Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
File: RQxYEkixGuKkb1UuXKQ8adZecqg.mft (raw, json)
Hash identifier: vn2dwwxqC3G+LloGdfI6zv6U7vqkVd88R7BhkxoMqLs=
Subject key identifier: 47:AD:12:EB:44:4F:10:BF:60:F3:F1:14:6A:2E:F5:B4:89:F2:7E:A5
Authority key identifier: 45:0C:58:12:48:B1:1A:E2:A4:6F:55:2E:5C:A4:3C:69:D6:5E:72:A8
Certificate issuer: /CN=450c581248b11ae2a46f552e5ca43c69d65e72a8
Certificate serial: 0196BE92E0E2B4F4741FE5C514E79B8E73D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
Manifest number: 046B
Signing time: Sun 11 May 2025 09:00:18 +0000
Manifest this update: Sun 11 May 2025 09:00:18 +0000
Manifest next update: Mon 12 May 2025 09:00:18 +0000
Files and hashes: 1: 0_1h7wiM0sCkz01y6bDZ2Uk-dbc.roa (hash: Ffwz5CuVaWNGX3f2MIwGg4hQj6U4+om5+V9sWUjyVOQ=)
2: NuPZabEjwj0Zl1ftGcMBtd-pDXA.roa (hash: +dUUuU1kwfnIBk7+1pVXttGVzaNSvBfz3v21l1kMiPM=)
3: RQxYEkixGuKkb1UuXKQ8adZecqg.crl (hash: /KeAjVRVTwdONxfHVKFq/h0hR39/VFZlL3W0JUaaXDQ=)
4: scTpjmBPVtpmk2iyuFSVq2caLTA.roa (hash: soRiwcgYjvvPsJmPt1LLzDQ901dQXHqAdbvUyjzTo70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:92:e0:e2:b4:f4:74:1f:e5:c5:14:e7:9b:8e:73:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=450c581248b11ae2a46f552e5ca43c69d65e72a8
Validity
Not Before: May 11 09:00:18 2025 GMT
Not After : May 12 09:00:18 2025 GMT
Subject: CN=47ad12eb444f10bf60f3f1146a2ef5b489f27ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:df:6e:71:b5:88:f6:c0:57:f9:07:1a:ea:a5:
34:d8:d5:3c:8d:94:35:54:b6:48:c2:84:9a:7b:b6:
f4:87:45:13:4a:4b:74:1a:b3:c0:b0:d3:03:4f:13:
21:8f:1b:13:96:7b:4c:61:1c:e1:49:4f:4d:f6:79:
ee:f3:45:86:27:89:86:62:bd:fd:ad:f0:d4:a7:54:
10:97:02:f6:ae:d1:b2:0a:3b:c0:18:02:b4:a5:5f:
43:8e:0e:8b:95:32:4b:38:35:ab:5f:27:a3:e9:79:
6c:ad:7c:8f:41:1d:d5:35:08:4c:2f:65:14:e6:b4:
ec:94:50:ce:d7:44:52:3f:62:ab:22:5a:6a:1b:ab:
90:63:67:8c:d0:6b:f4:86:96:99:2c:8c:d7:fc:dd:
dc:84:85:bf:2a:00:24:81:f5:8d:72:00:a3:55:91:
68:39:5e:54:e1:84:56:e2:b2:32:45:ad:0e:f8:ea:
29:6f:8f:0e:f0:80:02:52:55:32:bf:57:d8:96:65:
1a:a8:b8:0e:58:45:41:12:05:57:c6:07:4c:ae:ab:
ef:b8:8a:38:63:6c:d5:38:1e:7d:31:20:a6:d0:d6:
06:bb:78:7d:6f:20:d7:3f:cc:e0:8a:68:21:ff:b4:
6f:2c:2e:7a:cd:dc:46:56:b5:9a:50:45:79:76:df:
8b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AD:12:EB:44:4F:10:BF:60:F3:F1:14:6A:2E:F5:B4:89:F2:7E:A5
X509v3 Authority Key Identifier:
keyid:45:0C:58:12:48:B1:1A:E2:A4:6F:55:2E:5C:A4:3C:69:D6:5E:72:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:11:31:88:e4:c6:11:b1:5c:4a:57:38:6b:44:79:a9:b1:41:
b9:a8:3a:78:9b:45:44:af:08:61:54:84:24:84:47:1a:e8:3a:
8c:d3:75:88:3f:d7:1b:85:ca:a9:51:d5:6e:31:52:9f:e0:0e:
ff:c8:93:8e:65:74:2b:a3:41:0a:c1:a2:f7:2e:96:fd:ac:0a:
d7:6f:13:1b:03:6d:17:97:48:47:8c:ce:5b:9e:d0:3d:e1:d7:
74:96:47:4f:65:87:bf:c1:bc:10:f7:d9:b3:27:06:58:ff:89:
56:b7:a6:9d:23:98:cb:9d:a3:d0:37:6a:8f:8c:87:f7:b9:94:
0f:23:2b:f4:45:6f:2a:02:69:d3:06:ba:52:d9:7b:72:87:f8:
60:b8:90:03:13:ba:f9:20:e7:da:1d:46:f0:06:34:60:27:93:
3d:5e:f1:e9:31:42:13:98:18:34:65:73:3c:38:8e:fb:12:95:
12:3a:29:51:17:cd:1f:1d:a1:2f:a8:1f:c2:42:fc:b5:9a:63:
e0:1e:72:de:ae:14:bf:64:83:c1:58:f8:38:3b:7f:09:73:d0:
ca:40:6b:ee:6c:f0:c9:e2:29:98:9d:40:f7:43:6c:ca:83:d8:
0e:8a:fa:1e:82:7e:3b:b9:34:8c:35:a4:c8:82:d1:ea:77:a2:
5f:81:57:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:55:45 2025 by rpki-client