Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
File: _XTetBhEJvpiIlthIMNnBvc3uOI.mft (raw, json)
Hash identifier: gCy2waHjofnMQ7RrTPSbon3Fw0eSmrdlw2bXJYE65oA=
Subject key identifier: AF:B2:28:65:44:16:9A:9D:B5:69:3E:4D:BD:A9:B8:45:E2:61:75:6E
Authority key identifier: FD:74:DE:B4:18:44:26:FA:62:22:5B:61:20:C3:67:06:F7:37:B8:E2
Certificate issuer: /CN=fd74deb4184426fa62225b6120c36706f737b8e2
Certificate serial: 01984AE57ABEFEFD4EA1ACC3828D69FAB644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XTetBhEJvpiIlthIMNnBvc3uOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 08:00:09 +0000
Manifest this update: Sun 27 Jul 2025 08:00:09 +0000
Manifest next update: Mon 28 Jul 2025 08:00:09 +0000
Files and hashes: 1: K3K73SOKoUl1BbH2-VG761We22I.roa (hash: JYStvIUn6egbkb0Wps8aA9dlj6GWDzxPYmBqdWiziOs=)
2: _XTetBhEJvpiIlthIMNnBvc3uOI.crl (hash: +eQ0cFwAkV3sfwy0kIcPxkcoP4xlPm4g15TWN/d3CpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_XTetBhEJvpiIlthIMNnBvc3uOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:7a:be:fe:fd:4e:a1:ac:c3:82:8d:69:fa:b6:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd74deb4184426fa62225b6120c36706f737b8e2
Validity
Not Before: Jul 27 08:00:09 2025 GMT
Not After : Jul 28 08:00:09 2025 GMT
Subject: CN=afb2286544169a9db5693e4dbda9b845e261756e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:90:b2:55:ab:60:5d:72:bb:be:93:2b:34:c0:
1b:6f:26:c3:8f:6c:04:2f:d7:3a:f4:7d:8b:32:01:
d0:4c:d4:4b:0f:aa:05:ec:9a:71:c3:90:b4:cf:fb:
41:22:ba:fd:cb:05:2d:d0:a4:df:09:9b:b0:2c:49:
75:d7:05:1e:5f:64:e5:e3:e2:ce:74:11:0d:61:07:
5e:57:4c:d0:0f:ac:39:10:a6:b5:6a:44:d8:67:38:
ac:24:eb:7d:2b:ed:ff:0e:25:37:bc:80:03:6f:11:
4a:f5:96:bc:d3:fd:cf:c2:7c:e0:43:da:fd:9c:3c:
72:52:6f:96:ac:b7:c1:4c:cf:c3:24:8e:11:cd:af:
9f:bb:ba:ef:19:6d:a4:4d:ff:73:d7:a0:82:19:a1:
fa:9f:24:85:09:fe:b3:81:4d:0a:b5:b9:25:31:a8:
89:5f:bc:f8:65:2d:96:a9:3f:d2:bb:4a:52:28:c0:
62:5b:c5:7b:64:f6:81:05:75:2b:72:41:97:23:68:
10:4a:cd:33:60:0d:30:84:4e:d9:a9:d8:9a:92:e9:
cf:1e:a0:bb:96:6e:d0:7e:ec:6d:60:d5:d8:26:58:
4d:12:93:c7:1e:55:77:fe:6a:14:13:bf:8d:13:a6:
56:94:64:0f:fa:12:ff:72:3d:0b:1f:1f:94:c3:11:
93:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B2:28:65:44:16:9A:9D:B5:69:3E:4D:BD:A9:B8:45:E2:61:75:6E
X509v3 Authority Key Identifier:
keyid:FD:74:DE:B4:18:44:26:FA:62:22:5B:61:20:C3:67:06:F7:37:B8:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XTetBhEJvpiIlthIMNnBvc3uOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:64:8f:92:c8:10:97:9e:91:ae:06:61:19:27:14:69:f8:f9:
bf:5f:2d:d7:dc:60:7e:d9:05:41:76:7f:69:7b:cb:67:fa:89:
13:ca:04:49:e9:b9:95:ee:ad:bb:cf:d7:55:9a:29:4b:ec:a2:
29:2c:b5:b2:1f:79:b4:d9:08:29:36:aa:bb:9b:81:e8:12:18:
2a:4e:28:e6:44:17:53:5f:87:10:3e:91:16:63:2c:76:ad:65:
91:21:87:6d:1c:ff:db:7d:ee:52:48:57:32:ed:2c:ec:66:6b:
3f:e7:82:60:b6:51:32:2e:30:66:5b:1b:93:34:cd:a4:9a:66:
90:cc:3a:fd:3a:37:30:68:d6:09:3a:6f:da:31:1b:5b:30:12:
c7:89:ec:18:d8:a8:94:92:9d:69:d1:16:46:a3:b2:42:91:b3:
c1:06:28:80:44:e1:d3:41:1b:27:54:20:3b:c1:08:95:3f:a7:
cd:40:01:54:97:ee:a6:59:e5:4f:84:4a:8a:96:b5:94:30:af:
21:bb:96:2e:4f:d9:a5:f6:a1:68:6e:c5:06:9f:ac:d9:25:21:
8a:ab:d2:03:8e:6b:95:b5:75:4d:19:4c:0f:8d:b7:49:64:37:
e1:f2:db:9d:03:23:b9:f1:b3:e6:27:df:d5:8f:3f:84:92:f1:
e9:72:d3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:55:23 2025 by rpki-client