Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
File: xIQvgmL-vSPQE9QKMU2I4lSypUI.mft (raw, json)
Hash identifier: Ow7/ZpCgidZoNudYxBiFx+EMzxSKM/ZwZcPoVckfiPc=
Subject key identifier: 84:7D:8E:A6:68:BD:69:D1:D1:09:18:9D:A5:B7:09:0A:6D:E3:AF:B9
Authority key identifier: C4:84:2F:82:62:FE:BD:23:D0:13:D4:0A:31:4D:88:E2:54:B2:A5:42
Certificate issuer: /CN=c4842f8262febd23d013d40a314d88e254b2a542
Certificate serial: 019746D50B6F035749E73CCF36B43270014B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
Manifest number: 04C8
Signing time: Fri 06 Jun 2025 20:00:56 +0000
Manifest this update: Fri 06 Jun 2025 20:00:56 +0000
Manifest next update: Sat 07 Jun 2025 20:00:56 +0000
Files and hashes: 1: jlOcIMtwDZMSOghN5unIu5YgL8g.roa (hash: tVPtE+nX/8/3Q++k/ZBc6Lf2E5loPE1nlFFzJO0Km0I=)
2: xIQvgmL-vSPQE9QKMU2I4lSypUI.crl (hash: d3ZMX0zeN8mgMqcZ0xYB81rZ2+nX5Lx43xt73PF764w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d5:0b:6f:03:57:49:e7:3c:cf:36:b4:32:70:01:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4842f8262febd23d013d40a314d88e254b2a542
Validity
Not Before: Jun 6 20:00:56 2025 GMT
Not After : Jun 7 20:00:56 2025 GMT
Subject: CN=847d8ea668bd69d1d109189da5b7090a6de3afb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:87:b4:80:7c:49:d3:2a:30:73:27:4b:db:39:
0f:0b:41:bc:95:0b:1a:1c:81:f6:2f:05:b1:7c:48:
35:9b:9f:c3:0a:8e:07:f4:07:cd:16:ac:de:40:bf:
6e:f9:ad:1a:2f:f2:97:b2:7c:04:1e:1a:8b:63:15:
92:1b:e9:66:df:3e:73:9a:a7:8c:1e:9c:af:45:7b:
02:b6:17:e4:55:ae:3b:5b:0d:10:14:28:a7:52:4f:
06:93:bd:eb:7c:b3:d7:4a:20:d9:b8:d0:54:77:86:
94:31:de:68:97:97:87:a0:85:a1:98:bc:56:86:82:
90:8a:52:6c:72:6f:89:16:6c:2b:21:55:60:46:6a:
62:54:d5:21:f6:69:54:42:5a:f2:da:b7:2f:e5:e2:
75:37:43:2a:5e:ea:63:a4:52:93:7e:82:a9:1b:85:
92:32:5b:98:1f:57:42:9c:1a:7b:83:2e:c4:7a:31:
9d:cb:8c:0d:a6:31:3e:39:e9:a3:87:99:e5:35:0d:
c9:4e:85:fd:e8:b1:8e:ca:4c:97:d3:3a:43:5a:2a:
75:7f:28:6a:c8:61:5d:6a:5f:c1:ab:d4:ae:65:0c:
ea:2c:d0:18:29:2f:20:88:20:54:ba:06:b2:24:33:
a8:c7:b3:68:63:39:40:23:cf:9a:85:49:74:44:78:
3a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7D:8E:A6:68:BD:69:D1:D1:09:18:9D:A5:B7:09:0A:6D:E3:AF:B9
X509v3 Authority Key Identifier:
keyid:C4:84:2F:82:62:FE:BD:23:D0:13:D4:0A:31:4D:88:E2:54:B2:A5:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ed:33:e6:ef:1f:8c:a6:3a:30:a9:c9:53:1e:fc:2c:de:41:
