Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
File: XXg76LX3rdAI1xK0N72fmXwIT98.mft (raw, json)
Hash identifier: elyRrLnTisfWvfg2vEKUZ9RI34xH26LOe74Q/ZfUNJk=
Subject key identifier: 31:82:F9:F9:63:E0:9C:E4:1D:15:9D:A0:A5:2A:3E:8D:10:CB:42:21
Authority key identifier: 5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF
Certificate issuer: /CN=5d783be8b5f7add008d712b437bd9f997c084fdf
Certificate serial: 01964FA32CCBFB57832304768A1AEAD759F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
Manifest number: 14FE
Signing time: Sat 19 Apr 2025 20:00:15 +0000
Manifest this update: Sat 19 Apr 2025 20:00:15 +0000
Manifest next update: Sun 20 Apr 2025 20:00:15 +0000
Files and hashes: 1: XXg76LX3rdAI1xK0N72fmXwIT98.crl (hash: EkQqus28V5O6UbRiKWN1x0elzd4YEKJa3Lxayp+A1Z0=)
2: l3wz3kxvyE3dLi_otf1H964v_ag.roa (hash: EFAbZ5XqN3YjWYZwMd/7NbegJtXwuA7JeIY2LVho3FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:a3:2c:cb:fb:57:83:23:04:76:8a:1a:ea:d7:59:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d783be8b5f7add008d712b437bd9f997c084fdf
Validity
Not Before: Apr 19 20:00:15 2025 GMT
Not After : Apr 20 20:00:15 2025 GMT
Subject: CN=3182f9f963e09ce41d159da0a52a3e8d10cb4221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4b:61:75:2a:8a:ca:81:b4:ab:0e:a5:cc:ec:
8c:2e:8c:a7:9f:e9:5c:47:b2:d6:7f:4a:fb:59:f5:
ef:54:88:21:b8:be:88:54:c4:a8:ec:f1:f2:7f:06:
80:12:81:a8:18:f6:ec:16:83:59:f6:5a:af:4c:15:
ac:70:30:aa:08:e0:97:6e:3c:fc:ca:dc:c0:bc:57:
29:89:34:92:6e:87:0d:d6:c9:a1:9d:fa:6a:1e:be:
db:6e:d4:5e:c4:4c:83:b0:57:05:1b:c4:4c:11:34:
f0:6c:02:a7:62:c8:11:6b:26:70:37:d2:08:ce:db:
15:2e:3e:7b:4c:db:ca:fe:d1:6e:47:d2:77:cb:a6:
52:79:97:88:b5:90:5f:d6:03:0e:13:d5:dd:ca:b4:
52:69:d5:0a:d2:89:5d:9f:10:f1:23:59:bf:4b:81:
fe:75:49:52:5c:1b:9e:94:bc:00:3c:5f:17:8f:33:
b3:bc:22:c2:be:56:84:82:a1:ef:01:50:e0:dc:38:
45:e8:4c:39:3a:16:6d:86:cc:6b:56:5a:d0:38:c0:
56:3c:fd:3f:43:dc:94:12:fc:6f:33:80:1e:d5:9b:
81:33:79:e5:a4:b0:d7:d6:b5:5b:ab:10:34:0f:38:
ca:ad:dc:07:7b:f3:3a:44:02:a3:46:93:88:2f:0c:
5e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:82:F9:F9:63:E0:9C:E4:1D:15:9D:A0:A5:2A:3E:8D:10:CB:42:21
X509v3 Authority Key Identifier:
keyid:5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:cb:aa:27:bc:74:73:76:40:40:89:b2:0a:9e:96:8d:80:aa:
ef:e6:a1:ad:70:b1:c1:89:c6:ef:69:50:18:69:76:b8:79:29:
17:6a:80:63:66:53:e6:e8:56:f8:85:c7:ac:bf:35:53:a2:6e:
48:62:3e:a3:23:d2:b2:4f:98:d7:f1:81:67:62:49:62:c9:47:
88:73:7a:4f:f1:0c:ab:ce:b7:41:92:50:e4:a3:40:20:de:b5:
f5:6b:e2:57:cc:48:3f:c7:cb:79:4b:e5:89:00:44:ed:cf:4b:
17:2a:16:9f:ad:43:ba:67:44:c3:26:ae:19:a2:f2:74:85:1c:
e8:3d:ce:13:d6:a5:d1:0b:fb:0e:ae:dc:4d:3d:8c:58:ef:2a:
dd:d8:62:15:e9:81:57:09:1f:45:5b:6d:56:82:fc:69:7d:75:
65:d2:da:f8:29:d1:78:88:09:d3:b2:ba:a6:5c:cc:8c:7f:26:
7f:57:1a:ca:f8:a1:bc:f4:16:b7:dd:68:60:bd:1f:d7:2a:97:
90:ff:ec:ae:31:c8:c8:f7:0f:64:48:1b:1a:b2:58:63:20:f8:
3e:c8:8b:f5:25:7b:10:73:bb:4f:0f:e8:0d:cf:2a:f6:38:8a:
6e:7d:a2:1e:47:fb:5e:ef:0d:43:59:8d:5b:54:b0:62:53:a7:
36:82:25:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:16:30 2025 by rpki-client