Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
File: _XTetBhEJvpiIlthIMNnBvc3uOI.mft (raw, json)
Hash identifier: S1QUfNmIg/Vg+1upChpRizo6dcC8Jvqflx5tf1At0JA=
Subject key identifier: 5D:C1:EF:2C:7F:61:2E:06:36:CF:B7:78:DA:80:96:AF:A6:AB:1A:87
Authority key identifier: FD:74:DE:B4:18:44:26:FA:62:22:5B:61:20:C3:67:06:F7:37:B8:E2
Certificate issuer: /CN=fd74deb4184426fa62225b6120c36706f737b8e2
Certificate serial: 01976EBE0191F16D631B4541A29481753067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XTetBhEJvpiIlthIMNnBvc3uOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 14:00:35 +0000
Manifest this update: Sat 14 Jun 2025 14:00:35 +0000
Manifest next update: Sun 15 Jun 2025 14:00:35 +0000
Files and hashes: 1: K3K73SOKoUl1BbH2-VG761We22I.roa (hash: JYStvIUn6egbkb0Wps8aA9dlj6GWDzxPYmBqdWiziOs=)
2: _XTetBhEJvpiIlthIMNnBvc3uOI.crl (hash: +MK2cwjkkMPa9njzpM+Bgg3io3mFfGvpPY0NUnrqQZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_XTetBhEJvpiIlthIMNnBvc3uOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:be:01:91:f1:6d:63:1b:45:41:a2:94:81:75:30:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd74deb4184426fa62225b6120c36706f737b8e2
Validity
Not Before: Jun 14 14:00:35 2025 GMT
Not After : Jun 15 14:00:35 2025 GMT
Subject: CN=5dc1ef2c7f612e0636cfb778da8096afa6ab1a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c6:4f:db:fd:03:f3:96:95:d7:ec:52:39:d1:
98:a7:bd:fc:16:d7:be:df:c6:9a:33:a6:20:92:c1:
6f:d7:a0:97:ba:5b:6f:04:2d:3d:0e:64:d9:b4:6b:
41:21:43:ee:1f:dd:fe:51:c7:33:23:ae:af:2c:b4:
6a:30:f1:fd:62:eb:15:a6:08:82:67:db:f3:bc:bd:
60:73:a3:38:b8:78:67:4a:2c:e5:f7:5c:d7:6e:c7:
9f:91:15:ca:48:6d:6d:ea:63:3f:23:25:2e:3b:ad:
42:4c:84:d9:ec:3b:72:46:ab:98:b5:02:8c:d4:9e:
d8:22:df:6b:11:d4:1c:f4:f3:e0:6e:87:72:09:7b:
83:b8:12:f5:0c:43:4b:b7:15:78:c3:5e:b3:3a:d2:
e9:1d:d8:a0:7c:f4:8c:40:85:4e:0a:eb:54:9a:51:
85:a9:b4:f5:cf:46:dd:5f:97:2c:7e:eb:6a:28:0c:
29:27:64:fd:47:83:54:16:43:d6:b1:49:96:88:45:
66:35:4a:99:88:5e:96:b1:4e:55:24:ea:4e:78:08:
fd:5b:b6:95:fc:b8:1f:f9:0a:01:6e:cb:04:db:a9:
a4:07:36:cc:64:2d:bf:71:2e:35:18:37:db:6e:26:
be:4d:06:ee:a9:01:4c:99:35:bf:42:87:4a:7e:6f:
7b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:C1:EF:2C:7F:61:2E:06:36:CF:B7:78:DA:80:96:AF:A6:AB:1A:87
X509v3 Authority Key Identifier:
keyid:FD:74:DE:B4:18:44:26:FA:62:22:5B:61:20:C3:67:06:F7:37:B8:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XTetBhEJvpiIlthIMNnBvc3uOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:2e:42:b4:ee:cd:dc:58:16:49:c4:f9:43:8a:36:cb:4e:21:
d6:d6:b5:c5:27:6c:b1:0b:87:48:69:bf:7a:f7:ee:61:8a:90:
15:f3:ae:9b:73:eb:7a:17:d1:e4:4e:3d:2d:c9:b4:ef:89:00:
da:6b:fd:6d:ed:53:78:95:39:74:d0:cd:ed:6a:95:1d:76:54:
39:c7:79:c5:0a:50:0e:ab:67:4c:72:31:02:32:52:c1:8f:41:
06:c0:1b:e7:25:12:af:12:2d:53:1f:38:f5:0e:f0:08:11:a3:
be:69:44:2d:14:66:1e:02:fd:ac:ee:3c:a7:e9:c8:ba:ce:59:
4b:65:c6:85:39:7a:11:ff:58:7e:7b:8e:2c:79:0e:fb:2c:a2:
a3:27:89:43:ed:d3:24:08:f1:cf:b8:fc:64:87:a8:04:17:35:
ad:da:c1:01:11:a3:8b:86:ec:8c:24:d0:98:b4:ff:0d:f3:d0:
7a:f8:2b:4b:b7:d9:d5:e3:fa:6c:7e:90:a7:f1:85:fa:dc:3d:
a5:5a:d8:b6:6d:2f:7b:a3:91:ba:74:53:3f:c6:52:cb:c9:2f:
3a:5f:02:53:12:19:b9:3c:13:a5:fb:c7:30:89:3e:2a:68:98:
ff:4d:d1:ed:9f:c0:97:0c:ec:ee:00:2e:88:22:8e:6f:5e:ba:
ca:30:52:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:02:22 2025 by rpki-client