Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
File: RQxYEkixGuKkb1UuXKQ8adZecqg.mft (raw, json)
Hash identifier: T97zzxStyzS43gUu3MNHDSfS7M+DRTy4nolr8t2zvbk=
Subject key identifier: 2F:7C:07:6D:AA:57:4C:7A:46:94:E7:85:89:A8:9F:68:2C:B7:F0:9F
Authority key identifier: 45:0C:58:12:48:B1:1A:E2:A4:6F:55:2E:5C:A4:3C:69:D6:5E:72:A8
Certificate issuer: /CN=450c581248b11ae2a46f552e5ca43c69d65e72a8
Certificate serial: 0197C726A6DC963F9F253C564D077EBF1CB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
Manifest number: 04F4
Signing time: Tue 01 Jul 2025 18:01:28 +0000
Manifest this update: Tue 01 Jul 2025 18:01:28 +0000
Manifest next update: Wed 02 Jul 2025 18:01:28 +0000
Files and hashes: 1: 0_1h7wiM0sCkz01y6bDZ2Uk-dbc.roa (hash: Ffwz5CuVaWNGX3f2MIwGg4hQj6U4+om5+V9sWUjyVOQ=)
2: NuPZabEjwj0Zl1ftGcMBtd-pDXA.roa (hash: +dUUuU1kwfnIBk7+1pVXttGVzaNSvBfz3v21l1kMiPM=)
3: RQxYEkixGuKkb1UuXKQ8adZecqg.crl (hash: TkbJsNYaPLVXV1ZUqa9J6S1t9zsLESMZ/gbSl8zPPpU=)
4: scTpjmBPVtpmk2iyuFSVq2caLTA.roa (hash: soRiwcgYjvvPsJmPt1LLzDQ901dQXHqAdbvUyjzTo70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:26:a6:dc:96:3f:9f:25:3c:56:4d:07:7e:bf:1c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=450c581248b11ae2a46f552e5ca43c69d65e72a8
Validity
Not Before: Jul 1 18:01:28 2025 GMT
Not After : Jul 2 18:01:28 2025 GMT
Subject: CN=2f7c076daa574c7a4694e78589a89f682cb7f09f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dc:05:da:2a:9a:a1:05:77:d4:4d:cb:de:ae:
ce:b2:09:fe:0d:9b:e6:5b:ce:9d:ed:94:52:7c:58:
36:26:a8:b4:d9:b1:96:4e:90:af:9b:28:bc:03:0e:
68:65:10:1d:c8:cc:a9:f1:ed:28:98:b7:3b:0f:51:
28:f0:4d:82:32:7f:d7:69:dc:b0:db:64:52:e9:44:
5e:e8:b5:20:63:fb:36:52:78:9f:ce:c7:d6:e9:f5:
1e:61:86:ea:58:67:73:09:a9:ce:15:1a:c9:b2:68:
bd:24:97:0b:0a:ac:70:f6:62:12:1e:17:ec:22:c4:
c4:9b:ee:15:8c:28:af:d8:90:3f:43:14:93:26:0c:
30:40:42:fb:a8:de:77:e7:99:a7:a7:16:5e:6e:09:
99:5a:bb:eb:2b:ca:43:ca:33:63:69:e4:ad:c4:f5:
c2:00:7c:a7:8c:10:ca:48:ec:72:26:af:8c:24:81:
dc:56:19:1b:85:30:cf:d7:76:83:23:54:59:7f:53:
80:66:e8:98:64:cb:10:5b:96:43:34:4b:b9:48:ed:
a8:84:d0:cf:46:2c:aa:2a:a6:f2:f8:e0:4b:6b:c4:
9c:68:c8:51:7b:9f:84:56:cf:f2:d5:87:8e:c3:6b:
5f:7a:e4:9d:39:39:5b:cb:52:de:77:55:a2:be:ff:
5b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:7C:07:6D:AA:57:4C:7A:46:94:E7:85:89:A8:9F:68:2C:B7:F0:9F
X509v3 Authority Key Identifier:
keyid:45:0C:58:12:48:B1:1A:E2:A4:6F:55:2E:5C:A4:3C:69:D6:5E:72:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:48:32:41:56:14:3c:da:0f:46:71:ae:77:6d:a2:70:6e:1f:
71:0f:bb:96:a4:f7:e8:21:2b:c3:12:f1:8f:ad:fd:14:2c:ca:
3b:96:fa:d9:ee:91:6b:54:c5:ea:1c:f0:3c:36:fc:64:c4:e5:
7d:c1:4d:81:df:ac:fc:00:65:e8:0a:90:1c:ca:03:19:ea:a7:
73:40:19:f6:42:f4:27:8b:97:3f:85:0e:68:f2:32:bd:a4:96:
78:f3:d3:d6:d1:12:09:02:52:2b:0c:55:14:e8:9b:01:5b:a2:
07:a8:7b:5b:92:49:9f:68:b3:2c:33:af:3f:d6:80:ea:5c:e3:
93:0b:c7:fc:15:bf:c2:c9:fa:ed:b4:24:69:6f:b9:bc:9e:3c:
48:4a:50:4d:9a:e9:5d:5f:4f:8f:7c:78:0d:37:91:a6:04:45:
6a:b8:83:d5:18:7f:b8:37:38:49:ab:80:a7:09:a7:2a:19:26:
02:59:18:22:46:ff:f7:eb:8a:b6:2a:66:63:a7:15:7b:03:c2:
88:ca:34:25:a8:3f:65:c6:75:92:a9:88:00:b2:b5:4e:e1:09:
cf:db:24:55:65:c4:20:87:ea:4b:36:a1:fe:86:94:69:82:e5:
1b:73:20:8f:34:34:ec:0f:4e:81:fe:77:64:99:6e:72:26:81:
e3:04:c2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:22:48 2025 by rpki-client