Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
File: xIQvgmL-vSPQE9QKMU2I4lSypUI.mft (raw, json)
Hash identifier: 2oSTHZg+r/XLsA9NUC1WgBAUvApcSCtEL8YGi2onM0M=
Subject key identifier: C6:5E:4F:85:79:06:4B:21:22:05:6A:DD:10:FF:AE:78:90:D4:90:56
Authority key identifier: C4:84:2F:82:62:FE:BD:23:D0:13:D4:0A:31:4D:88:E2:54:B2:A5:42
Certificate issuer: /CN=c4842f8262febd23d013d40a314d88e254b2a542
Certificate serial: 01965191FEB65F5B23C6F7D8952077C1B5CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
Manifest number: 0449
Signing time: Sun 20 Apr 2025 05:00:44 +0000
Manifest this update: Sun 20 Apr 2025 05:00:44 +0000
Manifest next update: Mon 21 Apr 2025 05:00:44 +0000
Files and hashes: 1: jlOcIMtwDZMSOghN5unIu5YgL8g.roa (hash: tVPtE+nX/8/3Q++k/ZBc6Lf2E5loPE1nlFFzJO0Km0I=)
2: xIQvgmL-vSPQE9QKMU2I4lSypUI.crl (hash: RFURJwLMwsWRav47tbzyWEg/fEpceb4bz93f2tS0+oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:91:fe:b6:5f:5b:23:c6:f7:d8:95:20:77:c1:b5:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4842f8262febd23d013d40a314d88e254b2a542
Validity
Not Before: Apr 20 05:00:44 2025 GMT
Not After : Apr 21 05:00:44 2025 GMT
Subject: CN=c65e4f8579064b2122056add10ffae7890d49056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:31:79:01:af:04:16:45:86:86:1f:ab:e7:30:
1d:cc:22:ba:6e:fa:ec:d0:57:8a:a6:ff:78:9c:1b:
58:ec:18:72:9d:27:1c:00:90:c4:98:af:ac:64:21:
6f:cf:a4:60:9a:d0:82:7b:69:20:16:f1:e5:a6:ab:
10:d8:10:68:f0:01:ee:b5:bf:cd:24:40:55:42:c6:
db:9f:2f:2d:a5:d6:0a:0b:54:b2:50:41:ea:23:cf:
27:8c:bf:a0:8b:bc:c8:8e:67:7d:a2:2e:d5:b0:24:
bc:b6:05:25:a8:36:86:38:5f:fe:c8:8f:b7:a1:48:
71:12:44:d0:60:30:fa:81:06:14:89:2d:77:3d:38:
34:5e:54:9e:38:1d:b5:05:cc:a3:70:2f:48:53:de:
e4:a8:6b:e9:61:30:cc:97:1b:77:a5:ad:25:ac:8b:
eb:00:eb:68:e6:88:69:5b:11:d2:7e:9d:48:4d:93:
39:9f:84:d4:d1:33:39:3b:f4:7b:82:f1:da:39:b9:
4c:fa:1b:2f:29:51:00:a1:85:f1:9a:49:4a:ca:18:
1f:04:32:87:8a:00:3a:90:fc:23:40:6d:81:75:b6:
a7:82:37:a2:df:25:83:d5:2c:b9:c9:f2:59:02:24:
5e:9d:d5:aa:0c:89:c1:c1:fc:81:a4:ad:95:55:3d:
08:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5E:4F:85:79:06:4B:21:22:05:6A:DD:10:FF:AE:78:90:D4:90:56
X509v3 Authority Key Identifier:
keyid:C4:84:2F:82:62:FE:BD:23:D0:13:D4:0A:31:4D:88:E2:54:B2:A5:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:fe:41:a9:41:0c:88:89:ee:45:fe:c7:5c:11:c1:56:98:bd:
