Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
File: XXg76LX3rdAI1xK0N72fmXwIT98.mft (raw, json)
Hash identifier: rh9v+sNbuXf/2mWfF/9wSr6u1Tl2x6BZ/WFToPMnnIA=
Subject key identifier: C3:94:3E:A6:EF:D4:61:C5:81:8F:FE:49:1A:7E:63:8D:25:B8:94:46
Authority key identifier: 5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF
Certificate issuer: /CN=5d783be8b5f7add008d712b437bd9f997c084fdf
Certificate serial: 01974AB19A50A28ABEBA127C960862EA7635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 14:00:42 +0000
Manifest this update: Sat 07 Jun 2025 14:00:42 +0000
Manifest next update: Sun 08 Jun 2025 14:00:42 +0000
Files and hashes: 1: XXg76LX3rdAI1xK0N72fmXwIT98.crl (hash: M+iH4U2p798c0A/PMfinfcUTOqS6X9256Cr7l9Xn0aw=)
2: l3wz3kxvyE3dLi_otf1H964v_ag.roa (hash: EFAbZ5XqN3YjWYZwMd/7NbegJtXwuA7JeIY2LVho3FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:9a:50:a2:8a:be:ba:12:7c:96:08:62:ea:76:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d783be8b5f7add008d712b437bd9f997c084fdf
Validity
Not Before: Jun 7 14:00:42 2025 GMT
Not After : Jun 8 14:00:42 2025 GMT
Subject: CN=c3943ea6efd461c5818ffe491a7e638d25b89446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:35:7f:d6:92:3a:63:61:88:d6:1c:fa:82:32:
cf:7e:08:cb:c1:40:75:82:f9:77:2c:47:37:ab:96:
f5:d6:57:e2:1f:d1:66:3b:07:f2:8d:a9:2c:4b:c0:
60:92:02:05:e8:f3:dd:5c:be:fc:ef:fb:ad:10:1f:
3f:91:c2:11:0e:c3:bb:1e:14:bb:96:87:b4:56:65:
4e:6a:4f:3c:41:7a:ff:46:19:85:53:38:b0:1b:4c:
66:c2:18:c8:4c:1e:06:54:35:78:9f:1f:f2:36:49:
96:bd:ef:6f:7b:b3:91:7f:a4:a4:92:68:6a:40:49:
0e:58:0a:ac:2f:d2:c6:3c:86:14:24:c7:a1:7b:94:
69:81:b3:a5:4d:af:60:16:d0:a7:11:05:cb:51:91:
cd:65:8d:1d:fa:3f:39:b4:4f:e7:f0:c7:76:4d:23:
45:f4:4a:ed:2c:91:af:29:77:67:9e:05:6b:88:34:
1f:47:ea:89:a1:d6:42:f5:c5:e2:4b:0c:f4:e8:2d:
2c:8f:ff:aa:e7:de:66:be:2b:b0:56:98:f2:1e:ae:
85:d9:d7:0b:10:1a:a7:f6:4f:7d:30:55:fe:5f:9b:
dc:d3:49:c9:2e:5c:e6:f3:da:d3:1b:7e:f5:4f:97:
b2:d4:7e:68:3c:19:1d:e8:fd:ad:78:b7:09:5c:9f:
a8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:94:3E:A6:EF:D4:61:C5:81:8F:FE:49:1A:7E:63:8D:25:B8:94:46
X509v3 Authority Key Identifier:
keyid:5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:02:55:fb:da:f8:c3:42:94:7c:d6:00:48:88:fb:cb:1a:e8:
a2:73:60:33:3b:b5:1e:5d:40:db:61:bd:42:d3:54:69:89:00:
b0:90:a5:44:5b:f2:cb:50:9c:a1:7c:de:2e:0d:f1:7f:a8:29:
fe:94:16:32:dc:51:d7:ac:df:f4:8f:6b:68:e2:cb:f1:ec:15:
31:23:84:62:52:2c:24:4d:9c:83:f1:c9:b3:bf:12:22:dd:08:
25:26:65:7d:36:c1:fd:7f:fe:75:25:d8:0d:87:bb:08:82:5d:
5f:b2:1d:ef:b4:6c:f2:41:e5:81:ac:9f:a0:12:2e:6f:f6:08:
bd:8e:1a:98:f2:12:34:2a:2b:20:e8:f1:35:6e:1b:b3:00:53:
3b:98:40:a5:06:29:d7:92:5a:f7:2e:0e:70:df:e1:a4:9b:c4:
f2:7a:c5:9e:df:fc:9a:4d:3d:d4:90:0f:73:e1:20:d6:e4:75:
dd:45:92:6c:85:3f:86:ef:4d:eb:9e:cb:31:6b:b0:23:2f:47:
c8:40:93:a7:26:d5:d2:18:0b:88:80:2c:ae:9d:cf:7b:4a:57:
c3:57:85:81:d8:03:c5:4b:03:80:a5:29:28:e4:6b:12:83:c3:
5f:a2:7c:b0:5b:3b:b5:f3:36:70:7c:a8:4a:e1:8a:5b:c8:7d:
a3:d4:7d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:39:17 2025 by rpki-client