Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
File: x4QShQX3-Zx1cEQpgK3rivkMwnA.mft (raw, json)
Hash identifier: tcWUqlqo5IbnPEtm+BqtyQty6SwwanM+sCK4ElqbjOI=
Subject key identifier: 97:5B:95:60:69:B1:6E:A0:BF:70:F6:A8:78:1C:1E:6A:2B:29:38:9D
Authority key identifier: C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70
Certificate issuer: /CN=c784128505f7f99c7570442980adeb8af90cc270
Certificate serial: 01965A94CE3A20F3E5C5D2638AB1CC8462FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
Manifest number: 1505
Signing time: Mon 21 Apr 2025 23:00:23 +0000
Manifest this update: Mon 21 Apr 2025 23:00:23 +0000
Manifest next update: Tue 22 Apr 2025 23:00:23 +0000
Files and hashes: 1: 1k_-7iaL3-MiuBsEwzsqEjXw8Aw.roa (hash: MvGzqoey/hCfcwmRhO21Z8RbLw85JPgQ7VzzDBc6ROg=)
2: B5D9MGD5HNxMn2ytn4E-XXNfFUU.roa (hash: ZF/ZQXZ6OV0r+xXPNKcSMNFa0v6w/gQVQYon3rz/hOA=)
3: V3axZivK3WrjDfjp92dOnzYIRGs.roa (hash: Nvb4IvNDmUJ1oDhZXKGSuAJ/dOxxdh42DYgaZcrkkzQ=)
4: x4QShQX3-Zx1cEQpgK3rivkMwnA.crl (hash: jWGDqWZHQu5All9GXbLLI3baIfMHGUmXTjnzgpCGn40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:94:ce:3a:20:f3:e5:c5:d2:63:8a:b1:cc:84:62:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c784128505f7f99c7570442980adeb8af90cc270
Validity
Not Before: Apr 21 23:00:23 2025 GMT
Not After : Apr 22 23:00:23 2025 GMT
Subject: CN=975b956069b16ea0bf70f6a8781c1e6a2b29389d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f3:59:b2:90:fa:5b:1d:ca:3e:7a:b2:84:bc:
da:59:a5:10:d3:18:14:e9:ec:83:89:f8:27:90:85:
c6:75:7e:6f:4a:51:4f:4f:0c:2c:77:b4:d0:a0:ca:
b8:8c:0a:2b:12:0a:9a:26:bc:97:79:22:6b:bd:d6:
57:e1:27:ca:1d:3e:3e:7d:e7:a5:77:c9:3e:7f:c6:
31:2d:25:e9:8d:b9:94:56:71:9f:81:55:97:20:a5:
3d:c7:a4:53:c5:b6:95:e2:ef:41:72:19:88:3e:ad:
5f:0f:a8:0c:ef:ed:c5:46:27:54:8e:94:67:d2:72:
57:f6:3c:6c:d6:18:6a:cc:b7:6d:c2:ac:47:18:46:
f2:97:a6:4e:5a:ba:ac:f0:63:01:8a:ae:80:be:dc:
18:a6:df:33:02:dc:db:f9:8d:6e:41:a7:7e:a6:63:
f3:6a:75:12:df:ce:69:e2:a3:35:9e:07:da:73:86:
96:ae:52:7a:41:f8:5c:0e:51:a9:07:cf:8a:f7:ee:
4e:82:0e:8d:2a:8e:13:5b:da:cb:ee:8f:1e:e4:98:
ea:40:60:a5:2a:79:df:10:ef:64:3a:6e:6a:e5:87:
68:a5:5d:99:43:2d:55:8f:54:ee:ea:cc:c8:0d:55:
d3:d5:85:5c:dd:2e:9b:f3:0d:2d:e2:17:cd:7f:1b:
ba:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:5B:95:60:69:B1:6E:A0:BF:70:F6:A8:78:1C:1E:6A:2B:29:38:9D
X509v3 Authority Key Identifier:
keyid:C7:84:12:85:05:F7:F9:9C:75:70:44:29:80:AD:EB:8A:F9:0C:C2:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4QShQX3-Zx1cEQpgK3rivkMwnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4c5c3d-21b0-4058-89fd-6c1b4471f7ee/1/x4QShQX3-Zx1cEQpgK3rivkMwnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:73:9a:6c:39:51:a9:b2:fc:5d:52:2c:ae:38:f6:63:a3:74:
93:66:ea:16:1c:6b:a9:79:c5:f5:53:02:55:76:f6:bc:15:16:
61:70:a7:0e:37:0e:e8:72:cb:6e:87:e8:c4:d1:00:93:e6:74:
8a:10:b1:42:84:14:dd:77:72:15:84:ff:17:27:23:1b:b0:17:
a1:1a:f5:9f:de:8c:27:f4:b7:ff:22:dc:48:17:18:43:fd:b9:
66:de:5b:d0:19:a5:e5:d6:83:db:e7:5b:6b:fb:9b:2a:20:b7:
0b:41:5f:c3:18:a9:39:fe:94:c6:51:df:db:eb:e4:be:5a:e4:
6b:aa:ea:97:e3:80:d7:eb:bc:e7:59:60:48:f7:73:95:f0:d2:
14:8f:12:de:22:5a:1a:60:55:49:08:10:f0:75:de:b4:e9:e4:
6f:fc:39:2c:54:c9:bb:7d:e4:87:1b:44:c9:6c:af:1d:b9:84:
c3:0d:a4:04:11:cb:96:8e:7b:c5:25:05:c5:91:53:04:50:4c:
8f:16:b9:7f:1b:2b:34:04:7d:29:0f:27:3c:ec:30:d0:2b:a2:
0c:2f:66:9e:85:95:a3:5f:3f:28:7f:4c:4a:9a:a4:6d:c2:10:
66:80:c9:67:27:a7:96:49:4c:2c:86:58:94:da:95:7f:3d:cd:
25:3a:3d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:26:59 2025 by rpki-client