Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
File: xIQvgmL-vSPQE9QKMU2I4lSypUI.mft (raw, json)
Hash identifier: pBEEzgvTY34syEiDXw0GvYYpjR2QSOsh/xTVOtdLPxQ=
Subject key identifier: BE:B7:B5:9A:AF:26:73:8F:CC:45:CA:1B:0A:AA:5A:69:04:9D:B8:A6
Authority key identifier: C4:84:2F:82:62:FE:BD:23:D0:13:D4:0A:31:4D:88:E2:54:B2:A5:42
Certificate issuer: /CN=c4842f8262febd23d013d40a314d88e254b2a542
Certificate serial: 019510FDFEAEC5B6DBE680E5C246EDBBE44C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
Manifest number: 03A3
Signing time: Sun 16 Feb 2025 23:00:35 +0000
Manifest this update: Sun 16 Feb 2025 23:00:35 +0000
Manifest next update: Mon 17 Feb 2025 23:00:35 +0000
Files and hashes: 1: jlOcIMtwDZMSOghN5unIu5YgL8g.roa (hash: tVPtE+nX/8/3Q++k/ZBc6Lf2E5loPE1nlFFzJO0Km0I=)
2: xIQvgmL-vSPQE9QKMU2I4lSypUI.crl (hash: 84tSkxJJhL+flkDUoef3K5M91quDMS5ehDzP21ciYgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:fd:fe:ae:c5:b6:db:e6:80:e5:c2:46:ed:bb:e4:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4842f8262febd23d013d40a314d88e254b2a542
Validity
Not Before: Feb 16 23:00:35 2025 GMT
Not After : Feb 17 23:00:35 2025 GMT
Subject: CN=beb7b59aaf26738fcc45ca1b0aaa5a69049db8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b2:7b:fd:d9:a0:89:c2:d8:ba:14:f3:35:e8:
80:69:2b:0b:45:01:fe:ad:1b:5b:6e:f6:40:23:c9:
57:60:73:71:27:da:fe:0d:cb:11:a2:ef:58:f5:26:
94:3d:82:71:c5:4c:30:dc:35:e1:30:b3:23:74:3c:
45:4a:d8:66:79:2e:ca:9a:58:1e:0b:6b:4a:54:a7:
94:59:82:07:6f:05:6a:88:7b:52:64:49:94:16:31:
42:2e:08:c4:8f:b3:35:a1:d4:d5:53:26:d5:43:48:
0b:15:d1:1f:85:9a:ea:e1:20:82:7b:dd:22:e6:bf:
4d:38:e4:0d:2e:66:81:69:32:c4:31:f4:ae:6c:d8:
b1:1d:1b:19:01:f2:12:f9:52:80:a0:07:4f:d3:6c:
18:8d:3b:97:9f:08:90:2f:cc:41:40:a3:89:b8:a2:
70:45:35:40:5c:22:e2:e8:9b:c5:e6:a0:56:bb:3b:
f3:51:43:7e:08:cb:ed:15:87:c2:a3:56:64:ba:c3:
35:57:f5:62:6d:b9:4c:c3:79:5a:d7:76:b1:3a:a7:
82:d9:85:41:65:72:fd:b7:82:4a:a8:cf:1c:d3:1c:
ee:8d:a2:dc:1c:b8:0e:cf:ee:71:6a:bf:9a:47:3b:
59:6a:7b:6c:a9:cc:76:7e:ac:c9:51:80:b9:ba:c6:
9c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B7:B5:9A:AF:26:73:8F:CC:45:CA:1B:0A:AA:5A:69:04:9D:B8:A6
X509v3 Authority Key Identifier:
keyid:C4:84:2F:82:62:FE:BD:23:D0:13:D4:0A:31:4D:88:E2:54:B2:A5:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:f6:71:f0:95:c8:bc:34:e5:8a:af:05:ad:51:6c:bc:1f:fa:
