:3b:8b:c2:86:82:d8:07:eb:2f:44:8b:0f:
95:ba:2d:27:6c:49:7c:66:2f:2c:c2:31:3b:48:62:a4:f4:2e:
6a:63:e5:99:49:c2:e5:9a:7c:2d:ef:0a:0f:2c:e1:ce:cc:a3:
a3:14:0b:e6:d7:d0:4c:f9:52:48:06:f7:00:01:87:84:ef:1c:
0b:1f:26:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 14:31:47 2025 by rpki-client