Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
File: XXg76LX3rdAI1xK0N72fmXwIT98.mft (raw, json)
Hash identifier: 5oDZA3ys+9QazUIu/fHDouC85vdMVmpytmjQV9WotQU=
Subject key identifier: 98:D5:FD:D7:13:35:A9:3D:78:FA:C0:A5:FC:D3:CC:26:FF:C3:81:C6
Authority key identifier: 5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF
Certificate issuer: /CN=5d783be8b5f7add008d712b437bd9f997c084fdf
Certificate serial: 01976B86417047A6BDDE88504380AC4F7F32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
Manifest number: 1591
Signing time: Fri 13 Jun 2025 23:00:50 +0000
Manifest this update: Fri 13 Jun 2025 23:00:50 +0000
Manifest next update: Sat 14 Jun 2025 23:00:50 +0000
Files and hashes: 1: XXg76LX3rdAI1xK0N72fmXwIT98.crl (hash: 9Xq2MOZfUg1ix6HkokF6WT4UUILk48zh2wYk1bT/sDQ=)
2: l3wz3kxvyE3dLi_otf1H964v_ag.roa (hash: EFAbZ5XqN3YjWYZwMd/7NbegJtXwuA7JeIY2LVho3FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:86:41:70:47:a6:bd:de:88:50:43:80:ac:4f:7f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d783be8b5f7add008d712b437bd9f997c084fdf
Validity
Not Before: Jun 13 23:00:50 2025 GMT
Not After : Jun 14 23:00:50 2025 GMT
Subject: CN=98d5fdd71335a93d78fac0a5fcd3cc26ffc381c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f5:ee:59:86:49:f4:85:9f:78:3a:83:2c:78:
fd:cd:13:1a:a3:56:f6:bd:9c:15:5f:79:1b:fe:2e:
54:5a:3e:ce:ae:2d:eb:b7:1a:c4:db:4a:5e:85:48:
5e:20:01:88:8d:b6:55:aa:c4:6f:bb:61:86:1f:c5:
99:11:06:f4:b5:96:7a:09:2e:a2:f7:2e:5e:25:06:
e4:c4:3b:63:28:0d:c6:61:e4:f3:b1:0b:e7:64:b0:
33:0e:30:0f:8e:0c:b1:4c:79:99:d0:21:ae:d9:03:
bd:71:70:65:38:ce:05:22:e5:f8:c3:de:81:29:b8:
10:6e:d3:8c:b4:50:8b:f5:3a:b2:4c:6b:13:60:65:
38:0e:22:00:dc:00:93:f8:60:c0:f1:ba:71:b0:4a:
72:3e:5a:d7:0e:cb:f3:8c:3c:78:20:9f:8b:32:8f:
34:5e:a7:1a:33:04:f5:75:25:d9:78:02:e7:fe:59:
4e:36:9f:e5:31:b8:8a:21:6c:1f:62:4f:47:02:1f:
d0:38:12:17:2e:87:2b:a0:83:29:73:ce:b0:8e:7d:
82:ef:38:2f:13:28:9a:33:19:d6:aa:2e:a3:bf:a5:
ce:73:89:8f:d8:0e:ab:67:01:6e:b4:27:ff:e6:7f:
a5:f0:af:08:64:76:dc:2d:df:68:e1:19:53:d2:73:
07:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D5:FD:D7:13:35:A9:3D:78:FA:C0:A5:FC:D3:CC:26:FF:C3:81:C6
X509v3 Authority Key Identifier:
keyid:5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:28:0c:3a:09:91:32:15:be:20:03:f3:52:2a:b8:f4:28:d1:
48:59:c4:f9:bd:c9:0e:5f:a9:c7:17:8a:0f:7a:7a:c5:b1:12:
82:db:9a:8f:10:eb:3d:9a:1c:fd:a8:47:74:49:b7:7c:e2:ea:
2a:c8:ee:4f:49:eb:ae:fd:c9:84:87:0d:48:14:d1:11:35:fa:
b0:10:83:38:10:c7:5c:9d:b6:c3:08:29:f1:44:07:f1:52:3f:
e8:5c:f9:81:67:ae:c4:73:e7:c7:8c:51:a9:86:49:28:f5:92:
30:07:7b:eb:f0:03:5b:0c:e9:13:05:15:63:b8:c6:f0:9c:3d:
cf:85:8b:58:9a:ab:c9:8f:2d:4f:e4:28:e3:b7:34:63:e5:2d:
bf:89:49:41:26:3c:ac:c2:f1:01:46:c0:56:a6:2d:0e:70:db:
29:0c:ec:cf:42:ea:83:87:5c:47:e4:82:c3:2e:4d:a6:fc:c6:
e1:74:e8:c4:0a:26:28:4e:25:98:80:f8:5d:51:85:3e:c7:7e:
da:50:4c:76:90:ed:6b:27:10:83:f3:73:19:7a:27:1c:2b:e5:
29:ea:e8:88:ae:f7:9f:8b:0b:43:94:a2:bb:94:f4:94:61:4f:
e3:e8:a1:fc:b3:a3:4c:d5:d8:eb:fd:b3:de:cf:ef:b0:4f:24:
16:34:b2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:16:33 2025 by rpki-client