2d:bf:2e:16:3b:9a:97:c4:93:70:4c:9c:0c:17:77:b3:1c:07:
c7:e0:42:40:7c:ff:d3:f7:5a:01:94:f7:0d:80:8b:b7:94:e2:
80:b8:66:ac:63:e5:91:e3:83:df:8a:f0:45:ef:af:89:1d:7c:
ce:4b:6c:4e:0c:20:87:d3:a3:fb:aa:f0:d3:55:ae:99:aa:b7:
44:95:a3:5f:57:f0:5d:94:33:0b:47:59:96:c5:d2:7f:4e:9e:
71:f3:1c:fc:71:6d:69:f6:0d:46:ad:9b:cc:c7:24:a5:41:e4:
48:9d:c7:71:3b:16:0d:94:44:e9:50:d5:fa:5e:94:64:39:10:
44:00:2d:75:9c:0b:ef:f1:c5:a3:25:b0:23:74:54:1b:17:fe:
48:10:15:56:58:ea:da:bc:e4:26:c8:1f:71:82:4e:48:a8:c3:
86:e5:b5:58:56:b9:ad:47:45:35:58:93:4c:6c:8d:aa:ce:b7:
fe:98:a2:55:14:27:6a:b3:e2:f6:d4:3c:42:e0:35:7f:f9:d0:
06:8a:4d:c8:55:b2:2a:d1:75:1e:a3:6e:cd:5a:2e:2e:d5:77:
9c:11:71:71:da:d7:98:1f:88:b0:da:da:ff:4e:bb:8e:5c:85:
d5:0a:32:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZRkf62X1sjxvfYlSB3wbXLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ODQyZjgyNjJmZWJkMjNkMDEzZDQwYTMxNGQ4OGUyNTRi
MmE1NDIwHhcNMjUwNDIwMDUwMDQ0WhcNMjUwNDIxMDUwMDQ0WjAzMTEwLwYDVQQD
EyhjNjVlNGY4NTc5MDY0YjIxMjIwNTZhZGQxMGZmYWU3ODkwZDQ5MDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzF5Aa8EFkWGhh+r5zAdzCK6bvrs
0FeKpv94nBtY7BhynSccAJDEmK+sZCFvz6RgmtCCe2kgFvHlpqsQ2BBo8AHutb/N
JEBVQsbbny8tpdYKC1SyUEHqI88njL+gi7zIjmd9oi7VsCS8tgUlqDaGOF/+yI+3
oUhxEkTQYDD6gQYUiS13PTg0XlSeOB21BcyjcC9IU97kqGvpYTDMlxt3pa0lrIvr
AOto5ohpWxHSfp1ITZM5n4TU0TM5O/R7gvHaOblM+hsvKVEAoYXxmklKyhgfBDKH
igA6kPwjQG2Bdbangjei3yWD1Sy5yfJZAiRendWqDInBwfyBpK2VVT0IXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZeT4V5BkshIgVq3RD/rniQ1JBWMB8GA1UdIwQY
MBaAFMSEL4Ji/r0j0BPUCjFNiOJUsqVCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveElRdmdtTC12U1BRRTlRS01VMkk0bFN5cFVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jNzBmZDMtZGZjMC00NWZiLTg2MGYt
ZmRkNjc0MWZjY2EzLzEveElRdmdtTC12U1BRRTlRS01VMkk0bFN5cFVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9jNzBmZDMtZGZjMC00NWZiLTg2MGYtZmRkNjc0MWZjY2Ez
LzEveElRdmdtTC12U1BRRTlRS01VMkk0bFN5cFVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ/5BqUEM
iInuRf7HXBHBVpi9Lb8uFjual8STcEycDBd3sxwHx+BCQHz/0/daAZT3DYCLt5Ti
gLhmrGPlkeOD34rwRe+viR18zktsTgwgh9Oj+6rw01Wumaq3RJWjX1fwXZQzC0dZ
lsXSf06ecfMc/HFtafYNRq2bzMckpUHkSJ3HcTsWDZRE6VDV+l6UZDkQRAAtdZwL
7/HFoyWwI3RUGxf+SBAVVljq2rzkJsgfcYJOSKjDhuW1WFa5rUdFNViTTGyNqs63
/piiVRQnarPi9tQ8QuA1f/nQBopNyFWyKtF1HqNuzVouLtV3nBFxcdrXmB+IsNra
/067jlyF1QoyZg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 13:10:38 2025 by rpki-client