Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
File: RQxYEkixGuKkb1UuXKQ8adZecqg.mft (raw, json)
Hash identifier: g64Z5Rvu0XQuIx8ky+la7SjnoPlgXD0Np/sW/us5Zr8=
Subject key identifier: FA:E1:70:92:83:FA:1C:91:50:6F:B5:33:BB:7D:24:27:99:5D:BE:16
Authority key identifier: 45:0C:58:12:48:B1:1A:E2:A4:6F:55:2E:5C:A4:3C:69:D6:5E:72:A8
Certificate issuer: /CN=450c581248b11ae2a46f552e5ca43c69d65e72a8
Certificate serial: 01974F6A9FD98C6EAE4AA912320EBCBBEF51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
Manifest number: 04B6
Signing time: Sun 08 Jun 2025 12:01:17 +0000
Manifest this update: Sun 08 Jun 2025 12:01:17 +0000
Manifest next update: Mon 09 Jun 2025 12:01:17 +0000
Files and hashes: 1: 0_1h7wiM0sCkz01y6bDZ2Uk-dbc.roa (hash: Ffwz5CuVaWNGX3f2MIwGg4hQj6U4+om5+V9sWUjyVOQ=)
2: NuPZabEjwj0Zl1ftGcMBtd-pDXA.roa (hash: +dUUuU1kwfnIBk7+1pVXttGVzaNSvBfz3v21l1kMiPM=)
3: RQxYEkixGuKkb1UuXKQ8adZecqg.crl (hash: 7e4WEboEuYmxydwTj0hKQBy6FNyyxECzQeEXywHUW+A=)
4: scTpjmBPVtpmk2iyuFSVq2caLTA.roa (hash: soRiwcgYjvvPsJmPt1LLzDQ901dQXHqAdbvUyjzTo70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:6a:9f:d9:8c:6e:ae:4a:a9:12:32:0e:bc:bb:ef:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=450c581248b11ae2a46f552e5ca43c69d65e72a8
Validity
Not Before: Jun 8 12:01:17 2025 GMT
Not After : Jun 9 12:01:17 2025 GMT
Subject: CN=fae1709283fa1c91506fb533bb7d2427995dbe16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8d:30:aa:ac:36:7e:18:7f:48:15:cf:53:cc:
1f:9a:7b:41:46:53:92:c3:66:4c:0a:f1:2b:18:f0:
43:95:58:a0:0a:70:37:a4:71:f4:2f:ca:1b:d5:e4:
f7:ab:b0:a6:ca:44:97:df:e6:cb:c5:5e:fa:cb:d8:
ae:42:0b:10:53:dd:fc:67:f7:7f:20:0d:e7:2e:3c:
c3:f3:00:9b:ba:79:02:f9:8a:c3:64:2f:57:93:35:
80:cf:50:d2:1d:0b:9e:c9:e1:82:d9:3d:3d:9d:9b:
13:40:46:d0:23:b1:9f:d4:52:ab:6d:08:6f:f9:ab:
b5:9e:f9:97:d1:89:4b:02:1e:07:b3:31:18:27:dc:
77:a1:0d:36:16:6f:a1:72:01:cc:51:71:ed:cc:0e:
95:62:93:d7:94:aa:90:a5:1e:17:f4:99:c4:f0:79:
b1:96:f4:62:fb:f4:70:9b:ad:42:42:20:52:33:57:
6a:21:4a:d4:7b:27:b4:a7:ef:10:1e:91:fd:74:90:
f5:04:6c:fb:7d:ad:73:34:58:e3:da:16:5f:61:4c:
05:6b:b9:9e:ae:3e:a3:99:23:66:06:e4:86:bf:c9:
b3:17:ae:8f:be:30:28:33:7f:28:52:11:a3:eb:37:
e8:25:a9:e1:f4:af:38:10:9a:e8:f2:e0:7a:8e:35:
4d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E1:70:92:83:FA:1C:91:50:6F:B5:33:BB:7D:24:27:99:5D:BE:16
X509v3 Authority Key Identifier:
keyid:45:0C:58:12:48:B1:1A:E2:A4:6F:55:2E:5C:A4:3C:69:D6:5E:72:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:d9:e0:f2:e4:2f:48:23:80:bb:fc:df:b4:aa:a0:85:f0:2a:
ea:a5:29:14:e8:07:64:54:b9:81:0e:92:e3:6b:a6:40:a0:96:
b7:f2:83:c1:a5:37:cd:12:d1:78:eb:c7:6e:55:4b:f3:fa:b6:
5c:d9:19:f9:bb:7f:00:05:b8:78:0a:53:63:62:ce:79:f4:fb:
3d:e8:29:6b:a8:40:72:0b:19:67:46:57:26:4e:82:11:e1:5d:
84:2f:a6:7f:cf:02:8f:36:5b:6b:fb:a8:35:d0:ad:11:fe:7b:
d6:2c:c2:d5:db:f0:f7:3d:c6:9e:e8:27:8b:d3:f1:18:1a:ad:
df:a2:50:0e:10:7e:cf:d0:94:6c:32:92:6e:6a:00:d9:20:3a:
51:d1:e1:b3:fb:ef:05:ba:6f:13:82:53:54:6e:0e:bf:43:90:
2c:7d:34:62:17:0a:35:b5:d2:b1:6a:03:c7:2f:4a:bc:6e:e7:
68:1c:f8:ba:6a:df:ce:ef:0e:1c:b2:a3:06:35:84:b0:fb:74:
b4:fa:03:ca:2a:99:c3:14:d5:21:5f:01:f0:c8:55:3c:34:8a:
ba:98:b1:30:93:be:d1:0f:72:9e:ab:8e:a7:7b:5c:e4:a3:e9:
b9:17:f9:53:fa:b6:cb:2f:c6:d0:71:cf:95:e6:62:a2:e2:81:
16:a5:0b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 20:37:38 2025 by rpki-client