Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
File: x4QShQX3-Zx1cEQpgK3rivkMwnA.mft (raw, json)
Hash identifier: V81Sm4Lnfk1MtEqb8OmwdZF7MK4C+7j54zin9kJLTB8=
Subject key identifier: 01:CF:8B:8C:FD:D1:E2:CF:6B:05:62:72:0B:91:3C:37:4E:D2:EA:4A
Authority key identifier: C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70
Certificate issuer: /CN=c784128505f7f99c7570442980adeb8af90cc270
Certificate serial: 0197CB713F63DF1E98C111879F5BCBC1AE52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
Manifest number: 15C4
Signing time: Wed 02 Jul 2025 14:01:25 +0000
Manifest this update: Wed 02 Jul 2025 14:01:25 +0000
Manifest next update: Thu 03 Jul 2025 14:01:25 +0000
Files and hashes: 1: 1k_-7iaL3-MiuBsEwzsqEjXw8Aw.roa (hash: MvGzqoey/hCfcwmRhO21Z8RbLw85JPgQ7VzzDBc6ROg=)
2: B5D9MGD5HNxMn2ytn4E-XXNfFUU.roa (hash: ZF/ZQXZ6OV0r+xXPNKcSMNFa0v6w/gQVQYon3rz/hOA=)
3: V3axZivK3WrjDfjp92dOnzYIRGs.roa (hash: Nvb4IvNDmUJ1oDhZXKGSuAJ/dOxxdh42DYgaZcrkkzQ=)
4: x4QShQX3-Zx1cEQpgK3rivkMwnA.crl (hash: DhH1tt4J/nzqRhcdKl/e7sHnhjo1BdnMkPxS+nZDgJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:71:3f:63:df:1e:98:c1:11:87:9f:5b:cb:c1:ae:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c784128505f7f99c7570442980adeb8af90cc270
Validity
Not Before: Jul 2 14:01:25 2025 GMT
Not After : Jul 3 14:01:25 2025 GMT
Subject: CN=01cf8b8cfdd1e2cf6b0562720b913c374ed2ea4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:14:db:79:65:cd:28:20:b7:30:71:2f:25:de:
91:74:0f:87:2c:05:d3:bc:fc:35:9d:40:25:df:bb:
aa:e7:c3:d3:86:f7:df:41:16:84:2a:fd:c4:03:ff:
b0:27:90:1f:4c:1c:ec:3a:76:b8:0c:9e:83:50:f7:
43:28:84:5d:7e:1b:b8:dc:d8:f2:5e:37:be:65:62:
9d:56:d5:55:db:16:80:ee:66:74:7f:43:32:cd:2c:
14:17:f6:5d:e6:a0:4f:5f:98:44:7d:63:6e:35:40:
bb:9b:c0:0e:18:80:50:16:c3:1e:27:96:a9:bf:41:
33:f8:8f:16:27:73:43:1b:e4:09:e6:f7:4f:33:49:
00:45:71:97:8d:92:f8:d2:8a:f7:35:43:0a:16:f0:
c6:52:98:67:3c:74:ca:bd:16:a3:d5:da:b3:25:2e:
08:4e:97:3d:5b:87:2d:07:56:c9:ce:27:eb:cb:ce:
83:fa:c4:65:b4:e7:b5:35:b5:5f:ac:35:f2:63:46:
d1:64:c2:7b:35:0a:ef:71:c5:6c:4b:6f:57:a8:75:
81:ba:ee:90:af:1f:06:68:46:38:0e:dc:2e:15:18:
80:af:a4:83:f1:c6:e4:ef:d8:18:7c:3b:f6:50:72:
25:e8:c2:fa:dc:a7:f3:48:36:7d:77:71:90:f3:7b:
81:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:CF:8B:8C:FD:D1:E2:CF:6B:05:62:72:0B:91:3C:37:4E:D2:EA:4A
X509v3 Authority Key Identifier:
keyid:C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:2c:aa:1d:b9:e5:f7:23:7f:8e:d8:d3:17:e1:01:d3:b1:c1:
93:ec:08:91:b5:80:3e:7c:ed:8f:c1:d5:d6:42:1e:95:d5:f7:
66:cc:21:66:7a:3d:6a:9b:f0:08:ad:55:34:35:d5:a3:37:bc:
60:8b:d4:2c:e7:fe:fe:b3:7d:d8:64:7c:3f:40:03:a5:59:fe:
70:46:94:f6:2c:4b:a6:a1:88:9d:b9:c1:58:c2:4f:e0:2c:3d:
99:26:4e:24:29:cc:91:cf:07:29:39:96:ca:d7:41:26:c2:32:
45:8d:3d:5a:9f:bf:a4:15:b6:f3:6f:98:af:90:f3:24:f1:9a:
92:08:b3:2f:57:59:37:52:e0:e8:c2:da:1f:11:40:3d:ad:34:
50:02:61:ce:7a:de:32:1f:50:63:6e:cc:2a:d4:84:cc:df:2a:
46:2e:a9:df:9c:40:fa:4e:30:be:82:ad:e0:4b:a1:df:3c:4f:
47:c3:6e:cf:c4:5e:72:f3:b2:ff:6c:03:1b:b0:76:2a:15:a0:
80:7e:49:45:69:00:50:b9:52:11:b1:83:4f:95:dd:d4:ec:a8:
31:74:68:66:e9:65:6a:8e:a0:1b:5a:7a:1f:be:7c:63:ce:57:
36:7a:99:d1:0c:4a:14:56:80:ad:d8:f7:f8:5c:5c:7b:51:c3:
4c:a1:97:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:00:49 2025 by rpki-client