Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
File: xIQvgmL-vSPQE9QKMU2I4lSypUI.mft (raw, json)
Hash identifier: P8n321wb8s4QvfaeElaJU9fy/asr8oC0316UPvdROl0=
Subject key identifier: 23:E5:3E:13:89:5A:C9:79:90:FC:8C:BA:98:F8:89:50:38:A5:1B:0E
Authority key identifier: C4:84:2F:82:62:FE:BD:23:D0:13:D4:0A:31:4D:88:E2:54:B2:A5:42
Certificate issuer: /CN=c4842f8262febd23d013d40a314d88e254b2a542
Certificate serial: 0197699780D7833FE40269B148CDB66FA80C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
Manifest number: 04DA
Signing time: Fri 13 Jun 2025 14:00:26 +0000
Manifest this update: Fri 13 Jun 2025 14:00:26 +0000
Manifest next update: Sat 14 Jun 2025 14:00:26 +0000
Files and hashes: 1: jlOcIMtwDZMSOghN5unIu5YgL8g.roa (hash: tVPtE+nX/8/3Q++k/ZBc6Lf2E5loPE1nlFFzJO0Km0I=)
2: xIQvgmL-vSPQE9QKMU2I4lSypUI.crl (hash: LhM/EYH+e4eEH4pH+4f/4RpH3nN861o8tE278oO0IsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:80:d7:83:3f:e4:02:69:b1:48:cd:b6:6f:a8:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4842f8262febd23d013d40a314d88e254b2a542
Validity
Not Before: Jun 13 14:00:26 2025 GMT
Not After : Jun 14 14:00:26 2025 GMT
Subject: CN=23e53e13895ac97990fc8cba98f8895038a51b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:79:49:18:c6:89:0e:56:1a:a9:7d:96:7e:37:
8c:2d:62:49:45:9d:b8:c1:55:18:58:47:f1:bb:e3:
ab:76:b6:bc:aa:44:50:7a:a5:77:9f:ad:31:ee:71:
b8:29:6b:f6:95:dc:2e:c5:fb:d6:43:b4:fc:28:c8:
6d:90:72:73:ee:44:3c:21:ec:dc:21:db:b0:70:5a:
9f:1d:e1:28:cf:e2:96:ed:ec:9e:fe:fa:2e:91:10:
c0:74:b1:b4:ca:6b:57:9e:c0:f0:df:40:a0:91:5a:
3d:82:58:21:47:59:7b:0a:c1:e5:ea:f8:0d:f6:6c:
4a:c2:34:9c:c4:4c:0a:eb:6a:af:1a:40:c8:48:17:
68:4a:3e:54:ef:37:9d:ff:f9:e1:b8:26:89:cf:8b:
b0:cc:bb:a8:33:b7:8e:f8:a8:93:53:dc:42:68:7a:
8c:39:5b:70:b0:87:f0:e5:d2:4b:0b:df:7a:5d:65:
52:8d:80:9c:3e:9b:09:0c:74:16:55:82:b3:d8:12:
4a:17:1d:8b:8b:54:b2:e1:24:ae:87:d3:8d:91:b1:
34:5b:ff:24:14:ed:db:17:48:30:ab:b4:e4:85:c9:
51:80:62:97:97:79:26:68:7c:02:32:3d:b1:4f:38:
05:90:25:37:99:54:ca:e2:d5:09:27:59:fa:f8:ac:
17:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E5:3E:13:89:5A:C9:79:90:FC:8C:BA:98:F8:89:50:38:A5:1B:0E
X509v3 Authority Key Identifier:
keyid:C4:84:2F:82:62:FE:BD:23:D0:13:D4:0A:31:4D:88:E2:54:B2:A5:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:fd:36:68:32:5c:64:d9:4a:79:92:81:28:97:45:65:ae:b8:
95:08:ec:b8:5b:2e:57:8d:99:1f:15:3d:8e:ef:58:b4:63:a3:
ec:01:b3:d2:4c:ab:a5:5f:af:b5:f5:a5:39:31:f2:f4:61:ed:
2d:30:7a:24:bf:f9:31:32:28:cd:f7:bf:f2:b1:bf:42:6a:e9:
fb:8e:f5:64:3c:df:07:3e:9c:0a:f2:00:d5:2b:20:a1:db:6b:
a8:a9:c2:a1:3b:e9:27:09:8e:80:b7:79:c8:b5:eb:39:88:74:
b7:bf:9f:43:9f:95:96:26:d5:4b:18:94:b0:63:c2:e4:04:f1:
0c:d7:68:2a:2f:54:c8:49:5e:b6:82:44:d4:5e:ef:00:2a:b7:
6e:ec:62:4f:91:c6:a0:0a:a3:03:78:86:95:d5:ea:2d:3d:ae:
81:0d:43:5f:ad:62:dd:90:47:30:1f:0e:b4:48:16:4a:b3:8b:
c2:5b:31:f9:bf:ef:35:f5:86:ed:ca:fb:14:0d:a4:31:26:5f:
cb:34:4c:c9:7d:ea:13:26:e3:ea:fb:cb:8f:9e:37:a2:d5:93:
f8:cb:d0:6e:97:6b:5d:8a:f0:87:86:24:92:6e:03:0d:cb:20:
4b:7f:d6:5e:bf:cb:e3:fe:6b:79:13:32:f5:97:49:91:8f:85:
08:e1:99:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:54:25 2025 by rpki-client