Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
File: _XTetBhEJvpiIlthIMNnBvc3uOI.mft (raw, json)
Hash identifier: 0c1tRQHGWLWASlHevSPirlUNsFGEUWYjJ4UacHSgFJA=
Subject key identifier: 26:8A:5D:E4:2F:C3:A3:AD:84:6A:B0:21:91:C2:32:46:E5:BA:39:AE
Authority key identifier: FD:74:DE:B4:18:44:26:FA:62:22:5B:61:20:C3:67:06:F7:37:B8:E2
Certificate issuer: /CN=fd74deb4184426fa62225b6120c36706f737b8e2
Certificate serial: 01968322CD8F3B5903FA3F7D1CEC8CEFD4ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XTetBhEJvpiIlthIMNnBvc3uOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 20:00:18 +0000
Manifest this update: Tue 29 Apr 2025 20:00:18 +0000
Manifest next update: Wed 30 Apr 2025 20:00:18 +0000
Files and hashes: 1: K3K73SOKoUl1BbH2-VG761We22I.roa (hash: JYStvIUn6egbkb0Wps8aA9dlj6GWDzxPYmBqdWiziOs=)
2: _XTetBhEJvpiIlthIMNnBvc3uOI.crl (hash: qTN5kQO6C3eiYFCtfcl8Y27ICL6FMXoZSBDhd8bs1hY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_XTetBhEJvpiIlthIMNnBvc3uOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 20:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:22:cd:8f:3b:59:03:fa:3f:7d:1c:ec:8c:ef:d4:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd74deb4184426fa62225b6120c36706f737b8e2
Validity
Not Before: Apr 29 20:00:18 2025 GMT
Not After : Apr 30 20:00:18 2025 GMT
Subject: CN=268a5de42fc3a3ad846ab02191c23246e5ba39ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:af:59:01:44:7d:e2:98:e4:8f:00:be:0e:b5:
c0:ad:00:c3:45:2f:be:26:da:a5:1f:38:5f:73:30:
85:48:f2:da:b5:cf:b1:e6:76:6a:15:84:b9:a3:9a:
55:0e:86:f2:8f:2e:ab:3b:15:f9:4e:e5:f9:23:6d:
2a:6b:13:c8:2d:43:c3:4b:29:8f:65:9b:9c:98:08:
70:4c:fe:04:9a:ed:f7:0f:34:7d:0b:bb:d3:3c:97:
74:d2:bf:92:09:80:ee:c8:17:cf:c0:88:be:f0:d5:
ab:f8:36:73:cb:f9:3a:8d:f8:ef:af:d4:6c:cb:0e:
14:5e:3c:c9:32:5a:7d:a6:3a:2a:db:8f:5c:0b:50:
b4:e9:be:1f:af:9c:6c:25:77:2d:78:ea:8b:19:a6:
f9:4d:a9:e1:29:01:a9:a5:07:ae:53:02:bc:16:a9:
d8:d0:40:26:70:9f:f5:b9:f3:6a:79:f2:6a:0f:6e:
1b:df:4e:52:ed:f8:25:de:d0:89:d4:4e:a7:0e:fc:
bf:82:65:55:ac:86:df:fa:a1:66:14:af:37:76:2d:
3b:3a:53:9d:a7:1c:dd:3a:e8:fc:f0:34:d0:89:0a:
36:18:0b:36:34:10:be:af:53:6b:2c:cd:b9:27:c2:
88:bb:c9:85:26:29:9a:81:0d:2a:5a:39:b6:f6:70:
35:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8A:5D:E4:2F:C3:A3:AD:84:6A:B0:21:91:C2:32:46:E5:BA:39:AE
X509v3 Authority Key Identifier:
keyid:FD:74:DE:B4:18:44:26:FA:62:22:5B:61:20:C3:67:06:F7:37:B8:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XTetBhEJvpiIlthIMNnBvc3uOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:ba:0a:35:11:b5:95:71:38:51:94:4e:0c:fc:ed:03:ba:16:
ee:d4:4a:89:e2:36:c8:79:fc:22:7d:ec:f1:93:24:86:8b:51:
67:86:61:81:7a:47:b4:f0:cd:d0:69:34:7d:2c:e3:d8:2b:80:
7d:18:fa:d0:8a:d0:71:e0:3e:ec:4c:0c:00:99:3e:71:b2:96:
7b:ab:ad:01:99:5e:6a:85:57:ac:9e:35:b2:da:40:d8:2b:68:
b5:1e:05:38:e2:ec:30:dc:df:0e:2f:f9:47:b6:e3:51:09:11:
18:51:eb:d2:6b:1c:08:6b:ee:6a:f4:d5:2a:d1:35:9e:1d:8d:
d2:4d:99:2e:3b:f4:95:25:9e:dc:03:b9:cc:f7:a7:62:18:5b:
4b:10:ce:c3:12:b6:2e:d4:34:bb:bd:49:e2:c7:f4:d2:02:87:
cf:a1:04:61:3f:a0:15:ee:9c:52:67:58:ed:02:2a:ab:f1:3a:
fb:53:f2:3b:a2:13:07:92:9f:17:04:6e:73:c8:b0:38:bd:25:
5e:f3:80:42:ca:9d:76:cc:2f:2c:0c:a2:13:4f:32:41:17:5f:
a0:2a:02:44:6f:e3:60:8b:f2:73:d8:b7:db:e7:c2:fd:46:83:
d8:cd:68:3c:36:88:86:18:74:52:4e:3b:92:8e:00:47:9b:d4:
dd:97:2d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 06:21:31 2025 by rpki-client