Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
File: RQxYEkixGuKkb1UuXKQ8adZecqg.mft (raw, json)
Hash identifier: LLJxTgcC9oVffgp3Irp1v1eBdS5t2ip278yFDF4VmqI=
Subject key identifier: E9:E9:01:D9:0F:E3:F7:67:3D:6A:8C:C0:1D:50:0A:65:B8:9D:DA:47
Authority key identifier: 45:0C:58:12:48:B1:1A:E2:A4:6F:55:2E:5C:A4:3C:69:D6:5E:72:A8
Certificate issuer: /CN=450c581248b11ae2a46f552e5ca43c69d65e72a8
Certificate serial: 01960ED6C30C29494373C4717E1DC2CF3295
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
Manifest number: 0410
Signing time: Mon 07 Apr 2025 06:01:17 +0000
Manifest this update: Mon 07 Apr 2025 06:01:17 +0000
Manifest next update: Tue 08 Apr 2025 06:01:17 +0000
Files and hashes: 1: 0_1h7wiM0sCkz01y6bDZ2Uk-dbc.roa (hash: Ffwz5CuVaWNGX3f2MIwGg4hQj6U4+om5+V9sWUjyVOQ=)
2: NuPZabEjwj0Zl1ftGcMBtd-pDXA.roa (hash: +dUUuU1kwfnIBk7+1pVXttGVzaNSvBfz3v21l1kMiPM=)
3: RQxYEkixGuKkb1UuXKQ8adZecqg.crl (hash: NlhVKF7mZ7S3hSFAystG/Jspra9OAcvDKpzw8hQ879Y=)
4: scTpjmBPVtpmk2iyuFSVq2caLTA.roa (hash: soRiwcgYjvvPsJmPt1LLzDQ901dQXHqAdbvUyjzTo70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0e:d6:c3:0c:29:49:43:73:c4:71:7e:1d:c2:cf:32:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=450c581248b11ae2a46f552e5ca43c69d65e72a8
Validity
Not Before: Apr 7 06:01:17 2025 GMT
Not After : Apr 8 06:01:17 2025 GMT
Subject: CN=e9e901d90fe3f7673d6a8cc01d500a65b89dda47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9e:8a:d5:18:75:ae:f4:e4:ad:14:66:d2:4a:
4f:e0:95:a3:eb:39:21:aa:c8:ce:95:5a:01:3c:c8:
cb:35:01:ae:f0:58:79:ce:b6:4f:58:5c:b5:b6:f4:
f0:d3:ee:f6:6e:31:38:bd:3e:dd:91:49:cb:e7:7f:
eb:43:8c:b4:33:30:27:7c:bd:04:11:f6:3a:1b:48:
1f:6c:9f:b5:53:eb:e1:1a:ff:f3:94:ae:0b:a4:32:
ce:f9:a9:d7:53:80:2c:d9:d7:fd:d9:53:b3:8c:5b:
4d:73:a4:17:37:45:05:a7:56:3a:80:b4:29:62:21:
4b:b0:9c:ca:50:c8:68:a1:ef:e0:58:46:69:b4:a5:
f5:7f:09:94:e8:79:72:e3:cd:25:e6:e9:8d:d6:a5:
3a:1d:f4:26:9e:5f:03:a7:8a:2b:b3:83:a2:f6:5a:
a6:32:66:ad:3a:13:71:08:ee:62:48:7b:e7:51:6b:
d4:1b:7f:d5:b1:11:e1:53:52:66:01:dc:3d:61:ec:
91:19:35:17:a9:c9:ca:e7:31:ae:af:98:db:d4:62:
b9:95:11:9f:fd:15:ad:4d:e2:d2:8d:78:c7:25:3f:
2b:5b:ce:d5:46:86:f7:e0:61:5e:eb:cd:5f:73:0d:
bf:48:bb:7b:36:2c:50:5c:24:74:0d:bc:bf:06:d9:
ea:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E9:01:D9:0F:E3:F7:67:3D:6A:8C:C0:1D:50:0A:65:B8:9D:DA:47
X509v3 Authority Key Identifier:
keyid:45:0C:58:12:48:B1:1A:E2:A4:6F:55:2E:5C:A4:3C:69:D6:5E:72:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:dc:22:e7:d2:71:98:9a:37:84:f4:dd:b9:13:9d:11:ea:80:
66:a1:1f:7a:04:bd:8e:0f:2d:a8:e3:30:1f:fb:1a:a4:63:8d:
34:30:47:7e:b6:66:f2:57:d1:2f:b1:a9:87:a1:53:0c:8a:9e:
2e:aa:b1:89:0a:e0:b8:5c:53:ae:a3:3c:51:0b:28:d7:0d:7b:
75:a3:ba:cf:5f:64:8e:fe:0f:11:23:10:dd:ca:0f:46:25:0a:
e5:a8:cf:bd:96:e0:d4:df:4b:5b:d6:de:cd:3c:77:a3:5d:8c:
b4:ea:ff:dd:40:31:f9:2d:0e:69:dc:07:30:b7:68:46:f2:99:
d9:30:2a:0d:ce:0c:89:dc:91:75:d6:2c:64:b3:60:1b:1c:40:
a2:c1:33:f1:f7:65:3f:a5:bc:44:50:61:8d:76:dc:ad:68:c9:
2b:cc:16:80:0b:87:72:1d:06:4b:4c:9c:8b:c4:ea:20:e6:a0:
63:37:fd:90:70:1f:f2:db:43:da:e0:c3:4c:12:49:c2:f9:89:
a3:ad:eb:ca:ec:10:db:a7:79:0d:06:60:4e:73:54:94:74:9a:
eb:bd:03:50:75:b0:03:a1:b9:81:55:e1:a3:dc:83:1b:da:1f:
da:9f:d6:38:a9:5a:22:dc:9e:5c:e1:9f:0c:ea:da:68:b2:de:
86:65:26:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:59:54 2025 by rpki-client