Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
File: _XTetBhEJvpiIlthIMNnBvc3uOI.mft (raw, json)
Hash identifier: sK6+qJIviEtgbblM9YAqxxvNdk/DkpDwslhd2UP7G5s=
Subject key identifier: FE:31:28:29:8E:70:AD:57:D5:C3:41:08:3D:D5:FB:81:64:A3:F6:0A
Authority key identifier: FD:74:DE:B4:18:44:26:FA:62:22:5B:61:20:C3:67:06:F7:37:B8:E2
Certificate issuer: /CN=fd74deb4184426fa62225b6120c36706f737b8e2
Certificate serial: 01987373EDF74F3EBD1B1586D3B4EDD75D27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XTetBhEJvpiIlthIMNnBvc3uOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 05:00:33 +0000
Manifest this update: Mon 04 Aug 2025 05:00:33 +0000
Manifest next update: Tue 05 Aug 2025 05:00:33 +0000
Files and hashes: 1: K3K73SOKoUl1BbH2-VG761We22I.roa (hash: JYStvIUn6egbkb0Wps8aA9dlj6GWDzxPYmBqdWiziOs=)
2: _XTetBhEJvpiIlthIMNnBvc3uOI.crl (hash: hwx5CjgCidjdkAy+Pb+j22vJgLC6jBQGYRKOGtyp0FQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_XTetBhEJvpiIlthIMNnBvc3uOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:73:ed:f7:4f:3e:bd:1b:15:86:d3:b4:ed:d7:5d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd74deb4184426fa62225b6120c36706f737b8e2
Validity
Not Before: Aug 4 05:00:33 2025 GMT
Not After : Aug 5 05:00:33 2025 GMT
Subject: CN=fe3128298e70ad57d5c341083dd5fb8164a3f60a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8d:2b:2f:8d:af:c4:65:f3:57:3b:80:5a:0b:
ee:3d:70:ec:4b:61:6f:af:14:a8:86:ee:38:35:1b:
2e:20:46:d5:08:da:7c:f7:d7:33:e0:f6:6a:7c:97:
07:fb:09:d5:5a:29:b3:55:01:08:49:0c:35:7a:76:
e1:55:e9:43:b3:6c:fa:90:cd:a5:9f:f5:1f:3b:3e:
e3:64:2d:4f:35:b5:63:54:7e:88:ad:02:e1:a1:08:
3b:12:dc:38:e6:84:70:78:c5:07:27:ce:f5:ca:1f:
21:54:00:45:dd:11:65:59:e5:24:01:99:33:45:de:
a7:c0:2a:99:0a:5f:e8:e1:6b:3d:13:9b:fb:41:24:
09:aa:8a:2a:cc:89:36:6d:a1:84:f5:57:0c:2f:ea:
f6:c1:50:b3:b7:1d:fe:76:e8:c4:cd:49:5e:db:40:
4f:db:a1:59:eb:f0:2b:69:82:d2:c3:82:74:79:31:
8e:10:f2:a5:10:ac:de:b9:57:95:9b:7f:aa:55:b7:
0c:5a:0d:2a:76:e8:80:98:a0:7d:c8:75:00:be:cd:
06:10:71:a1:53:d7:83:23:ec:f0:fa:f0:73:54:1e:
82:e3:53:ed:30:cb:02:d7:24:c3:65:55:eb:dd:e4:
22:47:1c:8b:72:8b:6d:04:e0:40:12:26:ec:27:c3:
fa:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:31:28:29:8E:70:AD:57:D5:C3:41:08:3D:D5:FB:81:64:A3:F6:0A
X509v3 Authority Key Identifier:
keyid:FD:74:DE:B4:18:44:26:FA:62:22:5B:61:20:C3:67:06:F7:37:B8:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XTetBhEJvpiIlthIMNnBvc3uOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:55:3c:36:16:05:32:3d:1c:e2:75:cd:6f:f4:88:61:f3:27:
f7:85:05:38:47:1d:b3:b9:ee:ea:f6:e8:c6:0d:2d:73:72:4e:
e6:af:15:bc:30:f3:48:af:cf:33:df:ca:c7:01:e7:ec:b8:ab:
3d:8c:d0:e3:9c:7d:36:55:7a:b5:9f:02:5e:0c:90:a0:2f:b7:
ed:67:ed:cd:70:2e:ff:3e:2c:b0:32:7d:3a:58:53:46:6d:7d:
07:a3:3a:71:10:bf:a8:4f:7a:fb:b8:49:fd:72:85:d2:02:0c:
a9:a7:51:49:66:24:1d:e8:6d:0f:92:39:b6:eb:f2:33:3b:66:
fc:c4:5d:16:a4:f0:5c:ae:7f:4b:f7:d7:2e:5a:1d:52:d0:6a:
0a:25:1d:fc:eb:1e:6c:bb:fe:1a:01:d7:dd:17:d8:4a:e1:b7:
5e:cd:14:9b:44:91:d3:4a:15:d5:b9:a9:77:04:09:1f:53:9f:
73:26:65:ef:b9:40:6c:72:b9:e4:bf:f4:95:4e:c5:51:d0:86:
9e:a1:ec:46:c5:14:e4:9b:6a:8f:4d:58:4b:c3:78:8b:47:12:
8c:b7:5a:b8:af:34:bc:5f:d5:63:79:dd:e6:8e:17:2f:62:f4:
ba:b5:ae:0e:fd:80:fe:25:f2:80:2c:47:2b:1f:d1:4e:52:7f:
b6:80:b0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:09:50 2025 by rpki-client