Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
File: xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft (raw, json)
Hash identifier: qN3bmcNhCjcB+A+3usXfhs5PtPTmIBHrgw14xuLP/Is=
Subject key identifier: 2D:6D:8A:05:C2:2D:18:D3:CA:31:80:1E:24:A8:13:11:DF:9A:5D:3A
Authority key identifier: C5:0E:EA:13:07:21:E9:CD:19:76:FD:7E:0F:34:C9:6D:F6:EA:C6:B0
Certificate issuer: /CN=c50eea130721e9cd1976fd7e0f34c96df6eac6b0
Certificate serial: 0196B10E47434AC4C42CD2564F01BD328184
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
Manifest number: 0290
Signing time: Thu 08 May 2025 18:00:24 +0000
Manifest this update: Thu 08 May 2025 18:00:24 +0000
Manifest next update: Fri 09 May 2025 18:00:24 +0000
Files and hashes: 1: gMn3NAKyq7saXpkPxZO8WkflotA.roa (hash: C/YIIPIOL8M4KETXlzNgei6yxSKu/8PUoNYZn01EOkY=)
2: rvEqkaSx88Mofyvgjk106t2jfIQ.roa (hash: Mt/fOTdq8tI+LHmhZzATBBPg2EKFAQ2gQnysBrQ+MLM=)
3: xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl (hash: W21jdQuetICLZp1duh7a27sJRRHbP34idbtrXUdOyhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:0e:47:43:4a:c4:c4:2c:d2:56:4f:01:bd:32:81:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c50eea130721e9cd1976fd7e0f34c96df6eac6b0
Validity
Not Before: May 8 18:00:24 2025 GMT
Not After : May 9 18:00:24 2025 GMT
Subject: CN=2d6d8a05c22d18d3ca31801e24a81311df9a5d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:9d:fc:6f:8d:35:6d:e8:71:67:fc:cb:02:8c:
5c:a6:9d:e3:08:b2:ba:94:73:b0:d4:5b:29:bf:7f:
36:5d:04:0e:ec:a8:e7:ce:a6:06:cb:5d:af:d2:b6:
32:ba:1c:86:d4:20:38:42:be:cd:06:64:4d:50:d9:
ca:04:af:1b:63:1f:f0:c3:b4:e9:99:58:d9:41:e4:
c6:26:26:3c:2b:71:c0:26:80:6d:10:7e:f9:21:6b:
a7:0d:4c:a3:0a:aa:16:0f:ef:27:98:56:f6:74:3f:
39:09:83:9c:6b:52:8e:0f:d4:ec:d1:13:bd:7b:b1:
16:94:59:56:7e:89:62:9b:e8:c0:3c:72:3f:c6:e3:
7c:fc:e1:03:95:4e:60:a2:48:ec:16:f0:1e:17:6e:
ea:7f:89:17:bc:1c:82:7d:fe:c1:c8:ef:0b:0b:5c:
5c:ac:80:8b:3b:ad:47:a0:56:9d:5e:9d:6b:63:cb:
9d:38:ac:78:62:90:cf:3a:40:89:e1:8d:9a:80:0c:
c8:8a:3f:25:19:3e:82:1d:42:f6:73:f7:2a:f2:dd:
aa:70:c9:e8:41:0f:9d:41:c4:c3:ef:46:a4:df:80:
0a:0a:d0:4a:84:13:df:69:ea:b3:90:e3:95:e7:cd:
3f:27:cc:d3:82:ed:c3:b4:45:8f:20:fa:cb:e0:12:
0a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6D:8A:05:C2:2D:18:D3:CA:31:80:1E:24:A8:13:11:DF:9A:5D:3A
X509v3 Authority Key Identifier:
keyid:C5:0E:EA:13:07:21:E9:CD:19:76:FD:7E:0F:34:C9:6D:F6:EA:C6:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8b7867-0a70-44ca-81fd-63f5fe110e76/1/xQ7qEwch6c0Zdv1-DzTJbfbqxrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:b1:57:3f:85:64:60:4e:e0:30:f5:15:85:e1:fc:86:28:94:
0c:10:c4:b7:ce:0d:7e:bc:80:5c:55:82:5e:38:0a:30:1b:75:
89:a3:9a:df:db:07:67:33:ba:b0:5d:5a:fd:24:50:59:2a:35:
49:8f:ae:69:03:c7:f8:d3:29:32:52:95:6f:b4:6c:15:0c:6a:
8d:72:b8:e1:d1:8c:e3:9c:21:69:4c:33:43:40:a7:ae:b4:c6:
1b:28:8f:01:d4:b6:fc:13:38:e4:cc:7f:72:b2:2e:ec:13:5f:
ee:2f:07:d7:0d:58:1e:4a:d5:a6:55:5c:08:67:6c:f2:65:5c:
e9:11:e0:62:f7:73:53:cf:76:9f:fc:e3:30:62:f1:7c:e9:c9:
13:31:b4:6a:71:ea:81:c0:35:d0:db:49:15:41:aa:ca:c3:c6:
b2:93:b8:c9:b1:bb:a5:6c:89:08:26:6a:c0:92:e9:75:34:cc:
00:2d:ae:8f:d1:f8:6c:67:98:9b:09:7c:fe:88:af:e4:8e:0e:
f4:53:7c:01:cf:db:bb:40:19:00:ba:c6:a7:79:b3:66:c2:a6:
c9:c9:01:77:77:d0:27:82:5d:33:f4:c6:65:ac:24:34:8e:99:
8b:57:73:f9:30:93:cf:ac:55:d0:6b:c2:02:c8:6e:09:de:0e:
5c:2b:04:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:46:20 2025 by rpki-client