Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
File: xIQvgmL-vSPQE9QKMU2I4lSypUI.mft (raw, json)
Hash identifier: wVg707FiTvCjAxCOatoaOh91oodlatzZFJEqh0qK+fk=
Subject key identifier: 6C:DA:A4:BB:BB:F3:65:01:5F:6D:0B:D5:A7:FD:9C:8E:73:C1:B4:80
Authority key identifier: C4:84:2F:82:62:FE:BD:23:D0:13:D4:0A:31:4D:88:E2:54:B2:A5:42
Certificate issuer: /CN=c4842f8262febd23d013d40a314d88e254b2a542
Certificate serial: 0197B6D7C02D72A9F3BF1BF1848EE1A12E3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
Manifest number: 0502
Signing time: Sat 28 Jun 2025 14:01:22 +0000
Manifest this update: Sat 28 Jun 2025 14:01:22 +0000
Manifest next update: Sun 29 Jun 2025 14:01:22 +0000
Files and hashes: 1: jlOcIMtwDZMSOghN5unIu5YgL8g.roa (hash: tVPtE+nX/8/3Q++k/ZBc6Lf2E5loPE1nlFFzJO0Km0I=)
2: xIQvgmL-vSPQE9QKMU2I4lSypUI.crl (hash: NI3HMIgtX0WMoXSHlXZz0beyDLx+aFa6SPFsxaRIIXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:c0:2d:72:a9:f3:bf:1b:f1:84:8e:e1:a1:2e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4842f8262febd23d013d40a314d88e254b2a542
Validity
Not Before: Jun 28 14:01:22 2025 GMT
Not After : Jun 29 14:01:22 2025 GMT
Subject: CN=6cdaa4bbbbf365015f6d0bd5a7fd9c8e73c1b480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5a:8f:4b:a6:3b:21:71:95:55:75:94:ca:15:
7d:13:93:50:a9:86:a7:20:41:dc:b7:2c:e7:07:ce:
3a:42:26:42:42:f5:4a:66:67:5c:98:b5:5b:7c:bf:
2a:39:27:06:21:b5:a6:bf:12:0c:7c:e6:5c:cb:51:
74:fe:f3:aa:7a:29:26:16:f1:27:f3:38:be:41:c5:
55:8d:9c:49:03:bb:5b:80:fc:d0:a0:6b:8c:46:80:
bf:16:aa:0d:38:59:ed:2e:01:46:9a:e4:16:2c:67:
7f:01:e9:bb:d7:52:a1:97:4b:0b:46:17:5e:dd:68:
67:dd:bf:44:8a:5f:21:03:c3:d4:d1:fa:0f:15:e1:
ab:d3:80:f9:1b:1d:06:5a:88:d6:f1:b0:98:45:96:
26:d3:1f:28:54:1e:a3:f1:09:50:2a:e4:97:69:a1:
4a:ac:08:b8:c6:f3:35:f9:bd:48:2d:da:29:c9:22:
d6:85:1e:ab:85:69:2b:7a:52:27:e9:f0:7c:2d:81:
30:99:91:7f:68:3f:47:45:06:f0:9d:f7:32:6d:35:
13:bb:81:ea:3c:9e:d2:91:df:58:d2:a3:e6:00:9a:
a8:d2:87:3f:ad:36:d6:ad:3c:e5:04:fb:ac:24:5c:
5e:62:0d:9e:47:aa:8f:96:4f:f5:b0:6d:5c:4a:24:
60:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:DA:A4:BB:BB:F3:65:01:5F:6D:0B:D5:A7:FD:9C:8E:73:C1:B4:80
X509v3 Authority Key Identifier:
keyid:C4:84:2F:82:62:FE:BD:23:D0:13:D4:0A:31:4D:88:E2:54:B2:A5:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xIQvgmL-vSPQE9QKMU2I4lSypUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c70fd3-dfc0-45fb-860f-fdd6741fcca3/1/xIQvgmL-vSPQE9QKMU2I4lSypUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:15:d0:f4:f0:38:d0:5d:56:a3:d3:5e:cf:61:ff:a8:77:63:
63:e5:00:14:1c:dd:2d:52:74:f8:a7:c5:1b:51:e2:f8:20:8b:
6a:df:15:e2:df:c5:15:c4:d1:d0:42:0a:d9:5e:69:65:c5:ac:
39:32:0f:e4:f5:29:2f:d8:9c:e4:84:c2:85:43:16:8c:a3:f6:
49:12:86:aa:ec:6a:ce:ad:b0:f3:8b:b5:2d:d2:20:5b:03:de:
da:02:f7:26:a0:a4:6d:d7:6f:2d:95:91:75:2a:07:54:c9:a5:
ab:43:d5:61:44:52:0e:fe:6b:24:9e:7e:fa:4a:57:72:01:77:
83:a3:db:e3:bb:ba:9a:0b:48:4e:b7:ba:7b:f4:a6:20:ab:09:
40:ba:1d:e5:1c:0b:14:80:9a:d7:f4:0a:ee:ca:1a:9f:b4:b3:
de:a0:44:a8:6c:68:58:86:4b:12:b0:bf:09:5c:60:67:19:f0:
76:99:4c:8d:82:46:3a:3d:42:f2:a6:4a:c6:81:44:f3:bb:70:
2d:eb:d1:17:ae:8f:25:5c:f0:05:ef:79:f8:88:b7:b0:02:eb:
b9:ca:a7:fb:d3:3c:ae:dc:f3:0e:2d:19:38:f2:69:2f:bc:7f:
84:62:8c:f0:a3:55:e7:2b:1e:bd:7a:48:7e:4e:0e:9d:be:fd:
b4:54:b8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:17:18 2025 by rpki-client