b6:a2:04:fd:ea:cf:98:d6:12:5b:b6:2e:d7:56:94:ec:95:ec:
84:8a:a3:ed:20:12:33:da:b1:62:cf:5c:41:74:26:55:8c:64:
78:57:f0:36:72:2c:34:91:e7:21:89:68:79:d5:65:db:8a:d3:
48:58:e4:88:88:5c:7f:dd:e8:38:8c:06:c7:1a:11:6e:98:af:
b4:5d:9f:8d:28:e5:b4:16:a1:f2:df:ec:72:28:56:c5:b1:70:
99:50:c5:70:18:73:c3:97:9f:18:75:83:b2:b9:d8:9a:7e:36:
48:9f:cf:9a:6d:57:50:65:65:dc:2c:a1:ea:3c:e0:eb:ff:d4:
67:46:2f:ba:5e:6c:cd:6b:d1:a4:98:60:4b:b2:49:cd:a5:bb:
24:36:46:78:0a:f5:fa:e5:e1:53:fc:20:a2:82:c7:6f:c9:9b:
bf:26:5e:57:00:4d:6f:93:83:60:8c:e2:5e:06:9e:6f:50:35:
b1:e6:23:15:cd:70:5e:c5:da:11:a5:90:44:1c:91:16:5c:65:
84:ab:25:f3:7e:f5:ee:0c:d6:67:90:7d:9f:a6:aa:b0:40:2a:
4f:5a:06:65:1d:42:8c:62:d9:42:65:38:ae:08:90:7a:62:b8:
75:c4:27:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdG1QtvA1dJ5zzPNrQycAFLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ODQyZjgyNjJmZWJkMjNkMDEzZDQwYTMxNGQ4OGUyNTRi
MmE1NDIwHhcNMjUwNjA2MjAwMDU2WhcNMjUwNjA3MjAwMDU2WjAzMTEwLwYDVQQD
Eyg4NDdkOGVhNjY4YmQ2OWQxZDEwOTE4OWRhNWI3MDkwYTZkZTNhZmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIe0gHxJ0yowcydL2zkPC0G8lQsa
HIH2LwWxfEg1m5/DCo4H9AfNFqzeQL9u+a0aL/KXsnwEHhqLYxWSG+lm3z5zmqeM
HpyvRXsCthfkVa47Ww0QFCinUk8Gk73rfLPXSiDZuNBUd4aUMd5ol5eHoIWhmLxW
hoKQilJscm+JFmwrIVVgRmpiVNUh9mlUQlry2rcv5eJ1N0MqXupjpFKTfoKpG4WS
MluYH1dCnBp7gy7EejGdy4wNpjE+Oemjh5nlNQ3JToX96LGOykyX0zpDWip1fyhq
yGFdal/Bq9SuZQzqLNAYKS8giCBUugayJDOox7NoYzlAI8+ahUl0RHg6uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIR9jqZovWnR0QkYnaW3CQpt46+5MB8GA1UdIwQY
MBaAFMSEL4Ji/r0j0BPUCjFNiOJUsqVCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveElRdmdtTC12U1BRRTlRS01VMkk0bFN5cFVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jNzBmZDMtZGZjMC00NWZiLTg2MGYt
ZmRkNjc0MWZjY2EzLzEveElRdmdtTC12U1BRRTlRS01VMkk0bFN5cFVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9jNzBmZDMtZGZjMC00NWZiLTg2MGYtZmRkNjc0MWZjY2Ez
LzEveElRdmdtTC12U1BRRTlRS01VMkk0bFN5cFVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAje0z5u8f
jKY6MKnJUx78LN5BtqIE/erPmNYSW7Yu11aU7JXshIqj7SASM9qxYs9cQXQmVYxk
eFfwNnIsNJHnIYloedVl24rTSFjkiIhcf93oOIwGxxoRbpivtF2fjSjltBah8t/s
cihWxbFwmVDFcBhzw5efGHWDsrnYmn42SJ/Pmm1XUGVl3Cyh6jzg6//UZ0Yvul5s
zWvRpJhgS7JJzaW7JDZGeAr1+uXhU/wgooLHb8mbvyZeVwBNb5ODYIziXgaeb1A1
seYjFc1wXsXaEaWQRByRFlxlhKsl83717gzWZ5B9n6aqsEAqT1oGZR1CjGLZQmU4
rgiQemK4dcQnaA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 00:54:32 2025 by rpki-client