61:f0:b7:b7:76:02:ea:be:59:e4:c4:ba:53:44:e8:fb:6d:85:
50:a2:7a:eb:8d:22:c0:81:9b:a0:74:9c:0a:20:b7:f1:79:e9:
e2:00:d9:1d:e6:d2:80:fc:b0:27:97:f0:2d:42:8c:56:07:f7:
db:22:c0:c1:5d:27:29:87:21:ac:fe:77:35:76:63:13:31:cb:
c3:50:b7:4c:49:9a:7c:46:8c:6c:9a:b2:49:19:06:13:9c:6e:
e1:57:06:1e:80:ba:a6:2f:a1:5a:e6:25:6a:b4:6e:2c:2b:42:
d0:f1:a2:7d:e2:8e:5d:27:95:08:0b:56:f5:5f:ad:b0:c6:0a:
06:47:96:5c:3a:82:96:ce:a0:3b:83:e6:58:79:19:13:96:5a:
42:54:0c:fa:4b:f5:d1:92:6f:c2:33:c0:d5:04:af:4c:7a:cc:
d6:b2:d1:b7:3b:df:2b:36:92:19:5e:5c:20:c8:6f:4a:8a:f4:
e8:ba:27:22:0b:51:1c:74:e2:d5:1f:47:98:4d:8e:e5:a1:62:
26:ef:eb:a4:80:08:7a:11:a9:51:31:5d:c4:58:79:1e:ee:21:
b4:d7:a1:f6:cc:2f:83:da:78:ff:11:ca:55:b1:af:48:8b:74:
cc:07:7f:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUQ/f6uxbbb5oDlwkbtu+RMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ODQyZjgyNjJmZWJkMjNkMDEzZDQwYTMxNGQ4OGUyNTRi
MmE1NDIwHhcNMjUwMjE2MjMwMDM1WhcNMjUwMjE3MjMwMDM1WjAzMTEwLwYDVQQD
EyhiZWI3YjU5YWFmMjY3MzhmY2M0NWNhMWIwYWFhNWE2OTA0OWRiOGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorJ7/dmgicLYuhTzNeiAaSsLRQH+
rRtbbvZAI8lXYHNxJ9r+DcsRou9Y9SaUPYJxxUww3DXhMLMjdDxFSthmeS7Kmlge
C2tKVKeUWYIHbwVqiHtSZEmUFjFCLgjEj7M1odTVUybVQ0gLFdEfhZrq4SCCe90i
5r9NOOQNLmaBaTLEMfSubNixHRsZAfIS+VKAoAdP02wYjTuXnwiQL8xBQKOJuKJw
RTVAXCLi6JvF5qBWuzvzUUN+CMvtFYfCo1ZkusM1V/VibblMw3la13axOqeC2YVB
ZXL9t4JKqM8c0xzujaLcHLgOz+5xar+aRztZantsqcx2fqzJUYC5usacvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL63tZqvJnOPzEXKGwqqWmkEnbimMB8GA1UdIwQY
MBaAFMSEL4Ji/r0j0BPUCjFNiOJUsqVCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveElRdmdtTC12U1BRRTlRS01VMkk0bFN5cFVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jNzBmZDMtZGZjMC00NWZiLTg2MGYt
ZmRkNjc0MWZjY2EzLzEveElRdmdtTC12U1BRRTlRS01VMkk0bFN5cFVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9jNzBmZDMtZGZjMC00NWZiLTg2MGYtZmRkNjc0MWZjY2Ez
LzEveElRdmdtTC12U1BRRTlRS01VMkk0bFN5cFVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnfZx8JXI
vDTliq8FrVFsvB/6YfC3t3YC6r5Z5MS6U0To+22FUKJ6640iwIGboHScCiC38Xnp
4gDZHebSgPywJ5fwLUKMVgf32yLAwV0nKYchrP53NXZjEzHLw1C3TEmafEaMbJqy
SRkGE5xu4VcGHoC6pi+hWuYlarRuLCtC0PGifeKOXSeVCAtW9V+tsMYKBkeWXDqC
ls6gO4PmWHkZE5ZaQlQM+kv10ZJvwjPA1QSvTHrM1rLRtzvfKzaSGV5cIMhvSor0
6LonIgtRHHTi1R9HmE2O5aFiJu/rpIAIehGpUTFdxFh5Hu4htNeh9swvg9p4/xHK
VbGvSIt0zAd/VQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:06 2025 by rpki-client