Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
File: RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft (raw, json)
Hash identifier: MhjppmcVkxtkDtklfWFPfUlQqFoop+o/I5wW2lEDUr0=
Subject key identifier: 37:90:E4:C6:E3:32:08:34:B1:55:39:F9:C8:F4:6A:DE:F2:72:19:00
Authority key identifier: 46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F
Certificate issuer: /CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
Certificate serial: 01965ACBD96F8F25529B70F49F6E859174D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
Manifest number: 0CEC
Signing time: Tue 22 Apr 2025 00:00:31 +0000
Manifest this update: Tue 22 Apr 2025 00:00:31 +0000
Manifest next update: Wed 23 Apr 2025 00:00:31 +0000
Files and hashes: 1: RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl (hash: 5N/94aFP++AA3ODJ65+UYywTzL8UU8WAiHfYjCHh5Ak=)
2: bdbKzGuhzcfiVqYcyUjbwWvnE0w.roa (hash: EoIpsT1HmNm7h0aLpOdMeI8Ad8kT8sfcfHIMZV0nTSQ=)
3: sayECznhSIzMnJpVagOHebCR_x0.roa (hash: hUIe0JVfYeAbZr+iALwcU4dqSjQhm3L+k0UihQEwCkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:cb:d9:6f:8f:25:52:9b:70:f4:9f:6e:85:91:74:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46a4b35c8e0256eaa2fbf751e6c01e5e909c0a1f
Validity
Not Before: Apr 22 00:00:31 2025 GMT
Not After : Apr 23 00:00:31 2025 GMT
Subject: CN=3790e4c6e3320834b15539f9c8f46adef2721900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:42:b1:0d:2e:d2:dd:77:9a:3a:c3:aa:e2:54:
8a:51:6b:ac:da:24:6b:f5:10:d4:a8:84:c2:e7:d4:
0f:12:ef:ee:f1:e4:df:12:89:32:af:c7:86:7a:c0:
15:e4:43:b5:2b:ce:e4:55:02:79:3a:72:80:88:52:
35:49:62:00:16:51:ee:7d:a1:38:fc:00:b3:82:8b:
70:e6:9f:47:35:b3:47:bc:20:d2:4d:ea:17:bb:36:
53:f7:fe:4c:9d:0e:aa:cc:74:67:06:8c:dd:48:a6:
08:74:e7:d2:ee:5c:5a:e0:50:b0:d2:91:d2:11:b1:
07:6c:f7:48:2e:82:ef:e9:c1:b3:41:36:86:26:7c:
08:dc:08:62:78:3b:c2:06:bd:bd:ed:6f:54:2a:6a:
b1:98:78:8a:e3:7f:29:56:78:87:79:ae:b2:f5:1e:
ea:f3:47:27:9c:d7:63:60:ad:a1:2b:61:d4:b2:b5:
e4:b8:20:38:80:10:4c:f1:dc:fa:8e:cd:ac:3e:b1:
50:79:1f:af:c2:f0:54:d4:92:41:2a:f0:36:ad:bf:
df:f6:cc:f4:3d:ba:96:12:fd:43:1c:36:79:de:0f:
06:92:11:e7:1e:cc:4b:07:62:97:a3:3b:ba:4b:ab:
0c:e3:00:16:4f:5d:b4:14:8b:61:a6:48:b9:ec:b7:
fe:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:90:E4:C6:E3:32:08:34:B1:55:39:F9:C8:F4:6A:DE:F2:72:19:00
X509v3 Authority Key Identifier:
keyid:46:A4:B3:5C:8E:02:56:EA:A2:FB:F7:51:E6:C0:1E:5E:90:9C:0A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqSzXI4CVuqi-_dR5sAeXpCcCh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1191d6-5423-42cf-8f6b-117886eb7d67/1/RqSzXI4CVuqi-_dR5sAeXpCcCh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:41:29:ce:87:e8:f1:7b:02:4d:b8:ad:3e:84:45:58:c3:d4:
56:46:c8:16:2d:b3:af:71:a8:08:33:8e:24:6c:3f:c3:01:15:
d3:77:e8:95:4a:d0:c5:2d:a9:c7:a2:20:fa:fb:18:a5:c8:be:
0f:95:d2:01:b1:1c:50:3b:47:1e:a6:da:ae:db:94:be:22:c1:
72:a1:62:10:e9:7a:ad:62:35:cf:49:73:f6:1d:35:b9:b6:96:
cb:1e:fd:3c:1a:c2:58:e5:49:2d:77:20:3e:32:d0:83:d3:a7:
13:bb:76:ed:19:77:a8:96:d9:ac:3c:30:6f:73:dc:96:49:33:
1b:ea:2b:e2:d0:19:50:ff:8f:f3:aa:a5:a1:53:34:58:be:81:
8a:b1:db:b4:80:43:9a:e6:cf:02:cc:49:88:91:a1:85:7c:e9:
fc:e8:c5:89:a5:cd:6a:f8:35:16:67:c5:9b:51:c4:f8:1a:87:
d6:f1:8c:27:64:8c:04:34:0c:9f:16:01:ca:9a:ad:eb:81:7d:
c7:ff:bc:40:67:0a:6d:27:2c:7a:e4:88:d8:24:16:e6:2e:ce:
b2:ac:89:c0:c2:80:ba:c5:57:0b:ac:d2:e8:4f:0e:bb:a8:d2:
57:57:c8:f9:65:f4:40:13:bb:dc:2c:b5:d0:05:d0:25:cd:7c:
19:40:b7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:46:54 2025 by rpki-client