Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
File: xIQvgmL-vSPQE9QKMU2I4lSypUI.mft (raw, json)
Hash identifier: QJrFbdKwV1mY69aXZRggBaBA+qFb1Z5nDzEWnWzpnqA=
Subject key identifier: 3D:61:1D:ED:2B:FC:1D:08:52:B6:B8:C2:25:E9:08:3C:E4:DF:AC:15
Authority key identifier: C4:84:2F:82:62:FE:BD:23:D0:13:D4:0A:31:4D:88:E2:54:B2:A5:42
Certificate issuer: /CN=c4842f8262febd23d013d40a314d88e254b2a542
Certificate serial: 01958C97287028BFCA9DFB6A6945CF9D1351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
Manifest number: 03E3
Signing time: Wed 12 Mar 2025 23:01:11 +0000
Manifest this update: Wed 12 Mar 2025 23:01:11 +0000
Manifest next update: Thu 13 Mar 2025 23:01:11 +0000
Files and hashes: 1: jlOcIMtwDZMSOghN5unIu5YgL8g.roa (hash: tVPtE+nX/8/3Q++k/ZBc6Lf2E5loPE1nlFFzJO0Km0I=)
2: xIQvgmL-vSPQE9QKMU2I4lSypUI.crl (hash: fY3kufcPIzoyMjPkeOjF8fhMHilzepwZF2COOY6Gol4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:97:28:70:28:bf:ca:9d:fb:6a:69:45:cf:9d:13:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4842f8262febd23d013d40a314d88e254b2a542
Validity
Not Before: Mar 12 23:01:11 2025 GMT
Not After : Mar 13 23:01:11 2025 GMT
Subject: CN=3d611ded2bfc1d0852b6b8c225e9083ce4dfac15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3d:96:ad:d4:9a:2f:60:f1:7c:fa:5c:73:10:
e0:c1:2d:a8:14:87:6f:c0:89:5a:ce:0f:cb:f1:27:
14:94:09:d6:d4:10:82:bd:59:71:ad:e8:c1:ce:38:
c6:d5:1d:36:8a:b6:f8:ac:c9:02:9a:ff:0f:aa:37:
9d:4e:0a:cd:53:4a:af:38:3f:57:c9:22:57:af:a5:
60:c8:58:51:ab:29:59:c8:15:1f:b8:25:e9:05:47:
b2:de:bc:e6:f8:d8:ff:0d:79:3e:55:f4:a9:ec:fb:
93:61:1c:82:26:8b:ba:24:65:5d:58:2a:84:ac:98:
22:1d:8b:3a:51:09:75:fe:19:11:1d:51:7f:49:f2:
e2:20:ad:aa:b0:16:18:a7:d2:82:a4:76:3c:eb:47:
75:13:1b:0d:95:45:66:73:ba:ef:b3:87:b6:67:8b:
a3:80:1c:3c:09:00:23:de:f6:ea:c1:ff:c4:01:54:
f3:4d:7f:a5:ee:a7:d0:4b:db:1b:3f:2b:6c:34:d3:
0e:b2:6a:b5:40:9f:02:61:c6:a0:88:39:41:41:75:
e5:72:c7:5c:94:12:b8:13:da:0e:cb:ab:14:34:90:
2d:24:82:56:39:0a:45:2b:19:08:d5:19:99:e9:86:
a2:ee:e4:a3:2c:74:0b:5b:53:f2:cf:cf:dd:b8:e0:
eb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:61:1D:ED:2B:FC:1D:08:52:B6:B8:C2:25:E9:08:3C:E4:DF:AC:15
X509v3 Authority Key Identifier:
keyid:C4:84:2F:82:62:FE:BD:23:D0:13:D4:0A:31:4D:88:E2:54:B2:A5:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:a9:27:26:bb:a4:ce:97:9f:12:d9:1a:ae:75:ee:f5:02:16:
3b:c5:cf:e7:46:89:11:81:ce:98:d6:7a:4a:0d:a1:78:e8:7b:
30:c2:50:2b:28:c8:9f:8a:db:63:17:51:3e:c6:51:db:6e:1b:
3d:52:a6:04:48:4e:f5:d9:e8:c4:11:bd:88:9a:97:11:7a:62:
d4:36:24:c0:6c:4d:c1:7f:10:eb:d4:85:13:2e:2c:e4:44:97:
1c:3e:38:96:74:eb:48:dc:c4:ee:11:80:e2:71:1a:71:08:02:
12:34:26:66:65:68:d2:20:c0:58:4b:f0:a9:44:76:88:bf:2d:
ee:f2:bc:fc:09:16:87:0b:79:db:60:4b:fa:77:68:c1:38:ea:
de:e9:b5:1e:82:11:30:54:38:cf:82:6e:71:90:83:b3:c6:79:
27:26:cc:7e:ce:61:08:84:19:1e:b1:32:91:66:cd:5a:45:94:
6b:9e:9e:d6:79:24:2e:3c:9e:3d:43:dc:d8:2f:70:77:eb:1b:
f3:63:57:14:ab:f1:66:ae:a7:fa:9b:0e:f3:8a:c9:ac:f1:71:
aa:ce:cf:e1:8d:57:44:d1:ca:f7:81:75:4a:ae:21:d9:1b:c5:
13:2b:c9:90:14:33:d8:39:d0:1d:62:7f:c1:b3:2c:46:d8:d7:
ca:04:be:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:38:32 2025 by rpki-client